999cx Privacy Policy

1. Overview

This Privacy Policy applies to all users of the 999cx platform, including the website at 999cx.app and the 999cx mobile app. It explains the practices of 999cx regarding the collection, use, storage and protection of personal data provided by users or collected automatically during use of the platform.

By registering an account on 999cx, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described. This policy should be read alongside the Terms and Conditions.

999cx is committed to handling your personal information with care and transparency. We collect what we need, use it only for the purposes described, and do not share it with parties outside those necessary to run the platform.

2. Data We Collect

The data 999cx collects falls into three main categories: information you provide directly, information collected automatically during platform use, and information obtained from third-party verification services.

Information you provide directly:

• Full legal name (as it appears on your identity documents)
• Date of birth
• Email address and mobile number
• Account username and password (stored in encrypted form)
• Identity verification documents (national ID, passport or other accepted documents)
• Payment account details — JazzCash number, Easypaisa number, Raast ID, bank account details — registered in your name
• Communications you send to our support team

Information collected automatically:

• Device type, operating system and browser version
• IP address and approximate location at the time of login
• Session timestamps and session duration
• Pages and game sections visited within the platform
• Game activity, wager history, deposit and withdrawal transaction records
• Bonus usage and promotional activity
• App usage analytics (if using the 999cx mobile app)

Information from third parties:

• Identity verification results from our KYC (Know Your Customer) provider
• Payment status confirmations from JazzCash, Easypaisa, Raast and bank transfer processors
• Fraud and risk signals from payment security partners

Data Type	Source	Purpose
Name, DOB, identity documents	You (at registration/verification)	Age verification, identity confirmation, withdrawal processing
Email, mobile number	You (at registration)	Account communications, security alerts, support
Payment account details	You (at deposit/withdrawal setup)	Processing PKR deposits and withdrawals
Device and IP data	Automatically collected	Security, fraud prevention, multi-account detection
Game and transaction history	Automatically collected	Account management, VIP tier calculation, dispute resolution
KYC verification result	Third-party KYC provider	Confirming identity and age compliance

3. How We Use Your Data

999cx uses your personal data only for the purposes for which it was collected. We do not use your data for purposes that would be unexpected or that you have not been informed about. The primary uses are as follows:

• Account creation and management: Your name, email and contact details are used to set up and maintain your 999cx account and to communicate with you about it.
• Identity and age verification: We are required to verify that all players are aged 18 or above. Your identity documents and date of birth are used solely for this purpose.
• Payment processing: Your payment account details are used to process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast and bank transfer. The name-matching requirement between your 999cx account and your payment account is a security and anti-fraud measure.
• Platform security and fraud prevention: Device data, IP addresses and login history are analysed to detect suspicious activity, prevent multi-accounting, and protect your account from unauthorised access.
• Customer support: When you contact support, your account information and communication history are used to resolve your query efficiently.
• VIP programme management: Game activity data is used to calculate your VIP tier and associated benefits.
• Promotional communications: If you have opted in, we may send you information about bonuses, promotions and platform updates. You can opt out at any time through your account settings or by contacting support.
• Legal and compliance obligations: Certain data must be retained to comply with applicable legal, financial and record-keeping requirements. This retention occurs regardless of your preferences in some cases.

4. Payment Data and Financial Records

Given that 999cx processes real-money transactions in PKR, financial data is handled with a particularly high standard of care. All payment-related data — including JazzCash numbers, Easypaisa numbers, Raast IDs and bank account details — is stored in encrypted form and is accessible only to authorised personnel and systems involved in payment processing.

Full payment account numbers are never displayed in plain text within the platform interface. Where account details are shown, they are masked (for example, only the last four digits of a bank account number are visible).

Transaction records — including deposit amounts, withdrawal amounts, dates and payment method used — are maintained for a minimum period required by applicable financial record-keeping practices. These records are used for dispute resolution, account audits and security investigations.

999cx does not store full card numbers. Card payments are processed through a PCI-DSS-compliant payment gateway and card data is handled entirely by that gateway, not retained on 999cx systems.

5. Sharing Data with Third Parties

999cx shares personal data only where it is necessary to operate the platform and only with parties that are bound by appropriate data protection obligations. We do not share data with third parties for their own marketing purposes.

The categories of third parties with whom data may be shared are:

• Payment processors: JazzCash, Easypaisa, Raast-connected banks and other payment infrastructure partners receive the minimum data necessary to process your PKR transactions — typically your registered name and account number.
• Identity verification providers: Our KYC provider receives your identity documents and personal details to perform age and identity checks. They are contracted to use this data only for verification purposes.
• Fraud prevention and security partners: Certain automated security and anti-fraud tools process device and behavioural signals to detect suspicious activity. These providers do not receive more data than is needed for their specific function.
• Platform technology providers: Software infrastructure, hosting and analytics partners that power the 999cx platform may process certain technical and usage data as part of providing their services to us.
• Legal authorities: Where required by applicable law or a valid legal process, 999cx may be obligated to disclose certain data to regulatory or law enforcement authorities. We will not voluntarily disclose data beyond what is legally required.

Any third party that processes data on 999cx's behalf is required to maintain confidentiality, implement appropriate security measures and use the data only for the purpose for which it was shared.

6. Cookies and Tracking Technologies

999cx uses cookies and similar technologies on the website and app to make the platform function correctly and to understand how users interact with it. Cookies are small text files stored on your device. They do not contain executable code and cannot access other data on your device.

The types of cookies used on 999cx include:

• Essential cookies: Required for the platform to function. These handle session management, login state and security tokens. They cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, recently played games and display options to improve your experience.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which pages are visited, how long sessions last, and where users drop off. This data helps us improve the platform. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic and unauthorised login attempts.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the platform. Disabling functional or analytics cookies will not prevent you from playing but may reduce personalisation features.

7. Data Security

Protecting your personal information is a core responsibility we take seriously. 999cx implements a range of technical and operational security measures to safeguard user data against unauthorised access, loss, misuse or disclosure.

Key security measures in place include:

• All data transmitted between your device and 999cx servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored as salted cryptographic hashes — never in plain text — so even internal staff cannot view your password.
• Payment account details and sensitive personal data are encrypted at rest in the database.
• Access to user data within the 999cx organisation is restricted on a need-to-know basis. Support staff, for example, can see only the data necessary to resolve your query.
• Login activity is monitored for anomalies such as logins from new devices, unusual locations or multiple failed password attempts, with automatic security alerts triggered where appropriate.
• Regular internal security reviews are conducted to identify and address vulnerabilities.

Despite these measures, no system connected to the internet can be guaranteed completely secure. In the event of a data breach that poses a significant risk to users, 999cx will notify affected users promptly and take immediate steps to contain and investigate the incident.

You also play an important role in keeping your account secure. Use a strong, unique password for your 999cx account, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been compromised.

8. Data Retention

999cx retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and financial record-keeping obligations.

In practical terms this means:

• Active accounts: All data associated with an active account is retained for as long as the account remains open and active on the platform.
• Closed accounts: When an account is voluntarily closed, personal and transactional data is retained for a minimum period after closure to satisfy financial record-keeping requirements, handle any outstanding disputes and meet legal obligations. After this period, data is deleted or anonymised.
• Suspended or terminated accounts: Where an account is closed due to a breach of the Terms and Conditions, relevant data may be retained for a longer period to support fraud investigations and prevent re-registration.
• Identity verification documents: Copies of ID documents submitted for KYC verification are retained for the period required by applicable financial compliance standards, after which they are securely deleted.
• Support communications: Records of support interactions are retained for a reasonable period to maintain context for ongoing or follow-up queries and for quality assurance purposes.

9. Your Rights Over Your Data

As a registered user of 999cx you have the following rights regarding your personal data:

• Right to access: You can request a copy of the personal data 999cx holds about you. We will provide this within a reasonable timeframe.
• Right to correction: If any of your personal data is inaccurate or incomplete, you can request that it be corrected. Some corrections — such as name changes — may require supporting documentation.
• Right to deletion: You can request that your personal data be deleted. We will action this request subject to our legal obligations to retain certain records. Where deletion is not possible for the full dataset, we will delete or anonymise as much as we are permitted to.
• Right to withdraw consent: Where processing is based on your consent (such as receiving promotional communications), you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to restrict processing: In certain circumstances you can request that we limit how we use your data while a dispute or query is being resolved.
• Right to data portability: You can request your data in a structured, commonly used format where technically feasible.

To exercise any of these rights, contact the 999cx support team via live chat within the platform or email us at [email protected]. We will respond to all valid requests within a reasonable period. Some requests may require identity verification before we can action them.

10. Minors and Under-18 Users

999cx is strictly an adult gaming platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires users to confirm they are 18 or older, and identity verification is used to enforce this requirement.

If 999cx becomes aware that an account belongs to a person under 18, the account will be immediately closed, all associated data will be deleted in accordance with applicable requirements, and any deposited funds will be returned via the original payment method after verification.

Parents and guardians are encouraged to make use of parental control tools available on devices and internet service accounts to prevent minors from accessing online gaming platforms.

11. Changes to This Policy

999cx may update this Privacy Policy from time to time to reflect changes in platform practices, technology, legal requirements or other factors. The "Last Updated" date at the top of this page will always reflect when the current version came into effect.

For significant changes that materially affect how your data is used or your rights, 999cx will provide advance notice through the platform and/or by email to registered users. We encourage you to review this policy periodically to stay informed.

Continued use of the platform after the effective date of any updated policy constitutes your acceptance of the changes.

12. Questions and Contact

If you have any questions about this Privacy Policy, want to understand more about how your data is used, or wish to exercise any of your data rights, please get in touch with the 999cx support team. We are available 24/7 via live chat within the platform.

You can also reach us by email at [email protected] — please note this address is displayed as plain text and is not a clickable link.

For concerns related to responsible gaming, self-exclusion or deposit limits, please visit the Responsible Gaming page which includes self-service tools you can use directly without needing to contact support.