999k Privacy Policy — How We Collect, Use and Protect Your Personal Data

1About This Privacy Policy

This Privacy Policy describes how 999k Baji ("999k", "we", "us") collects, uses, shares and protects the personal data of players who use the 999k platform at 999k-baji.com. It applies to all players registered on 999k, regardless of how they access the platform — whether through a web browser on a computer, a mobile browser, or any 999k application.

999k is committed to handling your personal data responsibly, transparently and in compliance with applicable data protection principles. This policy is written to be read and understood by Pakistani players — not just legal teams. If anything in this policy is unclear, please contact us and we will explain it in plain terms.

This policy should be read alongside the 999k Terms and Conditions, which govern your use of the platform as a whole.

2What Personal Data We Collect

999k collects personal data in two broad categories: data you provide directly to us, and data we collect automatically when you use the platform.

Data You Provide Directly

Data Collected Automatically

When you use the 999k platform, we automatically collect certain technical and behavioural data:

• Device information — device type, operating system version, browser type and version, screen resolution.
• IP address — used for security monitoring, fraud detection and geographic compliance checks.
• Session data — pages visited, time spent, features used, buttons clicked.
• Gaming activity — bets placed, games played, stakes, outcomes, session duration. This data is required by our responsible gaming obligations.
• Transaction history — full records of all deposits, withdrawals and bonus credits in your 999k wallet.
• Referral data — if you used or generated a referral link, we record this to calculate Refer a Friend programme commissions.

3How We Collect Your Data

999k collects personal data through the following channels:

• Direct input — forms you complete on the 999k platform, including registration, deposit, withdrawal and support forms.
• Automated technical collection — server logs, cookies, browser APIs and mobile device identifiers that record how you interact with the platform.
• Payment providers — when you deposit or withdraw via Easypaisa, JazzCash, NayaPay or other payment methods, those providers share transaction confirmation data with 999k to verify your payment.
• Identity verification services — when you submit your CNIC for verification, our third-party verification partner processes and confirms your identity against official Pakistani identity records.
• Referral tracking — if you arrived at 999k via a referral link, we record the referral source to process Refer a Friend programme commissions.

4How and Why We Use Your Data

999k uses the personal data we collect for the following specific purposes. We only use data for purposes you would reasonably expect given how it was collected.

Account Management and Service Delivery

We use your registration data to create and maintain your 999k account, process your deposits and withdrawals in PKR, verify your identity before first withdrawals, provide access to games and betting markets, and maintain accurate records of your gaming activity and financial transactions. This is the core reason your data exists in our systems.

Security and Fraud Prevention

999k uses technical and behavioural data — including IP addresses, device fingerprints and transaction patterns — to detect and prevent unauthorised account access, payment fraud, bonus abuse, money laundering and other prohibited activities. This monitoring is continuous and is one of the ways 999k protects your account from being accessed or exploited without your knowledge.

Responsible Gaming Monitoring

We are required by our responsible gaming commitments to monitor player activity for indicators of problem gambling. This means we analyse patterns in your gaming activity — frequency, session duration, stake sizes, loss patterns — and may proactively contact you if patterns suggest you may benefit from responsible gaming tools or support. This use of your data is protective in nature and is a condition of us operating the platform responsibly.

Legal and Regulatory Compliance

999k is required to maintain records of player identity, financial transactions and gaming activity to comply with applicable anti-money laundering (AML) obligations and other legal requirements. These records are retained for the periods specified in Section 8 of this policy.

Customer Support

When you contact 999k support, we use the information you provide — along with your account history — to investigate and resolve your query. Support interactions are recorded for quality assurance purposes and to maintain an accurate record of any agreements or commitments made during the interaction.

Platform Improvement

Anonymised and aggregated data about how players use the 999k platform is used to identify areas for improvement — pages that are confusing, features that are underused, and aspects of the user experience that generate support queries. This analysis uses data at an aggregate level and does not involve identifying individual players.

5Legal Basis for Processing Your Data

999k processes personal data on one of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to provide the services you have requested. This covers account creation, transaction processing and all core platform functions.
• Legal obligation — processing required to comply with applicable laws, including AML regulations, identity verification requirements and record-keeping obligations.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring and service improvement, where our interests do not override your privacy rights.
• Consent — processing for optional activities such as marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time.

6Who We Share Your Data With

999k shares personal data only with the third parties listed below, and only to the extent necessary for the specified purpose. We do not share data with any third party for their own marketing purposes.

Payment Processors

To process your PKR deposits and withdrawals, 999k shares necessary payment data with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT transfers) or your card issuer. The data shared is limited to what is required to execute and verify the transaction. Each payment provider operates under its own privacy policy.

Identity Verification Services

For first-time withdrawal verification, 999k uses a third-party KYC (Know Your Customer) service to verify your CNIC or NICOP against official Pakistani identity records. Your identity documents are processed by this service under strict data handling agreements and are not retained beyond the verification period.

Technology and Infrastructure Providers

999k uses third-party providers for hosting, content delivery, database management and cybersecurity monitoring. These providers have access to certain data as part of providing infrastructure services and are bound by data processing agreements that limit their use of the data to service provision only.

Law Enforcement and Regulatory Authorities

999k will disclose personal data to law enforcement, regulatory authorities or courts where required by law or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of players, or comply with a legal process. We will inform affected players where legally permitted to do so.

7Cookies and Tracking Technologies

999k uses cookies and similar tracking technologies on our platform. A cookie is a small text file stored on your device by your browser when you visit a website. Here is a plain explanation of how we use them.

Essential Cookies

These cookies are required for the platform to function. Without them, you cannot log in, maintain a session while browsing, or use basic platform features. These cannot be disabled while using 999k.

Functional Cookies

These cookies remember your settings and preferences — such as your chosen language or stake defaults — so you do not have to reset them every time you visit. They improve your experience but are not strictly required.

Analytics Cookies

999k uses anonymised analytics tools to understand how players use the platform — which pages are visited most, where players encounter difficulties, and how features are used. This data is aggregated and does not identify individual players.

You can control cookie settings through your browser's privacy settings. Blocking essential cookies will prevent you from using the platform. For functional and analytics cookies, you can opt out through your account preferences.

8How Long We Keep Your Data

999k retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following retention periods apply:

After the applicable retention period, data is securely deleted or irreversibly anonymised. You may request earlier deletion of certain data by contacting 999k support — please refer to Section 9 for your deletion rights and the exceptions that apply.

9Your Data Rights

As a 999k player, you have the following rights over your personal data. These rights are genuine — not performance. Submit a request to 999k support and we will respond within a reasonable timeframe, typically within 14 days.

10How We Protect Your Account

Beyond encryption of data in transit, 999k implements the following technical and organisational security measures to protect your account and personal data:

• Encryption at rest — sensitive data stored in 999k's databases, including payment account details and identity documents, is encrypted at rest using AES-256 encryption.
• Two-factor authentication (2FA) — available to all players and strongly recommended. When enabled, login requires both your password and a one-time code sent to your registered mobile number.
• Anomaly detection — automated systems monitor for unusual account activity, including login attempts from unfamiliar devices or locations, and will temporarily restrict access pending your confirmation where suspicious activity is detected.
• Access controls — 999k staff access to player personal data is strictly limited on a need-to-know basis. Support agents can access only what is necessary to resolve your query.
• Regular security reviews — 999k's platform and infrastructure undergo regular security reviews to identify and address vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. You also have a responsibility to keep your account credentials secure — see the security guidance in the 999k Terms and Conditions.

11Children's Privacy

999k is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the registration process, and identity verification for withdrawals provides an additional layer of age confirmation.

If 999k discovers that a player under 18 has registered an account, that account will be immediately closed, all balances will be forfeited, and any personal data associated with the underage account will be deleted as soon as legally permissible. If you believe a minor has accessed 999k using your account or has created their own account, please contact us immediately at support@999k-baji.com.

12Marketing Communications

999k may contact you about promotions, bonuses, new games and other offers relevant to your use of the platform. Marketing communications are sent only with your consent, which you can provide or withdraw at any time.

How to Manage Marketing Preferences

You can manage your marketing preferences in two ways:

• From your 999k account settings under "Notifications and Marketing" — toggle individual communication types on or off.
• By contacting 999k support at support@999k-baji.com with a request to update your marketing preferences.

Please note that withdrawing marketing consent does not affect essential account communications — 999k will still send you transaction confirmations, security alerts and support responses regardless of your marketing preferences. These are service communications, not marketing, and cannot be opted out of while your account is active.

13Changes to This Privacy Policy

999k reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in applicable law, or feedback from players. The date of the last update is shown at the top of this page.

Material changes — meaning changes that meaningfully affect how your data is used or your privacy rights — will be communicated to you by notification within the 999k platform and, where possible, by message to your registered contact. We will give you at least seven days' notice before material changes take effect.

Minor or clarificatory changes that do not affect your rights may take effect immediately. Continued use of the 999k platform after any change to this policy constitutes acceptance of the updated version. If you do not agree with a change, please contact us to discuss your concerns or request account closure.

14How to Contact Us About Privacy

For any questions, concerns or requests relating to this Privacy Policy or how 999k handles your personal data, please contact us through the following channels:

• Email: support@999k-baji.com — use the subject line "Privacy Query" or "Data Rights Request" as appropriate.
• Live chat: Available 24/7 through the 999k platform. For privacy queries, ask to be connected to a senior support agent.

We aim to respond to all privacy queries within 48 hours and to fulfil data rights requests within 14 days. If your query is complex or requires investigation, we will acknowledge it promptly and keep you updated on progress.

999k takes privacy complaints seriously. If you feel your query has not been resolved satisfactorily, please escalate it through our formal complaints process, details of which are available in the Terms and Conditions.