This Privacy Policy explains how d999 collects, processes, stores, and protects the personal data of players registered on the d999 Platform. We are committed to handling your information with care, transparency, and in accordance with our obligations under international gaming licence standards. Please read this Policy carefully — it forms part of your agreement with d999 and should be read alongside our Terms & Conditions.
Your privacy is taken seriously at d999. We do not sell personal data to third parties. We do not share your information for purposes unrelated to the provision of d999 Platform services. All data handling practices described in this Policy are subject to our obligations under international gaming licence standards. For questions, contact us at [email protected].
d999 ("we", "us", "our") operates the online casino and sports betting platform available at d999.today ("Platform"). In the course of operating the Platform and providing services to registered players, d999 collects and processes personal data about those players and, in some cases, visitors to the Platform who have not yet registered.
This Privacy Policy ("Policy") describes in detail what personal data we collect, the purposes for which we process it, the legal basis for that processing, how long we retain it, who we share it with, and what rights you have in relation to your personal data. It also describes the technical and organisational measures d999 applies to keep your data secure.
This Policy should be read together with the d999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and d999. Where there is a conflict between this Policy and the Terms & Conditions on a data protection matter, this Policy takes precedence.
By registering an Account on the d999 Platform or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.
For the purposes of applicable data protection law, d999 is the data controller in respect of the personal data of players and visitors processed through the d999 Platform. As data controller, d999 determines the purposes for which and the means by which personal data is processed.
d999 operates under international gaming licence standards. Queries relating to data processing, including requests to exercise your data subject rights, should be addressed in writing to d999 via email at [email protected] with the subject line "Data Privacy Request".
d999 collects the following categories of personal data, depending on your interaction with the Platform:
Data provided when you create a d999 Account:
Data collected during the Know Your Customer (KYC) verification process, which is required before any withdrawal can be processed:
Data generated through deposit and withdrawal activity:
Data generated through your use of d999 games and sports betting markets:
Data collected automatically when you access the Platform:
Data generated through your interactions with d999 support and communications systems:
The following table summarises the primary data categories and their retention periods:
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Registration Data | Account management, age verification | Duration of account + 5 years post-closure |
| KYC Documents | Identity verification, AML compliance | Duration of account + 5 years post-closure |
| Financial Transaction Data | Payment processing, fraud prevention | 7 years from transaction date |
| Gaming Activity Data | Game audit trail, responsible gaming | 5 years from session date |
| Technical / Device Data | Security, fraud detection | 13 months from collection |
| Support Communications | Dispute resolution, quality assurance | 3 years from last interaction |
d999 collects personal data through the following channels:
d999 processes personal data for the following purposes, each supported by a specific legal basis:
Processing necessary to perform the contract between d999 and the registered player — including account management, deposit and withdrawal processing, game access, sports betting settlement, and bonus administration. Without this processing, d999 cannot provide the Platform services.
Processing required to comply with d999's legal obligations under its gaming licence, including Know Your Customer (KYC) identity verification, anti-money laundering (AML) transaction monitoring, age verification, and the maintenance of audit records. This processing is mandatory — d999 cannot waive it at player request.
Processing conducted in pursuit of d999's legitimate business interests, including fraud prevention, security monitoring, detection of multi-account abuse, platform performance optimisation, and the improvement of responsible gaming tools. d999 has assessed that these interests are not overridden by player rights in the circumstances.
Where d999 relies on your consent as the legal basis for processing — primarily for marketing communications — you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. Consent withdrawal can be effected via the Account settings panel or by contacting support.
d999 processes gaming activity data, deposit patterns, and session behaviour data for the specific purpose of identifying potential problem gambling indicators. This processing is carried out in the interest of player welfare and is a requirement under international gaming licence standards. Where potential problem gambling behaviour is identified, d999 may proactively contact the player and, where appropriate, activate responsible gaming tools on the Account.
d999 does not sell personal data to any third party, under any circumstances. We share personal data only where necessary for the purposes described in this Policy, and only with categories of recipients who are bound by appropriate confidentiality and data protection obligations.
Game studios and live casino providers whose content is hosted on d999 receive session-level data necessary for game delivery, RNG audit trails, and jackpot contribution calculations. These providers operate under their own regulatory frameworks and are contractually prohibited from using player data for purposes beyond game delivery and audit compliance.
JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 processing services receive transaction data necessary to initiate and confirm deposits and withdrawals. The data shared is limited to the minimum required for transaction processing and is not used by payment processors for their own marketing or profiling purposes.
Where d999 uses a third-party KYC provider for document verification, that provider receives copies of the identification documents you submit and returns a verification decision to d999. The KYC provider does not use your documents for any purpose beyond the specific verification request and is contractually bound to delete submitted documents after processing.
d999 may share data with fraud prevention, cybersecurity, and device intelligence services for the purpose of identifying and preventing fraudulent account activity, multi-account abuse, and unauthorised access attempts. This sharing is conducted in d999's legitimate interests and the interests of the broader player community.
d999 may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units, or other public authorities where required to do so by applicable law, court order, or regulatory direction. In such cases, d999 will disclose only the minimum data required to comply with the legal obligation and will, where legally permissible, notify the affected player.
Some of the third parties with whom d999 shares personal data — including game providers, fraud prevention services, and cloud infrastructure providers — may process data in jurisdictions outside Pakistan. Where such international transfers occur, d999 ensures that appropriate safeguards are in place, including contractual data protection clauses that impose standards equivalent to those required under international gaming licence frameworks.
Players located in Pakistan should be aware that Pakistani data protection law may not impose identical requirements to those in force in other jurisdictions. By registering on d999 and accepting this Policy, you consent to the transfer of your personal data internationally to the extent necessary for the provision of Platform services, subject to the safeguards described above.
d999 retains personal data for the periods set out in the table in Section 3.6 above, or for such longer periods as may be required by applicable law or regulatory obligation. The primary driver of extended retention periods beyond Account closure is d999's obligation under gaming licence standards to maintain auditable records of gaming activity and financial transactions.
Where personal data is retained solely because of a legal or regulatory obligation and is no longer required for the operational purpose for which it was originally collected, d999 restricts access to that data to the specific compliance and legal functions that require it, and implements additional access controls to prevent unnecessary processing.
Upon expiry of all applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised or aggregated data that cannot be linked to any individual may be retained indefinitely for statistical and platform improvement purposes.
d999 implements a layered security architecture designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. The principal security measures in place include:
Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. Players should maintain strong, unique passwords for their d999 Account and enable 2FA to reduce the risk of unauthorised access. If you believe your Account has been compromised, contact d999 support immediately at [email protected].
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and store information about your preferences and session state. d999 uses cookies and similar technologies (including session tokens and local storage) to operate the Platform.
You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is placed. Note that disabling strictly necessary cookies will prevent you from logging in to or using the d999 Platform. d999 does not deploy third-party advertising cookies or retargeting pixels on the Platform.
Subject to applicable law and certain exemptions (including exemptions that apply where data is retained for legal compliance purposes), you have the following rights in relation to your personal data held by d999:
To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Privacy Request" and a clear description of the right you are exercising. d999 will respond within 30 days of receipt. Where a request is complex or involves a large volume of data, d999 may extend this period by a further 60 days with notice.
d999 may require identity verification before processing any data subject rights request to ensure that data is not disclosed to or deleted at the request of an unauthorised third party.
The d999 Platform is strictly for individuals aged 21 years and above. d999 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at registration and is a prerequisite for Account activation. If d999 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the Account, delete or anonymise the personal data to the extent not required for regulatory reporting purposes, and report the incident where required by its gaming licence obligations.
If you believe that a minor has registered an Account on d999, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. d999 recommends the use of parental control software on shared household devices to prevent access to online gaming platforms.
d999 may, with your consent, send you marketing communications about promotions, bonuses, new games, and platform updates via email or SMS to your registered Pakistani mobile number. Marketing consent is obtained separately from the registration process and is not a condition of Account creation or Platform access.
You may opt out of marketing communications at any time by:
Opt-out requests are processed within 5 business days. Note that transactional communications — including deposit confirmations, withdrawal notifications, Account security alerts, and responsible gaming messages — are not marketing communications and will continue to be sent to your registered contact details regardless of marketing preferences.
d999 does not use personal data for profiling in connection with third-party marketing. We do not share player data with external advertising platforms, affiliates, or data brokers for marketing purposes.
d999 reserves the right to update this Privacy Policy at any time. Material changes — meaning changes that significantly affect how we process your personal data or alter your rights — will be communicated to registered players via email to the registered Account email address, with a minimum of 14 days' notice before the changes take effect. The updated Policy will also be published on the Platform with the revised effective date.
Non-material amendments, such as corrections of typographical errors and clarifications that do not alter the substance of the Policy, may be made without advance notice and take effect immediately upon publication. The "Last Updated" date at the top of this Policy reflects the most recent revision.
Your continued use of the d999 Platform after the effective date of any amended Policy constitutes your acceptance of the changes. If you disagree with a material change to this Policy, you should close your Account before the effective date of the change.
For all data privacy enquiries, requests to exercise data subject rights, or concerns about d999's data processing practices, please contact us at:
d999 will acknowledge privacy-related requests within 5 business days and will respond substantively within 30 days. If you are dissatisfied with d999's response to a privacy complaint, you may escalate the matter to the relevant regulatory authority under d999's gaming licence framework.
Reminder: d999 will never ask for your Account password, full CNIC number, or complete payment card details via email or live chat. Any communication requesting this information is not from d999. Report suspected phishing to [email protected] immediately.
These are the practical protections d999 applies to your personal data every day — in plain language, not legal boilerplate.
Every page load and every transaction on d999 travels over an encrypted SSL connection. There is no unencrypted version of any d999 page. Your login credentials, payment details, and game activity are all transmitted under the same encryption standard used by major banks.
Your d999 password is hashed using bcrypt before it is stored. The plaintext value is discarded immediately and is never written to any database, log file, or backup. Not even d999's own engineering team can retrieve your password — only you know it.
d999 does not sell personal data to any third party. Period. Player data is shared only with the specific categories of service providers described in this Policy, for the specific purposes stated, and under contractual protections. Your data is not a revenue stream for d999.
You have the right to access, correct, port, restrict, or delete your personal data. d999 responds to data subject rights requests within 30 days. Basic data corrections can be made directly in Account settings. More complex requests are handled by the d999 support team via email.
d999 retains personal data only for as long as required — either for the operational purpose it was collected for, or to satisfy gaming licence audit obligations. Once both requirements are met, data is securely deleted. Retention periods are published in the retention table in Section 3 of this Policy.
Promotional emails and SMS messages from d999 are sent only with your explicit consent. You can withdraw that consent at any time from Account settings — no need to contact support. Transactional alerts like deposit confirmations and security notices are separate and unaffected by marketing preferences.
A summary of the rights you hold in relation to personal data d999 processes about you — and how to exercise them.
Request a full copy of the personal data d999 holds about you, along with details of how it is processed and with whom it is shared.
Request correction of any inaccurate or incomplete personal data. Basic account details can be updated directly in your Account settings panel.
Request deletion of personal data that is no longer needed. Note that gaming licence obligations require certain financial and gaming records to be retained for defined periods.
Request that d999 pause processing of your data in specific circumstances — for example, while a rectification or objection request is under review.
Receive a machine-readable copy of your personal data for transfer to another service provider, where processing is based on consent or contract performance.
Object to processing carried out on the basis of legitimate interests, including profiling. d999 will cease processing unless it can demonstrate compelling grounds that override your interests.
To exercise any of the above rights, email [email protected] with subject line "Data Privacy Request". d999 responds within 30 days.
Now that you understand how d999 protects your personal data, login to your account and enjoy cricket betting, live casino, and premium slots — all with PKR transactions and 24/7 Urdu support.
Must be 21+ to participate. Please gamble responsibly and within your means.