Privacy Policy

This Privacy Policy ("Policy") sets out the data processing practices of pm9999 ("pm9999", "we", "us", "our") in respect of personal data collected from users ("User", "you", "your") of the online sports betting and casino information platform operated at https://pm9999.cam (the "Platform").

pm9999 is an independent information and educational resource platform. We provide guides, payment method overviews, responsible gambling resources and account management information for players across Pakistan. We are not a casino or sportsbook operator and do not directly accept deposits or conduct gambling operations.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling page. By using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, the following definitions shall apply:

3.1 Registration and Account Data

When you create an Account on the Platform, we collect:

• Full legal name as it appears on official identity documentation;
• Email address and chosen username;
• Date of birth (to verify the 18+ minimum age requirement);
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi) and postal code;
• Phone number (where provided during registration);
• Account login credentials (passwords are stored in irreversibly hashed form and are never stored in plaintext).

3.2 Identity Verification (KYC) Data

As part of mandatory Know Your Customer (KYC) compliance, we may collect and process copies of:

• Pakistani CNIC (both sides) or a valid international passport;
• A recent proof of residential address (utility bill, bank statement or official correspondence);
• A live selfie or liveness verification image;
• Payment method verification documentation (e.g., wallet screenshots or bank statement excerpts).

3.3 Financial and Transaction Data

We collect records of deposit and withdrawal requests, transaction amounts in PKR, selected payment methods and associated transaction reference numbers. Full payment card numbers are never stored by pm9999 — payment processing is handled by the operator's PCI-compliant payment infrastructure.

3.4 Technical and Usage Data

When you access the Platform, we automatically collect:

• IP address and approximate geographic location;
• Browser type, version and operating system;
• Device type (mobile, tablet, desktop) and screen resolution;
• Pages visited, time spent on each page and navigation paths;
• Referral source (the URL from which you arrived at the Platform);
• Session duration and login timestamps.

3.5 Communications Data

If you contact our support team via email or live chat, we retain records of that correspondence, including the content of messages, timestamps and any attachments submitted, for a period necessary to resolve the matter and comply with applicable record-keeping obligations.

pm9999 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal request, or contact our support team;
• Automatically — through cookies, server logs and analytics tools when you browse the Platform;
• From third-party identity verification providers — where we engage specialist KYC service providers to verify identity documentation on our behalf;
• From payment processors — transaction confirmation data shared by the operator's payment gateway to reconcile account transactions;
• From fraud-prevention and AML screening services — where required by compliance obligations.

We process your personal data only for specific, lawful and clearly defined purposes. The table below sets out our principal processing activities:

pm9999 processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between pm9999 and the User — for example, to create and maintain an Account, process transactions and provide customer support.
• Legal obligation: Processing is required to comply with applicable legal requirements, including KYC/AML obligations, age verification mandates and regulatory reporting duties.
• Legitimate interests: Processing is necessary for the legitimate interests of pm9999, including fraud prevention, platform security, responsible gambling monitoring and service improvement, provided such interests are not overridden by the User's fundamental rights.
• Consent: Where no other legal basis applies — for example, for optional marketing communications — pm9999 will request your explicit, informed and freely given consent prior to processing. You may withdraw consent at any time by contacting us at [email protected].

7.1 With Whom We Share Data

pm9999 does not sell, rent or trade personal data. We may share your data with the following categories of recipients only where necessary and lawful:

• KYC and identity verification providers: Specialist third-party services that verify identity documents on our behalf under strict data processing agreements.
• Payment processors and financial institutions: To facilitate deposits and withdrawals. Payment providers including those familiar to Pakistani users (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are referenced for context only — data shared with payment providers is limited to what is strictly necessary for transaction processing and subject to the provider's own privacy terms.
• Fraud prevention and AML services: Third-party screening services used to detect and prevent money laundering, fraud and other criminal activity.
• Cloud hosting and infrastructure providers: Providers that host Platform data in secure, encrypted data centres.
• Analytics service providers: Providers of anonymised or aggregated Platform usage analytics to help us improve the user experience.
• Legal and regulatory authorities: Where we are required to disclose data by law, court order or regulatory direction.

7.2 No Third-Party Marketing

pm9999 will never share personal data with third parties for their own independent marketing purposes without your explicit prior consent.

pm9999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations and resolve any outstanding disputes.

As a general guide, our retention periods are as follows:

• Account data: Retained for the duration of the Account relationship and for a period of up to five (5) years following Account closure, subject to applicable legal requirements.
• KYC and identity documents: Retained for the period required by applicable AML regulations, typically five (5) years from the date of verification or Account closure, whichever is later.
• Transaction records: Retained for the period required by applicable financial record-keeping regulations.
• Technical and usage data: Typically retained in identifiable form for up to thirteen (13) months before anonymisation or deletion.
• Support correspondence: Retained for up to three (3) years from the date of resolution of the relevant matter.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

pm9999 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies may be used:

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect Platform functionality. For detailed cookie management instructions, refer to your browser's help documentation.

pm9999 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Our security framework includes:

• TLS/SSL encryption on all data transmissions between your device and our servers;
• AES-256 encryption for sensitive data stored at rest;
• Password hashing using a modern, salted one-way hashing algorithm — plaintext passwords are never stored;
• Two-factor authentication (2FA) available for all User accounts;
• Role-based access controls ensuring staff can only access data necessary for their specific function;
• Regular security audits and penetration testing of Platform infrastructure;
• DDoS protection and real-time intrusion detection systems;
• Secure data destruction procedures for physical and digital media.

Users play an important role in maintaining data security. You must keep your login credentials confidential, use a strong unique password, enable 2FA where available and report any suspected security breach to pm9999 without delay.

Subject to applicable data protection law and certain statutory exemptions, you hold the following rights in respect of your personal data held by pm9999. To exercise any of these rights, please contact us at [email protected] with your registered Account email address and a clear description of your request.

pm9999 will respond to rights requests within a reasonable timeframe, typically within 30 days. We may need to verify your identity before processing a request. In complex cases we may extend this period by a further 60 days with notice.

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction and applicable local law. pm9999 does not knowingly collect, process or retain personal data from individuals under the minimum age threshold.

During registration, we collect date of birth to verify minimum age eligibility. Where KYC verification reveals that a User is below the minimum age, the Account will be immediately suspended and any associated data will be securely deleted in accordance with applicable legal requirements.

pm9999 may transfer personal data to, or process data on servers located in, jurisdictions outside Pakistan. Where such transfers occur, we take appropriate steps to ensure that personal data receives a level of protection consistent with applicable data protection standards.

Such steps may include:

• Transferring data only to jurisdictions that provide an adequate level of data protection;
• Implementing contractual safeguards (such as data processing agreements) with third-party processors in non-adequate jurisdictions;
• Applying encryption and pseudonymisation techniques to data prior to cross-border transfer where feasible.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence. If you have questions about specific transfer mechanisms, please contact us at [email protected].

The Platform may reference third-party operators, payment services and information resources. pm9999 does not control the privacy practices of any third party and this Policy does not apply to third-party websites or services.

Payment providers referenced on pm9999, including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, are mentioned for contextual purposes only. These entities are independent data controllers in their own right and their data collection and processing activities are governed by their own privacy policies. pm9999 bears no responsibility for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party service you access in connection with use of the Platform, particularly before submitting any personal data.

pm9999 reserves the right to update or amend this Privacy Policy at any time. Where amendments are made, the revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material — for example, where we introduce a new purpose for processing personal data — we will provide reasonable advance notice to registered Users via email or an on-Platform notification.

Your continued use of the Platform following the publication of an amended Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you should discontinue use of the Platform and request closure of your Account.

If you have any questions about this Privacy Policy, wish to exercise your data rights or want to raise a data-related complaint, please contact the pm9999 Data Privacy team using the details below:

Complaints to Supervisory Authorities

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. pm9999 will cooperate fully with any investigation by a competent supervisory authority.