d9999 Privacy Policy
— How We Protect Your Data

1Data Controller Information

For the purposes of this Privacy Policy, d9999 — operating the online casino and sports betting platform accessible at d9999.cam — is the data controller responsible for the personal data of all registered and unregistered users who interact with the d9999 platform.

d9999 determines the purposes and means of processing personal data collected through the platform and is accountable for ensuring that such processing complies with applicable data protection obligations. Any queries regarding data processing at d9999 should be directed to our Data Protection contact as set out in Section 15 of this Policy.

2Personal Data We Collect

d9999 collects the following categories of personal data from players and platform users:

d9999 does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where government-issued identity documents provided during KYC verification incidentally contain such information — in which case that data is used solely for the purpose of identity verification and is not processed for any other purpose.

3How We Collect Your Data

d9999 collects personal data through the following means:

• Direct submission by you: When you register a d9999 account, complete KYC verification, make a deposit or withdrawal, contact d9999 support, or respond to a d9999 survey or communication.
• Automated technical collection: When you visit d9999.cam or use the d9999 platform, technical data such as your IP address, device information, and session data is automatically collected via server logs, cookies, and similar tracking technologies. Please see Section 8 for full details of d9999's cookie use.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processing partners share transaction confirmation data with d9999 to facilitate crediting or debiting your account Balance.
• Identity verification providers: Where d9999 uses third-party KYC verification services to cross-reference identity documents submitted by players, those providers may return data to d9999 confirming or flagging the outcome of the verification check.
• Regulatory and law enforcement sources: In limited circumstances required by law, d9999 may receive personal data about players from regulatory authorities, fraud prevention agencies, or law enforcement bodies for compliance and legal obligation purposes.

4How d9999 Uses Your Personal Data

d9999 uses the personal data it collects for the following purposes:

• Account creation and management: To register your d9999 account, verify your identity and age (21+ requirement), manage your account settings, and process your d9999 Login and security credentials.
• Financial transaction processing: To process PKR deposits via JazzCash, EasyPaisa, and Pakistani bank accounts, and to process withdrawal requests to your registered payment method.
• Game provision and personalisation: To provide access to d9999's casino games — including slots, live casino, Plinko, and Blackjack — and sports betting markets, and to personalise your platform experience based on your gaming history and preferences.
• Customer support: To respond to your enquiries, resolve disputes, handle complaints, and provide general support through d9999's live chat and email channels.
• Responsible gaming compliance: To monitor gaming patterns for indicators of problem gambling, apply responsible gaming tools you have activated, and — where required — proactively apply protective measures to accounts where harm indicators are detected.
• Regulatory compliance and AML: To fulfil d9999's obligations under applicable anti-money laundering regulations, Know Your Customer requirements, and licensing conditions — including transaction monitoring, source of funds verification, and mandatory reporting.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, account takeovers, and other security threats to the d9999 platform and its player community.
• Platform improvement: To analyse aggregated, anonymised usage data to improve d9999's platform performance, game selection, user experience, and responsible gaming tools.
• Direct communications: To send you account-related notifications — including deposit confirmations, withdrawal updates, bonus activations, and responsible gaming alerts — to your registered Pakistani mobile number or email address.

5Legal Basis for Data Processing

d9999 processes personal data under the following legal bases, each applicable to the specific purposes outlined in Section 4:

• Contractual necessity: Processing required to fulfil d9999's contractual obligations to you as a registered player — including account management, payment processing, game provision, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements — including AML obligations, KYC verification requirements, and mandatory regulatory reporting to our licensing authority.
• Legitimate interests: Processing conducted in pursuit of d9999's legitimate interests in platform security, fraud prevention, responsible gaming compliance, and service improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where d9999 processes personal data for direct marketing communications beyond those strictly necessary for account operation — such as promotional newsletters or personalised bonus offers — such processing is conducted on the basis of your explicit, freely given consent, which you may withdraw at any time from within your d9999 account settings.

6Data Sharing & Third Parties

d9999 does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your PKR deposits and withdrawals. Each payment partner operates under their own privacy policy and data security standards.
• KYC and identity verification providers: Third-party identity verification services that process your submitted CNIC or passport data for the purpose of confirming your identity and age in compliance with d9999's KYC obligations.
• Game content providers: d9999's licensed game studios and live casino operators may receive your player identifier and relevant gaming session data necessary to provide their games through the d9999 platform.
• IT and infrastructure providers: Cloud hosting, server infrastructure, and platform maintenance providers who process data on d9999's behalf under strict data processing agreements that prohibit any use of that data for their own purposes.
• Regulatory and law enforcement authorities: d9999 is legally obligated to disclose certain player data to regulatory authorities, financial intelligence units, and law enforcement bodies upon receipt of a valid legal request or where such disclosure is mandated by our licensing obligations.
• Fraud prevention and AML agencies: Industry fraud prevention databases and AML screening providers that d9999 uses to identify and prevent fraudulent accounts, money laundering, and prohibited financial activity on the platform.

All third parties with whom d9999 shares personal data are required — by contractual obligation — to maintain appropriate technical and organisational security measures and to process that data solely for the purposes for which it was shared.

7Payment Data & Financial Privacy

d9999 handles all payment-related personal data with the highest level of care, given its sensitivity. The following specific protections apply to financial data processed through the d9999 platform:

• d9999 does not store your full JazzCash PIN, EasyPaisa PIN, or internet banking passwords at any point. Payment authentication is conducted directly through the relevant payment provider's own secure interface.
• All financial transaction data processed by d9999 — including deposit amounts, withdrawal amounts, and PKR transaction history — is encrypted at rest and access is restricted to d9999 finance and compliance personnel with a documented business need.
• d9999 retains financial transaction records for the period required by applicable AML and regulatory record-keeping obligations, which typically extends to five years from the date of the relevant transaction.
• Payment method details — such as your registered JazzCash or EasyPaisa mobile number — are retained for the duration of your active d9999 account and for the legally required period following account closure.

8Cookies & Tracking Technologies

d9999 uses cookies and similar tracking technologies on d9999.cam to provide platform functionality, maintain your login session, analyse platform usage, and ensure security. The following categories of cookies are used:

• Essential cookies: Required for the d9999 platform to function correctly — including maintaining your d9999 Login session, preserving your account settings, and enabling secure payment flows. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your platform preferences — such as your selected game lobby filters, responsible gaming settings, and notification preferences — to personalise your d9999 experience across sessions.
• Analytics cookies: Used to collect anonymised, aggregated data about how players navigate the d9999 platform — including which games are most accessed, session duration, and error occurrence rates — to inform platform improvement decisions. No individual player is identified in analytics reports.
• Security cookies: Used to detect and prevent fraudulent login attempts, account takeover attempts, and bot activity on the d9999 platform. These cookies are essential to platform security and cannot be disabled.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of specific d9999 platform features. d9999 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving advertising on external platforms.

9Data Retention

d9999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply to the principal categories of personal data processed by d9999:

• Account and identity data: Retained for the duration of your active d9999 account and for a period of five years following account closure, in accordance with AML regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable anti-money laundering legislation.
• Gaming history data: Retained for the duration of your active account and for two years following account closure, for dispute resolution and responsible gaming audit purposes.
• Customer support communications: Retained for a period of two years from the date of the most recent communication in any support thread, for dispute resolution and service quality purposes.
• Technical and analytics data: Anonymised analytics data is retained indefinitely in aggregated form. Identifiable technical data (such as IP logs) is retained for a maximum of 12 months from collection.
• Self-exclusion records: Where a player has requested self-exclusion from d9999, records of that exclusion are retained indefinitely to prevent re-registration during the exclusion period, even following account closure.

Upon the expiry of applicable retention periods, d9999 securely deletes or irreversibly anonymises all personal data that is no longer required to be retained.

10Security Measures

d9999 implements the following technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and d9999's servers — visible as the HTTPS padlock in your browser address bar when you access d9999.cam.
• AES-256 encryption at rest applied to all personal and financial data stored within d9999's database infrastructure.
• Role-based access controls restricting employee access to personal data to those with a documented operational need, with all access logged and subject to periodic audit.
• Two-factor authentication available to players for their d9999 Login and mandatory for d9999 staff accessing systems that contain personal data.
• Regular security penetration testing conducted by independent third-party security specialists to identify and remediate vulnerabilities in d9999's platform infrastructure.
• Incident response procedures requiring prompt investigation of any suspected data security breach, with player notification and regulatory reporting conducted within the timeframes required by applicable data protection law where a notifiable breach is confirmed.

While d9999 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own d9999 Login credentials and for using secure network connections when accessing the platform — particularly when making deposits or withdrawals. We recommend using personal mobile data (Jazz, Telenor, Zong, or Ufone) rather than public Wi-Fi for all financial transactions on d9999.

11Your Data Protection Rights

As a player using the d9999 platform, you have the following rights in respect of your personal data. You may exercise any of these rights by contacting d9999 via the channels set out in Section 15:

12Children's Privacy

The d9999 platform is strictly intended for adults aged 21 years and above. d9999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of d9999's account registration process, and accounts found to belong to underage individuals are closed immediately upon discovery.

If you are a parent or guardian and believe that a minor in your care has registered a d9999 account or provided personal data to d9999 without appropriate authorisation, please contact d9999 immediately at the contact details provided in Section 15. d9999 will promptly investigate, close the account, and delete all personal data associated with it where the account holder is confirmed to be underage.

13International Data Transfers

d9999's platform infrastructure and some of its third-party service providers — including game content providers, KYC verification services, and cloud infrastructure partners — may process personal data in jurisdictions outside of Pakistan. Where such international transfers occur, d9999 ensures that appropriate data transfer safeguards are in place, including:

• Contractual data processing agreements with all third-party recipients that impose data protection obligations equivalent to those observed by d9999.
• Transfer of data only to jurisdictions and service providers that maintain data security standards appropriate to the sensitivity of the data being transferred.
• Where technically feasible, pseudonymisation or anonymisation of data prior to international transfer to minimise privacy risk.

By registering a d9999 account and using the platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Pakistan in accordance with the purposes and safeguards described in this Privacy Policy.

14Changes to This Privacy Policy

d9999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform functionality. Material changes — those that significantly affect how we collect or use your personal data — will be communicated to registered players via the email address or mobile number registered to their d9999 account at least 14 days before the changes take effect.

Minor updates — such as corrections of typographical errors or clarifications that do not change the substance of d9999's data processing — may be published immediately without advance notification. The current version of this Privacy Policy is always available at d9999.cam/privacy-policy and is identified by the version number and effective date displayed at the top of the document.

Your continued use of the d9999 platform following the effective date of any Privacy Policy update constitutes your acceptance of the revised Policy. If you do not accept material changes to this Privacy Policy, you must cease using d9999 and may request account closure in accordance with the Terms and Conditions.

15Contact & Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to report a privacy concern regarding d9999's data practices, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, directly inside your d9999 account dashboard. Live chat is the fastest way to reach d9999 for account-specific queries, including data subject access requests.
• Email: [email protected] — for formal written data protection enquiries, data subject access requests, erasure requests, and privacy-related complaints. Please allow up to 30 days for a full written response to data subject rights requests, in accordance with applicable data protection standards.

When submitting a data subject rights request to d9999, please include your registered d9999 Account username and the Pakistani mobile number associated with your account to enable identity verification. d9999 cannot process data subject rights requests without first confirming the identity of the requesting party to prevent unauthorised disclosure of personal data.