We Collect
Full name, date of birth, address, email, phone number, identity documents, banking information, deposit and withdrawal history, game activity logs and device identifiers.
Your account information, transaction history and personal data are encrypted and stored securely on our servers. We built this privacy policy to be transparent about what we collect...
This policy covers how play999 collects, uses and protects information when you create an account, deposit funds, withdraw winnings or interact with our platform. We collect your name, email, phone number, identity verification documents and payment method details so we can deliver your account, process deposits through JazzCash, Easypaisa, SadaPay and Raast, and comply with anti-money-laundering obligations in supported regions. We do
not sell your data to third parties. Your information is used only for account administration, fraud prevention, withdrawal verification and platform improvement. Third parties such as payment processors see only the information necessary to complete your transaction. Where local law permits, we retain account records for regulatory compliance. You can request a copy of your personal data or ask for corrections by
contacting our support team.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
All data transmitted between your device and our servers is encrypted using 256-bit SSL certificates, so your login, payment details...
Our infrastructure sits behind multiple firewalls with regular penetration testing. Account databases are isolated from the public internet and monitored...
We handle deposits via PCI-compliant processors. Your JazzCash, Easypaisa, SadaPay and Raast credentials are never stored on our servers—only tokenized...
KYC checks prevent fraud and money laundering. Your identity documents are encrypted, stored separately from your account profile and deleted...
Your session expires after 30 minutes of inactivity. If you access your account from an unfamiliar device or location, we...
Every login, deposit, withdrawal and profile change is logged with timestamps. You can review recent account activity in your security...
Full name, date of birth, address, email, phone number, identity documents, banking information, deposit and withdrawal history, game activity logs and device identifiers.
Your passwords are hashed and never readable by staff. We do not store full bank account numbers—only tokenized payment references. We do not record voice or video from your device.
We use session cookies to keep you logged in and analytics cookies to understand how you use the platform. You can disable non-essential cookies in your browser settings.
Payment processors, anti-fraud vendors and legal authorities (where required by law in supported regions) may see limited data. Marketing partners never receive your personal details.
Account and transaction records are kept for at least 5 years for regulatory compliance. Deleted accounts are anonymized but historical transaction data is retained.
You can access, correct or download your data. You can request deletion of non-regulatory information. Account closure stops collection of new data immediately.
We notify you of material privacy changes via email at least 30 days in advance. Continued use of your account after notification means you accept the updated terms.
We explain what data we collect and why. This policy is written in clear English so you understand exactly how your information flows through our system.
We collect only the personal information necessary to verify your identity, process deposits and withdrawals and comply with anti-money-laundering regulations.
Your data is used only for the purposes stated in this policy. We do not repurpose information or share it with unrelated third parties without your explicit consent.
We comply with data protection laws applicable in supported Pakistani regions. Our privacy practices are designed to respect local regulations and your rights.
If unauthorized access occurs, we notify affected users and relevant authorities within 48 hours. We maintain cyber-insurance and incident response protocols.
We audit our privacy practices quarterly and update this policy to reflect changes in technology, regulations and user feedback. You receive notice before any material change.