e999 Privacy Policy — Your Data, Your Rights

1 About This Policy

e999 is committed to protecting the privacy and security of all personal data entrusted to us by our players, including those based in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan. This Privacy Policy sets out in plain terms what data we collect, what we do with it, and the rights available to you under applicable data protection standards.

This Policy applies to all personal data collected through: the e999.cam website; the e999 mobile application (where available); e999's customer support channels (live chat, email); and any communications between you and e999. It does not apply to third-party websites or services that may be linked to or integrated with the e999 platform.

If you have questions about this Policy or wish to exercise any of your data rights, please contact our support team. Contact details are provided in Section 15 of this Policy.

2 Data We Collect

e999 collects personal data in the following categories, depending on how you interact with the platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify the 21+ age requirement);
• Gender (optional, for personalisation purposes);
• Nationality and country of residence;
• Pakistani CNIC number or passport number (for KYC verification).

2.2 Contact Data

• Email address (primary account identifier and communication channel);
• Mobile phone number (used for OTP two-factor authentication and account alerts);
• Residential address (for identity verification and regulatory compliance).

2.3 Financial & Transaction Data

• Payment method details (JazzCash mobile wallet number, EasyPaisa account, bank account details, Raast ID);
• Deposit and withdrawal transaction history, including amounts in PKR and timestamps;
• Account balance history;
• Source of funds documentation where requested for AML compliance.

2.4 Gaming & Betting Activity Data

• Game session history, wager amounts, bet types, and outcomes;
• Bonus usage and wagering activity;
• Cricket betting market selections and sports betting history;
• Real-time session data including session duration and device used.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens;
• Pages visited, features used, and time spent on each section of e999.cam.

2.6 Communications Data

• Records of all live chat and email communications with e999 support;
• Feedback and survey responses submitted voluntarily;
• Dispute and complaint records.

3 How We Collect Your Data

e999 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting support;
• Automated technical collection: Data collected automatically when you access e999.cam, including cookies, server logs, and analytics scripts;
• Third-party verification providers: Identity and document verification data received from our KYC partners when you submit identity documents;
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK when processing deposits and withdrawals;
• Fraud and AML screening providers: Risk assessment data returned by our anti-fraud and anti-money laundering screening services.

4 How We Use Your Data

e999 uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, device data
Age and identity verification (KYC)	Identity data, document scans
Processing deposits and withdrawals	Financial, identity, contact data
Preventing fraud and money laundering (AML)	Identity, financial, device, gaming data
Providing customer support	Identity, contact, communications data
Responsible gaming monitoring	Gaming activity, financial data
Personalising your gaming experience	Gaming activity, device, technical data
Sending account and transactional notifications	Contact, financial data
Marketing communications (with consent only)	Contact, gaming activity data
Compliance with legal and regulatory obligations	All categories as required

5 Legal Basis for Processing

e999 processes your personal data on one or more of the following legal bases, consistent with internationally recognised data protection standards:

• Contractual necessity: Processing required to perform our obligations under the e999 Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, AML transaction monitoring, and regulatory reporting;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests do not override your fundamental privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit opt-in consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

e999 does not sell, rent, or trade your personal data. We share personal data only with the following categories of trusted third-party service providers, strictly on a need-to-know basis and under binding contractual data protection obligations:

• KYC & identity verification providers: To verify your identity documents and confirm age eligibility during account registration and withdrawal processing;
• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, to process deposit and withdrawal transactions in PKR;
• AML & fraud screening services: To screen transactions and account activity against global watchlists and fraud databases as required by our gaming licence conditions;
• Game content providers: Licensed studio partners who supply games available on the e999 platform may receive limited session and activity data necessary to deliver game content;
• Cloud and hosting infrastructure providers: To host the e999 platform and store data securely on encrypted servers;
• Customer support platform providers: To operate the live chat and ticketing system used by the e999 support team;
• Regulatory and law enforcement authorities: Where e999 is legally required to disclose data to a competent authority pursuant to a lawful order, court order, or regulatory requirement.

7 Cookies & Tracking

e999.cam uses cookies and similar tracking technologies to operate the platform, remember your preferences, and gather analytics about how the site is used. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking site functionality;
• Functional cookies: Remember your language preferences, display settings, and login state between sessions;
• Analytics cookies: Collect anonymised data about page visits, feature usage, and navigation patterns to help us improve the e999 platform. These are only placed with your consent;
• Marketing cookies: Used to deliver relevant promotional content based on your activity on e999.cam. These are only placed with your explicit consent.

You can manage your cookie preferences at any time through the cookie settings panel available in the footer of e999.cam. Withdrawing consent for non-essential cookies will not affect the functionality of core platform features.

8 Data Retention

e999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our gaming licence and applicable regulatory standards:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in line with AML regulatory requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of three (3) years;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years following opt-out.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

9 Data Security

e999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and e999.cam;
• AES-256 encryption at rest for all sensitive data fields stored in our databases;
• Multi-factor authentication (MFA) requirements for e999 staff accessing production systems;
• Role-based access controls limiting data access to authorised personnel only;
• Regular third-party penetration testing and vulnerability assessments of e999 infrastructure;
• Intrusion detection and continuous security monitoring systems;
• Formal data breach response procedures with notification timelines aligned to applicable regulatory standards.

While e999 takes every reasonable precaution to protect your data, no method of electronic transmission or storage is entirely without risk. If you have reason to believe your e999 account has been compromised, please contact support immediately.

10 Your Privacy Rights

Subject to applicable law and regulatory restrictions, you have the following rights in relation to the personal data e999 holds about you:

• Right of access: Request a copy of all personal data e999 holds about you (a "Subject Access Request"). We will respond within 30 days;
• Right to rectification: Request correction of any inaccurate or incomplete personal data held about you;
• Right to erasure: Request deletion of your personal data, subject to our legal retention obligations under gaming and AML regulations;
• Right to restrict processing: Request that we limit how we use your data in certain circumstances, for example while a data accuracy dispute is being resolved;
• Right to data portability: Request a machine-readable copy of personal data you provided to us, where technically feasible;
• Right to object: Object to processing of your data for direct marketing purposes at any time, with immediate effect;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting prior processing.

11 Children & Minors

The e999 platform is strictly for adults aged 21 years and above. e999 does not knowingly collect personal data from any person under the age of 21. If we discover that personal data has been collected from an individual under this age threshold, we will immediately close the relevant account, delete the associated data, and take appropriate follow-up action.

If you believe a minor has registered an e999 account or that your child's data may have been collected by e999, please contact our support team immediately so that we can investigate and take prompt corrective action.

12 International Transfers

As an internationally licensed gaming platform, e999 may transfer your personal data to servers or third-party providers located outside of Pakistan. Where such transfers occur, e999 ensures that appropriate safeguards are in place to protect your data, including: contractual data protection clauses consistent with internationally recognised standards; selection of third-party providers who maintain equivalent security and privacy standards; and transfer impact assessments where required.

By using the e999 platform, you acknowledge that your personal data may be processed in countries outside Pakistan that may have different data protection laws to those in your home jurisdiction.

13 Marketing Communications

e999 may send you promotional emails, SMS notifications, and in-platform messages about new games, bonuses, PSL cricket betting promotions, and special offers — but only where you have provided explicit consent to receive such communications during or after the registration process.

You may opt out of marketing communications at any time by: clicking the "Unsubscribe" link in any marketing email; adjusting your communication preferences within your e999 account settings; or contacting e999 support directly to remove your details from our marketing list.

Opting out of marketing communications will not affect transactional and account notifications, which are necessary for the operation of your e999 account and cannot be disabled while your account is active.

14 Changes to This Policy

e999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal or regulatory requirements, or improvements to our platform. Material changes will be communicated to registered players via the email address on file and/or via a prominent notice on e999.cam, at least seven (7) days before the changes take effect.

The date at the top of this page will always reflect when the Policy was last revised. We encourage you to review this Policy periodically to stay informed about how e999 handles your personal data. Continued use of the platform following the effective date of any revision constitutes acceptance of the updated Policy.

15 Contact & Data Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data e999 holds about you, please contact our dedicated privacy support team. We are available 24 hours a day, 7 days a week via the live chat feature on e999.cam — select "Privacy & Data" from the topic menu for priority routing.

For formal written data subject requests (access, erasure, portability, rectification), please use email. Our support address is displayed as plain text in the footer of every page on this site. Please include "Data Rights Request" in the subject line of your email and provide your registered username and a clear description of your request. We will acknowledge your request within 72 hours and complete it within 30 calendar days.