Privacy Policy – why 999 Online Gaming Platform Pakistan

1 Introduction

why 999 (available at why999.win) is an online entertainment platform offering Casino, Live Casino, Slots, Fish Games, Sports Betting, and the why 999 App to players in Pakistan. When you use any part of the platform, you share certain personal information with us. This Privacy Policy explains what that information is, how we use it, and what choices you have regarding your own data.

We take data privacy seriously because Pakistani players deserve to know exactly what happens with their personal information when they register an account, make a PKR deposit via JazzCash or Easypaisa, place a bet on Cricket or PSL, or download the why 999 App. This policy is written in plain language so it is easy to understand — not buried in legal jargon.

By creating a why 999 account and using the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should not register or continue using the platform.

2 Data We Collect

why 999 collects personal data in several ways — directly from you when you register or contact us, automatically when you use the platform, and from third-party payment processors when you make a deposit or withdrawal. The categories of data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions or health data unless we are specifically required to do so by applicable law (for example, in the context of responsible gaming support).

3 How We Use Your Data

Every piece of data why 999 collects has a specific purpose. We do not process data speculatively or build profiles beyond what is needed to operate and improve the platform. The main purposes for which we use your personal data are:

• Account Management: To create and maintain your why 999 account, verify your identity and age, and keep your account details up to date.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and cards, and to maintain accurate transaction records.
• Platform Operation: To deliver the games, sports betting markets, Live Casino, Slots and other features you use, and to record the results of your activity correctly.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, multi-accounting and other prohibited conduct described in our Terms and Conditions.
• Customer Support: To respond to your queries, resolve disputes, process responsible gaming requests and handle any complaints you raise.
• Responsible Gaming: To monitor for signs of problem gambling patterns and to deliver the deposit limits, session reminders and self-exclusion tools available in your account settings.
• Platform Improvement: To analyse how players use the platform so that we can improve navigation, game selection, payment flow and overall user experience.
• Marketing Communications: To send you information about new games, promotions, Cricket and PSL betting markets and platform updates — but only where you have opted in to receive such communications.

4 Legal Basis for Processing

why 999 processes your personal data on the following legal grounds depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil the agreement between you and why 999 — including account creation, payment processing and game delivery.
• Legitimate Interests: Processing carried out to operate and protect the platform, including fraud detection, security monitoring and platform analytics, where these interests do not override your rights.
• Consent: Processing based on your explicit consent, such as marketing communications. You can withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations and identity verification requirements.

5 Payment Data and PKR Transactions

When you deposit or withdraw PKR on why 999 using JazzCash, Easypaisa, Raast, Bank Transfer or a debit/credit card, your payment information is processed by our trusted payment partners. why 999 does not store full card numbers or complete mobile wallet credentials on its own servers. Payment data is tokenised and handled by our payment processors in accordance with applicable security standards.

Transaction records — including the amount, date, time and payment method used — are retained in your account history and in our secure transaction logs. These records are maintained for account management purposes, to resolve any payment disputes, and to comply with applicable financial record-keeping requirements.

6 Cookies and Tracking Technologies

why 999 uses cookies and similar tracking technologies on the website and in the App to make the platform work correctly and to understand how it is being used. The types of cookies we use are:

• Essential Cookies: Required for the platform to function — including session management, login authentication and security checks. These cannot be disabled without breaking core platform features.
• Performance Cookies: Used to collect anonymised information about how players navigate the platform, which pages are visited most and where errors occur. This helps us improve the experience.
• Functional Cookies: Used to remember your preferences such as language settings and your preferred payment method for faster checkout.
• Marketing Cookies: Used to show you relevant promotions and game recommendations based on your activity on why 999. These are only used where you have consented.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain parts of the platform from working correctly. The why 999 App uses equivalent in-app tracking technologies governed by the same principles described above.

7 Sharing Your Data

why 999 does not sell your personal data to any third party. We may share your data with the following categories of trusted partners only where necessary and only to the extent required:

• Payment Processors: JazzCash, Easypaisa, Raast and banking partners receive the payment data required to process your PKR transactions. They operate under their own privacy policies and security standards.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers may receive your identity documents when age or identity verification is required.
• Fraud Prevention Partners: We may share technical data such as device fingerprints and IP addresses with fraud detection services to protect the platform and all players.
• Game Software Providers: The game studios whose Slots, Live Casino and other titles are available on why 999 may receive your player ID and game activity data to deliver their games correctly and to verify results.
• Legal and Regulatory Authorities: We may disclose your data if required to do so by applicable law, court order or lawful regulatory request.

All third parties with whom we share data are required to handle it securely and to use it only for the specific purpose for which it was shared. We do not authorise any third party to use your data for their own independent marketing purposes.

8 Data Retention

why 999 retains your personal data only for as long as it is needed for the purpose it was collected and as required by applicable record-keeping obligations. In general terms:

• Active account data is retained for the duration of your account and for a reasonable period after closure to allow for dispute resolution.
• Financial transaction records are retained for the period required under applicable financial record-keeping standards.
• Identity verification documents are retained for the period required to meet applicable KYC and anti-money laundering obligations.
• Marketing preference data is retained until you withdraw your consent, after which it is deleted promptly.
• Support communications are retained for a period sufficient to allow complaint resolution and quality assurance review.

When data is no longer required and retention is no longer justified, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

9 Your Rights Over Your Data

As a why 999 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact the why 999 support team with your registered account details:

• Right of Access: You can request a copy of the personal data why 999 holds about you.
• Right to Rectification: If any of your personal data is inaccurate or out of date, you can ask us to correct it.
• Right to Erasure: In certain circumstances you can request that we delete your personal data. Note that this right may be limited where retention is required by law or to resolve a dispute.
• Right to Restrict Processing: You can ask us to limit how we use your data in certain circumstances — for example while a correction request is being reviewed.
• Right to Object: You can object to processing based on our legitimate interests, including direct marketing. Where you object to marketing, we will stop immediately.
• Right to Data Portability: You can request your personal data in a structured, machine-readable format where technically feasible.

10 Children's Privacy

why 999 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not register an account or attempt to use the platform in any way.

If why 999 becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately and all associated data will be deleted without delay. If you believe that a minor has registered on why 999, please contact our support team so we can investigate and take appropriate action.

11 Security Measures

why 999 uses a range of technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or disclosure. These measures include:

• Encryption of data in transit using industry-standard TLS protocols.
• Encrypted storage of sensitive account and financial data at rest.
• Strict access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
• Regular security reviews and monitoring of platform systems for unusual activity or potential breaches.
• Secure third-party payment integrations that tokenise financial data and prevent full payment credentials from being stored on why 999 servers.

While we take data security seriously and apply robust protections, no platform can guarantee absolute security. You are also responsible for keeping your account login credentials secure and for logging out of the App or website when using a shared device.

12 Updates to This Privacy Policy

why 999 may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable data protection requirements, or changes in the services we offer. When this policy is updated, the revised version will be published on this page with an updated "last updated" date at the top.

Where changes are significant, we will make reasonable efforts to notify active account holders through the platform or by the contact details held on your account. Your continued use of why 999 after a policy update is published constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically so you are always aware of how your data is being handled.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information has been handled on why 999, please get in touch with our support team. Include your registered account username in all correspondence so we can locate your account and respond efficiently.

For responsible gaming requests including self-exclusion, deposit limit changes or account closure, our support team prioritises these requests and will respond as quickly as possible. You can also access self-service responsible gaming tools directly from your account settings at any time — visit our Responsible Gaming page for more details.