999 x Privacy Policy — Your Data, Your Rights

This Privacy Policy is issued by 999 x ("999 x", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://999x.io and through the 999 x mobile application. 999 x is the data controller for all personal information collected through registration, account use, deposits and withdrawals in PKR, and interaction with our customer support team.

This Policy applies to all players and visitors who interact with the 999 x platform, regardless of whether they have a registered account. It covers information collected through the website, the mobile app, customer support communications, and any other touchpoints between you and 999 x.

If you have any questions about how 999 x handles your personal data, the fastest way to reach us is by emailing support@999x.io or using the live chat function on the platform.

999 x collects personal data in two ways: directly from you when you register or use the platform, and automatically from your device when you interact with the 999 x website or app. Below is a full breakdown of what we collect and why.

Data You Provide Directly

Data Collected Automatically

999 x uses your personal data only for specific, legitimate purposes directly related to operating the platform and providing services to you as a Pakistani player. We do not use your data for purposes beyond those listed below without first obtaining your consent.

• Account Management: Creating and maintaining your 999 x account, processing login authentication, and enabling two-factor authentication if you activate it.
• PKR Transaction Processing: Processing deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments, and processing withdrawal requests to your verified payment method.
• KYC and Identity Verification: Confirming your identity and age eligibility (18+) as required by our operating standards. This includes verifying your CNIC and address documents.
• Fraud Prevention and Security: Monitoring for suspicious login patterns, unusual transaction volumes, multiple account detection, and other indicators of fraud or abuse. This protects all 999 x players, not just the individual concerned.
• Responsible Gaming: Monitoring account activity to identify potential problem gaming patterns and, where appropriate, proactively applying responsible gaming protections in accordance with our Responsible Gaming policy.
• Customer Support: Using your account data and communication history to resolve queries, disputes, and complaints quickly and accurately.
• Platform Improvement: Analysing aggregated (never individual) usage data to understand which features work well and which need improvement — with the goal of making 999 x better for Pakistani players.
• Legal Compliance: Retaining records as required by applicable anti-money laundering and financial compliance obligations.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, account security alerts) and, where you have opted in, promotional communications about 999 x offers.

999 x processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with the 999 x platform services — account operation, PKR transactions, bet settlement, and customer support.
• Legal Obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, and financial record-keeping requirements. 999 x cannot waive these obligations even at a player's request.
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated analytics — where our legitimate business interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent. You may withdraw consent at any time by updating your account communication preferences or by contacting 999 x support.

Third Parties Who May Receive Your Data

999 x may share your personal data with the following categories of third party, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the minimum data required to process your PKR transactions. They are not permitted to use your data for any purpose other than processing the specific transaction.
• KYC Verification Services: Third-party identity verification providers receive the documents you submit during KYC solely for the purpose of identity and age verification. Document data is not retained by these providers beyond the verification process.
• Game Software Providers: Game providers may receive a pseudonymised player ID and session data to facilitate game play and bet settlement. They do not receive your name, CNIC, or financial details.
• Customer Support Platforms: Support tool providers may process your support ticket data on our behalf under strict data processing agreements.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory request, 999 x will disclose personal data to the relevant authority. We will notify you of such disclosure where legally permitted to do so.

999 x does not share, sell, or rent your personal data to advertising networks, data brokers, social media platforms, or any third party for marketing purposes.

999 x uses cookies and similar tracking technologies to keep the platform functional, secure, and continuously improving. Here is what each category of cookie does and your control over them:

999 x retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and financial record-keeping obligations.

When your data is no longer required for any of the above purposes, 999 x securely deletes or anonymises it. Anonymised aggregate data (which cannot identify you personally) may be retained indefinitely for statistical and analytical purposes.

Protecting the personal data and PKR account balances of 999 x players is a technical and organisational priority. The security measures in place at 999 x include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 999 x servers is encrypted using industry-standard SSL/TLS encryption. The same encryption standard used by major banks in Pakistan.
• Two-Factor Authentication (2FA): Available and recommended for all 999 x accounts. When enabled, login requires both your password and a one-time code sent to your registered mobile number.
• Data Access Controls: 999 x staff access to player personal data is limited on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Encrypted Data Storage: Personal data stored in 999 x systems is encrypted at rest. Sensitive fields including CNIC numbers and financial data use additional field-level encryption.
• Intrusion Detection: Automated systems monitor 999 x infrastructure for unauthorised access attempts, unusual data access patterns, and other security indicators around the clock.
• Incident Response: In the event of a data security incident that affects your personal information, 999 x will notify affected players within 72 hours of becoming aware of the incident, and will take immediate steps to contain and remediate the breach.

As a 999 x player, you have meaningful rights over your personal data. You can exercise any of these rights at any time by contacting the 999 x support team. We aim to respond to all privacy rights requests within 30 days.

The 999 x platform is strictly for adults aged 18 and over. 999 x does not knowingly collect personal data from individuals under the age of 18. If you believe a person under 18 has registered an account with 999 x, please contact our support team immediately at support@999x.io with the relevant details so we can investigate and close the account.

Where 999 x discovers that personal data has been collected from a minor, that data will be deleted in full and the account permanently closed. Any winnings accumulated on such an account will be voided. 999 x uses age verification as part of the KYC process specifically to prevent underage access to the platform.

999 x may update this Privacy Policy from time to time to reflect changes in our data practices, applicable regulations, or platform features. When we make material changes, we will notify all registered 999 x players via their registered email address and display a notice on the platform for a minimum of 14 days before the updated policy takes effect.

The current version of this Privacy Policy is always accessible at https://999x.io/privacy-policy and is dated at the top of the page. Continued use of the 999 x platform after the effective date of an updated policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should close your account and contact support to arrange withdrawal of your PKR balance.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how 999 x has handled your personal information, please get in touch:

If you are not satisfied with the response you receive from 999 x regarding a privacy concern, you have the right to raise the matter with the relevant data protection authority in your jurisdiction.