po999 Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy applies to po999, the online gaming and sports betting platform operated at po999.biz and made available to players in Pakistan. When this policy uses "po999", "we", "us" or "our", it refers to the operating entity responsible for the po999 platform and the personal data collected through it.

This policy covers all personal data collected when you visit po999.biz, register an account, deposit funds, place bets, use live casino or crash game products, contact customer support or receive communications from po999. It applies regardless of whether you access po999 via a desktop browser or a mobile device.

This policy should be read alongside the po999 Terms and Conditions, which govern the use of the platform as a whole. By registering and using po999, you confirm that you have read and understood this Privacy Policy and the Terms and Conditions.

Po999 collects personal data through three main channels: information you provide directly when registering or using the service, data generated automatically through your use of the platform, and limited data received from third-party service providers such as payment processors.

Po999 does not collect sensitive data beyond what is strictly necessary for identity verification and responsible gaming monitoring. We do not collect biometric data, political opinions, religious beliefs or health information.

Every use of your personal data by po999 has a specific, documented purpose. We do not process your data for vague or undeclared reasons. The principal uses are as follows:

• Account Operation: Creating and maintaining your po999 player account, processing your login, managing your wallet balance and enabling you to place bets and access games.
• Identity Verification and KYC: Verifying your identity, age and payment account ownership to comply with anti-money laundering obligations and our gaming licence conditions. This is a legal requirement, not optional.
• Payment Processing: Processing deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card payments, and processing withdrawals to your registered payment accounts, all in PKR.
• Fraud and Security: Detecting and preventing fraud, account sharing, bonus abuse, money laundering and other prohibited activities. This includes automated pattern analysis of gaming and financial behaviour.
• Responsible Gaming Monitoring: Monitoring gaming patterns to identify signs of problem gambling, applying deposit limits and self-exclusion requests, and fulfilling our duty of care under responsible gaming obligations.
• Customer Support: Responding to your queries, resolving disputes and communicating with you about your account, transactions and gaming activity on po999.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the po999 platform, identify technical issues and optimise the user experience for Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications and platform updates to players who have consented to receive marketing. See Section 11 for details and opt-out instructions.
• Legal and Regulatory Compliance: Meeting our obligations under applicable law and our gaming licence, including regulatory reporting and cooperation with law enforcement requests.

Po999 processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract Performance: Processing necessary to provide the services described in the po999 Terms and Conditions — account creation, payment processing, game access and customer support.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, licensing requirements, age verification obligations and responses to lawful law enforcement requests.
• Legitimate Interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring and internal analytics that improves the player experience. We always balance these interests against your privacy rights and will not rely on this basis where our interests are overridden by yours.
• Consent: Where we rely on consent — specifically for marketing communications — we will obtain that consent clearly and separately at the time of registration. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

For any specific processing activity where you are unsure of the legal basis, you may request clarification by emailing support@po999.biz.

Po999 does not sell your personal data to anyone. We share data only with specific, identified categories of third party where it is necessary to operate the service or meet legal obligations:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card networks receive the minimum data necessary to process your specific transaction. Payment processors operate under their own privacy policies and are contractually bound to handle your data securely.
• Game Providers: Live casino and crash game providers — such as Evolution Gaming and Spribe — receive your session data (player ID, stake, result) to operate the game. They do not receive your full identity data beyond what is technically necessary to initialise a game session.
• Identity Verification Providers: Third-party KYC verification services receive your identity documents to perform age and identity checks. These providers are certified for this purpose and operate under strict data protection agreements with po999.
• Regulatory and Law Enforcement Authorities: Po999 is required by its gaming licence to cooperate with regulatory investigations and to report certain types of suspicious financial activity. We will provide data to authorities when legally compelled to do so and, where permitted, will notify you of such disclosure.
• IT and Infrastructure Providers: Cloud hosting, cybersecurity and analytics providers may process data on po999's behalf as data processors. They are contractually prohibited from using your data for any purpose other than providing the specific service to po999.

Payment security is a priority concern for po999 given that Pakistani players conduct real-money transactions through their accounts. The following specific measures apply to financial data:

• Po999 does not store full bank card numbers at any point. Card transactions are processed through a certified payment gateway; po999 retains only the last four digits of a card and the expiry month/year for display purposes in the Cashier.
• Easypaisa and JazzCash account numbers are stored in encrypted form in po999's database. They are never displayed in full on screen after initial registration — only a masked version is shown.
• All withdrawal requests on po999 must be directed to an account registered in your own name that matches your verified po999 identity. This prevents fraudulent withdrawals even if an account is compromised.
• Po999 uses transaction monitoring to flag unusual payment patterns — for example, a withdrawal request from a new device immediately after a large deposit. Such transactions may be subject to additional verification before processing. This is a protection measure, not an inconvenience.
• Po999's payment infrastructure is subject to regular security audits by independent third parties. Audit findings are acted upon on a prioritised basis and material security issues are treated as emergency remediation tasks.

If you believe your po999 account has been compromised or that unauthorised transactions have occurred, contact po999 support immediately via live chat or at support@po999.biz. Your account can be locked within minutes of a confirmed security concern being raised.

Po999 uses cookies and similar technologies on po999.biz to operate core platform functions, maintain your logged-in session and understand how the platform is being used. The following categories of cookies are used:

Po999 does not use third-party advertising cookies or cross-site tracking technologies. The analytics data collected is used solely to improve the po999 platform for Pakistani players and is not shared with advertising networks.

You can manage your cookie preferences through the po999 cookie settings panel accessible from the footer of any page on po999.biz. Disabling analytics or marketing cookies does not affect your ability to use the core po999 platform.

Po999 recognises and respects your rights over your personal data. The following rights are available to all registered po999 players:

Po999 retains personal data only for as long as it is genuinely needed. The following retention periods apply:

• Active account data (identity, contact, gaming history): Retained for the duration of your account's active status plus seven years after closure to meet anti-money laundering and tax record-keeping requirements.
• KYC verification documents (CNIC scans, selfie images): Retained for five years from the date of verification or account closure, whichever is later.
• Transaction records (deposits, withdrawals, bet history): Retained for seven years from the date of each transaction in accordance with financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the last communication to allow for dispute resolution and service improvement analysis.
• Technical and analytics data (IP addresses, session logs): Retained for twelve months from collection, after which they are deleted or fully anonymised.
• Marketing consent records: Retained for as long as your consent remains valid, plus three years after withdrawal of consent as a record of the consent state at the relevant time.

At the end of the applicable retention period, data is securely deleted using industry-standard deletion procedures. Where data cannot be fully deleted (for example, in certain backup scenarios), it is anonymised so that it can no longer be linked to you as an individual.

Po999 is an adults-only gaming platform. We do not knowingly collect personal data from persons under the age of 18. The po999 registration process includes an age declaration and all accounts are subject to age verification before withdrawals are permitted.

If po999 discovers that an account has been created by a person under 18, or that personal data has been collected from a minor in any other way, the following steps will be taken immediately: the account will be suspended and closed, all balance — including any winnings — will be forfeited, and all personal data associated with the account will be deleted as quickly as is consistent with our legal obligations.

If you are a parent or guardian and believe your child may have registered a po999 account, please contact us immediately at support@po999.biz. We treat reports of underage accounts as priority cases and will investigate and respond within 24 hours.

Po999 may send you promotional communications — including bonus offers, seasonal promotions, new game announcements and platform updates — via SMS to your registered mobile number and email to your registered address. These communications are only sent to players who have explicitly opted in to receive them during registration or subsequently through account settings.

You can withdraw your marketing consent at any time by:

• Logging into your po999 account and updating your communication preferences in the account settings;
• Clicking the unsubscribe link included in any po999 marketing email; or
• Contacting support at support@po999.biz with the subject line "Unsubscribe".

Withdrawal of marketing consent will be acted on within 48 hours. You may continue to receive non-marketing service communications — for example, account security alerts, deposit confirmations and important policy updates — regardless of your marketing consent status. These service communications are necessary for the operation of your account and cannot be opted out of while your account is active.

Po999 maintains a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and po999's servers. This protects your data from interception during transmission.
• Encrypted database storage for all sensitive personal data, including identity documents, payment account details and authentication credentials.
• Two-factor authentication (2FA) available on all po999 player accounts. We strongly recommend enabling 2FA via your account security settings.
• Intrusion detection systems that monitor po999's infrastructure for unauthorised access attempts and trigger automated protective responses.
• Regular penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Staff access controls ensuring that po999 employees and contractors can only access the specific player data necessary for their role. Access to sensitive data is logged and audited.
• Incident response procedures that define how po999 will respond to a data breach — including notification obligations if a breach affects player data in a manner likely to cause harm.

Despite these measures, no internet-based platform can guarantee absolute security. If you have reason to believe your po999 account security has been compromised, please contact support immediately so we can lock the account and investigate.

Po999.biz may contain links to third-party websites or integrate third-party services — for example, live game providers whose content is embedded within the platform. This Privacy Policy applies only to po999 and does not cover how third-party sites or services handle your personal data.

When you interact with embedded third-party game content on po999, that game provider may receive technical data (session ID, stake, outcome) as necessary to operate the game. The game provider's own privacy policy governs their use of that data. Po999 selects game providers who meet our minimum data protection standards and who are contractually prohibited from using game session data for purposes other than operating the game.

Po999 is not responsible for the privacy practices of any third-party website or service that you access by following a link from po999.biz. We encourage you to review the privacy policies of any third-party service you use.

Po999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or the services we offer. The updated date shown at the top of this page indicates when the policy was last revised.

When material changes are made to this policy — for example, changes that affect how your data is shared or how long it is retained — po999 will notify registered players via email or SMS at least 14 days before the changes take effect. Minor clarifications or corrections that do not alter your rights or po999's core data practices may be published without advance notice.

If you do not accept the revised policy, you should stop using po999 and contact support to close your account. Continued use of po999 after the effective date of a revised policy constitutes acceptance of the revised terms.

If you have any questions, concerns or requests relating to this Privacy Policy or to po999's handling of your personal data, please contact us through the following channels:

• Email (preferred for data rights requests): support@po999.biz — use subject line "Privacy Query" or "Data Rights Request" so it is routed correctly
• Live Chat: Available 24/7 from any page on po999.biz — suitable for general privacy questions
• FAQ: po999.biz/faq for quick answers to common privacy questions

Po999 aims to acknowledge all privacy-related communications within 72 hours and to resolve them within 30 days. Where a request is complex or involves a large volume of data, we may extend the response period and will notify you of the extension and the reason for it.

If you are not satisfied with po999's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection or gaming regulatory authority in the jurisdiction of po999's operating licence. Details of the relevant authority are available on request from support@po999.biz.