Privacy Policy

we999com ("we", "us", "our", "the Platform") is an online casino and sports betting platform accessible at we999com.app, operated under an international gaming licence. we999com acts as the data controller in respect of personal data collected from registered Players and visitors to the Platform.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably identify a living individual, including name, contact details, financial information, device identifiers, and behavioural data associated with a registered Account.

If you have any questions about how we999com processes your personal data, or wish to exercise any of the rights described in this Policy, please contact us at [email protected]. We aim to respond to all privacy-related enquiries within five (5) business days.

we999com collects personal data through three primary channels: information you provide directly, information generated automatically through your use of the Platform, and information received from third-party verification partners.

we999com does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information, except where a Player voluntarily discloses health-related information in the context of a responsible gaming or self-exclusion request, in which case such data is processed solely for player protection purposes.

we999com uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create, maintain, and administer your Player Account, verify your identity, and ensure only one Account exists per individual.
• KYC and Age Verification: To confirm that you are at least 21 years of age and that your identity and payment method ownership are genuine, as required by our gaming licence obligations.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT, and to maintain a complete record of all financial transactions on your Account.
• Platform Security and Fraud Prevention: To detect and investigate suspicious activity, duplicate accounts, bonus abuse, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, administer deposit limits and self-exclusion requests, and fulfil our player protection obligations under our international gaming licence.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming licence regulations, including the retention of transaction records and the reporting of suspicious activity to relevant authorities where legally required.
• Service Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and the overall player experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided express consent to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].

we999com processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to fulfil the Player Account agreement — including KYC, payment processing, and customer support — is carried out on the basis that it is necessary to perform the contract between you and we999com.
• Legal Obligation: Processing required to comply with AML, CTF, gaming licence regulatory requirements, and other applicable legal obligations is carried out on the basis of legal compliance.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of we999com's legitimate interest in operating a secure and compliant gaming platform, balanced against Players' privacy interests.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out only where you have provided clear, specific, and freely given consent. Consent can be withdrawn at any time without affecting the lawfulness of processing already carried out.

we999com does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be shared with the following categories of recipients only where strictly necessary and subject to binding data processing agreements:

• KYC and Identity Verification Providers: Third-party identity verification services used to confirm the authenticity of Player-submitted identity documents and age as part of the KYC process.
• Payment Processors: Financial service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network processors, who require transaction reference data to facilitate deposits and withdrawals.
• Platform Technology Providers: Software vendors providing game hosting, customer support tools, and platform infrastructure services, all of whom are bound by strict confidentiality and data protection obligations.
• Regulatory and Law Enforcement Authorities: we999com may disclose personal data to its gaming licence regulatory authority, financial intelligence units, or law enforcement agencies where required to do so by law or a valid legal order, without prior notice to the Player where disclosure would compromise an investigation.
• Fraud Prevention Networks: Industry fraud prevention and responsible gaming databases where sharing is required to identify and prevent prohibited conduct or protect vulnerable players.

All third-party data processors engaged by we999com are contractually required to process personal data only on documented instructions from we999com, to implement appropriate security measures, and to delete or return data upon termination of the service relationship.

As an internationally licensed gaming platform, we999com may transfer personal data to servers and service providers located outside Pakistan. Where such transfers occur, we999com ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the relevant data protection authority.
• Binding corporate rules where data is transferred within a corporate group.
• Transfers to countries recognised as providing an adequate level of data protection by the relevant regulatory framework applicable to we999com's gaming licence jurisdiction.

Players who wish to obtain further information about the specific safeguards applied to international transfers of their personal data may submit a written request to [email protected].

we999com retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the Player's active relationship with we999com.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the last transaction date, in compliance with AML and gaming licence record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following Account closure or the date of the last regulated transaction.
• Support and Complaint Records: Retained for three (3) years following resolution of the relevant support interaction or complaint.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for two (2) years following withdrawal of consent, as evidence of the original consent.
• Responsible Gaming Records: Self-exclusion and cooling-off records are retained for the duration of the exclusion period plus five (5) years, to prevent re-registration during active exclusion periods.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data cannot be immediately deleted due to ongoing regulatory proceedings, it will be isolated and restricted from further processing until deletion is possible.

we999com uses cookies and similar technologies (including local storage and session identifiers) to operate the Platform securely and efficiently. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without impairing your ability to use the Platform.
• Performance and Analytics Cookies: Used to measure and analyse how Players navigate the Platform, identify technical errors, and improve page load performance. Data collected is aggregated and anonymised.
• Functional Cookies: Used to remember Player preferences such as language settings and responsible gaming display options across sessions.

we999com does not deploy third-party advertising or tracking cookies that build cross-site profiles for commercial targeting purposes. You can manage or delete cookies at any time through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging into your we999com Account.

we999com implements a multi-layered technical and organisational security programme to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher. Sensitive data at rest, including payment references and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to Player data are subject to background checks, confidentiality obligations, and regular security awareness training.
• Infrastructure Security: we999com's platform infrastructure is hosted in data centres with physical security controls, redundant systems, and regular penetration testing conducted by independent security professionals.
• Incident Response: we999com maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to Player rights, affected Players and the relevant regulatory authority will be notified within the timeframes required by applicable law.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their Accounts to provide an additional layer of protection against unauthorised access.

Depending on the data protection laws applicable in your jurisdiction, you may have some or all of the following rights in relation to the personal data we999com holds about you:

• Right of Access: The right to request a copy of the personal data we999com holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any personal data that is inaccurate or incomplete.
• Right to Erasure: The right to request deletion of your personal data, subject to we999com's legal retention obligations described in Section 7.
• Right to Restrict Processing: The right to request that we999com temporarily suspend the processing of your personal data while a dispute about its accuracy or use is resolved.
• Right to Data Portability: The right to receive a copy of personal data you have provided to we999com in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to direct marketing will always be honoured immediately.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request", including your full name, registered email address, and a clear description of the right you wish to exercise. we999com will respond within thirty (30) calendar days. In cases of complexity or high volume, this period may be extended by a further two months, with written notice provided to you.

we999com may need to verify your identity before processing a privacy rights request to ensure the security of Player data. We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

The we999com platform is strictly intended for adults aged 21 years and older. we999com does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step of the KYC process, and any Account found to be registered by a minor will be immediately closed.

If a parent or guardian believes that a minor has provided personal data to we999com, they should contact us immediately at [email protected]. we999com will promptly investigate the matter and, where confirmed, delete all personal data associated with the minor's registration and close the Account without delay.

we999com reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory guidance, or our internal data processing practices. The effective date at the top of this document will always reflect the date of the most recent revision.

Where amendments are material — meaning they substantially change the way we collect, use, or share your personal data — we999com will notify registered Players by email to their registered address at least fourteen (14) days before the changes take effect. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage Pakistani players to review this Privacy Policy periodically to stay informed about how we999com protects your personal information.

If you have any questions, concerns, or complaints about how we999com processes your personal data, please contact our Data Protection team in the first instance:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: we999com aims to acknowledge all privacy enquiries within 24 hours and provide a substantive response within five (5) business days.

If you are not satisfied with we999com's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority relevant to we999com's gaming licence jurisdiction, or to the relevant consumer protection authority in your own jurisdiction. we999com will cooperate fully with any regulatory investigation into a privacy complaint.