n 999 Privacy Policy – Pakistan Data Protection Commitment

This Privacy Policy explains how n 999 (referred to throughout as "n 999", "we", "us", or "our") collects, uses, stores, and protects the personal information of players and visitors who use the n 999 platform at n999-bangla.com. It also explains the rights you have in relation to the personal data we hold about you.

n 999 is Pakistan's trusted online betting and gaming platform, built specifically for Pakistani players. We take the privacy and security of our players' data seriously — not because we are legally required to, but because we believe trust is the foundation of a platform that Pakistani players can rely on for the long term. Every data practice described in this Privacy Policy reflects a decision made with that trust in mind.

By registering an account on n 999 or by using our platform, you confirm that you have read this Privacy Policy and that you understand how your personal information will be used. This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming page.

n 999 collects personal data in several ways — information you provide directly when registering or using the platform, information generated automatically by your use of the service, and in some cases, information from third-party payment providers used to process your PKR transactions.

n 999 collects only the data that is necessary for the specific purpose it serves. We do not collect sensitive personal data such as religious beliefs, political opinions, or biometric data. Identity verification through CNIC is required to comply with our age verification and anti-money laundering obligations — this is standard practice for financial services platforms operating in Pakistan.

n 999 uses the personal data we collect for specific, legitimate purposes. We do not use your data for any purpose beyond what is described below, and we do not make decisions about your account using fully automated processes without any human oversight for matters that significantly affect you.

• Account creation and management. We use your identity and contact data to open and maintain your n 999 account, verify your identity and age, and communicate important account information to you.
• Processing deposits and withdrawals. Your financial data is used to facilitate PKR deposits through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments, and to process withdrawal requests to your registered payment methods.
• Delivering the n 999 platform. Your betting and gaming data is used to maintain your bet history, settle wagers, display your account balance, and allow you to track your activity on n 999.
• Fraud prevention and security. Technical and financial data helps n 999 detect and prevent fraudulent activity, including multi-accounting, bonus abuse, and suspicious payment patterns. This protects both the platform and legitimate players.
• Responsible gaming. Your betting and gaming activity data is monitored to support n 999's responsible gaming programme. Unusual patterns of activity that may indicate problem gambling are flagged for review by our responsible gaming team.
• Customer support. Communication data is used to resolve queries, process complaints, and improve the quality of support provided by the n 999 team in Urdu and English.
• Marketing communications. Where you have opted in, we use your contact data to send you relevant n 999 promotions, bonus offers, and sports betting updates. You can opt out at any time.
• Platform improvement. Aggregated, anonymised technical and usage data is used to improve the n 999 platform — identifying pages that load slowly, markets that are confusing, or features that players find most valuable.

n 999 processes your personal data on one or more of the following legal grounds, depending on the specific purpose:

• Contractual necessity. Processing your identity, contact, and financial data is necessary to fulfil the contract between you and n 999 — that is, to provide the betting and gaming service you have signed up for. Without this data, we cannot operate your account.
• Legal obligation. n 999 is required to verify player age and identity, to maintain financial records, and to report certain activities as part of applicable compliance requirements. Processing necessary to meet these obligations is carried out on the basis of legal duty.
• Legitimate interests. We process technical and usage data on the basis of our legitimate interest in maintaining platform security, preventing fraud, and improving our services. We carry out a balancing assessment to ensure that these interests do not override your privacy rights.
• Consent. Where n 999 sends you marketing communications or uses non-essential cookies, we do so only where you have given explicit consent. You can withdraw this consent at any time without it affecting your ability to use the n 999 platform.

n 999 does not sell, rent, or trade your personal data. Full stop. We share data with a limited set of third parties only where it is necessary to operate the n 999 platform, and we require all third parties to handle your data with the same level of care we apply ourselves.

• Payment processors. To process PKR deposits and withdrawals, n 999 shares the minimum necessary payment information with Easypaisa, JazzCash, NayaPay, SadaPay, partner banks, and card payment networks. These providers operate under their own privacy policies and are subject to applicable financial regulations.
• Identity verification providers. n 999 may use third-party services to assist with CNIC verification and age confirmation. These providers receive only the data required for the specific verification task and are contractually prohibited from using it for any other purpose.
• Game developers. The casino and crash games available on n 999 are provided by third-party developers. These providers may receive technical session data (such as a randomised session identifier) to deliver the game. They do not receive your name, contact details, or payment information.
• Platform infrastructure providers. n 999 uses cloud hosting and security services to operate the platform. These providers access data only in their role as infrastructure operators and are bound by strict data processing agreements.
• Legal and regulatory authorities. n 999 may share data with law enforcement or regulatory authorities where required by applicable law, including in connection with fraud investigations or anti-money laundering compliance.

n 999 uses cookies and similar technologies on the platform to ensure it works correctly, to maintain your login session, and to understand how players use the site so we can improve it. The following types of cookies are used on n 999:

• Essential cookies are required for the n 999 platform to function. They maintain your login session, remember items in your bet slip, and enable secure payment processing. These cookies cannot be disabled without breaking the platform.
• Session cookies are temporary and are deleted when you close your browser. They are used to track your activity within a single visit to n 999 to ensure the platform displays correctly and that your account information remains consistent.
• Analytics cookies help n 999 understand which pages and features are most used, how long players spend on different sections of the platform, and where technical issues occur. This data is collected in an aggregated form and does not identify you personally.
• Preference cookies remember your settings — such as your preferred language or display preferences — so you do not have to reconfigure them on each visit to n 999.

You can manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the core features of n 999, but it may affect some platform functionality and the relevance of any on-platform notifications you receive.

n 999 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as applicable laws and regulations require. The following retention principles apply:

• Active accounts. While your n 999 account is active, we retain all account and transaction data necessary to operate the account and provide the service.
• Closed accounts. Following account closure, n 999 retains identity and financial records for a minimum of five years to meet financial compliance and anti-money laundering obligations. After this period, records are securely deleted.
• Betting and transaction records. Detailed transaction records in PKR are retained for a minimum of five years from the date of each transaction to meet record-keeping obligations.
• Support communications. Records of customer support interactions are retained for two years from the date of the interaction to allow effective handling of follow-up queries and dispute resolution at n 999.
• Marketing data. Where you have opted out of marketing, your preference is recorded and retained indefinitely to ensure n 999 does not inadvertently contact you in the future.

When data is no longer required, n 999 deletes it from active systems and ensures that any backup copies are also purged within standard backup rotation cycles.

As an n 999 player, you have the following rights in relation to the personal data we hold about you. n 999 takes these rights seriously and is committed to responding to all requests within 24 hours of receipt.

n 999 invests continuously in the security of our platform and the personal data entrusted to us by Pakistani players. Our security programme includes both technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, and destruction.

• Transport Layer Security. All data transmitted between your device and n 999 uses 256-bit TLS encryption. This means data is unreadable to anyone who might intercept it in transit between your phone or computer and our servers.
• Database encryption. Sensitive fields within our databases, including identity document references and financial account details, are encrypted at rest. Even in the unlikely event of unauthorised database access, this data cannot be read without the encryption keys.
• Access controls. Access to personal data within n 999 is granted on a strict need-to-know basis. Staff members can only access data that is relevant to their specific role, and all access is logged and monitored.
• Multi-factor authentication. All n 999 internal systems that handle personal data require multi-factor authentication for staff access. We also make MFA available to players on their own accounts.
• Penetration testing and vulnerability assessments. n 999 conducts regular third-party penetration tests and automated vulnerability scans to identify security weaknesses before they can be exploited.
• Incident response. n 999 maintains a documented data breach response plan. In the event of a security incident that affects your personal data, we will notify affected players promptly and take immediate steps to contain and remediate the incident.

While n 999 takes all reasonable steps to protect your data, no platform can guarantee absolute security against all possible threats. We encourage all n 999 players to use a strong, unique password for their account and to enable multi-factor authentication where available.

n 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a core part of our registration process, and n 999 takes a zero-tolerance approach to underage gambling.

If n 999 discovers or is informed that a player account belongs to a person under the age of 18, the account will be immediately suspended, all bets will be voided, and any deposited funds will be returned to the payment source. The personal data associated with the underage account will be deleted from our systems as soon as any regulatory obligations relating to the incident have been fulfilled.

If you believe that a person under 18 has registered an account on n 999, please contact our support team immediately at support@n999-bangla.com. We will investigate and act promptly on any such report.

n 999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our privacy practices. When we make material changes — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify registered players at least seven days before the changes take effect, via email or in-platform notification.

Minor clarifications, corrections of typographic errors, or changes that do not materially affect player rights may be made without prior notice. The effective date shown at the top of this page will be updated on any revision.

We recommend bookmarking this page and reviewing the n 999 Privacy Policy periodically. Continued use of the n 999 platform after any update to this policy constitutes acceptance of the revised version.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern relating to n 999, please get in touch. Our privacy team responds in both Urdu and English and is available around the clock.