8999u Privacy Policy

1 Introduction

8999u ("we", "us", "our", "Company", "Platform") operates the online gaming and sports betting platform at https://8999u.org. In the course of providing our services — which include live casino, cricket sportsbook, slot games, and player account management — 8999u processes personal data belonging to players and prospective players ("you", "your", "Player").

This Privacy Policy is intended to inform you, in a clear and transparent manner, of exactly what personal data 8999u collects, for what purposes it is used, with whom it may be shared, how long it is retained, and what rights you have in relation to that data. This Policy applies to all data processing activities conducted by 8999u in connection with the platform, regardless of whether you access the platform from Karachi, Lahore, Islamabad, Faisalabad, or any other location in Pakistan.

This Policy should be read in conjunction with the 8999u Terms and Conditions, which govern the overall contractual relationship between you and the platform.

2 Data Controller

8999u acts as the data controller in respect of the personal data it collects directly from players through the platform. As data controller, 8999u determines the purposes and means of processing personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

Where 8999u engages third-party service providers — such as game software providers, payment processors, or identity verification partners — those parties may act as data processors on behalf of 8999u, or as independent data controllers in their own right, depending on the nature of the processing. In all cases, 8999u applies contractual safeguards requiring third-party processors to handle personal data to standards no less protective than those set out in this Policy.

3 Personal Data We Collect

8999u collects personal data through three primary channels: data provided directly by you, data generated automatically through your use of the platform, and data received from authorised third-party sources. The categories of personal data collected are as follows:

3.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, CNIC number or passport number as provided during KYC verification.
• Contact Data: Pakistani mobile phone number (used as your primary login identifier), email address (where provided).
• Address Data: Residential address, city (e.g., Karachi, Lahore, Rawalpindi), and province as provided during account registration or KYC verification.
• Financial Data: Mobile wallet identifiers (JazzCash, EasyPaisa), bank account details (HBL, UBL, Meezan Bank) provided for deposit and withdrawal processing. Full payment credentials are not stored by 8999u — these are processed by PCI-DSS-compliant payment service providers.
• Responsible Gaming Data: Deposit limit preferences, self-exclusion requests, and any information you voluntarily provide to the responsible gaming support team.

3.2 Data Generated Through Platform Use

• Technical Data: IP address, device type, operating system, mobile network operator (Jazz, Zong, Telenor, Ufone), browser type, and session identifiers.
• Usage Data: Pages visited, games played, bet history, session duration, and in-platform navigation patterns.
• Transaction Data: Deposit amounts, withdrawal requests, bonus activations, wager history, and win/loss records associated with your account.

3.3 Data Received from Third Parties

• Identity Verification Partners: Results of automated CNIC verification and facial recognition checks conducted by licensed KYC service providers.
• Fraud and Anti-Money-Laundering Screening: Risk scores and flagged indicators received from fraud detection and AML screening services used by 8999u.
• Payment Processors: Transaction confirmation data, payment status updates, and chargeback notifications from JazzCash, EasyPaisa, and banking partners.

4 How We Use Your Personal Data

8999u processes personal data only for specified, explicit, and legitimate purposes. The table below maps each processing purpose to the data categories used:

5 Legal Basis for Processing

8999u processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 8999u — including account creation, gaming service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable regulatory obligations, including anti-money-laundering laws, KYC requirements imposed by 8999u's gaming licence, and financial reporting obligations.
• Legitimate Interests: Processing conducted to protect the platform and its players from fraud, to monitor and prevent problem gambling behaviour, and to maintain the security and integrity of the platform.
• Consent: Processing for direct marketing communications, including promotional SMS and email. You may withdraw consent at any time by contacting the 8999u support team or by opting out via the account preference settings.

6 How We Share Your Data

8999u does not sell, rent, or trade personal data to third parties for commercial purposes. Personal data is shared only in the circumstances described below:

• Game Software Providers: Providers supplying live casino tables, slot games, and other gaming content may receive technical session data required for game delivery. These providers are contractually prohibited from using player data for any purpose other than service delivery.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and associated payment technology partners receive financial and identity data as necessary to process deposit and withdrawal transactions in PKR.
• KYC and Identity Verification Partners: Licensed third-party KYC providers receive identity and address data to conduct verification checks required by 8999u's gaming licence conditions.
• Fraud and AML Service Providers: Third-party fraud detection and AML screening services receive transaction and identity data to perform risk assessments on behalf of 8999u.
• Regulatory Authorities: 8999u may be required to disclose player data to its gaming regulatory authority, financial intelligence units, or law enforcement agencies where required by applicable law or regulatory mandate. Such disclosures are made only to the extent required and in compliance with applicable data protection principles.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by 8999u may have access to player data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

7 Data Retention

8999u retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention standards:

• Active Accounts: All personal data associated with an active 8999u account is retained for the duration of the account's active status.
• Closed Accounts: Following voluntary or enforced account closure, 8999u retains identity, financial, and transaction data for a minimum of five (5) years to satisfy gaming regulatory requirements and anti-money-laundering record-keeping obligations.
• KYC Documentation: Copies of CNIC, passport, and proof-of-address documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Responsible Gaming Records: Self-exclusion records and responsible gaming intervention logs are retained for a minimum of seven (7) years to prevent re-registration during exclusion periods and to support ongoing pattern analysis.
• Technical and Usage Data: Log files and session data are retained for a maximum of twenty-four (24) months unless required longer for a specific ongoing investigation or dispute resolution process.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in accordance with 8999u's data destruction procedures.

8 Data Security

8999u implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the 8999u platform, ensuring that login credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted storage of personal data and financial records at rest, using industry-standard encryption algorithms.
• Role-based access controls ensuring that 8999u personnel can only access personal data categories relevant to their specific job function.
• Multi-factor authentication requirements for all 8999u administrative system access.
• Automated anomaly detection systems monitoring for unusual account access patterns, large withdrawal requests, and other indicators of potential account compromise.
• Regular third-party penetration testing and security audits of the 8999u platform infrastructure.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data security incident affecting your personal data, 8999u will notify affected players within a reasonable timeframe and take all necessary remediation steps.

9 Cookies & Tracking Technologies

8999u uses cookies and similar tracking technologies on its platform for the purposes set out below. A cookie is a small text file placed on your device when you access the platform. You may configure your browser to block or delete cookies; however, doing so may affect the functionality of certain features including the 8999u login session and game loading.

9.1 Categories of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens that maintain your logged-in state during a visit to 8999u. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Remember your platform preferences such as language setting, default game view, and responsible gaming limit configurations.
• Analytics Cookies: Aggregate, anonymised data on platform usage — including pages visited, game sessions initiated, and deposit flows — used by 8999u to identify technical issues and improve the player experience. No individual player identity is associated with analytics data.
• Security Cookies: Used by 8999u's fraud detection systems to identify unusual access patterns and protect against account compromise and automated bot activity.

8999u does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to profile your behaviour across unrelated websites.

10 Your Data Rights

Subject to applicable law and the conditions of 8999u's gaming licence — which may impose obligations to retain certain data irrespective of player requests — you have the following rights in relation to your personal data held by 8999u:

• Right of Access: You may request a copy of all personal data 8999u holds about you. 8999u will respond to verified subject access requests within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by 8999u. Certain corrections may require re-verification of identity.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. 8999u cannot delete data required to be retained under its gaming licence or AML obligations.
• Right to Restrict Processing: In certain circumstances, you may request that 8999u restrict its processing of your data to storage only, pending resolution of a dispute or accuracy challenge.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Object: You may object to processing based on 8999u's legitimate interests where you have grounds relating to your particular situation. You may also object unconditionally to the use of your data for direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent — such as receiving promotional SMS — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the 8999u privacy team via live chat or at [email protected] with the subject line "Data Rights Request – [Your Account ID]". 8999u will verify your identity before processing any data rights request.

11 Minors and Age Restriction

8999u strictly prohibits access to its platform by any person under the age of 21 years. 8999u does not knowingly collect, process, or retain personal data belonging to individuals under 21. If 8999u discovers — through KYC verification, parental notification, or any other means — that personal data belonging to a person under 21 has been collected, 8999u will immediately close the associated account, return any deposited balance to the originating payment source, and delete all personal data associated with the account from its systems within a reasonable timeframe, subject to any legal hold obligations.

If you have reason to believe that a person under 21 has registered an account at 8999u, please notify 8999u immediately via live chat or at [email protected].

12 International Data Transfers

As a platform operating under international gaming authority licensing, certain personal data processing activities at 8999u involve systems and service providers located outside of Pakistan. Where personal data is transferred to jurisdictions that may not provide equivalent data protection standards to those applicable in Pakistan, 8999u ensures that appropriate safeguards are in place, including:

• Standard contractual clauses requiring receiving entities to process data to standards consistent with this Policy.
• Binding processor agreements that restrict the receiving entity's use of personal data to the purposes for which it was shared.
• Transfers only to jurisdictions assessed by 8999u's compliance team as providing adequate data protection through regulatory frameworks or equivalent safeguards.

13 Third-Party Platform Links

The 8999u platform may contain references to third-party game providers or payment services. Where you interact directly with such third-party platforms — for example, by launching a game powered by a specific provider's engine — that provider's own privacy policy governs the personal data they collect from you during that session. 8999u is not responsible for the privacy practices of third-party providers and encourages players to review the privacy policies of any service they interact with.

14 Changes to This Privacy Policy

8999u reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the platform's data processing practices. Material changes to this Policy will be communicated to registered players via their registered mobile number or through an in-account notification no fewer than 7 days before the changes take effect.

The most current version of this Privacy Policy is always available at https://8999u.org/privacy-policy. The effective date displayed at the top of this document reflects the date of the most recent revision. Your continued use of the 8999u platform after any amendment to this Policy constitutes your acknowledgment of the updated terms.

15 Contact and Complaints

For all privacy-related queries, subject access requests, data deletion requests, or complaints regarding 8999u's handling of your personal data, please contact the 8999u privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the platform's support widget. Average first response time: 3–5 minutes.
• Email: [email protected] — use the subject line "Privacy Query – [Account ID]" for fastest routing. Allow up to 24 hours for email responses.

If you are not satisfied with 8999u's response to a data privacy complaint, you may escalate the matter to the relevant data protection supervisory authority in your jurisdiction or to the dispute resolution body associated with 8999u's gaming licence. 8999u commits to cooperating fully with all such escalation processes.