Privacy Policy —
How wp999 Protects Your Personal Data

wp999 is an internationally licensed online gaming and sports betting platform operating at wp999.biz. wp999 serves players primarily in Pakistan, offering casino games, sports betting (including live cricket betting covering PSL, Pakistan internationals, and ICC tournaments), slot games, fishing games, and associated promotional services — all transacted in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

For the purposes of this Policy, wp999 is the data controller in respect of all personal information collected from players and prospective players through the Platform. As data controller, wp999 is responsible for determining the purposes and means by which your personal data is processed.

All enquiries regarding this Policy, requests to exercise data subject rights, or complaints regarding wp999's data handling practices should be directed to our Customer Support team whose contact details are provided in Section 14 of this Policy.

wp999 collects the following categories of personal data from players. We collect only the data that is necessary for the purposes described in Section 4 of this Policy:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC or other government-issued identity document
• Date of birth (for age verification — all players must be 21 years of age or older)
• Pakistani mobile phone number
• Email address
• Username and encrypted password
• City of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)

2.2 Verification (KYC) Data

• Copy of a valid Pakistani CNIC (Computerised National Identity Card) or passport
• Proof of address documentation (e.g., utility bill, bank statement)
• Proof of ownership of the payment method used for deposits (e.g., JazzCash account confirmation, bank statement)
• Selfie photograph for liveness verification purposes where required

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• JazzCash or EasyPaisa mobile wallet identifiers used for transactions
• Bank account details where bank transfers (HBL, UBL, Meezan Bank) are used
• Transaction history and running account balance records

2.4 Gaming & Betting Activity Data

• Game session logs including game title, session duration, bets placed, and outcomes
• Sports betting history including markets selected, odds accepted, and settlement records
• Bonus claims, wagering progress, and promotion participation records
• Responsible gaming tool activations (deposit limits, self-exclusion requests, etc.)

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP data
• Device type, operating system version, and browser type
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 9)

2.6 Communications Data

• Records of customer support interactions via live chat and email
• Complaint submissions and dispute records
• Responses to surveys or feedback requests where voluntarily submitted

wp999 collects personal data through the following channels:

• Account Registration: Information you provide directly when creating your wp999 account, including during the account setup process and any subsequent profile updates.
• KYC Verification Submissions: Documents and information you submit in response to wp999's identity verification requests, either at registration or during account review processes.
• Deposits and Withdrawals: Transaction metadata generated when you initiate payments via JazzCash, EasyPaisa, or bank transfer, including payment reference numbers and amounts.
• Platform Usage: Data generated automatically by your use of the wp999 website, including game session logs, betting history, page navigation patterns, and device interaction data.
• Customer Support Interactions: Information you provide when contacting wp999 support via live chat or email, including the content of your communications and any documents or screenshots you share.
• Cookies and Tracking Technologies: Technical data collected automatically via browser cookies, local storage, and similar technologies when you visit the wp999 website (see Section 9 for full details).

wp999 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not described in this Policy without first obtaining your explicit consent:

wp999 processes your personal data on the following legal bases, as referenced in the table above:

• Contract Performance: Processing is necessary to perform the contract between you and wp999 — specifically, to create and manage your account, process your transactions, and deliver gaming services you have requested.
• Legal Obligation: wp999 is required to process certain categories of personal data to comply with obligations under its international gaming license — including KYC identity verification, age verification (21+ minimum), anti-money laundering monitoring, and regulatory reporting.
• Legitimate Interest: wp999 processes certain data for purposes that are in the legitimate interests of the Platform and its players, including fraud prevention, security monitoring, responsible gaming oversight, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where wp999 relies on consent as the legal basis for processing — for example, in relation to certain marketing communications — we will obtain your explicit consent before processing and will provide a clear mechanism for you to withdraw that consent at any time.

wp999 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share personal data only in the specific circumstances described below:

6.1 Payment Processors

In order to process your PKR deposits and withdrawals, wp999 shares necessary transaction data — including your mobile wallet identifier or bank account reference — with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, as applicable. These entities process your data as independent controllers subject to their own privacy policies and applicable financial regulation.

6.2 Game Software Providers

The game titles available on wp999 are supplied by licensed third-party game software providers. These providers may receive anonymised or pseudonymised session data for the purpose of game performance monitoring and RNG audit compliance. Personal identifying information is not shared with game providers beyond what is strictly necessary.

6.3 KYC and Identity Verification Services

wp999 may engage specialist third-party KYC and identity verification service providers to assist in verifying the identity documents submitted by players. These providers process data under strict contractual confidentiality obligations and solely for the purpose of verification.

6.4 Regulatory and Law Enforcement Authorities

wp999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or where such disclosure is necessary to protect the rights, property, or safety of wp999, its players, or the general public.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of wp999's assets, personal data held by wp999 may be transferred to the acquiring entity. Players will be notified of any such transfer and provided with information about how their data will be handled by the new controller.

wp999 operates under an international gaming license and, as a consequence, certain data processing activities may involve the transfer of personal data to countries outside Pakistan. Where such transfers occur, wp999 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data protection clauses in agreements with all international service providers, requiring them to handle data to a standard equivalent to the protections described in this Policy.
• Transfers to countries that provide an adequate level of data protection as recognised under relevant international frameworks, where applicable.
• Technical security controls including encryption in transit and at rest, access controls, and audit logging for all data transferred internationally.

If you would like more information about the specific safeguards wp999 applies to international data transfers, please contact our support team using the details in Section 14.

wp999 retains your personal data for only as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law and our international gaming license obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active wp999 Account relationship, plus a minimum post-closure retention period of five (5) years to meet AML regulatory requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification, in compliance with anti-money laundering obligations under wp999's international gaming license.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, or such longer period as may be required by applicable financial regulation.
• Gaming Activity Logs: Retained for three (3) years from the date of each session, for the purposes of dispute resolution, responsible gaming monitoring, and regulatory audit.
• Customer Support Communications: Retained for three (3) years from the close of each support interaction, for quality assurance, training, and dispute resolution purposes.
• Technical and Device Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, wp999 will securely delete or anonymise your personal data in accordance with our internal data lifecycle procedures.

The wp999 website uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and support security monitoring. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the wp999 platform to function correctly. They manage your login session, maintain your Player Balance display, enable secure deposit and withdrawal processes, and enforce responsible gaming tool activations. These cookies cannot be disabled without materially impairing platform functionality.

9.2 Performance & Analytics Cookies

wp999 uses performance cookies to collect aggregated and anonymised data about how players use the platform — including which pages are visited most frequently, how long sessions last, and where navigation errors occur. This information is used solely to improve the wp999 platform experience and is not linked to individual identifiable players.

9.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, interface settings, and whether you have previously accepted responsible gaming notices — so that you do not need to reconfigure these settings on every visit.

9.4 Security Cookies

wp999 uses security cookies to detect and prevent fraudulent activity, including bot activity, account takeover attempts, and suspicious geographic anomalies. These cookies form part of wp999's multi-layered security infrastructure.

As a wp999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Customer Support team (see Section 14). wp999 will respond to all valid requests within thirty (30) calendar days of receipt:

• Right of Access: You have the right to request a copy of all personal data wp999 holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by wp999. Some data corrections can be made directly within your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wp999's legal obligations to retain certain data (as described in Section 8).
• Right to Restriction: You may request that wp999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to wp999, for the purpose of transferring it to another controller.
• Right to Object: You have the right to object to processing of your personal data where wp999 relies on legitimate interest as its legal basis, unless wp999 can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Please note that the exercise of some rights may affect wp999's ability to provide gaming services to you. For example, a request to delete all of your personal data will require the closure of your wp999 Account. wp999 will explain any such implications before proceeding with your request.

The wp999 platform is strictly intended for adults aged 21 years and above. wp999 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If wp999 discovers or is informed that it has collected personal data from an individual under the minimum age threshold, that data will be deleted promptly and the associated Account will be permanently closed.

wp999 implements a comprehensive range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the wp999 servers.
• Encryption of sensitive data at rest — including KYC documents, financial records, and password hashes — using industry-standard encryption algorithms.
• Multi-factor authentication options for player accounts, including OTP verification via Pakistani mobile numbers.
• Automated suspicious activity detection systems that monitor for abnormal login patterns, geographic anomalies, and unusual transaction behaviour.
• Strict access controls limiting wp999 staff access to personal data on a need-to-know basis, with all access logged and auditable.
• Regular security assessments and penetration testing of the wp999 platform infrastructure.
• Secure, access-controlled data storage infrastructure operated in accordance with international security standards.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, wp999 will notify you without undue delay and take all necessary remedial steps in accordance with applicable obligations.

wp999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we provide. The "Effective Date" at the top of this Policy indicates when the current version came into force.

Where material changes are made to this Policy, wp999 will notify registered players via the email address or mobile number associated with their Account, or by displaying a prominent notice on the wp999 platform, no fewer than seven (7) calendar days before the changes take effect. Your continued use of the wp999 platform following the effective date of any revision constitutes your acceptance of the updated Policy.

wp999 encourages players to review this Privacy Policy periodically to stay informed about how their data is being handled. Previous versions of this Policy are available upon request to our support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about wp999's data handling practices, please contact our Customer Support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, including all Pakistani public holidays
• Response Time: wp999 acknowledges all privacy-related enquiries within 48 hours and aims to provide a substantive response within 30 calendar days

If you are not satisfied with wp999's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection or gaming regulatory authority under wp999's international gaming license. wp999 will provide details of the applicable regulatory body upon request.