pa999 Privacy Policy — How We Protect Your Data

1. Data We Collect

pa999 collects personal data in two broad categories: information you provide directly and information collected automatically as you use the platform.

Information you provide directly:

• Full name and date of birth, as provided at registration.
• Contact details including your email address and mobile number.
• Account credentials — your chosen username and a hashed version of your password. pa999 never stores passwords in plain text.
• Identity verification documents — such as a copy of your CNIC or passport — where requested for verification purposes.
• Payment-related information including the payment method used for deposits and withdrawals (for example, JazzCash account reference, Easypaisa number, Raast ID or bank account details). Full card numbers are not stored by pa999.
• Any information shared voluntarily when you contact customer support, including chat transcripts and email correspondence.

Information collected automatically:

• Device and browser information including device type, operating system, browser version and screen resolution.
• IP address and approximate geographic location derived from it.
• Session activity including pages visited, time spent, games played, bets placed and deposit or withdrawal activity.
• Cookie and tracking data as described in the Cookies section below.

2. How We Collect Your Data

Data is collected through the following channels:

• Account registration: When you complete the sign-up process on the pa999 website or app, you provide your basic personal details directly.
• Verification process: If identity or age verification is requested, you provide supporting documents through the secure verification flow in your account settings.
• Deposits and withdrawals: Payment method details are captured when you initiate a deposit or withdrawal through the cashier section of the platform.
• Platform usage: Technical and behavioural data is collected automatically through server logs, cookies and similar tracking technologies as you browse and use the platform.
• Customer support interactions: When you contact pa999 via live chat or email, the content of those communications is recorded for quality assurance and dispute resolution purposes.
• Third-party payment providers: Payment processors may share transaction confirmation data with pa999 to facilitate deposit and withdrawal reconciliation.

3. How We Use Your Data

pa999 uses the data collected for the following purposes:

pa999 does not use your personal data for unsolicited third-party marketing. Where pa999 itself sends promotional communications — such as information about bonuses or new games — these will be sent only to players who have not opted out of such communications. You can update your communication preferences in your account settings at any time.

4. Sharing Your Data

pa999 does not sell, rent or trade personal data to third parties. However, in order to operate the platform effectively, pa999 works with a small number of trusted third-party service providers. Data is shared with these providers only to the extent necessary for them to perform their specific role.

Categories of third parties who may receive limited data:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners and card processing networks receive transaction data necessary to process your deposits and withdrawals in PKR.
• Identity verification providers: Where a third-party KYC service is used to verify your identity or age, the relevant documents and personal details are shared with that provider under a data processing agreement.
• Game software providers: Casino, slots and bingo game suppliers may receive a session token or anonymised player identifier to launch game sessions. They do not receive your full personal profile.
• Fraud prevention and security services: IP address, device fingerprint and behavioural data may be shared with fraud detection tools to protect the platform and its users.
• Legal and regulatory bodies: Where required by applicable law or a lawful request from an authority, pa999 may disclose personal data. pa999 will only comply with requests that are legally valid and will not voluntarily disclose more than is required.

All third-party providers that handle personal data on behalf of pa999 are required to keep that data secure and to use it only for the specific purpose for which it was shared. pa999 does not authorise any third-party provider to use your data for their own independent marketing purposes.

5. Payment Data

All PKR deposits and withdrawals at pa999 are processed through third-party payment providers including JazzCash, Easypaisa, Raast, bank transfer networks and debit or credit card processors. These providers operate their own secure infrastructure and are responsible for the security of payment credentials during transmission.

pa999 stores a payment method reference — for example, a partial JazzCash or Easypaisa number, or a masked bank account reference — to allow you to select a previously used method in the cashier and to fulfil our withdrawal-to-original-method policy. Full payment credentials such as complete card numbers, full bank account details or mobile wallet PINs are never stored by pa999.

Transaction records — including deposit amounts, withdrawal amounts and timestamps in PKR — are stored as part of your account history for the purposes of account management, dispute resolution and legal compliance. These records are accessible to you through the transaction history section of your account.

6. Cookies & Tracking Technologies

pa999 uses cookies and similar tracking technologies on its website and app. Cookies are small text files stored on your device that help the platform recognise you, remember your preferences and understand how the site is being used.

Types of cookies pa999 uses:

• Essential cookies: Required for the platform to function. These handle session management, login state and security tokens. The platform cannot operate correctly without them.
• Functional cookies: Remember your preferences such as language settings, preferred payment method and responsible gaming limits you have set.
• Analytics cookies: Collect anonymised data about how users interact with the platform — which pages are visited most, how long sessions last and where users navigate to and from. This data helps pa999 improve the product.
• Fraud prevention cookies: Used alongside device fingerprinting to detect unusual account activity, multiple account creation attempts and other security risks.

Most browsers allow you to manage or disable cookies through their settings. Be aware that disabling essential cookies may prevent some parts of the pa999 platform from working correctly. Analytics and functional cookies can typically be disabled without affecting core platform functionality.

7. Data Retention

pa999 retains personal data for as long as your account is active and for a defined period following account closure. The specific retention period for each data category depends on the legal, financial and operational reason for which it was collected.

• Account registration data is retained for the lifetime of the account and for a minimum period after closure as required by applicable record-keeping obligations.
• Transaction records in PKR are retained for the period required by financial record-keeping rules applicable to pa999's operations.
• Identity verification documents are retained for the period necessary to satisfy anti-money laundering and fraud prevention requirements.
• Customer support correspondence is retained for a reasonable period to allow for dispute resolution and quality review.
• Cookie and analytics data is retained for the shorter of the cookie's own lifespan or the period necessary for the analytics purpose it serves.

When data is no longer required for any legitimate purpose, it is either securely deleted from pa999's systems or anonymised so that it can no longer be linked back to you as an individual.

8. Security Measures

pa999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction.

• Data transmitted between your device and pa999 servers is protected using TLS encryption.
• Passwords are stored using one-way hashing — pa999 cannot retrieve your plain-text password, which is why a reset flow is required if you forget it.
• Access to personal data within the pa999 organisation is restricted on a need-to-know basis. Staff members do not have blanket access to all user data.
• Payment data is handled by PCI-DSS compliant payment processors. pa999 does not process or store full payment credentials on its own infrastructure.
• Security monitoring is in place to detect and respond to unusual activity, suspected data breaches or system intrusions.

While pa999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you become aware of any security vulnerability or suspect your account has been compromised, please contact the support team immediately.

9. Your Rights Over Your Data

As a pa999 account holder, you have the following rights in relation to the personal data we hold about you:

• Right of access: You can request a copy of the personal data pa999 holds about you. Submit your request through the support team.
• Right to correction: If any personal data we hold is inaccurate or out of date, you can request that it be corrected. Some data — such as your registered name and date of birth — can only be updated through the verified identity change process.
• Right to deletion: In certain circumstances, you may request that pa999 delete personal data we hold about you. Note that pa999 may be required to retain certain data for legal, financial or fraud prevention reasons even after a deletion request.
• Right to object: You can object to the use of your personal data for certain purposes, such as analytics or non-essential communications. Update your communication preferences in your account settings or contact support.
• Right to restrict processing: You may request that pa999 restrict the processing of your personal data in specific circumstances, for example while a correction request is being reviewed.

To exercise any of these rights, contact the pa999 support team via live chat or the email address shown in the footer. pa999 will respond to verified data rights requests within a reasonable timeframe. We may need to verify your identity before acting on a request to ensure the data is not disclosed to or altered by an unauthorised person.

10. Minors

pa999 is strictly an 18+ platform. The collection or processing of personal data belonging to individuals under 18 years of age is not permitted. If pa999 discovers that an account has been created by or on behalf of a minor, the account will be closed immediately, any balance will be returned via the original payment method and all personal data associated with that account will be securely deleted in line with our retention policy.

If you believe that a minor has created an account on pa999, please contact the support team immediately so the matter can be investigated and resolved without delay.

11. Changes to This Privacy Policy

pa999 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data protection requirements, or improvements to how we describe our practices. The date of the most recent update is displayed at the top of this page.

Where changes are material — meaning they meaningfully affect how your data is used or what rights you have — pa999 will make reasonable efforts to notify registered account holders, for example via a notice shown on login or a message to your registered contact details. For minor clarifications or wording updates, the revised policy will be published on this page without individual notification.

Continuing to use your pa999 account after a policy update takes effect means you accept the revised Privacy Policy. If you disagree with any update, you should stop using the platform and contact support to request account closure.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, please get in touch with the pa999 support team. We aim to respond to all privacy-related queries promptly.

You can reach the support team via:

• Live chat: Available 24/7 through the support widget on the pa999 website and app.
• Email: [email protected] — shown as plain text; do not send sensitive documents unless requested by the support team through a secure channel.

When contacting us about a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently.