i999 Privacy Policy

1 Introduction

i999 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We are committed to protecting the privacy and personal data of every player who trusts us with their information. This Policy has been drafted in accordance with internationally recognised data protection principles and reflects the standards expected of a licensed online gaming operator.

i999 acts as the data controller in respect of all personal data collected through the Platform. This means we determine the purposes for which and the manner in which personal data is processed. Where third-party service providers process data on our behalf, they do so only as data processors acting under written instructions from i999 and subject to appropriate contractual data protection obligations.

2 Data We Collect

i999 collects personal data from you directly when you register an account, make transactions, contact support, or interact with the Platform. We also collect certain data automatically through your use of the Platform. The categories of personal data we collect are set out below:

i999 does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect information about racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by applicable law or regulation.

3 How We Use Your Data

i999 uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and administer your i999 player account, including processing your registration, managing your account balance in PKR, and providing you with access to games and betting markets.
• Identity Verification (KYC): To verify your identity, confirm your age (21+), and fulfil our obligations under applicable anti-money laundering and responsible gaming frameworks before processing withdrawals or activating certain account features.
• Transaction Processing: To process deposits and withdrawals via your chosen Approved Payment Methods, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate transaction records in your account history.
• Customer Support: To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Legal Compliance: To meet our obligations under applicable anti-money laundering legislation, responsible gaming regulations, and any lawful requests from competent regulatory or law enforcement authorities.
• Platform Security: To detect, prevent, and investigate fraud, unauthorised account access, collusion, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Service Improvement: To analyse aggregated usage patterns and player behaviour data (in anonymised form) to improve the functionality, performance, and content of the i999 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive such communications and have not subsequently withdrawn that consent.

4 Legal Basis for Processing

i999 processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform the contract between you and i999 — specifically, to operate your player account, process transactions, and provide gaming and betting services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for i999's legitimate business interests, including fraud prevention, platform security, improving service quality, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Disclosure

i999 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, solely for the purposes described in this Policy:

• Payment Processors: Sharing of financial data with Approved Payment Method providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) is strictly necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Providers: i999 works with third-party KYC verification service providers to conduct identity and age verification checks. These providers receive only the data necessary to perform the verification and are contractually bound to use it for no other purpose.
• Game Content Providers: Certain game providers may receive anonymised or pseudonymised session and wager data to support game functionality, RTP reporting, and technical support. No directly identifiable personal data is shared with game providers beyond what is technically necessary.
• Regulatory & Law Enforcement Authorities: i999 may disclose personal data to competent governmental, regulatory, or law enforcement authorities where required or permitted to do so by applicable law, including in response to lawful court orders, subpoenas, or regulatory investigations.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of i999's business assets, your personal data may be transferred to a successor entity. You will be notified of any such transfer and the applicable privacy terms will continue to apply.

6 Cookies & Tracking Technologies

i999 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, enhance your experience, and support analytics. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and game loading. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as preferred language, notification settings, and last-visited game categories — to provide a more personalised experience on subsequent visits.
• Analytics Cookies: i999 uses anonymised analytics cookies to understand how players interact with the Platform, which pages are most visited, and where technical issues may occur. This data is used in aggregate form and does not identify individual players.
• Marketing Cookies: Where you have consented to receive personalised promotions, marketing cookies may be used to display relevant bonus offers and promotional content within the Platform. These cookies are not used to track your activity on third-party websites.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features including login and game access. A cookie consent notice is displayed on your first visit to the Platform.

7 Data Retention

i999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention guidelines apply:

• Active Account Data: Personal and financial data associated with an active player account is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• KYC Verification Documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later.
• Transaction Records: Full deposit and withdrawal transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Customer support correspondence is retained for three (3) years from the date of the last interaction unless a longer period is required in connection with an ongoing dispute or legal proceeding.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for the duration of the account relationship and for two (2) years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual. Players may request earlier deletion of their data subject to the exceptions described in Section 9 of this Policy.

8 Security Measures

i999 takes the security of your personal data extremely seriously and implements a comprehensive set of technical and organisational security measures to protect it against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and i999's servers is encrypted using SSL/TLS protocols, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Secure Data Storage: Personal and financial data is stored on secured, access-controlled servers with encryption at rest. Physical access to data infrastructure is restricted to authorised personnel only.
• Access Controls: i999 applies strict role-based access controls, ensuring that only those staff members who require access to specific categories of personal data to perform their job functions are granted such access. All access is logged and subject to periodic review.
• Two-Factor Authentication: Players are encouraged to enable two-factor authentication (2FA) on their i999 accounts to provide an additional layer of protection against unauthorised access.
• Penetration Testing & Audits: i999's Platform and data infrastructure is subject to periodic independent security audits and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects your personal data, i999 will assess the incident promptly, take appropriate containment and remediation steps, and notify affected players and relevant authorities where required by applicable law.

9 Exercising Your Data Rights

i999 respects your right to control your personal data. As an i999 player, you may exercise the following rights at any time by contacting our customer support team:

• Right of Access: You may request confirmation of whether i999 holds personal data about you and, if so, a copy of that data along with information about how it is used.
• Right to Rectification: If any personal data held by i999 is inaccurate or incomplete, you may request that it be corrected or updated. For account details, many fields can be updated directly from your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that data retention obligations under anti-money laundering regulations may limit the scope of erasure requests.
• Right to Restriction: You may request that i999 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or where you have objected to processing pending verification of legitimate grounds.
• Right to Data Portability: You may request that personal data you have provided to i999 be provided to you in a structured, commonly used, and machine-readable format, or transmitted directly to another data controller where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, although i999 may be entitled to continue processing where there are compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact i999 customer support at the email address provided in Section 12. i999 will respond to all verifiable data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be notified of the extension and the reasons for it.

10 Children & Minors

The i999 Platform is strictly intended for adults aged 21 years and older. i999 does not knowingly collect, process, or store personal data belonging to persons under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC checks to confirm player eligibility.

If i999 becomes aware that personal data has been collected from a person under the age of 21 — whether through an inaccurate date of birth provided at registration or any other means — the relevant account will be suspended immediately, all associated funds (including deposits and winnings) will be withheld pending investigation, and the personal data of the minor will be securely deleted to the extent possible consistent with applicable legal obligations.

11 Changes to This Privacy Policy

i999 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, operational practices, or the services offered on the Platform. Where material changes are made to this Policy, i999 will provide advance notice to registered players via the email address associated with their account and/or through a prominent notice displayed on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is clearly stated at the top of this page. Your continued use of the i999 Platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. We strongly encourage you to review this Policy periodically to stay informed about how i999 protects your personal data.

Where an amendment requires fresh consent from you — for example, where we propose a new use of your personal data that is not compatible with the original purpose for which it was collected — we will seek your explicit consent before implementing that new use.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way i999 handles your personal data, please contact our Data Protection team through our customer support channel:

When contacting us regarding a privacy matter, please include your registered account username and a clear description of your request or concern. Where a data rights request is submitted, please also include confirmation of your identity (e.g., the email address and mobile number registered to your account) so we can verify your request efficiently.

i999 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with the outcome of your complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority or dispute resolution body in your jurisdiction.