wn999 Privacy Policy — How We Protect Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes how wn999 ("wn999," "we," "us," "our") collects, uses, stores, discloses, and protects personal information about individuals who register for or use the wn999 platform, including the website at wn999.org and all associated games, services, and features ("the Platform").

This Policy applies to all personal data processed by wn999 regardless of the device or method through which you access the Platform. It applies to existing registered players, new registrants, and visitors who browse the Platform without registering. It applies equally to players in Karachi, Lahore, Faisalabad, Islamabad, and all other cities and regions across Pakistan, as well as to players in any other jurisdiction where wn999 accepts registrations.

This Policy should be read alongside the wn999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and wn999. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions will prevail to the extent of that conflict.

2 Data Controller

wn999 is the data controller in respect of the personal data you provide to us and the personal data we collect about you through your use of the Platform. As data controller, wn999 determines the purposes for which and the means by which your personal data is processed.

wn999 operates under an international gaming licence that imposes specific obligations with respect to the collection, processing, and retention of player personal data. Our data processing activities are subject to review by the relevant licensing authority as part of ongoing compliance monitoring.

For all privacy-related inquiries and data rights requests, you may contact wn999 through the channels listed in Section 17 of this Policy. We will acknowledge all written requests within 2 business days and provide a substantive response within 30 calendar days.

3 Personal Data We Collect

wn999 collects the following categories of personal data in connection with the operation of your account and the provision of our services:

• Full legal name as it appears on your Pakistani CNIC
• Date of birth (required to verify the 21+ age requirement)
• Pakistani CNIC number
• Residential address
• Email address
• Mobile phone number (Pakistani format, 03XX series)
• Username and encrypted password (passwords are stored in hashed form only; wn999 does not hold your plaintext password)

• Scanned or photographed copies of the front and back of your CNIC
• Proof of address documentation where requested
• Source of funds documentation where required by our AML compliance procedures
• Facial verification data where required by our identity verification processes

• Payment method details (JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank account details, or cryptocurrency wallet addresses for USDT TRC20)
• Deposit and withdrawal transaction history including amounts, dates, and methods
• Account balance history
• Bonus and promotion claim records

• Full record of all bets placed, games played, and outcomes on the wn999 platform
• Session duration and timing data
• Game preferences and browsing behaviour within the Platform
• Responsible gaming limit settings and self-exclusion history

• IP address and geolocation data derived from it
• Device type, operating system, and browser version
• Session logs including login times, page views, and feature interactions
• Cookies and similar tracking technologies (see Section 7)

• Records of all communications between you and the wn999 support team, including live chat transcripts and email correspondence
• Feedback, survey responses, and complaint records

4 How We Collect Your Data

wn999 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or fill in any form on the wn999 platform.
• Automatically — through cookies, server logs, and similar technologies when you access and use the Platform (see Section 7).
• From payment providers — transaction confirmation data and, where necessary, identity verification data from JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and cryptocurrency processors.
• From third-party identity verification services — where wn999 uses approved third-party KYC providers to assist with CNIC verification, facial recognition, or document authentication.
• From regulatory and law enforcement bodies — where wn999 is required to receive and process data as part of AML reporting, fraud investigation, or court-ordered disclosure.

5 Legal Basis for Processing

wn999 processes personal data on the following legal bases, as summarised in the table below:

6 How We Use Your Personal Data

wn999 uses your personal data for the following specific purposes:

• Account operation: Creating, maintaining, and managing your wn999 account, including processing logins, updating account details, and handling account closure requests.
• Identity verification: Conducting age verification (confirming 21+ status) and identity verification via CNIC-based KYC procedures as required under our international gaming licence.
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, SadaPay, and bank transfers, and processing withdrawals to your verified payment accounts.
• Game and betting services: Providing access to all wn999 Platform features including live casino tables, cricket and PSL betting markets, slot games, racing, and video poker.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited activities.
• Responsible gaming: Monitoring play patterns to identify potentially problematic behaviour; enforcing deposit limits, loss limits, and self-exclusion where set by the player or required by our licensing obligations.
• Customer communications: Responding to support queries, handling complaints, sending account notifications, and delivering marketing communications where you have provided consent or we have a legitimate interest to do so.
• Regulatory reporting: Submitting mandatory reports to the relevant licensing authority, financial intelligence units, or law enforcement bodies where required by law.
• Platform improvement: Analysing anonymised usage data to improve Platform performance, user experience, and game offerings.

7 Cookies & Tracking Technologies

wn999 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. Cookies are small data files stored on your device by your browser.

wn999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These enable your login session to persist, your account balance to display correctly, and security features to operate. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language selection, table stake settings, and notification preferences, so you do not need to reset them each visit.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which games are most used, and where technical errors occur. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect fraudulent login attempts, prevent bot access, and protect your account from unauthorised use.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of your wn999 account. wn999 does not use third-party advertising or retargeting cookies that track your activity across unrelated websites.

8 Data Sharing & Third-Party Disclosure

wn999 does not sell your personal data. We do not rent, trade, or commercially transfer your personal information to unrelated third parties. We share data only in the specific circumstances described below, and only to the extent necessary for the identified purpose:

• Payment processors: JazzCash, EasyPaisa, SadaPay, HBL, UBL, Meezan Bank, and USDT TRC20 processing partners receive transaction data necessary to execute your deposits and withdrawals.
• KYC and identity verification providers: Approved third-party identity verification services receive your CNIC data and document images to assist with mandatory age and identity verification under our gaming licence.
• Game software providers: Certified game providers (including Pragmatic Play, NetEnt, Microgaming, and others) receive anonymised game session data necessary to operate their games within the wn999 Platform.
• Regulatory authorities: wn999's licensing authority may request access to player data as part of compliance audits. We are required to cooperate fully with such requests.
• Law enforcement and courts: Where required by a court order, subpoena, or lawful request from a government or law enforcement authority in a jurisdiction where wn999 operates, we may be required to disclose player data without prior notice to you.
• Fraud prevention and AML bodies: We may share data with fraud prevention agencies, financial intelligence units, and AML reporting bodies where we identify or suspect financial crime.
• IT and infrastructure providers: Cloud hosting, security, and technical infrastructure providers who process data on our behalf under strict data processing agreements that limit their use of your data to the performance of services for wn999.

All third parties with whom wn999 shares personal data are contractually required to protect that data with security standards equivalent to those applied by wn999 and to use it only for the specified purpose.

9 International Data Transfers

As an internationally licensed platform serving players across Pakistan, wn999 may transfer personal data to servers and processors located in countries other than Pakistan. Where such transfers occur, wn999 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to jurisdictions that maintain data protection standards recognised by our licensing authority.
• Standard contractual clauses or equivalent mechanisms governing data transfers to processors in third countries.
• Data processing agreements with all international processors that impose obligations equivalent to those applicable to wn999 under its licensing regime.

You may contact wn999 to request further information about the safeguards applied to international transfers of your personal data.

10 Data Retention

wn999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations under our international gaming licence, and to resolve disputes or enforce our Terms & Conditions. The following specific retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11 Data Security Measures

wn999 implements and maintains a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and wn999 servers.
• Encryption at rest for sensitive personal and financial data stored on wn999 infrastructure.
• Bcrypt password hashing — your wn999 password is never stored in plaintext; only a one-way cryptographic hash is retained.
• Access controls — internal access to player data is restricted to wn999 personnel with a legitimate operational need, governed by role-based access policies.
• DDoS protection and intrusion detection systems monitoring the Platform infrastructure 24/7.
• Regular security audits and penetration testing by independent third-party cybersecurity firms.
• Two-factor authentication available to players for account access, and mandatory for wn999 staff accessing internal systems.

While wn999 applies rigorous security measures, no method of data transmission over the internet is 100% secure. You share responsibility for your account security by using a strong, unique password and enabling two-factor authentication. If you suspect your account has been compromised, contact wn999 support immediately via live chat.

12 Exercising Your Data Rights

To exercise any of the data rights described at the top of this page, submit a written request through one of the contact methods listed in Section 17. All requests must include sufficient information to verify your identity (to prevent fraudulent access requests). We recommend including your registered email address and username in all requests.

Timeline: wn999 will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days. Where a request is particularly complex or high in volume, we may extend this period by a further 30 days, in which case we will notify you with an explanation.

Exceptions: Certain rights are subject to limitations under our licensing obligations. In particular, gaming and AML regulations require us to retain certain data for a minimum period regardless of any erasure request. Where we are unable to fulfil a request due to a legal obligation, we will clearly explain the applicable limitation.

No charge: wn999 does not charge any fee for exercising data rights in ordinary circumstances. If a request is manifestly unfounded or excessive, we may charge a reasonable administrative fee, in which case we will notify you before proceeding.

13 Marketing Communications

wn999 may send you promotional communications about bonuses, new games, PSL betting offers, and other Platform features via email and SMS where you have provided consent during registration or subsequently opted in through your Account Settings.

You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link in any marketing email from wn999.
• Updating your communication preferences in Account Settings > Notifications.
• Contacting wn999 support via live chat or email to request removal from marketing communications.

Withdrawal of marketing consent does not affect the processing of your data for account operation, payment processing, or regulatory compliance purposes. Essential account communications (such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests) are not affected by marketing opt-out and will continue to be sent as they are necessary for the operation of your account.

14 Third-Party Services & Links

The wn999 Platform may contain references to or integrations with third-party services, including certified game providers, payment processors, and identity verification services. These third parties operate under their own privacy policies and data protection practices. wn999 is not responsible for the privacy practices or content of third-party services accessed in connection with the wn999 Platform.

All third-party processors engaged by wn999 are subject to data processing agreements that require them to protect your data in accordance with standards equivalent to those applied by wn999. However, where you interact directly with a third-party service (for example, completing a JazzCash transaction in the JazzCash app), that interaction is governed by the third party's own terms and privacy policy.

15 Children & Minors — Strict 21+ Policy

The wn999 Platform is strictly intended for individuals who are 21 years of age or older. wn999 does not knowingly collect personal data from individuals under 21, and we actively apply CNIC-based age verification before processing any withdrawal from an account. If wn999 discovers that personal data has been provided by an individual under 21, that Account will be immediately and permanently closed, all data associated with the underage Account will be securely deleted in accordance with applicable law, and any balance will be handled in accordance with the licensing authority's guidelines.

If you have reason to believe that a minor has created a wn999 account, please report this to us immediately via live chat so that we can investigate and take appropriate action without delay.

16 Updates to This Privacy Policy

wn999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, updates to our gaming licence obligations, or changes in applicable law. Material changes to this Policy will be communicated to registered players via email to the address on file at least 7 days before the change takes effect, and a prominent notice will be displayed on the wn999 Platform.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the wn999 Platform after any update takes effect constitutes your acceptance of the revised Policy. If you do not agree to a revised Policy, you should close your account before the effective date of the change.

17 Contact Us — Privacy Queries & Data Rights

For any privacy-related question, data rights request, or concern about how wn999 handles your personal information, please contact us through one of the following channels:

• 24/7 Live Chat: Available directly on the wn999 Platform. This is the fastest channel and is available around the clock without exception.
• Email: [email protected] — please write "Privacy Request" in the subject line. We acknowledge all emails within 2 business days.

If you are not satisfied with wn999's response to a privacy concern, you have the right to escalate your complaint to the supervisory authority under the jurisdiction of our international gaming licence. Contact details for the relevant supervisory authority are available upon request through our support team.