k999 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy describes how k999 ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal information of registered users ("you", "the Player") who access the services available at k999-play.com. k999 is committed to handling your personal data with care, transparency, and respect. This document is written in plain language — not legalese — because we believe every Pakistani player deserves to understand exactly how their information is handled.

By registering a k999 account or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions.

2. Data We Collect

k999 collects only the personal data that is necessary to provide you with a safe, functional, and compliant gaming experience. The following table summarises the categories of data we collect and the reason for collecting each.

k999 does not collect sensitive personal data such as biometric information, health data, or political opinions. We also do not collect full card numbers or full CNIC scans except when specifically required for KYC verification, in which case they are processed securely and not retained beyond the legally required period.

3. How We Collect Your Data

k999 collects your personal data through the following methods:

• Direct registration: When you create a k999 account, you provide your name, mobile number, date of birth, and email address directly.
• Account activity: Every bet placed, game played, deposit made, and withdrawal requested generates transaction data that is automatically recorded to your account.
• Payment processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the relevant payment provider confirms transaction details to k999 for reconciliation purposes.
• Technical systems: k999's servers automatically log IP addresses, device types, and session data whenever you access the platform.
• Cookies and tracking: k999 uses first-party cookies to maintain your login session and remember preferences. See Section 7 for full details.
• Support interactions: When you contact k999 support via live chat or email, the content of those communications is recorded for quality assurance and dispute resolution purposes.

4. Why We Use Your Data

k999 uses the personal data it collects for the following specific purposes, each of which has a legitimate legal basis:

• Account management: To create, verify, and maintain your k999 account, process your login, and apply account settings such as deposit limits and self-exclusion.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method. Financial data is shared only with the relevant payment processor for each transaction.
• Legal compliance: k999 is required by anti-money laundering (AML) regulations to verify player identities, monitor transaction patterns, and retain certain records for specified periods. This is a legal obligation, not a discretionary choice.
• Responsible gaming: k999 monitors usage data to identify potential problem gambling patterns and to make responsible gaming tools available to players who may benefit from them. No data is used to actively target vulnerable players with commercial communications.
• Fraud prevention and security: Technical and transaction data is used to detect unusual account activity, prevent unauthorised access, and protect both k999 and its players from fraud.
• Platform improvement: Aggregated, anonymised usage data helps k999 understand which features and game categories are most popular, where performance bottlenecks exist, and how the platform can be improved for Pakistani users.
• Customer support: Support chat and email records are retained so that k999 support agents can provide consistent, informed assistance and so that disputes can be resolved accurately.
• Marketing communications (opt-in only): If you have opted in to marketing communications, k999 may send you information about new games, promotions, and PSL betting offers. You can opt out at any time by updating your notification preferences in the account settings section.

5. Sharing Your Data

k999 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Period. However, there are specific circumstances in which k999 must share data with third parties:

• Payment processors: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, participating Pakistani banks (for IBFT), and card networks (Visa/Mastercard) solely to process your financial transactions. Each of these providers operates under their own privacy policy and data protection obligations.
• Game providers: Live casino and crash game providers receive a player session identifier to operate game logic and calculate RTP. They do not receive your name, contact details, or financial information.
• Identity verification providers: If k999 uses a third-party KYC service to verify your identity, your identity documents are processed by that provider in accordance with their privacy policy and immediately deleted after verification is complete.
• Regulatory and law enforcement authorities: k999 will disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law — including in connection with AML investigations. k999 will not disclose data beyond what is legally required.
• Corporate transactions: In the event of a merger, acquisition, or sale of k999's business, player data may be transferred to the acquiring entity. You would be notified before any such transfer takes effect.

6. Payment Data and Financial Privacy

Pakistani players rightly care about the security of their financial information. k999 treats payment data with the highest level of care:

• k999 does not store full card numbers. Card payment data is tokenised by our payment processor before it reaches k999's systems. k999 retains only the card's last four digits for display purposes in your transaction history.
• Easypaisa and JazzCash wallet IDs are stored securely in encrypted form. They are used only to route withdrawals to your designated mobile wallet.
• Bank account details provided for IBFT withdrawals are encrypted and accessible only to the k999 payments team for the purpose of processing that specific transaction.
• All payment-related data is processed over encrypted connections. k999 does not transmit financial data via unencrypted email, SMS, or chat channels.

7. Cookies and Tracking Technologies

k999 uses cookies and similar technologies on its platform. The following table explains each category of cookie used and whether it is required for the platform to function.

You can manage optional cookies through your browser settings. Disabling essential and security cookies will prevent the k999 platform from functioning correctly and is not recommended. k999 does not use third-party advertising cookies or any tracking technology that follows you outside of k999-play.com.

8. Data Retention

k999 retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law:

• Active account data: Retained for the duration of your account plus five years after account closure, in compliance with AML record-keeping requirements.
• Transaction and betting records: Retained for seven years from the date of the transaction, as required by financial record-keeping obligations.
• Support communications: Retained for three years from the date of the communication, for dispute resolution purposes.
• KYC documents: Retained for five years from the date of verification, as required by AML regulations. After this period, documents are permanently deleted.
• Marketing data: Retained only while you remain opted in to marketing communications. Deleted within 30 days of opt-out.
• Technical / server logs: Retained for 90 days for security monitoring, after which they are automatically purged.

When data is no longer required, k999 permanently deletes or irreversibly anonymises it. Data is not retained in archive form beyond the periods specified above.

9. Security Measures

k999 applies multiple layers of technical and organisational security to protect your personal data:

• All data in transit is protected by 256-bit TLS/SSL encryption — the same standard used by major Pakistani banks.
• Sensitive data at rest (payment details, KYC documents) is stored using AES-256 encryption.
• Access to player data within k999's systems is restricted on a strict need-to-know basis. Only personnel directly involved in payment processing, compliance, and support operations can access identifiable player data.
• k999 conducts periodic security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA) is available for all player accounts and is strongly recommended. Internal k999 system access by staff requires mandatory 2FA.
• All k999 staff with access to personal data undergo mandatory data protection training and are bound by confidentiality obligations.

10. Your Data Rights

As a k999 player, you have the following rights over your personal data. These rights can be exercised at any time by contacting k999 support via live chat or at support@k999-play.com:

11. Minors

k999 is strictly for users aged 18 and above. k999 does not knowingly collect or process personal data belonging to individuals under the age of 18. If k999 discovers that a minor has registered an account, that account will be immediately closed and all associated data will be permanently deleted. If you have reason to believe that a minor is using or has used a k999 account, please contact our support team immediately.

k999 employs age verification checks at the registration stage and may request additional proof of age at any point during the account lifecycle. Providing false date of birth information is a breach of our Terms and Conditions and will result in account closure.

12. Changes to This Privacy Policy

k999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via their registered email address or via an in-platform notification before the changes take effect. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

If you continue to use k999 after a revised Privacy Policy has been notified to you, you are deemed to have accepted the updated terms. If you do not accept the changes, you must stop using the platform and contact support to close your account and request deletion of your data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how k999 handles your personal data, please get in touch through any of the following channels:

• Live Chat — available 24/7 from any page on k999-play.com. Live chat is the fastest way to raise a data query.
• Email — support@k999-play.com. For formal data requests (access, deletion, correction), please include "Data Request" in the subject line. k999 will respond within 30 days.
• FAQ — visit our FAQ page for answers to the most frequently asked questions about data and privacy on k999.

k999 takes all privacy enquiries seriously. We do not dismiss or delay responses to legitimate data requests. If you feel your privacy concern has not been addressed adequately, you may escalate it as a formal complaint by emailing support@k999-play.com with the subject line "Formal Privacy Complaint".