d999 Privacy Policy

This Privacy Policy ("Policy") is issued by d999 ("d999", "we", "us", "our"), the operator of the online casino and sports betting platform located at d999.biz ("Platform" or "Services"). d999 is the data controller in respect of personal data collected from users ("you", "Player", "User") of the Platform.

This Policy applies to all personal data collected through d999.biz, whether submitted during account registration, through use of the cashier, through correspondence with our support team, or automatically through your use of the Platform. Please read this Policy carefully alongside our Terms & Conditions before using the Services.

d999 collects the following categories of personal data:

d999 does not collect special-category personal data (such as racial or ethnic origin, health data, or biometric data) unless specifically required and disclosed for identity verification purposes under applicable anti-money laundering regulations.

d999 collects personal data through the following means:

• Direct submission – when you register an account, complete the cashier, submit KYC documents, or contact our support team;
• Automated collection – through cookies, web beacons and server logs as you interact with d999.biz;
• Third-party payment processors – transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller or crypto payment processors when you make deposits or request withdrawals;
• Identity verification providers – where d999 uses a third-party KYC service to verify the authenticity of documents you submit.

d999 uses your personal data for the following purposes:

• To register and maintain your d999 account;
• To process deposits and withdrawal requests in PKR and verify payment sources;
• To verify your age (18+) and identity in compliance with our responsible gaming and anti-money laundering obligations;
• To settle bets and games, and to maintain an accurate record of your transaction and bet history;
• To detect and prevent fraud, money laundering, collusion and other prohibited activities;
• To send service-related communications (account confirmations, security alerts, policy update notices);
• To send promotional communications where you have consented to receive them (you may withdraw consent at any time by contacting support);
• To improve the Platform, personalise your experience and carry out internal analytics;
• To comply with legal and regulatory requirements applicable to d999's operations.

d999 processes your personal data on the following legal bases:

• Contract performance – processing necessary to provide the Services you have subscribed to, including account management, betting and payments;
• Legitimate interests – fraud prevention, platform security, responsible gaming enforcement and internal analytics, where these interests are not overridden by your fundamental rights;
• Legal obligation – processing required to comply with anti-money laundering regulations, age verification obligations and other applicable legal requirements;
• Consent – for optional marketing communications, where you have expressly opted in.

d999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipient, strictly for the purposes described in this Policy:

• Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20 operators, Skrill and Neteller, for the purpose of processing your financial transactions;
• KYC/AML verification providers – third-party identity verification services used to authenticate documents you submit;
• Game content providers – certified casino game suppliers (e.g. Pragmatic Play, PG Soft, NetEnt, Habanero) who may receive limited session data to operate their games within the d999 environment;
• Legal and regulatory authorities – where d999 is required by law, court order or regulatory direction to disclose personal data;
• Professional advisers – lawyers, auditors and compliance consultants acting under strict confidentiality obligations.

All third parties with whom d999 shares data are contractually required to process that data only for the specified purpose and in compliance with applicable data protection standards.

d999 treats payment data with the highest level of sensitivity. When you make a deposit via JazzCash, Easypaisa or bank transfer, the transaction is routed through the respective payment processor's own secure infrastructure. d999 receives confirmation of the transaction (amount, date, reference) but does not store your full JazzCash PIN, Easypaisa MPIN, bank card numbers or online banking credentials on its servers.

For withdrawals, d999 stores the destination account identifier (e.g. JazzCash number, bank account IBAN, crypto wallet address) in your account profile to facilitate payment. This information is encrypted at rest. You may request an update to your withdrawal details by contacting d999 support and completing the applicable verification steps.

d999.biz uses cookies and similar technologies to operate the Platform and improve your experience. The categories of cookies used are as follows:

• Essential cookies – required for the Platform to function, including session management, login state and security tokens. These cannot be disabled without impairing Platform functionality;
• Analytics cookies – used to understand aggregate usage patterns (pages visited, session duration, device types) for the purpose of improving the Platform. Data is anonymised where possible;
• Preference cookies – store optional settings such as language preference and game lobby filters.

d999 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with unrelated advertising networks. You may manage cookie preferences through your browser settings, though disabling essential cookies will affect Platform functionality.

d999 retains personal data for as long as your account remains active and for such additional period as is required by applicable law or legitimate business need. Specifically:

• Account and transaction data is retained for a minimum of five (5) years from the date of your last transaction, in compliance with anti-money laundering record-keeping requirements;
• KYC documentation is retained for the same minimum five-year period following account closure;
• Support communications are retained for three (3) years from the date of the communication;
• Cookie and analytics data is retained in anonymised aggregate form.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

d999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your browser and d999.biz;
• Encryption at rest for sensitive data stored in d999's databases;
• One-way cryptographic hashing for stored passwords;
• Role-based access controls limiting data access to authorised personnel only;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Session timeout mechanisms to reduce the risk of unauthorised account access.

No method of transmission over the internet or method of electronic storage is 100% secure. While d999 takes all reasonable precautions, we cannot guarantee absolute security. In the event of a data breach that materially affects your rights or freedoms, d999 will notify affected users in a timely manner.

Subject to applicable law, you have the following rights in relation to your personal data held by d999:

• Right of access – to request a copy of the personal data d999 holds about you;
• Right to rectification – to request correction of inaccurate or incomplete personal data;
• Right to erasure – to request deletion of your personal data, subject to d999's legal retention obligations;
• Right to restriction – to request that d999 limits the processing of your data in certain circumstances;
• Right to data portability – to receive your data in a structured, machine-readable format where technically feasible;
• Right to object – to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact d999 support in writing. d999 will respond within a reasonable timeframe. Some requests may require identity verification before they can be actioned.

d999's Services are strictly for adults aged 18 and over. d999 does not knowingly collect personal data from individuals under the age of 18. If you become aware that a minor has registered an account or submitted personal data to d999, please contact support immediately. Upon verification, d999 will close the account and delete the associated personal data.

Players with children in their household are encouraged to implement parental controls on devices used to access d999 and to keep login credentials confidential.

d999 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, d999 will post a prominent notice on d999.biz and update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Services after the effective date of any update constitutes acceptance of the revised Policy.

For any questions, concerns or requests relating to this Privacy Policy or the personal data d999 holds about you, please contact the d999 support team in writing. All privacy-related enquiries are handled by d999's compliance team and will be acknowledged within 48 hours.

Contact: [email protected]

Please do not include your password, PIN or full payment details in any correspondence with d999 support.