Privacy Policy — nn999 Online Gaming Platform

1. Introduction

1.1 This Privacy Policy applies to all personal data collected, processed, and stored by nn999 ("the Platform", "We", "Us", "Our") in connection with the operation of the nn999 online gaming platform accessible at nn999.one, including all associated sub-pages, products, applications, live casino services, sports betting markets, and support channels.

1.2 nn999 is committed to handling your personal information with respect, transparency, and strict security. This Policy is aligned with internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR), as applied by nn999 as a matter of best practice regardless of the specific jurisdiction in which a Player is located.

1.3 This Privacy Policy should be read in conjunction with the nn999 Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference.

1.4 If you have any questions about this Privacy Policy or how nn999 handles your personal data, please contact the nn999 Data Support team via live chat or by emailing the address listed in Section 15.

2. Data Controller

2.1 For the purposes of this Privacy Policy, nn999 acts as the Data Controller in respect of all personal data collected directly through the nn999 platform. As Data Controller, nn999 determines the purposes and means of processing your personal data.

2.2 nn999 operates under international gaming standards and applies data protection obligations consistent with GDPR principles across all player-facing operations, including those serving players in Pakistan — regardless of whether Pakistani data protection legislation mirrors GDPR in full.

2.3 Where nn999 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers, payment processors, or fraud detection services), those third parties act as Data Processors and are subject to contractual obligations that restrict their use of your personal data to the specific purposes for which they were engaged.

3. Personal Data We Collect

3.1 nn999 collects the following categories of personal data from Players and platform visitors:

3.1 Identity & Registration Data

• Full legal name (as per CNIC or equivalent government-issued identity document);
• Pakistani CNIC number or equivalent national identity number;
• Date of birth (for 21+ age verification purposes);
• Residential address (city and country — Pakistan);
• Pakistani mobile number used for account registration and two-factor authentication.

3.2 Financial & Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers associated with your nn999 account;
• Bank account details (IBAN, account title) for HBL, UBL, Meezan Bank, or MCB withdrawals;
• Deposit and withdrawal transaction history (amounts in PKR, timestamps, payment method);
• Wagering history (game type, stake, outcome — retained for audit and responsible gaming purposes);
• Bonus and promotion claim history.

3.3 Technical & Device Data

• IP address at the time of login and account activity;
• Device type, model, and operating system version;
• Browser type and version;
• Mobile network carrier (e.g., Jazz, Telenor, Zong, Ufone);
• Session duration, page visit logs, and in-platform navigation data;
• Cookies and similar tracking technologies (see Section 9).

3.4 Communications Data

• Live chat transcripts and support ticket correspondence;
• Email correspondence submitted to nn999 support addresses;
• Responses to responsible gaming questionnaires or self-assessment tools;
• Opt-in records for promotional SMS, email, or in-platform notifications.

3.5 KYC & Verification Data

• CNIC scan or photograph submitted during identity verification;
• Selfie or liveness check image submitted for biometric identity confirmation;
• Source-of-funds documentation submitted in response to enhanced due diligence requests.

4. How We Collect Your Data

4.1 nn999 collects personal data through the following channels:

• Directly from you — when you register an nn999 account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion;
• Automatically — through cookies, server logs, and device fingerprinting technologies as you interact with the nn999 platform (see Section 9);
• From third-party verification providers — identity and age verification results returned by KYC service providers following your submission of CNIC documentation;
• From payment processors — transaction confirmation data returned by JazzCash, EasyPaisa, or banking partners following a deposit or withdrawal instruction;
• From anti-fraud services — device reputation scores and IP risk assessments used to detect and prevent fraudulent account activity.

5. Purpose & Legal Basis for Processing

5.1 nn999 processes your personal data only for specific, legitimate purposes. The table below summarises the primary processing activities, the data categories involved, and the legal basis under which each activity is conducted:

6. Data Sharing & Disclosure

6.1 nn999 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing aggregators under any circumstances.

6.2 nn999 may share your personal data with the following categories of recipient, strictly limited to the purposes described:

• KYC & Identity Verification Providers — to verify your age, identity, and CNIC authenticity as required for account activation and withdrawal processing;
• Payment Processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, MCB) — to execute PKR deposit and withdrawal instructions initiated by you;
• Fraud Detection & Anti-Money Laundering Services — to screen transactions and account activity against known fraud patterns and sanctions lists;
• Gaming Platform Technology Providers — software and infrastructure providers who host or power components of the nn999 platform under strict data processing agreements;
• Regulatory & Law Enforcement Authorities — where nn999 is legally obligated to disclose information in response to a lawful regulatory request, court order, or law enforcement inquiry;
• Independent Auditors — for the purpose of game fairness certification and RTP verification; only aggregated, anonymised data is shared for this purpose.

6.3 All third-party service providers engaged by nn999 are required to enter into data processing agreements that restrict their use of your personal data to the specific purpose for which they were engaged and require them to maintain security standards consistent with those applied by nn999.

7. Data Retention

7.1 nn999 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any legal or regulatory obligations that require longer retention periods.

7.2 Standard retention periods applied by nn999 are as follows:

• Active account data — retained for the duration of your active nn999 account relationship plus five (5) years following account closure;
• Financial and transaction records (PKR deposits, withdrawals, wager history) — retained for seven (7) years from the date of each transaction in accordance with standard anti-money laundering record-keeping requirements;
• KYC documents (CNIC scans, selfies) — retained for five (5) years after account closure or the date of the relevant identity verification, whichever is later;
• Support communications and live chat transcripts — retained for three (3) years from the date of the interaction;
• Marketing consent records — retained for the duration of your active marketing consent plus two (2) years following withdrawal of consent;
• Technical logs and IP records — retained for twelve (12) months for security and fraud monitoring purposes.

7.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

8. Data Security

8.1 nn999 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your device and the nn999 platform;
• AES-256 encryption for sensitive personal data stored at rest in nn999 databases;
• Multi-factor authentication requirements for nn999 staff accessing production systems;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Automated anomaly detection and intrusion monitoring on platform infrastructure 24 hours a day;
• Formal data breach response procedures — in the event of a confirmed breach affecting your personal data, nn999 will notify affected Players without undue delay.

8.2 While nn999 takes all reasonable steps to protect your personal data, no internet transmission is completely risk-free. You are responsible for maintaining the security of your own nn999 login credentials and for logging out of your account on shared devices.

9. Cookies & Tracking Technologies

9.1 nn999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, authenticate your session, and analyse aggregate usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies — required for platform operation; they enable session authentication, maintain your login state, and ensure the security of your account. These cookies cannot be disabled without preventing access to the platform.
• Functional Cookies — remember your language preferences, display settings, and game lobby configuration to personalise your nn999 experience across sessions.
• Analytics Cookies — collect anonymised, aggregated data about how Players navigate the nn999 platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance.
• Security Cookies — support fraud detection and bot prevention by recording device fingerprint data and session behaviour patterns.

9.2 nn999 does not use third-party advertising cookies or permit external advertising networks to set cookies on the nn999 platform.

9.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from accessing certain platform features, including account login.

10. Minors & Age Policy

10.1 nn999 is strictly an adult gaming platform. The minimum age requirement is 21 years. nn999 does not knowingly collect personal data from individuals under the age of 21.

10.2 Age verification using a valid Pakistani CNIC is a mandatory step in the nn999 account registration and KYC process. This verification step is in place specifically to prevent underage access to the platform.

10.3 If nn999 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be immediately closed, all personal data associated with the underage account will be securely deleted, and any deposits made will be returned to the original payment source where technically feasible.

10.4 Parents and guardians who believe a minor may have created an nn999 account should contact the support team immediately via live chat. nn999 will investigate and take appropriate action without delay.

11. Your Data Rights

11.1 Subject to applicable law and certain exemptions relevant to gaming platform operations (such as AML record-keeping obligations), you hold the following rights in respect of your personal data held by nn999: