This Privacy Policy describes how win999 collects, processes, stores, shares, and protects the personal data of players registered at win999.my. win999 is committed to handling your personal information responsibly, transparently, and in accordance with applicable international data protection standards. Please read this policy carefully before registering your win999 account or submitting any personal information to the platform.
Six guiding principles that define how win999 collects, uses, and protects the personal information of every Pakistani player on our platform.
win999 collects only the personal data strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not harvest data for its own sake.
All personal data held by win999 is encrypted at rest using AES-256 standards and in transit using TLS 1.3 protocols. Your CNIC details, mobile number, and payment information are never stored in plain text.
win999 uses your data only for the purposes disclosed in this Privacy Policy. We do not repurpose your personal information for undisclosed marketing, profiling for third-party sale, or any activity outside of operating the win999 platform.
win999 respects your rights to access, correct, restrict, and request deletion of your personal data, subject to legal retention obligations. Data subject requests are handled within 30 days of receipt by our support team.
win999 does not sell, rent, or trade your personal data to third parties for commercial purposes. Sharing occurs only with vetted service providers required to operate win999, and regulatory authorities where legally mandated.
win999 retains personal data only for as long as required by the purpose for which it was collected or by applicable regulatory requirements. Account data is not held indefinitely after account closure.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
The Data Controller responsible for your Personal Data collected via win999.my is win999, operating the online gaming platform at win999.my under international gaming licensing standards. All inquiries relating to data privacy, including data subject access requests, may be directed to win999's support team via the contact details in Section 16 of this Privacy Policy.
win999 collects the following categories of personal data from players. The table below indicates whether each data type is required for account operation or collected on an optional basis:
| Data Category | Specific Data Collected | Purpose |
|---|---|---|
| Identity Data Required | Full legal name (as per CNIC), date of birth, gender, CNIC number and images, selfie photograph | KYC verification, age confirmation, fraud prevention, AML compliance |
| Contact Data Required | Pakistani mobile number, email address (if provided) | Account communication, OTP delivery, security alerts, support |
| Financial Data Required | JazzCash / EasyPaisa account details, bank account information, USDT wallet address, transaction history | Payment processing, withdrawal verification, AML monitoring |
| Technical Data Required | IP address, device type and operating system, browser type, session timestamps, login history | Security monitoring, fraud detection, session management, platform optimisation |
| Gaming Data Required | Bet history, game session records, wagering activity, bonus usage, win/loss records | Account management, regulatory compliance, responsible gaming monitoring, dispute resolution |
| Communication Data Optional | Live chat transcripts, support tickets, player feedback submissions | Customer support, service improvement, dispute record-keeping |
| Marketing Preferences Optional | Communication opt-in/opt-out status, promotional participation history | Consent-based marketing communications, promotional targeting |
win999 does not knowingly collect special category data (as defined under GDPR or equivalent standards) beyond what is strictly necessary for age and identity verification through the CNIC submission process.
win999 collects personal data through the following channels and mechanisms:
win999 processes your personal data on the following legal bases, depending on the specific processing activity:
win999 uses the personal data collected about you for the following specific purposes:
win999 uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and measure site performance. The following categories of cookies are used on win999.my:
You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your win999 account. win999 does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving advertisements on external websites.
win999 does not sell, rent, trade, or otherwise commercially transfer your personal data to any third party. Sharing of your data occurs only in the following limited and necessary circumstances:
All third-party service providers who process personal data on win999's behalf are required to maintain confidentiality, implement appropriate security measures, and process data only on win999's documented instructions.
win999's platform infrastructure and certain service providers may be located outside of Pakistan. Where your personal data is transferred internationally, win999 ensures that appropriate safeguards are in place to protect the security and confidentiality of that data. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to countries recognised as providing adequate data protection standards under applicable frameworks.
Your PKR payment transaction data processed through JazzCash and EasyPaisa is handled entirely within Pakistan's domestic financial infrastructure. CNIC verification data is processed on servers employing encryption standards equivalent to those used by major international financial institutions.
win999 retains your personal data for the following periods, based on the nature of the data and the applicable legal or operational requirement:
Upon expiry of the applicable retention period, win999 will securely delete or permanently anonymise your personal data in a manner that prevents any future identification.
As a win999 player, you hold the following rights in respect of your personal data, subject to applicable legal limitations and win999's regulatory obligations:
Request a copy of the personal data win999 holds about you, including the categories processed and the purposes of processing.
Request correction of any inaccurate or incomplete personal data that win999 holds about you — subject to KYC re-verification requirements.
Request deletion of your personal data where win999 no longer has a legal basis for retaining it. Note: legal retention obligations may prevent full erasure.
Request that win999 temporarily halt processing of your data while accuracy is disputed or while a legitimate interest objection is being assessed.
Receive your personal data in a structured, machine-readable format — applicable to data you provided to win999 under a consent or contract basis.
Withdraw any consent you have given to win999 for non-essential processing (such as marketing) at any time, without affecting the lawfulness of prior processing.
To exercise any of the above rights, contact win999 support via live chat or email at [email protected] with the subject line "Data Subject Request" and your registered mobile number. win999 will respond within 30 days. win999 may require identity verification before fulfilling data subject requests to prevent unauthorised access to another player's data.
win999 implements a multi-layered security architecture to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction. Our technical and organisational security measures include:
win999 does not knowingly collect, process, or retain the personal data of any person under the age of 21. The win999 platform is strictly for adults aged 21 and above, and CNIC-based age verification is mandatory for all accounts. If win999 discovers that personal data has been collected from a person under the age of 21, that data will be permanently deleted, the associated account will be closed, and any deposits received will be forfeited in accordance with win999's Terms & Conditions.
win999 may send you promotional communications about bonuses, reload offers, PSL cricket betting promotions, and new game launches — but only where you have consented to receive such communications at the time of registration or through your win999 account communication preferences.
Marketing communications from win999 are sent via SMS to your registered Pakistani mobile number. win999 does not send unsolicited marketing emails to addresses not provided during registration. Each marketing SMS from win999 includes an opt-out instruction. You may withdraw consent for marketing communications at any time by:
Withdrawal of marketing consent does not affect your ability to use win999's gaming services or receive essential account communications such as deposit confirmations, withdrawal notifications, and security alerts.
win999 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, regulatory requirements, or data processing practices. Where changes are material, win999 will notify registered players via SMS to their registered Pakistani mobile number at least 14 days before the updated policy takes effect.
The version number and effective date at the top of this document indicate the operative version. Continued use of win999 following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you may close your account by contacting win999 support before the effective date of the change.
Previous versions of this Privacy Policy are available from win999 customer support on request, providing a complete audit trail of policy evolution.
For all privacy-related inquiries, data subject requests, consent withdrawals, or concerns regarding win999's handling of your personal data, please contact us through the following channels:
win999 aims to acknowledge all privacy inquiries within 48 hours and resolve them within 30 days. For complex data subject requests, an extension of up to an additional 60 days may apply, in which case win999 will notify you of the extension and the reasons for it.
win999 secures your personal data with 256-bit SSL, CNIC-verified accounts, and strict data minimisation — so you can focus on PSL cricket betting, live casino tables, and Fortune Snake, knowing your information is protected.
⚠ 21+ only. By registering, you confirm you have read and accepted this Privacy Policy and the win999 Terms & Conditions.