Privacy Policy —
How w9999 Handles Your Data

w9999 ("we", "us", "our", or "the Platform") operates the online gaming platform accessible at w9999.site and is the data controller in respect of all personal information collected from users of that platform. As data controller, w9999 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out in compliance with applicable data protection principles.

This Privacy Policy applies to all current and prospective players of w9999, visitors to w9999.site, and any individual who contacts w9999 through its support channels. It governs all personal data collected in connection with the registration and maintenance of a player account, the use of any gaming service offered on the w9999 platform, the processing of deposits and withdrawals, and the delivery of promotional communications where the player has consented to receive them.

By creating an account on w9999 or by continuing to use the w9999 platform after this Privacy Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any aspect of this Privacy Policy, you should discontinue use of the w9999 platform and may request closure of your account in accordance with our Terms & Conditions.

w9999 collects personal information in the following categories, depending on the nature of your interaction with the platform:

w9999 does not collect or process sensitive personal data — such as ethnic origin, religious beliefs, health data, or biometric data for identification purposes — unless this is strictly required to fulfil a specific legal or regulatory obligation and you have been notified accordingly.

w9999 collects personal information through the following channels:

• Directly from you: When you complete the account registration form on w9999.site; when you submit identity documents for KYC verification; when you initiate a deposit or withdrawal; when you contact w9999 support via live chat or email; when you update your account profile or responsible gaming settings; and when you opt in to or out of marketing communications.
• Automatically through platform use: Technical data — including IP address, device identifiers, login timestamps, and session duration — is collected automatically each time you access w9999.site or log in to your account. Gameplay data is recorded automatically as part of the platform's normal operation for purposes of game settlement, dispute resolution, and responsible gaming monitoring.
• From payment processors: When you process a transaction through JazzCash, EasyPaisa, or a Pakistani bank transfer, the relevant payment processor communicates transaction confirmation data to w9999 to enable deposit crediting and withdrawal processing. w9999 does not retain full payment credentials — only the reference data necessary to match transactions to player accounts.
• From third-party identity verification providers: Where a Player's identity cannot be sufficiently verified using information provided directly, w9999 may use third-party KYC service providers to cross-reference identity data against publicly available or commercially licensed databases. The identity of any such provider in use will be disclosed upon request.
• Through cookies and similar technologies: As described in Section 5 of this Privacy Policy.

w9999 processes personal data for the following purposes, each supported by a corresponding legal basis:

w9999 uses cookies and similar tracking technologies on w9999.site to enable core platform functionality, maintain session state, enhance security, and — where you have consented — to support analytics and personalisation features. The following categories of cookies are used on w9999:

• Strictly Necessary Cookies: These cookies are essential for the operation of the w9999 platform and cannot be disabled without breaking core functionality. They include session authentication tokens that keep you logged in to your w9999 account, CSRF protection tokens that prevent cross-site request forgery attacks, and cookies that maintain your responsible gaming settings during a session.
• Performance and Analytics Cookies: These cookies collect aggregated, anonymised information about how players navigate and use the w9999 platform. The data collected helps w9999 identify pages that are performing poorly, understand user navigation patterns, and prioritise platform improvements. These cookies do not identify individual users. They are activated only where you have accepted performance cookies in the cookie preferences manager.
• Functionality Cookies: These cookies remember your platform preferences — such as language settings, preferred game categories, and display options — to personalise your experience across sessions. They are activated where you have accepted functionality cookies.
• Security Cookies: Used by w9999's fraud detection systems to monitor session integrity, detect unusual access patterns, and flag accounts that may have been compromised. These are classified as strictly necessary and cannot be opted out of while your account is active.

You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of w9999.site. Refusing non-essential cookies will not affect your ability to log in, place bets, or process withdrawals on w9999. Your browser also provides independent tools for managing cookies at the device level — consult your browser's help documentation for instructions.

w9999 does not use third-party advertising cookies or serve behavioural advertising based on your w9999 activity to third-party ad networks.

w9999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is shared only in the following limited circumstances, each of which is necessary to provide the w9999 service, fulfil a legal obligation, or protect the legitimate interests of w9999 and its players:

• Payment Processing Partners: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment infrastructure providers receive the minimum data required to process your deposit or withdrawal transaction. Each payment partner is contractually bound to process this data solely for transaction execution and is prohibited from using it for any other purpose.
• Identity Verification Providers: w9999's KYC compliance partners receive identity data solely for the purpose of verifying that a player is who they claim to be and meets the 21+ age requirement. KYC providers operate under strict data processing agreements and are prohibited from retaining or using your identity data beyond what is necessary for verification.
• Gaming Software Providers: Third-party game studios and live casino operators whose software runs on the w9999 platform receive session and gameplay data necessary to operate those games — including round outcomes, bet amounts, and timing data. This data is used only for game settlement and fairness monitoring purposes.
• Regulatory and Law Enforcement Authorities: w9999 will disclose personal data to competent authorities where required to do so by applicable law, court order, regulatory direction, or in response to a lawful request from a law enforcement body. w9999 will, to the extent permitted by law, notify the affected player of any such disclosure.
• Professional Advisers: w9999's legal counsel, auditors, and compliance consultants may access player data to the extent strictly necessary for the delivery of professional advice. These parties are bound by professional confidentiality obligations.
• Business Transfers: In the event that w9999's business or assets are acquired by or merged with another entity, player data may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity's acceptance of privacy commitments at least as protective as those set out in this Privacy Policy. Affected players will be notified of any such transfer in advance.

w9999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal and regulatory obligations, or to protect w9999's legitimate interests in connection with potential disputes. The following general retention periods apply:

At the end of the applicable retention period, w9999 will either securely delete your personal data or anonymise it in a manner that prevents re-identification. Anonymised data may be retained for analytical purposes beyond these periods as it no longer constitutes personal data under applicable data protection principles.

w9999 employs a comprehensive, layered information security architecture to protect the personal data of its Pakistani players and all other users of the platform. The following technical and organisational security measures are in place:

• AES-256 Encryption in Transit: All data transmitted between your device and w9999 servers — including login credentials, financial data, and personal information — is encrypted using AES-256 Transport Layer Security (TLS). This is the same encryption standard applied by Pakistan's major commercial banks including HBL, UBL, and Meezan Bank for internet banking services.
• Encryption at Rest: Personal data and financial records stored on w9999 servers are encrypted at rest using industry-standard encryption mechanisms, ensuring that data remains protected even in the event of unauthorised server access.
• Access Controls: Access to w9999 production systems containing personal data is restricted on a strict need-to-know basis. All internal access is logged, audited, and reviewed regularly. Privileged access requires multi-factor authentication and is governed by a formal access control policy.
• Intrusion Detection and Monitoring: w9999 operates 24/7 security monitoring systems that detect and alert on anomalous access patterns, potential intrusion attempts, and unusual data access behaviour. Incidents are escalated to w9999's security team immediately upon detection.
• Vulnerability Management: The w9999 platform undergoes regular penetration testing and security assessments conducted by qualified independent security professionals. Critical vulnerabilities identified through these assessments are remediated within defined SLA timeframes.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, w9999 will notify affected players without undue delay and will take all reasonable steps to contain the breach and minimise its impact.

While w9999 takes extensive measures to protect your personal data, no data transmission over the internet or electronic storage system is completely immune to security risks. w9999 cannot guarantee absolute security but commits to maintaining security practices that are at or above the standard expected of a licensed online gaming operator serving Pakistani players.

As a player whose personal data is processed by w9999, you have the following rights with respect to that data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Request — [Right Type]". w9999 will acknowledge your request within 48 hours and respond substantively within 30 calendar days. Complex or large-volume requests may be extended by a further 60 days with notice to you.

• Right of Access: You have the right to request confirmation of whether w9999 processes your personal data and, if so, to receive a copy of that data along with information about how it is used, who it is shared with, and how long it is retained.
• Right to Rectification: You have the right to request correction of any inaccurate personal data w9999 holds about you, and to have incomplete data completed. Minor account details such as contact address may be updated directly through your w9999 Account Settings panel.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to exceptions where retention is required by law, such as anti-money laundering obligations that require w9999 to retain transaction records for five years.
• Right to Restriction of Processing: You have the right to request that w9999 restricts the processing of your personal data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to w9999 in a structured, commonly used, and machine-readable format, and to request that w9999 transmit this data to another controller where technically feasible.
• Right to Object: You have the right to object to w9999 processing your personal data based on legitimate interest, including for direct marketing purposes. Where you object to marketing processing, w9999 will cease that processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where w9999 processes your data on the basis of your consent — primarily for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

w9999 sends promotional communications — including SMS notifications, email newsletters, and in-platform bonus offers — only to players who have explicitly opted in to receive such communications. Consent to receive marketing from w9999 is a separate, optional step during account registration and does not affect a player's ability to register or use the w9999 platform.

Marketing communications from w9999 may include information about:

• Active and upcoming bonus promotions, including deposit match bonuses, free spins, and cashback offers;
• PSL season special markets and cricket betting odds boost offers;
• New game releases in the slot, live casino, and sports betting sections;
• Loyalty Program tier progress updates and reward notifications;
• Fortune Tree event announcements and harvest windows;
• Responsible gaming reminders and account activity summaries.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your marketing preferences in the w9999 Account Settings → Notifications panel;
• Clicking the unsubscribe link included in the footer of any marketing email from w9999;
• Contacting the w9999 support team via live chat or email and requesting removal from marketing lists.

Withdrawal of marketing consent will be processed within two (2) business days. Please note that w9999 may still send you transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — as these are not marketing communications and are not subject to marketing opt-out controls.

w9999 employs mandatory age verification as part of the account registration and KYC process. Players are required to declare their date of birth during registration and to provide documentary evidence of age — such as a Computerised National Identity Card (CNIC) — when processing their first withdrawal or when prompted by the w9999 KYC team. Accounts where the stated age cannot be verified to meet the 21+ requirement will be suspended immediately pending resolution.

If you have reason to believe that a person under the age of 21 has created a w9999 account or has access to an account registered in another person's name, please contact w9999 support immediately at [email protected]. w9999 takes reports of underage access extremely seriously and will investigate and act on all such reports without delay.

w9999 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in our data processing practices, the services we offer, applicable law, or best practice guidance from data protection authorities. Material changes to this Privacy Policy — that is, changes that meaningfully affect how we collect, use, or share your personal data — will be notified to registered players via:

• A prominent notice displayed on the w9999.site homepage and within the account dashboard for a period of at least 14 days prior to the change taking effect; and
• An email notification to the address registered to your w9999 account, where email communications have not been suppressed.

The effective date stated at the top of this Privacy Policy will be updated each time the policy is revised. The version of this Privacy Policy in effect at the time of any data processing activity governs that activity. Continued use of w9999 following the effective date of a revised Privacy Policy constitutes your acceptance of that revision. If you do not accept the revised policy, you should contact w9999 to close your account.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how w9999 has handled your personal data, you may contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your w9999 Account dashboard. Live chat is the fastest channel for data queries that require a prompt response.
• Email: [email protected] — for formal data subject requests, please use the subject line format "Data Subject Request — [Right Type]". w9999 responds to email queries within 24 hours during standard operating periods.

If you are not satisfied with w9999's response to a data privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to w9999's operations, details of which will be provided upon request by the w9999 support team.