w999 Privacy Policy

w999 ("w999," "we," "us," "our") is the data controller responsible for personal data collected and processed through the w999.site platform. w999 operates as an internationally licensed online gaming platform providing cricket betting, live casino, slot games, and related financial services to players including those based in Pakistan.

As the data controller, w999 determines the purposes and means of processing personal data received from players, visitors, and prospective registrants. Where w999 engages third-party processors — such as payment providers like JazzCash or EasyPaisa, or KYC verification partners — those processors act on w999's instructions and under written data processing agreements that bind them to the same data protection standards applied by w999.

For all privacy-related enquiries, you may contact w999's designated privacy point of contact at [email protected] (plain text — not a clickable link). Privacy enquiries submitted via live chat are also accepted 24/7.

w999 collects the minimum personal data necessary to provide our gaming services, comply with our international licensing obligations, and protect the integrity of the platform. The categories of personal data we collect are as follows:

w999 collects personal data through the following channels and mechanisms:

• Direct submission: Data you enter into w999 registration forms, KYC document upload portals, account settings pages, and support contact forms.
• Automated technical collection: Device and session data collected automatically when you access w999.site via browser or mobile web interface, including IP address, browser fingerprint, and session duration.
• Payment provider data feeds: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 network confirmations following deposit and withdrawal processing.
• KYC partner verification: Identity verification outcomes (verified / not verified) and risk-scoring data received from w999's licensed KYC and AML screening partners.
• Cookies and similar technologies: Session management, security, and analytics data collected through first-party cookies placed by w999 on your device during platform use (see Section 7).
• Customer support interactions: Data contained in live chat sessions, email correspondence, and support ticket submissions you initiate with w999 support.

w999 processes personal data for the following specific purposes:

w999 processes your personal data only where a valid legal basis exists. The legal bases relied upon by w999 are:

• Contract performance: Processing necessary to deliver the services you have contracted for when registering a w999 account — including account creation, gaming access, deposit processing, and withdrawal fulfilment.
• Legal obligation: Processing required to comply with w999's obligations under its international gaming licence, including mandatory KYC identity verification, AML transaction monitoring, responsible gaming reporting, and regulatory record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security monitoring, and aggregate usage analytics, where such processing does not override your privacy rights and interests.
• Consent: Processing for optional marketing communications — SMS, email, or in-app notifications about w999 promotions, bonuses, and offers. Consent to marketing is separate from consent to this Privacy Policy and can be withdrawn at any time from your account settings.

Where w999 relies on legitimate interests as a legal basis, we have conducted and documented a legitimate interests assessment (LIA) to confirm that our processing does not disproportionately impact your privacy rights.

w999 shares personal data with the following categories of recipients:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay — for the sole purpose of processing deposits and withdrawals as instructed by you.
• KYC and AML verification partners: Licensed identity verification and screening services used to fulfil w999's mandatory KYC and AML obligations under our international gaming licence.
• Licensed game studios: Providers such as Pragmatic Play, NetEnt, and similar partners receive anonymised game session data for RNG audit and RTP reconciliation purposes only.
• Platform infrastructure providers: Cloud hosting, content delivery, and database service providers who process data on w999's behalf under written data processing agreements.
• Regulatory authorities: Gaming licensing authorities, financial regulators, and law enforcement agencies — where w999 is legally required to disclose data in response to lawful requests or regulatory obligations.

All third-party data processors engaged by w999 are bound by written agreements requiring them to process personal data only on w999's documented instructions, implement appropriate technical and organisational security measures, and not sub-process data without w999's prior written authorisation.

w999 uses cookies and similar session technologies on w999.site. These technologies are used exclusively by w999 — no third-party advertising networks, social media platforms, or analytics services outside w999's own infrastructure place cookies on your device through our platform.

You may control or delete cookies through your browser's privacy settings at any time. Deleting strictly necessary cookies will require you to re-authenticate at your next w999 Login. w999 does not use cookies for cross-site behavioural advertising and does not share cookie data with advertising networks.

w999 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The key retention periods applied by w999 are:

• Active account data: Retained for the duration of your w999 account's active status plus five (5) years following account closure, as required by our international gaming licence's record-keeping obligations.
• KYC and identity documentation: Retained for a minimum of five (5) years following the end of the business relationship, in compliance with anti-money-laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, as required under AML and licensing regulations.
• Customer support communications: Retained for three (3) years from the date of the support interaction, to enable resolution of any subsequent disputes.
• Analytics data: Aggregated and anonymised at 90 days; no personal identifiers are retained in analytics records beyond that period.
• Marketing consent records: Retained for the period of your consent plus three (3) years, to demonstrate compliance with consent obligations if challenged.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using methods that prevent reconstruction or re-identification.

w999 implements and maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your browser and w999.site is encrypted using TLSv1.3. This applies to every page, every login event, and every API call — including deposit and withdrawal requests.
• Encryption at rest: Personal data stored in w999's databases — including identity documents, financial records, and KYC data — is encrypted using AES-256 at the storage layer.
• Access controls: Access to personal data within w999's infrastructure is restricted on a strict need-to-know basis. Internal access is logged, audited, and subject to role-based access control policies.
• Two-factor authentication: Available for all player accounts and mandatory for w999 staff accounts accessing systems that hold personal data.
• Penetration testing: w999's platform undergoes regular penetration testing by independent security specialists. Identified vulnerabilities are remediated under a documented patch management process.
• Incident response: w999 maintains a documented data breach response plan. In the event of a personal data breach affecting your data, w999 will notify you promptly in accordance with applicable legal requirements.

w999 operates as an international platform and some of the data processing activities described in this Policy — including KYC verification, cloud infrastructure hosting, and game studio RNG audit functions — involve the transfer of personal data to recipients located outside Pakistan.

Where personal data is transferred internationally, w999 ensures that appropriate safeguards are in place to protect your data to at least the same standard as applied within Pakistan. These safeguards include:

• Standard contractual clauses or equivalent data transfer agreements with all international data recipients.
• Verification that international processors maintain data protection standards equivalent to w999's own obligations under our gaming licence.
• Encryption of data in transit across all international data transfer pathways.
• Contractual restrictions preventing international processors from using w999 player data for any purpose other than the specific contracted service.

As a data subject whose personal data is processed by w999, you hold the following rights. These rights can be exercised by contacting w999 via live chat or at [email protected]. w999 will respond to all rights requests within 30 days of receipt.

The w999 platform operates as a self-contained environment. w999.site does not contain links to external third-party websites, social media platforms, or advertising networks that operate outside w999's privacy governance framework.

Where w999 integrates licensed game studio content within the platform — such as Pragmatic Play or NetEnt slot games — those studios provide their game software but do not receive identifiable player data from w999 beyond anonymised session identifiers used for RNG audit purposes. The studio's own privacy policies govern their internal practices, but their access to your personal data through w999 is contractually restricted to the minimum necessary for technical integration.

w999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, our services, applicable regulations, or our licensing requirements. When material changes are made, w999 will notify registered players via SMS to their registered Pakistani mobile number or via in-platform notification at next login.

The date of the most recent revision is shown in the "Last Updated" field at the top of this page. The version published on this page at any given time is the current, operative version of the w999 Privacy Policy. Previous versions are superseded in full and are not enforceable.

Your continued use of the w999 platform following notification of a Privacy Policy update constitutes your acknowledgement of the revised Policy. If you have concerns about any update, you are encouraged to contact w999 support before continuing to use the platform.

For any questions, concerns, rights requests, or complaints relating to this Privacy Policy or w999's data processing practices, please use the following contact channels:

• Live Chat: Available 24/7 from within your w999 account or from the w999.site homepage, in English and Urdu.
• Email: [email protected] — privacy requests are acknowledged within 24 hours and resolved within 30 days.
• Subject line for privacy requests: Use "Privacy Request — [Your Username]" when emailing to expedite routing to our privacy team.

This Privacy Policy was last reviewed and updated on 1 January 2026. The published version on this page is always the current operative version.