pa999 Privacy Policy

1 Who We Are

pa999 is an online casino and sports betting platform accessible at pa999.bio, operated under an international gaming licence. pa999 is the data controller in respect of personal data collected from users of the pa999 platform.

For the purposes of this Privacy Policy, "pa999", "we", "us", and "our" refer to the operator of the pa999 platform. "You", "your", and "user" refer to any individual who accesses, registers with, or uses the pa999 platform in any capacity, including visitors who browse the platform without registering.

pa999 serves users primarily located in Pakistan and processes personal data in a manner consistent with applicable data protection obligations under its international gaming licence framework. All pa999 data processing activities are subject to oversight by the relevant licensing authority.

2 Data We Collect

pa999 collects personal data from you through several distinct channels. The categories of data collected and the circumstances in which they are collected are set out below.

2.1 Registration Data. When you create a pa999 account, we collect: full legal name, date of birth, gender, residential address (city, province — e.g., Karachi, Lahore, Islamabad, Faisalabad), email address, and mobile number. This data is mandatory for account creation and cannot be withheld.

2.2 KYC Verification Data. To comply with anti-money laundering regulations and verify your identity and age (21+), pa999 may collect: a copy of your valid CNIC (Computerised National Identity Card) or passport, a selfie or live photograph, proof of address documentation, and proof of payment method ownership (e.g., screenshot confirming JazzCash or EasyPaisa account registration).

2.3 Financial Data. pa999 collects transaction records including deposit amounts, withdrawal requests, payment method details (account numbers, mobile wallet identifiers), and transaction history. Full payment card numbers, if applicable, are processed exclusively by our licensed payment partners and are never stored on pa999 servers.

2.4 Gaming Activity Data. pa999 records your gaming history, bet placement activity, session durations, game preferences, wager amounts, win/loss records, and bonus usage across all pa999 products including casino games, cricket betting, PSL markets, slots, and live dealer tables.

2.5 Technical & Device Data. pa999 automatically collects certain technical data when you access the platform, including: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited, time and duration of visits, and geolocation data (country and city level, derived from IP address).

2.6 Communication Data. pa999 retains records of all communications between you and the pa999 support team, including live chat transcripts, email correspondence, and any written complaints or feedback submitted through the platform.

2.7 Voluntarily Provided Data. Any additional information you choose to provide to pa999, such as responsible gaming self-assessments, survey responses, or feedback submissions, is collected and processed as described in this policy.

3 How We Use Your Data

pa999 uses the personal data it collects exclusively for the purposes described below. pa999 does not use your data for purposes incompatible with those listed here without obtaining your separate consent.

pa999 does not use automated decision-making processes that produce legal or similarly significant effects without human review. Responsible gaming monitoring tools flag accounts for human review rather than taking automated restrictive action.

4 Legal Bases for Processing

pa999 processes your personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to fulfil pa999's contractual obligations to you as a registered user — including account management, payment processing, and gaming service delivery — is carried out on the basis of contractual necessity.
• Legal Obligation: pa999 is required by its international gaming licence and applicable anti-money laundering regulations to collect and retain KYC data, transaction records, and certain communication records. Processing for these purposes is carried out on the basis of legal obligation.
• Legitimate Interests: Certain processing activities — including fraud detection, platform security, abuse prevention, and service improvement using aggregated analytics — are carried out on the basis of pa999's legitimate interests, where these interests are not overridden by your privacy rights.
• Consent: Where pa999 sends you promotional communications, personalised offers, or uses non-essential cookies, this processing is carried out on the basis of your consent. You may withdraw consent at any time by contacting pa999 Support or updating your account communication preferences.

5 Data Sharing

pa999 does not sell, rent, or trade your personal data to any third party. Data is shared with third parties only in the following defined circumstances:

• Licensed Payment Processors: pa999 shares necessary financial data with licensed payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK operators) solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to handle your data securely and only for the specified payment purpose.
• KYC Verification Providers: pa999 uses licensed third-party identity verification services to authenticate CNIC documents, validate date of birth, and confirm address details. These providers operate under strict data processing agreements and applicable financial compliance regulations.
• Gaming Content Providers: Third-party game studios whose content is hosted on the pa999 platform may receive limited session and wagering data necessary to deliver their games. These providers are bound by contractual data protection obligations.
• Regulatory and Law Enforcement Authorities: pa999 will disclose personal data to licensing regulators, financial intelligence units, and law enforcement agencies when legally required to do so, including for the purposes of anti-money laundering investigations and responsible gaming compliance.
• Professional Advisors: pa999's legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis in connection with their professional services to pa999.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of pa999's business assets, personal data held by pa999 may be transferred to the successor entity. Users will be notified of any such transfer in advance where legally required.

6 Data Retention

pa999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised or aggregated data derived from your personal data may be retained indefinitely for statistical analysis and service improvement purposes, as it can no longer be used to identify you.

7 Your Data Rights

As a pa999 user, you hold the following rights in respect of your personal data. pa999 is committed to honouring these rights within 30 calendar days of receiving a valid request, except where an extension is permitted under applicable regulations.

To exercise any of the above rights, contact pa999 Support via live chat (available 24/7) or by email at [email protected]. pa999 may require you to verify your identity before processing a data rights request to protect against unauthorised access to your data.

8 Cookies & Tracking Technologies

pa999 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used by pa999 are as follows:

• Strictly Necessary Cookies: Essential for the basic functioning of the pa999 platform, including maintaining your login session, remembering your language preference, and processing transactions. These cookies cannot be disabled without impairing core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how users interact with the pa999 platform — including pages visited, session duration, error rates, and navigation paths. This data helps pa999 identify and fix usability issues and improve the overall user experience.
• Functional Cookies: Enable pa999 to remember your preferences and customisations (such as preferred game categories or responsible gaming settings) to provide a more personalised experience on return visits.
• Security Cookies: Support pa999's fraud detection and account security systems by helping identify unusual or potentially fraudulent activity patterns across sessions.

pa999 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings at any time, though disabling strictly necessary cookies may affect your ability to use core pa999 features. Your continued use of the pa999 platform following notification of cookie use constitutes acceptance of non-essential cookies in accordance with this policy.

9 Children's Privacy

The pa999 platform is strictly intended for adults aged 21 years and above. pa999 does not knowingly collect personal data from individuals under the age of 21. The pa999 registration process requires users to confirm their age and submit KYC documentation for verification.

If pa999 becomes aware that personal data has been collected from an individual under the age of 21, pa999 will:

• Immediately close the associated account;
• Void any bets placed and return any deposited funds, less any withdrawals already processed;
• Permanently delete all personal data associated with the underage user without undue delay, except where retention is required for regulatory reporting obligations.

If you believe that a person under 21 has registered with or used the pa999 platform, please report this immediately to pa999 Support via live chat. pa999 takes underage gambling extremely seriously and enforces its 21+ policy through active KYC verification on all accounts.

10 Security Measures

pa999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Security: All data in transit between your device and pa999 servers is encrypted using current TLS protocols. pa999 enforces HTTPS across the entire platform and implements HTTP Strict Transport Security (HSTS).
• Data Encryption at Rest: Sensitive personal data stored on pa999 servers, including KYC documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within pa999's operational systems is restricted on a strict need-to-know basis, enforced through role-based access controls, multi-factor authentication for administrative access, and comprehensive access logging.
• Security Audits: pa999's platform and data security controls are subject to regular internal reviews and periodic third-party security assessments to identify and remediate vulnerabilities.
• Incident Response: pa999 maintains a documented data breach response procedure. In the event of a data breach likely to result in a risk to your rights and freedoms, pa999 will notify affected users and relevant authorities within the timeframes required by applicable regulations.
• Staff Training: All pa999 staff with access to personal data receive regular data protection training and are bound by confidentiality obligations under their employment or service agreements.

While pa999 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your pa999 account and to report any suspected account compromise to pa999 Support immediately.

11 International Data Transfers

pa999 operates under an international gaming licence and its data processing infrastructure may involve the storage or processing of personal data in jurisdictions outside Pakistan. Where personal data is transferred to third countries, pa999 ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements incorporating standard contractual clauses or equivalent data transfer mechanisms recognised under applicable data protection frameworks;
• Transfer to jurisdictions that maintain adequate data protection standards as assessed by pa999's compliance team in the context of its licensing obligations;
• Contractual obligations on all international data recipients to implement security measures equivalent to those applied by pa999.

By using the pa999 platform and accepting this Privacy Policy, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan in connection with the services described herein. pa999 will at all times take steps to ensure your data is handled in accordance with this Privacy Policy regardless of where it is processed.

12 Third-Party Services

The pa999 platform integrates with third-party service providers necessary for its operation, including payment gateways (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), KYC verification services, and game content studios. Each of these providers operates their own privacy practices in relation to data processed on their own systems.

pa999 does not control the data practices of third-party service providers acting as independent data controllers in their own right. pa999 recommends that you review the privacy policies of payment service providers you use to deposit or withdraw funds, as those providers' data practices are governed by their own policies.

All third-party service providers engaged by pa999 as data processors are bound by data processing agreements requiring them to process personal data only on pa999's documented instructions and to implement appropriate security measures. pa999 conducts due diligence on third-party processors prior to engagement and reviews these arrangements periodically.

The pa999 platform does not contain links to external third-party websites. If you navigate away from the pa999 platform independently, pa999 has no responsibility for the data practices of any external website or service.

13 Policy Amendments

pa999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, pa999's data processing practices, or the services offered on the platform. All amendments will be published on this page with an updated "Last Updated" date.

For material changes — those that significantly affect your rights or the way pa999 processes your personal data — pa999 will provide advance notice via a notification displayed on the platform upon login, or by email to your registered address, at least 14 days prior to the amendment taking effect where practically possible.

Your continued use of the pa999 platform following publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with an amendment, you may exercise your right to request account closure and data erasure (subject to applicable retention requirements) by contacting pa999 Support before the amendment takes effect.

pa999 recommends bookmarking this page and reviewing it periodically. Prior versions of this Privacy Policy are available upon request by contacting pa999 Support.

14 Contact & Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding pa999's handling of your personal data, please contact the pa999 data team through the following channels:

• Live Chat: Available 24/7 directly on the pa999 platform. This is the fastest channel for all enquiries including data rights requests. Average first-response time is under 90 seconds.
• Email: [email protected] — please include "Privacy Request" in the subject line of your email for fastest routing to the data team. Email responses are typically provided within 2 business days.

pa999 will acknowledge receipt of all data rights requests within 5 business days and will provide a substantive response within 30 calendar days. Where an extension is required (up to a further 60 days for complex requests), pa999 will notify you of the extension and the reason within the initial 30-day period.

If you are not satisfied with pa999's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. pa999 will cooperate fully with any regulatory investigation of a privacy complaint submitted in good faith.