pl999 Privacy Policy

1 Who We Are

pl999 is an internationally licensed online gaming platform serving English-speaking Pakistani players across Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan. The platform offers sports betting, live casino, slot games, crash games, and related gaming services, all transacted in Pakistani Rupees (PKR). For the purposes of this Privacy Policy, pl999 is the data controller responsible for personal data collected through its platform and associated communications.

If you have any questions about how pl999 handles your personal data, you can reach our support team at any time via live chat on the platform, or by writing to us at [email protected]. We are committed to responding to all data-related enquiries within a reasonable timeframe and no later than 30 days from receipt of a verified request.

2 Personal Data We Collect

pl999 collects personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are set out below.

3 How We Collect Your Data

3.1 Directly From You

The majority of personal data pl999 holds about you is provided directly by you during registration, KYC verification, deposit and withdrawal requests, customer support interactions, and when you update your account profile. You are responsible for ensuring that all information you provide to pl999 is accurate, complete, and kept up to date.

3.2 Automatically Through Platform Use

When you access and use the pl999 platform, we automatically collect certain technical and usage data through cookies, server logs, and analytics tools embedded within the platform. This includes information about your device, IP address, browser configuration, session duration, and the specific pages and games you interact with. This data helps pl999 maintain platform security, detect unusual activity, and improve the overall user experience.

3.3 From Third-Party Verification Providers

Where required for KYC compliance, pl999 may receive verification results from licensed third-party identity verification and fraud prevention service providers. These providers check the accuracy of the identity documents you submit and confirm whether you appear on any sanctions or watchlists that we are legally obligated to screen against. pl999 does not receive raw personal data from these providers beyond what is necessary to confirm your verification status.

3.4 From Payment Processors

When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, the relevant payment processor will confirm to pl999 that a transaction has been initiated or completed. pl999 receives transaction confirmation data but does not store your full bank account credentials or payment provider passwords on its own servers.

4 How We Use Your Personal Data

pl999 uses your personal data for the following purposes:

• Account creation and management: to set up, maintain, and administer your pl999 account throughout your time as a registered player;
• Identity verification (KYC): to verify your identity, confirm your age (21+ requirement), and satisfy our regulatory obligations under our gaming licence;
• Transaction processing: to process PKR deposits, withdrawals, and refunds through your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank;
• Platform security and fraud prevention: to detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activity on the pl999 platform;
• Anti-money laundering (AML) compliance: to monitor transactions and player activity in accordance with our obligations under applicable AML regulations and our gaming licence conditions;
• Responsible gaming: to monitor player behaviour patterns and proactively offer responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion, where our systems identify indicators of potential problem gambling;
• Customer support: to respond to your queries, complaints, and requests submitted via live chat or email;
• Platform improvement: to analyse aggregated, anonymised usage data to improve the features, content, performance, and overall experience of the pl999 platform;
• Marketing communications: to send you relevant promotional offers, bonus alerts, and platform updates — only where you have given your explicit consent to receive such communications.

5 Legal Basis for Processing

pl999 processes your personal data only where there is a valid legal basis for doing so. The legal bases we rely on are as follows:

• Contractual necessity: processing required to fulfil our obligations under your pl999 account agreement, including account management, transaction processing, and KYC verification;
• Legal obligation: processing necessary to comply with our regulatory and legal obligations, including AML screening, age verification, and licence compliance reporting;
• Legitimate interests: processing carried out in pursuit of pl999's legitimate business interests — such as fraud prevention, platform security, and improving our services — where those interests are not overridden by your fundamental rights and freedoms;
• Consent: processing based on your freely given, specific, and informed consent — principally for sending marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

6.1 Licensed Service Providers

pl999 shares personal data with carefully selected third-party service providers who assist in operating the platform. These include identity verification and KYC providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud prevention and AML screening services, cloud infrastructure and data hosting providers, and customer support platform providers. All such providers are contractually bound to process personal data only on pl999's instructions and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

pl999 may be required by law, court order, or regulatory direction to disclose your personal data to law enforcement agencies, financial intelligence units, gaming regulators, or other competent authorities. pl999 will comply with such requirements while taking reasonable steps to protect player confidentiality to the extent permitted by applicable law.

6.3 No Sale of Personal Data

pl999 does not sell, rent, lease, or trade your personal data to any unaffiliated third party for their own independent marketing, commercial, or data analytics purposes. Personal data shared with service providers is shared solely to facilitate the operation of the pl999 platform on your behalf.

7 Data Retention

pl999 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our regulatory and legal obligations. The following retention periods apply as a general guide:

• Account and identity data: retained for the duration of your active pl999 account plus a minimum of five (5) years following account closure, in accordance with standard AML and gaming regulatory requirements;
• Transaction and financial data: retained for a minimum of five (5) years from the date of each transaction to satisfy financial record-keeping obligations;
• Customer support records: retained for up to three (3) years from the date of the interaction, unless the record relates to an ongoing dispute or regulatory matter;
• Marketing consent records: retained for the duration of your marketing opt-in plus a reasonable period thereafter to demonstrate compliance in the event of a complaint;
• Technical and usage logs: typically retained for up to twelve (12) months for operational and security purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

8 Cookies & Tracking Technologies

pl999 uses cookies and similar tracking technologies on its platform to support essential functionality, maintain session security, and analyse platform usage patterns. The types of cookies used by pl999 are as follows:

• Strictly necessary cookies: essential for the platform to function correctly — including session authentication, load balancing, and fraud detection. These cannot be disabled without impairing your ability to use the platform;
• Functional cookies: used to remember your preferences, such as your preferred language, display settings, and last-used payment method, to provide a more personalised experience;
• Analytics cookies: used to collect aggregated, anonymised data about how players interact with the pl999 platform, which helps us identify areas for improvement. No individual player is identified through analytics data;
• Marketing cookies: used where you have consented to receive targeted promotional communications. These cookies help pl999 present relevant bonus offers and promotions based on your activity on the platform.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of your pl999 account.

9 Children's Privacy

The pl999 platform is strictly intended for players aged 21 years and over. pl999 does not knowingly collect personal data from any person under the age of 21. If pl999 becomes aware that personal data has been collected from an underage individual, the relevant account will be immediately closed, any deposits will be returned to the originating payment method, and all associated personal data will be deleted as promptly as possible.

If you are a parent or guardian and you believe that your child has registered an account with pl999, please contact our support team immediately via live chat so that the account can be investigated and closed without delay.

10 Data Security

pl999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption of personal and financial data both in transit (using TLS) and at rest;
• Strict access controls ensuring that only authorised pl999 personnel with a legitimate need can access personal data;
• Regular independent security assessments and penetration testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to player data systems;
• Continuous monitoring of platform activity for unusual access patterns or potential data breaches.

Despite these measures, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pl999 will notify you and the relevant regulatory authorities as required by applicable law. You can assist us in keeping your data secure by maintaining a strong, unique password for your pl999 account and enabling any available two-factor authentication options.

11 International Data Transfers

pl999 operates under an international gaming licence and may use service providers whose infrastructure or personnel are located outside Pakistan. Where personal data is transferred internationally, pl999 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that which would apply within the jurisdiction of our operating licence. Such safeguards may include standard contractual clauses, data processing agreements, or transfers to countries with an established adequacy finding.

pl999 does not transfer personal data to jurisdictions that do not offer adequate data protection standards without first putting contractual or technical safeguards in place to mitigate the associated risks.

12 Exercising Your Data Rights

To exercise any of the data rights described in this Policy — including rights of access, rectification, erasure, restriction, portability, or objection — please contact pl999 through one of the following channels:

• Live Chat: available 24/7 through the pl999 platform — the quickest way to initiate a data request;
• Email: [email protected] — for formal written data subject requests requiring a documented response.

pl999 will respond to all verified data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days — but we will notify you of any extension within the initial 30-day period. We may require you to verify your identity before processing a data rights request to prevent unauthorised disclosure of your personal information.

Please note that certain data rights are not absolute and may be limited where retention is required by law, necessary to defend legal claims, or where erasure would conflict with our regulatory obligations as a licensed gaming operator.

13 Updates to This Privacy Policy

pl999 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. When material changes are made, pl999 will notify registered players via in-platform notification or email prior to the changes taking effect. The most current version of this Policy will always be available on this page, identified by the effective date shown at the top of the document.

Your continued use of the pl999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should stop using the platform and contact support to arrange account closure.

We encourage you to review this Policy periodically so that you remain informed about how pl999 is protecting your personal data. For a summary of what changed between versions, you may contact our support team.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or pl999's data handling practices, please get in touch with us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the pl999 platform — the fastest way to reach our team for any privacy-related query;
• Email: [email protected] — for formal written complaints or data subject requests requiring a documented response;
• Support Hours: 00:00 – 24:00 PKT, every day of the year.

pl999 aims to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 days. If you remain dissatisfied with our response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority or gaming regulator under whose jurisdiction pl999 operates.