n9999 Privacy Policy

This Privacy Policy ("Policy") describes how n9999 ("the Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the n9999 platform at https://n9999.ws, including all associated services, features, and promotional programmes (collectively, "the Platform").

n9999 operates under internationally recognised gaming licence conditions that impose specific and binding obligations on us in relation to the collection, processing, and retention of player data. This Policy is designed to meet those obligations while also reflecting best practice standards aligned with internationally recognised data protection frameworks including the General Data Protection Regulation (GDPR) principles.

This Policy applies to all personal data we process in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the Platform without an account, or a former player whose account has been closed. Different provisions of this Policy may apply depending on your relationship with n9999 at any given time.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and n9999.

For the purposes of applicable data protection law, n9999 is the data controller in respect of all personal data collected and processed through the Platform. As data controller, n9999 determines the purposes and means by which your personal data is processed and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

Where n9999 engages third-party service providers to process data on its behalf — for example, payment processors, identity verification providers, or customer support platforms — those providers act as data processors and are bound by contractual obligations that require them to process data only in accordance with n9999's documented instructions and to maintain security standards no less rigorous than those applied by n9999 itself.

The categories of personal data n9999 collects about you depend on the nature of your interaction with the Platform. The following table sets out the primary categories of data we may hold:

n9999 does not collect special category data (such as health, religious, or biometric data) except where a liveness check is required as part of identity verification, in which case we collect only what is strictly necessary for that purpose and do not retain raw biometric data beyond the verification process.

n9999 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to surveys, participate in promotions, or update your account settings.
• Automatically: When you access and use the Platform, our servers automatically record technical data including your IP address, device identifiers, session duration, pages visited, and game interactions. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 7.
• From third-party providers: We may receive identity verification data from regulated KYC/AML service providers, fraud screening data from risk management partners, and payment confirmation data from payment processors such as JazzCash and EasyPaisa. All such third parties are contractually bound to share only the minimum data necessary for the stated purpose.
• From publicly available sources: In limited circumstances where fraud prevention or AML obligations require it, we may consult publicly available sanctions lists, court records, or media sources.

Every instance of personal data processing at n9999 is conducted for a specific, documented purpose and rests on one of the recognised legal bases for processing. The table below sets out our primary processing activities:

Where we rely on legitimate interests as our legal basis, we have conducted a balancing assessment and determined that our interests do not override your fundamental rights and freedoms. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

n9999 does not sell, rent, or trade your personal data. We share your data only in the circumstances described below, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and cryptocurrency payment gateways receive the financial data required to complete your requested transactions. These providers are regulated financial entities operating under their own applicable data protection obligations.
• Identity verification providers: Regulated KYC and AML service providers receive identity documents and biographic data for the sole purpose of completing the verification required under our licence conditions.
• Fraud and risk management systems: Shared device data and behavioural data may be passed to fraud screening systems to detect and prevent prohibited conduct. This processing is conducted under legitimate interests and legal obligation bases.
• Customer support platforms: Our live chat and ticketing infrastructure providers may process communication data on our behalf under binding data processing agreements.
• Regulatory authorities: We are legally obligated to provide player data, gaming records, and financial transaction data to our licensing regulator and to law enforcement agencies where required by lawful authority, including court orders and production notices.
• Professional advisers: Legal counsel, auditors, and insurers may access limited personal data where strictly necessary in the context of their professional engagement with n9999 and subject to professional confidentiality obligations.

n9999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable session management, login authentication, and security features. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: These remember your preferences such as language settings, notification choices, and game lobby layout. Disabling them may result in a reduced experience.
• Analytics cookies: These collect anonymised or pseudonymised data about how players interact with the Platform, including pages visited, session duration, and error reports. This data is used solely to improve Platform performance and usability.
• Fraud prevention cookies: These assist our fraud detection systems in identifying suspicious patterns and protecting your account from unauthorised access.

n9999 does not use third-party advertising cookies or allow any advertising networks to place tracking cookies on the Platform. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform functions including login and gameplay.

n9999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to minimum retention periods imposed by our regulatory licence conditions and applicable AML legislation. The following standard retention periods apply:

• Account and identity data: Retained for a minimum of 5 years from the date of account closure. This retention period is imposed by our licensing regulator's AML requirements and cannot be shortened at your request.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction in accordance with anti-money laundering regulations.
• Gaming history and bet records: Retained for a minimum of 3 years from the date of each session, and for the duration of any ongoing dispute.
• Customer support records: Retained for 3 years from the date of last interaction, or for the duration of any unresolved complaint.
• Marketing consent records: Retained for 3 years from the date of last consent renewal or withdrawal, as evidence of lawful processing.
• Technical and analytics data: Anonymised or deleted within 13 months of collection.

At the end of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

n9999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• AES-256 encryption for all personal data stored on n9999 infrastructure
• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• Role-based access controls ensuring staff can only access player data that is necessary for their specific job function
• Full audit logging of all staff access to personal data records
• Multi-factor authentication for all internal systems that store or process personal data
• Regular penetration testing and security vulnerability assessments conducted by independent third-party security firms
• Incident response procedures with defined timelines for breach detection, containment, and notification

In the event of a personal data breach that poses a risk to your rights and freedoms, n9999 will notify affected players without undue delay and in accordance with the notification requirements of our regulatory licence. We will also report the breach to the relevant regulatory authority within the timeframes required.

Subject to the limitations imposed by our regulatory obligations and applicable law, you hold the following rights in relation to the personal data n9999 processes about you:

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. Where a request is complex or we receive a high volume simultaneously, we may extend this period by a further 60 days with prior notice.

Please note that certain rights — particularly erasure and restriction — cannot be fully exercised in relation to data we are legally required to retain under our AML and regulatory licence obligations. We will always explain clearly which data we are unable to delete and why.

The n9999 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21. Age verification is a mandatory component of our registration and KYC process.

If we discover or are notified that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account, delete all personal data collected in connection with it to the maximum extent permitted by our regulatory obligations, and report the matter to our compliance team. Any funds deposited to such an account will be returned via the original payment method following identity verification of the account holder.

If you have reason to believe that a minor has registered an account with n9999, please notify us immediately at [email protected]. We take our obligations in this regard with the utmost seriousness.

As an internationally licensed gaming operator, n9999 may engage third-party service providers located outside Pakistan for purposes such as identity verification, fraud screening, and customer support infrastructure. Where your personal data is transferred to recipients in countries that may not provide equivalent data protection standards to those applicable in your jurisdiction, n9999 ensures that appropriate safeguards are in place.

These safeguards include contractual clauses that impose data protection obligations on recipients at least equivalent to those applied by n9999, and in certain cases, supplementary technical measures such as encryption and pseudonymisation to minimise the risk associated with the transfer.

A list of the categories of third-country recipients to whom data may be transferred is available on request from our Data Protection team. We will not transfer your personal data to any jurisdiction identified as high-risk without implementing enhanced safeguards and, where required, obtaining your explicit consent.

n9999 reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing, change our retention periods, or engage a new category of third-party processor — we will notify you by email to your registered address and via an in-platform notice at least 14 days before the changes take effect.

For minor, non-material changes (such as clarifications of existing practices or corrections of typographical errors), we may update the Policy without prior notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may close your account before the effective date by contacting our support team.

For all privacy-related enquiries, data rights requests, or complaints, please contact our Data Protection team using the details below:

• Email: [email protected] — use subject line "Data Protection Request" or "Privacy Complaint"
• Live Chat: Available 24/7 within the Platform — request transfer to the Data Protection team
• Response Commitment: Acknowledgement within 3 business days; substantive response within 30 calendar days
• Languages: Our team handles data enquiries in both English and Urdu

If you are not satisfied with our response to your privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under our gaming licence, or to seek independent legal advice. We will always provide information about escalation options when responding to a complaint we have been unable to resolve to your satisfaction.