Privacy Policy – How d999 Handles Your Personal Data

1 Introduction

d999 is an online entertainment platform providing sports betting, live casino, slot games and esports betting services to adult players in Pakistan. This Privacy Policy sets out how d999 collects, uses, stores and protects personal information provided by users of the platform and the website at d999.ml.

By registering an account, depositing funds, placing bets, playing casino or slot games, or simply browsing the d999 website, you acknowledge that you have read and understood this Privacy Policy and that you agree to the collection and use of your personal information as described here.

If you have questions about anything in this policy or about how d999 handles your data, please contact our support team. Contact details are provided at the end of this document. We will always try to give you a clear, straightforward answer — no vague corporate responses.

2 Data We Collect

d999 collects personal information in two main ways: information you provide directly when registering and using the platform, and information collected automatically as you interact with the site.

Information You Provide Directly

• Registration details: Full name, date of birth, email address, mobile number and preferred username when you create your d999 account.
• Identity verification documents: A copy of your CNIC or other valid government-issued ID when we are required to verify your identity before processing withdrawals or in response to a security review.
• Payment information: Your JazzCash or Easypaisa mobile number, Raast ID, bank account details or other payment method identifiers used to process deposits and withdrawals in PKR. Full card numbers are never stored on d999 servers.
• Support communications: Any messages, chat transcripts or emails you send to d999's support team, including the content of your queries and any attachments you provide.
• Account preferences: Settings you configure within your account, including deposit limits, notification preferences and responsible gaming tool selections.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version and screen resolution collected each time you access the platform.
• Usage and activity data: Pages visited, games played, bets placed, deposit and withdrawal history, session duration and click patterns within the platform.
• Cookies and similar technologies: Session tokens, preference cookies and analytics identifiers stored on your device. See Section 6 for full details on how d999 uses cookies.
• Transaction logs: A complete record of all financial transactions associated with your account, including deposits, withdrawals, bonus credits and wagering activity.

3 How We Use Your Data

The personal information collected by d999 is used for the following specific purposes:

d999 does not use your personal data for any purpose not listed above. If we ever wish to use your data in a new way that is materially different from what is described here, we will update this Privacy Policy and notify you before doing so.

4 Legal Basis for Processing

d999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration details, payment information and account activity is necessary to fulfil the contract between you and d999 — namely, to provide the betting and casino services you have signed up for.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring and general platform improvement are carried out on the basis of d999's legitimate interest in operating a safe and reliable service.
• Consent: Where we send you marketing communications or use non-essential cookies, we do so only on the basis of your consent, which you can withdraw at any time.
• Legal obligation: Identity verification, age checks and transaction record keeping may be required to comply with applicable laws and regulations. d999 will retain such records for the period required by law.

5 Data Sharing & Third Parties

d999 does not sell, rent or trade your personal data to any third party. We share your information only in the following specific and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and bank transfer partners receive the payment identifiers and transaction amounts required to process your PKR deposits and withdrawals. These providers handle payment data under their own privacy and security policies.
• Identity verification providers: When d999 is required to verify your identity, your name, date of birth and CNIC details may be shared with a trusted third-party verification service. This information is used solely for the purpose of confirming your identity and age.
• Game providers and content studios: Some casino and slot game providers may receive anonymised gameplay data as part of the technical integration required to deliver games on the d999 platform. No personally identifiable information is shared with game studios beyond what is technically required.
• Platform analytics providers: Anonymised or aggregated usage data may be shared with analytics services to help d999 understand how the platform is being used and identify areas for improvement. This data cannot be used to identify individual players.
• Legal and regulatory requirements: d999 may be required to disclose personal data in response to a lawful request from a government authority, court order or other legal process. We will notify affected users where legally permitted to do so.

All third-party service providers used by d999 are subject to data processing agreements that require them to handle your information securely and only for the purposes for which it was shared.

6 Cookies & Tracking

d999 uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work properly and to understand how players use it. Here is a breakdown of the types of cookies we use:

• Essential cookies: Required for the platform to function. These handle things like keeping you logged in during a session, remembering your language preference and maintaining your account state. Without these, the platform cannot operate correctly.
• Functional cookies: Remember your personal settings and preferences — for example, your preferred deposit method or your notification settings — so you do not have to reconfigure them every time you visit.
• Analytics cookies: Help d999 understand which pages are visited most, how long players spend on different sections of the platform and where any technical issues are occurring. This data is aggregated and anonymised.
• Marketing cookies: Used only where you have provided consent. These help d999 deliver relevant promotional content and measure the effectiveness of marketing campaigns.

You can manage, restrict or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent some parts of the d999 platform from working as expected. Instructions for managing cookies vary by browser — check your browser's help section for specific guidance.

7 Data Retention

d999 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with any applicable legal obligations.

• Active accounts: Personal data associated with an active d999 account is retained for the duration of the account's activity and for a reasonable period following account closure to allow for the resolution of any pending disputes or queries.
• Financial records: Transaction records, deposit and withdrawal history and identity verification records are retained for the period required by applicable financial record-keeping obligations. This is typically several years from the date of the relevant transaction.
• Support communications: Records of your interactions with d999 customer support are retained for a period sufficient to handle any follow-up queries and to maintain a consistent support history.
• Marketing data: If you have opted in to marketing communications, your contact preferences are retained until you opt out. Following an opt-out, a record that you have done so is maintained to prevent future contact.
• Dormant accounts: Where an account has been inactive for an extended period, d999 may contact you to confirm whether you wish to keep the account open. If no response is received, personal data associated with the dormant account may be anonymised or deleted in line with our internal retention policy.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual.

8 Data Security

Protecting your personal information is a core priority at d999. We implement a range of technical and organisational security measures to safeguard the data we hold about you:

• SSL/TLS encryption: All data transmitted between your device and d999 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using the platform.
• Secure payment handling: Payment method details are processed through tokenised, PCI-compliant payment infrastructure. d999 does not store complete card numbers or full payment credentials on its own servers.
• Access controls: Access to personal data held by d999 is restricted to authorised staff who require it to perform their job functions. Access is logged and reviewed regularly.
• Fraud detection systems: d999 operates automated systems that monitor account activity for signs of unauthorised access, unusual transaction patterns and other security anomalies. Suspicious activity triggers an immediate review.
• Regular security reviews: Our technical infrastructure and security practices are reviewed and updated on an ongoing basis to address emerging threats and vulnerabilities.

While d999 takes every reasonable step to protect your data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, we will notify affected users promptly and take immediate steps to contain and address the breach.

You can help keep your account secure by using a strong, unique password, not sharing your login details with anyone, and logging out after each session — especially on shared or public devices.

9 Your Rights

As a d999 user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team using the details in Section 13.

d999 will respond to data rights requests within a reasonable timeframe. In most cases we aim to respond within 30 days. If a request is complex or involves a large volume of data, we will let you know if more time is needed.

We may need to verify your identity before processing a data rights request to ensure that personal information is not disclosed to the wrong person. Please be prepared to confirm your account details when submitting a request.

10 Marketing Communications

d999 may send you promotional communications about bonuses, new games, platform features and special events — but only where you have given your consent to receive them. Marketing communications are sent by email or SMS to the contact details registered on your account.

• You can opt out of marketing communications at any time by updating your notification preferences within your account settings or by contacting our support team directly.
• Opting out of marketing communications does not affect essential account notifications — for example, messages about your deposits, withdrawals, account security or changes to platform terms.
• d999 will not send unsolicited marketing communications to users who have not opted in or who have previously opted out.
• If you believe you have received a marketing communication in error or without your consent, please contact us immediately so we can investigate and resolve the matter.

11 Children & Minors

d999 is strictly an adult platform. The service is available only to individuals who are 18 years of age or older. d999 does not knowingly collect personal data from anyone under the age of 18.

During the registration process, all users are required to confirm their date of birth. d999 may request identity documents to verify age before processing withdrawal requests or in response to a security review.

If you are a parent or guardian and believe that a minor has registered an account on d999 or accessed the platform using your credentials, please contact our support team immediately. We will investigate promptly, suspend the account and delete any personal data associated with a verified underage user.

12 Policy Updates

d999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make changes, the updated policy will be published on this page with a revised date shown at the top.

For significant changes — those that materially affect how your personal data is used or your rights as a user — d999 will make reasonable efforts to notify registered account holders via account notification or email before the changes take effect.

We encourage you to review this Privacy Policy periodically so you are always aware of how your data is being handled. Continued use of the d999 platform after an updated policy has been published constitutes your acceptance of the revised terms.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, our support team is here to help. Please get in touch using the details below:

When contacting us about a data rights request, please include your registered account email address and a description of your request so we can locate your account quickly and respond efficiently.