p9990 Privacy Policy

p9990 ("we," "us," "our," or "the Company") operates the online casino and sports betting platform accessible at p9990.app. This Privacy Policy sets out how we collect, use, disclose, store, and protect personal information provided to us by users ("you," "your," or "the Player") in the course of using our platform.

We understand that Pakistani players trust us with sensitive personal data, including CNIC details, mobile wallet credentials, and financial information. We take that trust seriously. This policy is designed to be transparent about our data practices so you can make informed decisions about your relationship with p9990.

By registering for or continuing to use the p9990 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Privacy Policy is incorporated by reference into our Terms and Conditions.

p9990 collects personal data through several channels: directly from you during registration and KYC, automatically through your use of the platform, and in limited cases from third-party verification and payment service providers. The categories of personal data we collect are as follows:

Identity & Contact Data

• Full legal name as it appears on your CNIC.
• Pakistani CNIC number and a copy of your CNIC document.
• Date of birth (used primarily to verify you are 21 years of age or older).
• Registered Pakistani mobile number.
• Email address.
• Residential address and, where required, proof of address documentation.

Financial Data

• Mobile wallet account details (JazzCash, EasyPaisa, SadaPay) associated with your registered mobile number.
• Bank account details (HBL, UBL, Meezan Bank, Allied Bank) submitted for withdrawal processing.
• USDT TRC20 wallet addresses used for cryptocurrency transactions.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods used.

Platform Usage Data

• Login timestamps, session durations, and IP addresses.
• Device type, operating system, browser type, and screen resolution.
• Betting history, game history, and wagering patterns.
• Bonus claims, promotional code usage, and VIP programme activity.
• Customer support interactions, including live chat transcripts and email correspondence.

Technical Data

• Cookies and similar session identifiers (see Section 07 for full details).
• Geolocation data at the city or region level, derived from IP address, to assist with fraud detection and regulatory compliance.
• Device fingerprint data used for fraud prevention and account security.

p9990 uses your personal data for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes for which it was collected. The following table summarises our primary data uses:

p9990 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Responsible gaming alerts generated by automated systems are always reviewed by a trained member of our team before any account restriction is applied.

p9990 processes personal data only where we have a valid legal basis to do so. The four legal bases we rely on are:

• Contract Performance: Processing necessary to provide our services to you, including account registration, payment processing, and customer support.
• Legal Obligation: Processing required by applicable law, including anti-money laundering (AML) regulations, know-your-customer (KYC) obligations, and reporting to licensing authorities. This is non-negotiable — if you do not provide the data required for KYC, we cannot allow withdrawals from your account.
• Legitimate Interests: Processing that serves p9990's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gaming monitoring, and internal analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

p9990 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Processors: We share financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processing partners solely to complete deposit and withdrawal transactions you have initiated.
• KYC & Identity Verification Providers: We may use third-party identity verification service providers to assist with CNIC authentication and document verification. These providers act as data processors under contract with p9990 and are not permitted to use your data for their own purposes.
• Game Software Providers: Certified third-party game providers whose games are hosted on the p9990 platform may receive limited gameplay data (session identifiers and bet amounts) necessary to operate the games. These providers do not receive your identity or financial data.
• Regulatory & Law Enforcement Authorities: p9990 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required by law, a valid court order, or our licensing obligations. We will notify you of such disclosures where we are legally permitted to do so.
• Fraud Prevention Networks: p9990 may share data with industry fraud prevention databases to identify and prevent fraudulent activity, money laundering, and abuse of promotional offers across the online gaming industry.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of p9990's business, your personal data may be transferred to the acquiring entity. We will notify registered users in advance of any such transfer that materially affects their privacy rights.

p9990 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

p9990 uses cookies and similar technologies (local storage, session tokens) on the p9990.app platform. Cookies are small text files placed on your device that help us deliver a functional, secure, and personalised experience.

Types of Cookies We Use:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. You cannot opt out of these cookies while using p9990.
• Functional Cookies: Remember your preferences such as language settings, odds format, and game lobby layout. These improve your experience but are not essential to core platform operation.
• Analytics Cookies: Used by p9990's internal analytics system to understand how players navigate the platform, which features are used most, and where technical errors occur. We do not use Google Analytics or other third-party analytics platforms that transmit your data to external servers.
• Security & Fraud Prevention Cookies: Device fingerprinting and behaviour analysis tokens used to detect suspicious login attempts, multiple-account patterns, and bot activity. These are strictly necessary for platform security.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your p9990 account. Most modern browsers allow you to view, manage, and delete cookies through the browser's privacy settings menu.

p9990 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser or app and p9990 servers uses TLS 1.2 or higher, providing 256-bit encryption. HTTPS is enforced across all pages and API endpoints with HSTS headers applied.
• Encryption at Rest: Sensitive data fields — including CNIC numbers, payment method details, and KYC document files — are encrypted at rest using AES-256 encryption on p9990's database servers.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Role-based access controls are enforced across all internal systems, and all access to KYC documents is logged and audited.
• Infrastructure Security: p9990's servers are hosted in secure data centres with physical access controls, fire suppression systems, and redundant power supplies. Regular penetration testing is conducted by independent security professionals.
• Password & Authentication Security: Player passwords are stored using industry-standard one-way hashing algorithms. p9990 supports two-factor authentication (2FA) for player accounts and requires it for all internal staff accounts.
• Incident Response: p9990 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify affected players within 72 hours of discovery, where technically feasible, and take immediate remediation steps.

As a p9990 player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our compliance team using the contact details in Section 13.

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request, free of charge for one request per calendar year.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Corrections to identity data may require re-submission of KYC documentation for verification purposes.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain (e.g., AML records for five years post-account closure).
• Right to Restriction of Processing: You may request that we limit how we use your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format (CSV or JSON) for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. We will cease marketing communications immediately upon receipt of an opt-out request.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

p9990 operates a strict 21+ policy. Our platform is not directed at, and we do not knowingly collect personal data from, persons under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If p9990 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all balances will be forfeited in accordance with our Terms and Conditions, and all associated personal data will be deleted as promptly as possible, subject to any legal obligations requiring us to retain records of the underage access for regulatory reporting purposes.

If you are a parent or guardian and believe your child has registered on the p9990 platform, please contact us immediately at [email protected] so we can investigate and close the account without delay.

p9990 operates under an international gaming licence and its infrastructure may involve data processing in jurisdictions outside Pakistan. When your personal data is transferred to or processed in another country, p9990 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international transfers include:

• Contractual data protection clauses incorporated into agreements with all third-party processors located outside Pakistan, including KYC verification providers and payment gateway partners.
• Selecting service providers based in jurisdictions with recognised data protection frameworks where possible.
• Limiting the scope of data transferred to the minimum necessary for the specific processing purpose.

Pakistani players' financial data processed through JazzCash, EasyPaisa, HBL, UBL, and other Pakistani payment partners remains within Pakistan's domestic banking infrastructure and is not subject to international transfer as part of p9990's payment processing operations.

p9990 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the revised policy takes effect.

The "Last Reviewed" date at the top of this page indicates when the policy was most recently updated. We encourage you to review this Privacy Policy periodically to stay informed about how p9990 protects your personal data. Your continued use of the p9990 platform after the effective date of any revision constitutes your acceptance of the updated policy.

Previous versions of this Privacy Policy are available on request from our compliance team. If you have concerns about any proposed changes, please contact us before the revised policy takes effect using the contact details in Section 13.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way p9990 handles your personal data, please contact our compliance team through the following channels:

• Email: [email protected] — please include "Privacy Request" in your subject line for fastest routing.
• Live Chat: Available 24/7 through the p9990.app platform. Our support agents can log a formal privacy complaint on your behalf and escalate it to the compliance team.

Privacy requests and complaints are handled by p9990's dedicated compliance team, who operate independently of our customer support and marketing functions. All complaints are acknowledged within 5 business days and resolved within 30 calendar days wherever possible.

If you are not satisfied with p9990's response to a privacy complaint, you may escalate the matter to the independent dispute resolution service available under p9990's licensing framework. Details of the applicable escalation route will be provided in our response to your complaint.