P 9999 Privacy Policy — How We Handle Your Personal Data in Pakistan

P 9999 is an online casino and gaming platform operating at p9999.im. For the purposes of this Privacy Policy, P 9999 is the data controller — the entity responsible for deciding how and why your personal data is processed.

This policy applies to all personal data collected through the P 9999 website, mobile browser experience and any communications between you and our support team. It applies to all players accessing the platform from Pakistan and internationally.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which are published on this website.

P 9999 collects personal data through three primary channels: information you provide directly during registration and account management, data generated automatically through your use of the platform, and verification data provided as part of our identity and payment verification processes.

P 9999 does not collect sensitive personal data such as biometric data, racial or ethnic origin, religious beliefs, or health information, unless specifically required by a regulatory obligation and notified to you at the time of collection.

Every piece of data P 9999 collects has a defined purpose. We do not collect information speculatively or "just in case". The primary reasons we process your personal data are:

• Account creation and management: To create your P 9999 account, maintain your profile, and ensure you can access your balance, history and settings securely.
• Payment processing: To process deposits and withdrawals in PKR through your chosen payment method — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card. This requires your payment method details and your identity to match.
• Identity verification (KYC): Regulatory and anti-money laundering obligations require us to verify that you are who you say you are before processing large withdrawals or when triggered by transaction monitoring.
• Responsible gaming: Usage data — games played, session lengths, deposit frequency — is analysed to identify patterns that may indicate problem gambling behaviour, enabling our responsible gaming team to intervene proactively.
• Security and fraud prevention: IP addresses, device fingerprints and login patterns are monitored to detect unauthorised account access, duplicate account creation and payment fraud.
• Customer support: Communications data is retained so that support agents have the context needed to resolve your queries efficiently without requiring you to repeat information.
• Platform improvement: Aggregated and anonymised usage data helps us understand how players navigate the P 9999 lobby, which informs product decisions. This analysis does not identify individual players.
• Marketing communications (opt-in only): If you have opted in to marketing communications, we use your email address and phone number to send you information about promotions. You can withdraw this consent at any time from your account settings.

P 9999 processes your personal data under one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing your identity data, payment data and usage data is necessary to provide the P 9999 service you have signed up for. Without this processing, we cannot operate your account.
• Legal obligation: Anti-money laundering regulations, gaming licence conditions and financial reporting requirements create mandatory obligations to collect and retain certain data regardless of consent.
• Legitimate interests: Fraud prevention, platform security monitoring and aggregated product analytics are processed on the basis of our legitimate business interests, balanced against your privacy rights.
• Consent: Marketing communications are sent only with your explicit opt-in consent. This consent can be withdrawn at any time without affecting your account or any other processing described above.

The security of your personal data is a technical priority at P 9999, not just a policy commitment. The following measures are in place to protect your information:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and the P 9999 platform. The padlock icon in your browser confirms this is active.
• Encrypted at-rest storage for all personal data and identity documents held on P 9999 servers. Encryption keys are managed separately from the data they protect.
• Access controls limit which P 9999 team members can access personal data. Support agents see only what is necessary to resolve your query. Full identity documents are accessible only to the KYC and compliance team.
• Two-factor authentication is available for your P 9999 account and is recommended for all players, particularly those making regular withdrawals.
• Regular security audits are conducted by an independent third party to identify and address vulnerabilities in our systems before they can be exploited.
• Payment card data is processed exclusively through PCI-DSS Level 1 compliant payment gateways. Full card numbers are never stored on P 9999 servers.

P 9999 shares your personal data only with parties that have a specific, necessary role in providing the service or meeting our legal obligations. We do not sell your data. We do not share it with advertising networks or data brokers. The categories of third parties that may receive your data are:

All third-party processors that handle P 9999 player data are required to process that data in accordance with a data processing agreement that binds them to confidentiality, security and purpose limitation obligations consistent with this Privacy Policy.

P 9999 uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device. We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These keep you logged in during a session, maintain your session state during gameplay and enable secure payment flows. You cannot opt out of essential cookies without disabling the platform.
• Preference cookies: Remember your account settings — language preferences, lobby display options, notification preferences. These are optional and removing them simply resets your preferences to default.
• Analytics cookies: Aggregate, anonymised data about how players navigate the P 9999 platform — which pages are most visited, where players exit the lobby. This data is never linked back to individual player accounts. You can opt out via your account settings.

P 9999 does not use third-party advertising cookies, tracking pixels for retargeting campaigns, or any cookies that build individual advertising profiles. You will not find P 9999 cookies being shared with social media platforms or ad networks.

P 9999 retains personal data for defined periods based on the purpose for which it was collected and the legal obligations that apply. We do not keep data indefinitely. The following retention schedule applies:

• Account data (identity, contact): Retained for the duration of your active account and for 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for 7 years following each transaction to meet financial reporting and regulatory compliance obligations.
• KYC documents (CNIC, passport scans): Retained for 5 years following account closure or the last KYC verification event, whichever is later.
• Support communications: Retained for 3 years from the date of the last communication, or until a dispute involving that communication is resolved.
• Usage/gameplay data: Detailed logs retained for 2 years; aggregated anonymised analytics retained indefinitely.
• Marketing consent records: Retained for 3 years following withdrawal of consent, as evidence of compliance with consent-based marketing regulations.

Following the expiry of the applicable retention period, data is securely deleted or irreversibly anonymised. You may request early deletion of data where no legal retention obligation prevents it — see Section 9 (Your Rights) below.

As a P 9999 player, you have the following rights over the personal data we hold about you. These rights are not theoretical — we have a defined process for honouring each of them and will respond to all requests within 30 days.

To exercise any of these rights, contact the P 9999 support team via live chat or email at support@p9999.im. Include your registered email address and specify which right you wish to exercise. We may need to verify your identity before processing the request — this is to protect your data from being accessed by someone else claiming to be you.

P 9999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their date of birth, and we conduct age verification checks on accounts before processing withdrawals.

If P 9999 discovers that personal data belonging to a person under 18 has been collected — whether through an account created with a false date of birth or any other means — that account will be immediately suspended, any winnings will be voided, and the minor's data will be deleted as quickly as our legal obligations allow.

Parents or guardians who suspect that a minor has registered with P 9999 should contact our support team immediately. We will prioritise such requests and take action within 24 hours.

P 9999 reviews this Privacy Policy every six months as a minimum, and additionally whenever there is a material change to our data practices, a new regulatory requirement, or a significant platform update that affects how data is processed.

When material changes are made, registered players will be notified via email at least 7 days before the changes take effect. The updated policy will always be available at p9999.im/privacy-policy with the revision date clearly displayed at the top. Minor corrections — spelling, formatting, clarifications that do not alter your rights or our obligations — may be made without advance notice.

If you disagree with a material change to this policy, you have the right to close your account before the effective date and request deletion of your data subject to any legal retention requirements.

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how P 9999 has handled your personal data, please contact us:

• Email: support@p9999.im — include "Privacy Request" in the subject line for data rights requests
• Live Chat: Available 24/7 within your P 9999 account — fastest response for urgent concerns

P 9999 will acknowledge all privacy-related requests within 48 hours and aim to resolve them fully within 30 days. Complex requests — such as large data access requests or deletion requests requiring extensive record review — may take up to 60 days, in which case we will notify you of the extended timeline.

If you feel that P 9999 has not adequately addressed your privacy concern, you have the right to escalate the matter to the relevant data protection authority. P 9999 will cooperate fully with any regulatory investigation.

For other account-related queries, our FAQ page covers the most common topics. Our full Terms and Conditions are also available for reference.