s999 Privacy Policy – How We Protect Your Personal Data

1. Who We Are and How to Reach Us

s999 Gaming Operations ("s999", "we", "us", "our") is the data controller responsible for the personal data of registered users on the s999 online casino and sports betting platform, accessible at s999.vu. s999 operates under an international gaming license that imposes binding obligations on how we collect, process, store, and protect the personal data of our users, including Pakistani players.

For all data-related queries, access requests, correction requests, or formal complaints regarding this Privacy Policy, please contact our dedicated data protection team through the 24/7 live chat support channel or via the support email address listed in Section 16 of this document. Our support team responds in both Urdu and English and is available around the clock.

This Privacy Policy applies to all individuals who access or use the s999 Platform, including visitors who browse without a registered account, users who have registered but not yet made a deposit, and active registered players with funded PKR wallets.

2. Categories of Personal Data We Collect

s999 collects the following categories of personal data in the course of operating the Platform and maintaining your account:

s999 does not collect special categories of sensitive personal data (such as health information, biometric data, or political opinions) except where a player voluntarily discloses health-related information in the context of a responsible gaming interaction — for example, when requesting a self-exclusion due to a gambling disorder concern. Such disclosures are treated with the highest level of confidentiality.

3. How We Collect Your Personal Data

s999 collects personal data through the following methods:

• Direct collection: Information you provide during account registration, KYC verification, deposit and withdrawal submissions, customer support interactions, and responsible gaming tool activation.
• Automated collection: Technical data collected automatically when you access the s999 Platform — including your IP address, device specifications, browser type, operating system, session duration, and navigation patterns — through server logs, cookies, and similar technologies. See Section 9 for details on cookies.
• Payment processor data: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate deposits or withdrawals. s999 does not receive or store full bank account numbers or full mobile wallet PINs.
• Third-party verification services: Identity and age verification data returned by KYC service providers when processing your CNIC or other identity documents submitted to s999.
• Game provider data: Game session records and outcomes reported by certified third-party game providers whose content is made available on the s999 Platform.

4. Purposes for Which We Process Your Data

s999 processes your personal data only for specified, legitimate purposes. The table below identifies each processing purpose and the corresponding data categories used:

s999 does not process your personal data for any purpose not listed above without first obtaining your explicit consent or as required by law.

5. Legal Basis for Processing

s999 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the s999 user agreement, including account management, transaction processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with anti-money laundering laws, know-your-customer requirements, age verification obligations, and reporting duties imposed by our international gaming license.
• Legitimate interests: Processing necessary to pursue s999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, personalised promotions, and non-essential cookies, where s999 has obtained your prior explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Third-Party Disclosure

s999 does not sell, rent, or commercially disclose your personal data to unaffiliated third parties. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum transaction data necessary to process your PKR deposits and withdrawals. These providers are subject to their own privacy policies and financial sector data security standards.
• KYC and identity verification providers: Third-party identity verification services receive CNIC and identity document data solely for the purpose of age and identity verification as required by our gaming license. These providers are contractually bound to process data only for verification purposes.
• Game software providers: Certified gaming software providers — including third-party live casino and slot game providers — receive gaming session data necessary to deliver and audit their games on the s999 Platform. No personal identity data is transmitted to game providers beyond anonymous session identifiers.
• Regulatory and law enforcement authorities: s999 will disclose personal data to gaming licensing authorities, financial intelligence units, or law enforcement agencies when required to do so by law, court order, or regulatory direction. s999 will notify affected users of such disclosures where permitted by law.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis for the purposes of providing professional services to s999.

All third-party recipients of s999 user data are subject to written data processing agreements that restrict their use of the data to the specified purpose and require them to implement appropriate security measures.

7. International Data Transfers

s999 operates under an international gaming license, and certain operational and technical functions — including server infrastructure, KYC verification services, and game software delivery — may involve the transfer of your personal data to countries outside Pakistan. Where such transfers occur, s999 ensures that appropriate safeguards are in place to protect your data to a standard consistent with internationally recognised data protection principles.

Specific safeguards applied to international data transfers include contractual data processing agreements with all international service providers, technical security measures including encryption in transit and at rest, and restrictions on onward transfer of data by recipients. Where technically feasible, s999 minimises international data transfers by processing and storing Pakistani player data within regional infrastructure.

By registering an s999 account and accepting the Privacy Policy, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan as described in this section, subject to the safeguards outlined above.

8. Data Retention Periods

s999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming license obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9. Cookies and Tracking Technologies

s999 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, detect fraud, and — with your consent — improve the user experience and deliver relevant promotions. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your s999 account and security cookies used to detect fraudulent access attempts. These cookies cannot be disabled.
• Functional cookies: Store your preferences — such as your preferred language, last-viewed game categories, and responsible gaming settings — so that you do not need to reconfigure them on each visit. These are enabled by default but can be disabled in your browser settings, though doing so may degrade Platform functionality.
• Analytical cookies: Collect anonymised data about how Pakistani users interact with the s999 Platform — which pages are visited most, how long sessions last, and where users encounter difficulties — to help s999 improve the Platform. s999 uses first-party analytics only; data is not shared with third-party analytics platforms.
• Marketing cookies: Used only where you have given explicit consent to receive personalised promotions. These cookies track your game preferences and activity patterns on s999 to present relevant bonus offers. You may withdraw consent at any time via your account settings.

You may manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will prevent you from accessing your s999 account. For all other cookie types, disabling them will not prevent access but may reduce personalisation and session convenience.

10. Your Data Subject Rights

As a registered s999 user, you have the following rights with respect to your personal data. To exercise any of these rights, contact s999 through the live chat or support email listed in Section 16:

Where s999 is unable to fulfil a rights request — for example, where legal retention obligations require continued data storage despite an erasure request — s999 will explain the specific legal grounds for the refusal in writing.

11. Security Measures

s999 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and the s999 Platform is encrypted using TLS 1.3. This protects your s999 login credentials, financial transaction data, and personal information from interception during transmission.
• Encryption at rest: Personal data stored on s999 servers — including CNIC records, financial transaction logs, and KYC documentation — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within s999 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Intrusion detection and monitoring: s999's systems are monitored continuously for signs of unauthorised access, unusual transaction patterns, and potential security incidents. Automated alerts are configured for high-risk activity indicators.
• Two-factor authentication: s999 supports and encourages two-factor authentication for all registered accounts. Players can enable this feature from the account security settings panel after s999 login.
• Incident response: In the event of a confirmed personal data breach that poses a risk to registered users, s999 will notify affected individuals promptly and take immediate remediation steps in accordance with our licensing obligations.

Whilst s999 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely immune to security risks. You are responsible for maintaining the security of your s999 login credentials and for notifying s999 immediately if you suspect any unauthorised account access.

12. Children and Minors

s999 employs age verification controls during registration to prevent underage access. If s999 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted to the extent permitted by AML and licensing retention obligations, and any deposited funds will be returned to the registered payment method subject to identity verification.

If you are a parent or guardian and believe that a person under 21 in your household has registered an s999 account, please contact our support team immediately via live chat so that we can take prompt action.

13. Marketing Communications

With your consent, s999 may send you promotional communications regarding bonuses, PSL betting promotions, new game launches, and other offers relevant to your interests as an s999 player. Marketing communications are sent via the mobile number or contact details registered on your s999 account.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the s999 account settings panel;
• Contacting the s999 support team via 24/7 live chat and requesting removal from marketing lists;
• Following the unsubscribe instructions included in any promotional message received from s999.

Opting out of marketing communications does not affect transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — which s999 is required to send as part of its contractual and regulatory obligations.

s999 does not purchase third-party marketing lists or send unsolicited bulk communications to non-registered individuals. All marketing communications from s999 are sent exclusively to registered users who have provided consent during or after the account registration process.

14. Third-Party Links and Services

The s999 Platform may reference third-party payment services — such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — in the context of deposit and withdrawal instructions. Interactions with these payment providers are governed by their own privacy policies and terms of service, which are independent of this Privacy Policy.

s999 is not responsible for the privacy practices, data security standards, or content of any third-party service provider's platform. When you initiate a payment through a third-party channel to fund your s999 wallet, you are subject to the data handling practices of that payment provider in addition to this Privacy Policy.

s999 does not embed third-party social media tracking pixels, advertising networks, or external analytics services on the s999 Platform. The Platform is operated with a first-party-only data collection approach for analytical purposes.

15. Updates to This Privacy Policy

s999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, licensing requirements, or Platform services. The current version of this Privacy Policy is always accessible at s999.vu/privacy-policy, identified by the version number and last-updated date displayed at the top of this document.

Where changes to this Privacy Policy are material — for example, where s999 introduces a new purpose for processing personal data or a new category of third-party data recipient — s999 will notify registered users via an in-platform notification and, where required by applicable law or licensing obligations, will seek renewed consent before the new processing commences.

Minor or administrative updates — such as clarifications of existing practices, corrections of typographical errors, or updated contact details — may be made without individual notification. We therefore encourage you to review this Privacy Policy periodically to remain informed of how s999 handles your personal data.

Your continued use of the s999 Platform following notification of a material Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with the revised policy, you must cease using the Platform and may request account closure in accordance with the s999 Terms & Conditions.

16. Contact Us and How to Raise a Complaint

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how s999 is handling your personal data, please contact us through the following channels:

Complaints: If you are not satisfied with s999's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant supervisory authority under our international gaming license jurisdiction. Details of the applicable supervisory authority are available upon request from the s999 support team.

s999 takes all privacy complaints seriously and is committed to resolving them fairly, transparently, and in accordance with our licensing obligations. We encourage users to contact us directly in the first instance so that we can address concerns promptly before any formal regulatory escalation.