No 999 Privacy Policy – How We Protect Your Data in Pakistan

No 999 ("we", "us", "the platform") takes the privacy of its users seriously. This Privacy Policy explains the practices of No 999 in relation to personal data collected from players who register and use the no999.ws platform. It covers what data we collect, why we collect it, how it is stored, who can access it, and what rights you have as a data subject.

No 999 operates with Pakistani players as its primary audience. We understand that trust is foundational when real money and personal documents are involved. This policy exists to make our data practices as transparent as possible so that every player at No 999 knows exactly what is happening with their information from the moment they create an account.

This Privacy Policy is intended to be read alongside the No 999 Terms and Conditions and Responsible Gaming Policy. Together these three documents define the full relationship between No 999 and its registered players.

No 999 collects personal data in three broad ways: information you provide directly, information generated by your use of the platform, and information received from payment providers when you deposit or withdraw.

No 999 uses personal data for specific, defined purposes. We do not use data for anything outside the list below without first updating this Privacy Policy and, where required, obtaining your fresh consent.

• Account management: Creating and maintaining your No 999 account, authenticating your identity on each login, and communicating account-related information to you.
• Processing transactions: Handling deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks. Your wallet number and transaction details are shared with the relevant payment processor solely to execute the transaction.
• Identity verification (KYC): Verifying that you are who you say you are before processing your first withdrawal and at any point where there is reasonable grounds for additional verification. This is a legal obligation for regulated gaming platforms, not an optional step.
• Fraud and money laundering prevention: Monitoring transaction patterns for signs of fraudulent activity, identity theft, or money laundering in compliance with Anti-Money Laundering (AML) obligations. Suspicious activity may be reported to relevant authorities without prior notice to you.
• Responsible gaming: Using gaming activity data to monitor for patterns that may indicate problem gambling and to trigger responsible gaming prompts, cooling-off suggestions, or welfare contacts where appropriate.
• Platform improvement: Using anonymised, aggregated usage data to understand how players navigate No 999, which games are most popular, and where technical issues arise. This data cannot be traced back to individual players.
• Customer support: Using your account history and communication records to resolve disputes, answer queries, and provide accurate and helpful support.
• Marketing (with your consent): Sending promotional messages about No 999 bonuses, new games, and referral programme updates. You can opt out of marketing messages at any time without affecting your account status.

No 999 processes personal data on one or more of the following legal grounds:

• Contract performance: Processing your registration data, transaction data, and gaming activity is necessary to fulfil our obligations to you as a platform. Without this data, we cannot provide the service you signed up for.
• Legal obligation: KYC verification, AML monitoring, and transaction record-keeping are required by law. No 999 cannot waive these requirements regardless of a player's preference.
• Legitimate interests: Security monitoring, fraud prevention, and platform performance analysis are pursued as legitimate business interests, provided they do not override your fundamental privacy rights.
• Consent: Marketing communications and optional data processing activities are conducted only where you have given explicit consent, which you may withdraw at any time.

No 999 does not sell personal data to third parties. We share data only in the specific circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card networks receive your wallet number or card details to process your deposit or withdrawal. These providers are bound by their own privacy and security obligations and do not use your data for any purpose beyond processing the transaction instructed by No 999.
• Identity verification providers: During KYC, your CNIC details and verification selfie may be processed by a third-party identity verification service operating under strict data processing agreements with No 999. Verified identity documents are not retained by these providers beyond the verification window.
• Regulatory and legal authorities: Where required by a valid legal order, court instruction, or regulatory obligation, No 999 will disclose relevant data to the appropriate authority. We will notify you where we are legally permitted to do so.
• Fraud prevention networks: In cases of confirmed fraud or suspected criminal activity, No 999 may share limited account information with fraud prevention databases or other gaming operators where permitted under applicable law.
• Business transfers: In the event that No 999 undergoes a business sale, merger, or asset transfer, player data may be transferred as part of that transaction. Affected players will be notified in advance where practically possible.

No 999 uses cookies and similar technologies on the platform. These are small data files stored on your device that help the platform function and allow us to understand how it is being used. Below is a breakdown of the types of cookies in use:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, store your language preference, and ensure your balance displays correctly. You cannot opt out of these without opting out of the platform itself.
• Functional cookies: These remember choices you have made – such as your preferred game table or betting denomination – so you do not have to reset them on every visit.
• Analytics cookies: No 999 uses anonymised analytics to understand traffic patterns, popular pages, and technical error rates. This data cannot be linked back to individual accounts. Analytics cookies can be declined via your browser settings.
• Referral tracking cookies: When you arrive at No 999 via a referral link, a cookie records the referral so that the referring player receives their correct reward after you deposit. This cookie contains your referral code only and expires after registration is complete.

Most modern mobile browsers allow you to view and delete cookies. Deleting strictly necessary cookies will log you out of your No 999 account and may affect platform functionality.

Before processing your first withdrawal, No 999 requires identity verification. This is known as Know Your Customer (KYC) verification and is a standard process across regulated gaming and financial platforms. The process at No 999 is designed to be completed on a mobile phone in a few minutes.

• You will be asked to provide your full name and CNIC number as they appear on your national identity card.
• A scan or clear photograph of your CNIC (both sides) will be required.
• A brief liveness check (selfie photograph) may be requested to confirm that the account is being used by the same person who provided the identity document.
• KYC documents submitted to No 999 are stored securely and accessed only by authorised compliance staff. They are never used for any purpose other than verifying your identity and meeting AML obligations.
• KYC is a one-time process per No 999 account. Once verified, you will not be asked to re-submit standard documents unless there is a specific compliance reason to do so.
• Failure to complete KYC when requested will result in withdrawal processing being paused. Your real money balance will remain in your account throughout and will be available once verification is completed.

No 999 retains personal data for as long as it is needed for the purpose for which it was collected, and in any event for as long as required by law. The general retention periods are as follows:

• Account data (registration information, contact details): Retained for the duration of your active account plus five years after account closure.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for five years from the date of verification or from the date of account closure, whichever is later.
• Gaming activity logs: Retained for three years for active accounts and five years from account closure.
• Support communications: Retained for two years from the date of each communication.
• Marketing consent records: Retained until you withdraw consent, plus one year as an audit trail.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical purposes.

No 999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse:

• TLS 1.3 encryption: All data transmitted between your browser or app and No 999 servers uses current transport-layer security protocols.
• Password hashing: Account passwords are stored as irreversible cryptographic hashes. No 999 staff cannot read your password and it is never stored in plain text at any point.
• Access controls: Internal access to production systems and player data is restricted to authorised personnel only, with role-based permissions and access logging.
• Server monitoring: No 999's infrastructure is monitored 24/7 for unusual activity patterns, intrusion attempts, and system anomalies.
• Regular security reviews: No 999 conducts periodic internal security reviews and addresses identified vulnerabilities in a timely manner.
• Two-factor authentication (2FA): 2FA is available for your No 999 account and is strongly recommended. Enabling it means that even if your password is compromised, a second factor (a one-time code sent to your mobile) is required to access the account.

As a No 999 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@no999.ws with the subject line "Data Rights Request".

No 999 will respond to all verified data rights requests within 30 calendar days. In complex cases we may extend this by a further 30 days, in which case we will notify you of the extension and the reason for it.

No 999 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you are not permitted to register or use No 999 in any capacity.

If No 999 discovers or receives credible information that an account has been registered by a person under 18, the account will be closed immediately. Any real money balance in the account at the time of closure will be handled in accordance with our Terms and Conditions for underage account violations.

If you believe that a minor has created a No 999 account, please contact support immediately at support@no999.ws so we can investigate and take appropriate action.

No 999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via in-platform notification or direct message at least seven days before the change takes effect where practical.

• The "Last Updated" date at the top of this page always reflects the most recent revision.
• Continued use of No 999 after a policy change constitutes acceptance of the revised Privacy Policy.
• If a change affects your rights significantly and you do not wish to accept it, you may close your account and withdraw your real money balance before the effective date of the change.

For any privacy-related query, data rights request, or concern about how No 999 handles your personal information, please get in touch using one of the channels below. Our support team is available 24 hours a day, seven days a week.

• Email (data requests): support@no999.ws – use subject line "Privacy Request" or "Data Rights Request" so it is routed to the right team immediately.
• Live chat: Available in your No 999 account dashboard after you log in. For data rights requests, our live chat team will direct you to the correct process.
• WhatsApp: Contact details are provided in your account dashboard after registration.

No 999 will acknowledge all privacy and data rights requests within 48 hours and will action them within 30 days. For requests that require additional verification of your identity before we can act, we will ask you to confirm your identity using the standard KYC process.