Privacy Policy

1. Introduction

999m ("we", "us", "our", "the Platform") operates the English-language online gaming information website accessible at https://999m.cam. We are committed to protecting the privacy and personal data of every individual ("you", "the User") who accesses or uses the Platform.

This Privacy Policy sets out, in clear and structured terms, what personal data we collect from you, why we collect it, how we use it, how long we keep it, with whom we may share it and what rights you hold over your own information. This Policy applies to all users of the Platform, including visitors who have not registered an account and registered users who have completed sign-up.

This Privacy Policy is incorporated into and must be read alongside our Terms & Conditions. By using the Platform, you confirm that you have read this Policy and consent to the data practices described herein. If you disagree with any part of this Policy, please discontinue use of the Platform.

Note for Pakistani Users: Pakistan's data protection landscape is governed by emerging regulatory frameworks. While 999m makes every effort to align with internationally recognised data protection principles, users should be aware that a comprehensive federal data protection law may evolve. Nothing in this Policy constitutes legal advice specific to your personal circumstances. For individual legal queries, please consult a qualified legal professional.

2. Definitions

The following terms carry the meanings assigned below wherever they appear in this Privacy Policy:

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes name, email address, device identifiers and IP address.
"Processing"	Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
"Data Controller"	999m, the entity that determines the purposes and means of processing Personal Data collected through this Platform.
"Data Processor"	A third party that processes Personal Data on behalf of 999m, under contractual instruction, for specific defined purposes.
"Consent"	A freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a stated purpose.
"Cookie"	A small text file stored on a User's device by a web browser, used to retain session information, preferences or analytics data.
"KYC"	Know Your Customer — identity verification documentation required by operators to confirm user identity before enabling withdrawals or account features.
"Platform"	The 999m website at https://999m.cam, including all pages and functionality therein.

3. Data We Collect

999m collects Personal Data in a limited and proportionate manner. The categories of data we may collect include the following:

3.1 Registration and Account Data

When you create an account on the Platform, we collect the information you provide directly, which may include:

Full legal name;
Email address;
Phone number (where provided);
Date of birth (to verify age eligibility);
Username and encrypted password;
Preferred language and currency settings.

3.2 Identity Verification (KYC) Data

Where KYC verification is required — typically before withdrawal processing — you may be asked to submit:

Government-issued identification such as a Pakistani CNIC (Computerised National Identity Card) or passport;
Proof of address documentation;
Other documents reasonably required by the relevant Operator for compliance purposes.

KYC documents are handled with the highest level of sensitivity and are retained only for as long as legally or operationally required.

3.3 Technical and Usage Data

When you interact with the Platform, certain technical data is collected automatically, including:

IP address and approximate geographic location;
Device type, operating system and browser version;
Pages visited, time spent and navigation paths;
Referring URL and exit pages;
Session timestamps and interaction logs.

3.4 Communication Data

If you contact our support team via email or live chat, we retain records of that correspondence, including the content of messages, contact details provided and timestamps, for service quality and dispute resolution purposes.

3.5 Payment Reference Data

Where payment method references are discussed in a support context, we may note the category of payment method referenced (e.g., mobile wallet, bank transfer) without storing full financial account credentials. 999m does not directly process financial transactions — all payments flow through the relevant Operator and their payment service providers.

4. How Data Is Collected

We collect Personal Data through the following mechanisms:

Direct submission: Information you actively provide when registering, contacting support or updating your account profile;
Automated collection: Technical data gathered automatically through your browser and device when you visit the Platform, including via cookies and server logs;
Third-party sources: Where permitted, we may receive supplementary data from analytics providers or identity verification partners engaged to assist with platform operations and compliance;
KYC verification partners: Identity document verification may be performed by or in partnership with third-party KYC service providers operating under data processing agreements with 999m.

We do not purchase Personal Data lists or obtain Personal Data from data brokers for marketing purposes. Our data collection is limited to what is necessary for platform operation, security, legal compliance and service improvement.

5. Data Processing & Purpose

We process Personal Data only for clearly defined, legitimate purposes. The table below summarises the key processing activities and their corresponding purposes:

Processing Activity	Purpose
Account registration and management	To create, maintain and administer your Platform account, including authentication and access control.
Identity verification (KYC)	To confirm that Users meet the 18+ age requirement and to comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations as applicable.
Customer support	To respond to queries, resolve disputes, process responsible gambling requests (e.g., self-exclusion) and maintain support records.
Platform analytics	To understand user behaviour, improve site performance, optimise content and identify technical issues.
Security and fraud prevention	To detect, investigate and prevent fraudulent activity, account takeovers, bonus abuse and other security threats.
Legal compliance	To meet regulatory, legal or law enforcement obligations that apply to the Platform's operation in relevant jurisdictions.
Communication	To send transactional messages (e.g., account confirmations, support responses) and, where consent has been given, promotional communications about the Platform.

We do not use Personal Data for automated decision-making that produces legal or similarly significant effects without human oversight, except where legally permitted and where appropriate safeguards are in place.

6. Legal Basis for Processing

Where applicable data protection frameworks require a legal basis for processing Personal Data, 999m relies on one or more of the following grounds:

Consent: Where you have freely given, specific and informed consent to a particular processing activity — for example, opting in to promotional communications;
Contractual necessity: Where processing is necessary to perform our obligations to you under the Terms & Conditions — for example, managing your account;
Legal obligation: Where we are required to process data to comply with applicable law — for example, KYC obligations under anti-money laundering frameworks;
Legitimate interests: Where processing is necessary for our legitimate business interests — for example, security monitoring and fraud prevention — provided that such interests are not overridden by your fundamental rights and freedoms.

7. Data Sharing & Disclosure

7.1 We Do Not Sell Your Data

999m does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. Your data is not a commercial product.

7.2 Authorised Third-Party Processors

We may share Personal Data with carefully selected third-party Data Processors who assist us in operating the Platform. These include:

Web hosting and infrastructure providers;
Analytics platforms (e.g., for aggregated, anonymised usage analysis);
KYC and identity verification service providers;
Customer support tools and live chat service providers;
Email delivery services for transactional communications.

All third-party processors are engaged under written data processing agreements that require them to handle your data in accordance with applicable privacy standards and only for the purposes specified by 999m.

7.3 Legal Disclosures

We may disclose Personal Data to regulators, law enforcement agencies, courts or other governmental authorities where required or permitted by applicable law, or where such disclosure is necessary to protect the rights, property or safety of 999m, its users or the public.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of 999m's business, Personal Data may be transferred as part of that transaction. You will be notified of any such change and of any choices you may have in relation to your data through the Platform.

Payment Provider Reference: Where users reference payment methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah in support contexts, 999m does not share your Personal Data with these providers. These names are contextual references only. All financial data flows through the Operator and their authorised payment service providers, governed by those parties' own privacy terms.

8. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

Active account data: Retained for the duration of your account's active status, plus a reasonable period thereafter to handle any residual queries or disputes;
KYC documentation: Retained for the period required by applicable anti-money laundering regulations, which may extend beyond account closure;
Support correspondence: Retained for up to three years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings;
Technical logs: Typically retained for 12 months, after which they are anonymised or deleted unless required for security investigations;
Closed account data: Core identity data associated with closed accounts is retained for a minimum statutory period as required by applicable law before secure deletion.

When Personal Data is no longer required, we ensure it is securely deleted or anonymised in a manner that prevents recovery and identification.

9. Data Security

999m implements technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

Encryption of data in transit using industry-standard TLS (Transport Layer Security) protocols;
Encryption of sensitive data at rest using appropriate cryptographic standards;
Access controls restricting Personal Data access to authorised personnel with a documented need;
Regular review of security practices and vulnerability assessments;
Staff awareness of data protection obligations.

While we implement robust security measures, no system is completely immune to security breaches. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay through available contact channels, as required by applicable law.

Your Role in Security: You are responsible for keeping your account credentials confidential. Do not share your password with anyone. If you suspect your account has been accessed without authorisation, contact our support team immediately at the address in Section 16.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the Platform when you visit. They help the Platform function correctly, remember your preferences and provide aggregated analytics about how the Platform is used.

10.2 Types of Cookies We Use

Essential cookies: Necessary for the Platform to operate. They enable core functions such as session management and security. These cannot be disabled without affecting Platform functionality.
Analytics cookies: Used to collect aggregated, anonymised data about how Users interact with the Platform. This helps us identify popular content, detect errors and improve user experience.
Preference cookies: Store your settings and preferences (such as language selection) so you do not need to re-enter them on subsequent visits.
Marketing cookies: Where applicable and with your consent, used to understand engagement with promotional content. You may opt out of marketing cookies at any time.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or alert you when cookies are set. Note that disabling certain cookies may affect Platform functionality. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

11. Your Rights

Subject to applicable data protection laws, you have the following rights in relation to your Personal Data held by 999m. You may exercise any of these rights by contacting us using the details in Section 16.

Right of Access

You have the right to request a copy of the Personal Data we hold about you, along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate or incomplete Personal Data held about you. We will act on valid rectification requests promptly.

Right to Erasure

You may request deletion of your Personal Data where there is no compelling legal or legitimate reason for continued processing. Note that KYC data may be subject to mandatory legal retention periods.

Right to Restrict Processing

In certain circumstances, you may request that we limit the processing of your Personal Data — for example, while a dispute about accuracy is resolved.

Right to Data Portability

Where processing is based on consent or contractual necessity, you may request that your data be provided in a structured, commonly used and machine-readable format.

Right to Object

You may object to processing carried out on the basis of legitimate interests, including for direct marketing. Upon receipt of a valid objection to marketing, we will cease that processing immediately.

We will respond to rights requests without undue delay and in any event within 30 days of receipt. In complex cases, this period may be extended by a further two months, in which case we will inform you of the reason. We reserve the right to verify your identity before processing any rights request.

12. Minors & Age Restriction

The Platform is intended exclusively for adults aged 18 years or older, or the higher minimum age required by the relevant Operator or license jurisdiction. We do not knowingly collect Personal Data from individuals under the age of 18.

If we become aware that we have inadvertently collected Personal Data from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has submitted Personal Data through the Platform, please contact us immediately using the details in Section 16.

Important: The 18+ age restriction does not constitute confirmation that gambling is lawful in Pakistan or any other jurisdiction. Age eligibility is a minimum threshold requirement — users remain fully responsible for understanding and complying with the laws applicable to their own jurisdiction.

13. International Data Transfers

In the course of operating the Platform, your Personal Data may be transferred to and processed in countries outside Pakistan. This may occur where our hosting infrastructure, analytics tools or KYC providers are located in jurisdictions with different data protection standards than those in Pakistan.

Where such transfers occur, we ensure that appropriate safeguards are in place to protect your Personal Data. These may include:

Transfers to countries with an adequate level of data protection as recognised by applicable frameworks;
Standard contractual clauses or equivalent transfer mechanisms incorporated into agreements with Data Processors;
Binding corporate rules or other appropriate technical and organisational measures.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally as described in this section.

14. Third-Party Links & External Platforms

The Platform may contain references to or informational descriptions of third-party platforms, payment providers and gaming operators. These references do not constitute endorsements and are provided for contextual, educational purposes only.

This Privacy Policy applies solely to data collected and processed by 999m through the Platform. It does not cover the data practices of third-party operators, payment service providers (including but not limited to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) or any other external entity. When you interact with a third-party platform, that platform's own privacy policy governs the collection and use of your data.

999m accepts no responsibility for the privacy practices or data handling of any third-party platform, regardless of whether it is referenced on this site.

15. Policy Amendments

999m reserves the right to update this Privacy Policy at any time. When we make changes, the "Last Updated" date at the top of this page will be revised to reflect the date of the most recent version.

Material changes — those that significantly affect your rights or how we handle your data — will be communicated through a notice on the Platform and, where practicable, via the email address associated with your account. Minor clarifications or formatting corrections that do not alter substantive rights do not require individual notification.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not accept the revised Policy, you must discontinue use of the Platform and may request deletion of your account data in accordance with Section 11.

16. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of the rights described in Section 11, please contact our support team. Our support email is provided below as plain text — it is not a clickable link:

Privacy Queries & Data Rights Requests:

Email: [email protected]

Response Timeframe: We aim to respond to privacy-related requests within 30 days of receipt. For complex requests, we may require up to 60 days and will notify you accordingly.

Identity Verification: We may ask you to verify your identity before processing any data access, correction or deletion request to ensure the security of your Personal Data.

Language: Privacy queries should be submitted in English. Urdu assistance may be available through specific support channels — check the Help Centre for current language options.

Contents