pg999 Privacy Policy

1 Who We Are

pg999 is an online casino and sports betting platform operating under an internationally recognised gaming licence and accessible to eligible players globally, with a primary focus on the Pakistani market. References to "pg999," "we," "us," or "our" throughout this Policy mean the operating entity behind the pg999 platform, reachable through the support channels described in Section 14.

This Privacy Policy applies to the pg999 website at pg999.lol, all subdomains, and any mobile or app-based versions of the platform we may make available in the future. It governs all personal data processing activities undertaken by pg999 in connection with your use of the platform.

2 Scope of This Policy

This Privacy Policy applies to:

• Registered players holding active or previously active pg999 accounts;
• Visitors to the pg999 website who have not registered but whose browsing activity generates technical data such as IP addresses and device identifiers;
• Individuals who contact pg999 support via live chat, email, or any other channel, regardless of whether they hold an account;
• Individuals who submit identity documentation for KYC verification purposes, including CNIC copies and supporting documents.

This Policy does not apply to third-party websites or services that may be referenced on the pg999 platform. You should review the privacy policies of any third parties independently.

By using pg999, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the platform and contact pg999 support to request account closure.

3 Data We Collect

pg999 collects personal data through three primary channels: data you provide directly, data generated by your use of the platform, and data received from third parties such as payment processors and identity verification services. The table below sets out the categories of data we collect and the context in which they arise.

4 How We Use Your Data

pg999 uses personal data for the following defined purposes only. We do not use your data for purposes incompatible with those listed below without providing prior notice and, where required, obtaining your consent.

• Account Management: Creating and maintaining your pg999 account, authenticating your pg999 login, processing account setting changes, and communicating important account updates.
• Identity Verification (KYC): Verifying your age (21+ requirement), confirming your identity against CNIC documentation, and satisfying anti-money laundering (AML) due diligence obligations under our gaming licence.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20. Confirming that payment accounts belong to the verified account holder.
• Platform Delivery: Providing access to casino games, sports betting markets, live dealer tables, crash games, and all other pg999 features. Personalising the in-platform experience based on your activity and preferences.
• Fraud Prevention & Security: Detecting and investigating suspicious login activity, payment fraud, money laundering, bonus abuse, multi-accounting, and other prohibited conduct. Protecting the integrity of the platform for all players.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators. Applying deposit limits, cooling-off periods, and self-exclusion restrictions as requested or as required by our responsible gaming obligations.
• Legal Compliance: Complying with applicable laws, regulations, court orders, regulatory requests from our licensing authority, and law enforcement requests where legally required.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and improving the quality of support provided.
• Platform Improvement: Analysing aggregated, anonymised gameplay and technical data to improve platform performance, fix bugs, and develop new features. Individual player data is not used for these analyses in identifiable form.
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant pg999 updates via email or SMS — but only where you have not opted out of receiving such communications. You can unsubscribe from marketing messages at any time through your account settings.

5 Legal Basis for Processing

pg999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and pg999 — i.e., operating your account, processing transactions, and providing access to the platform's services.
• Legal Obligation: Processing required to comply with legal and regulatory requirements imposed by our gaming licence, including KYC identity verification, AML transaction monitoring, and data retention mandates.
• Legitimate Interests: Processing undertaken to further pg999's legitimate business interests, including fraud detection, platform security, and aggregated analytics — provided such interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, sending you optional marketing communications. Where consent is the basis, you retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6 Cookies & Tracking Technologies

pg999 uses first-party cookies and similar tracking technologies on the platform. These are small data files placed on your device when you visit the site. We do not deploy third-party advertising cookies or cross-site tracking technologies designed to build advertising profiles.

pg999 uses the following types of cookies:

• Session Cookies: Temporary cookies that maintain your pg999 login session. These expire when you close your browser and do not retain any data after the session ends.
• Preference Cookies: Persistent cookies that remember your platform settings, such as your preferred language, game lobby filters, and display preferences. These improve your experience on returning visits.
• Security Cookies: Cookies used to detect fraudulent login attempts, verify device consistency, and support two-factor authentication flows. These are essential for platform security.
• Analytics Cookies: First-party analytics cookies that record aggregated, anonymised data about how players navigate the platform — which sections are visited most, typical session lengths, and common drop-off points. This data is used solely to improve the platform experience and is never shared with third-party analytics platforms in identifiable form.

You may adjust your browser settings to block or delete cookies. Note that disabling session cookies will prevent you from maintaining a pg999 login session and will significantly impair platform functionality. pg999 does not respond to "Do Not Track" browser signals at this time, as there is no consistent industry standard for their interpretation.

7 Sharing Your Personal Data

pg999 does not sell, lease, or trade your personal data to any third party. We share personal data only in the following defined circumstances, and only to the extent strictly necessary for the purpose described:

• Payment Processors: We share transaction data with the payment service providers you use — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT network validators — to process your deposit and withdrawal instructions. These providers receive only the data needed to execute your specific transaction.
• Identity Verification Providers: We may use third-party KYC verification services to cross-reference CNIC data and confirm identity documents. These providers operate under strict data processing agreements and may not use your data for any purpose beyond the specific verification task.
• Game Software Providers: Casino game software suppliers receive session and wagering data relevant to the games you play, for purposes of game delivery, RNG certification, and jackpot management. These suppliers do not receive identity or financial data beyond what is technically necessary for game operation.
• Regulatory & Licensing Authorities: pg999 may be required to share player data — including KYC documentation, transaction history, and responsible gaming records — with the authority that issued our gaming licence, as part of routine compliance audits or investigations.
• Law Enforcement & Legal Process: We will disclose personal data to government authorities, law enforcement agencies, or courts where legally required to do so by a valid court order, subpoena, or regulatory direction. We will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pg999's assets, player data may be transferred to the successor entity as part of that transaction, subject to equivalent data protection commitments.

In all cases where pg999 shares data with third parties, we require those parties to maintain appropriate data security standards and to use the data only for the specific purpose for which it was shared. We do not permit third parties to use your data for their own marketing or analytics purposes.

8 International Data Transfers

pg999 is an internationally operated platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside Pakistan. This includes countries where pg999's servers, gaming licence authority, and third-party service providers are based.

Where personal data is transferred internationally, pg999 takes steps to ensure that equivalent data protection standards are applied to the transferred data. This may include requiring contractual commitments from the receiving entity, applying encryption to data in transit and at rest, and limiting transferred data to the minimum necessary for the defined purpose.

By using pg999 and agreeing to this Privacy Policy, you acknowledge and consent to the international transfer of your personal data in the manner described in this section.

9 Data Retention

pg999 retains personal data for the periods described below. Once the relevant retention period expires, data is securely deleted or anonymised, except where a legal obligation requires longer retention.

• Active Account Data: Retained for the full duration of your pg999 account's active status. This includes identity data, contact data, transaction history, and gameplay records.
• KYC Documentation (CNIC, selfies, proof of address): Retained for a minimum of five (5) years from the date of submission, as required by our gaming licence's AML compliance framework. This retention period applies regardless of whether your account remains active.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping requirements under our gaming licence.
• Responsible Gaming Records: Self-exclusion, deposit limit, and cooling-off period records are retained for the duration of the restriction plus three (3) years following its expiry, to support re-exclusion processes and demonstrate compliance with responsible gaming obligations.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the communication.
• Closed Account Data: Following voluntary or involuntary account closure, personal data associated with the account is retained for five (5) years before deletion, subject to any longer legally mandated retention periods.
• Technical / Log Data: Server logs and IP data are retained for thirteen (13) months and then deleted or anonymised.

10 Security Measures

pg999 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and the pg999 platform is encrypted using current-generation TLS protocols. The pg999 login page and all financial transaction pages are served exclusively over HTTPS.
• At-Rest Encryption: Sensitive data stored on pg999 servers — including identity documents, CNIC data, financial records, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within pg999's internal systems is restricted to authorised personnel on a need-to-know basis. Administrative access logs are maintained and reviewed regularly.
• Password Hashing: pg999 account passwords are never stored in plain text. They are stored as one-way cryptographic hashes using modern hashing algorithms with per-account salting.
• Two-Factor Authentication: pg999 supports two-factor authentication for account logins, adding an additional layer of security beyond your password for Pakistani mobile number-based OTP verification.
• Fraud Detection Systems: Automated systems monitor transaction patterns, login behaviour, and gameplay activity for indicators of fraud, money laundering, account takeover, and other security threats.

While pg999 takes all reasonable precautions to safeguard your data, no internet-based system is entirely immune to security breaches. In the event of a data breach that is likely to result in significant harm to affected players, pg999 will notify affected individuals and the relevant authorities within the timeframe required by our licensing obligations.

11 Your Privacy Rights

You have the following rights in relation to the personal data pg999 holds about you. To exercise any of these rights, contact pg999 support via live chat or email at [email protected]. pg999 will respond to all data rights requests within 30 calendar days of receipt.

Note that exercising certain rights — particularly the right to erasure — may affect pg999's ability to continue providing services to you, including access to your account and processing of withdrawals, if the data requested to be deleted is required for account operation, legal compliance, or active withdrawal processing.

12 Children's Privacy

pg999 is strictly a platform for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If pg999 becomes aware that a player is under 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the matter will be referred to our licensing authority if required.

If you believe a minor has gained access to the pg999 platform, please contact us immediately via live chat or at [email protected]. Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing online gambling platforms.

13 Changes to This Privacy Policy

pg999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, applicable law, or licensing requirements. Where changes are material — meaning they significantly affect your rights or how your data is used — pg999 will notify registered players via email or an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of pg999 following a notified revision constitutes acceptance of the updated Privacy Policy. If you do not accept a revised Policy, you should discontinue use of the platform and request account closure.

14 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a potential data security concern, you can contact pg999 through the following channels:

• Live Chat: Available 24/7 directly from the pg999 platform. Average response time is under 3 minutes.
• Email: [email protected] — include "Privacy Request" or "Data Rights" in the subject line for prioritised handling.

pg999 will acknowledge all privacy-related requests within 5 business days and provide a full response within 30 calendar days. In complex cases where a 30-day response is not feasible, pg999 will notify you of the extended timeframe and the reason for it.

If you are dissatisfied with pg999's handling of a privacy complaint after contacting us directly, you may escalate your complaint to the regulatory body that oversees our gaming licence. Details of the relevant licensing authority are available upon request through the pg999 support channel.

This Privacy Policy was last reviewed and updated in January 2026. pg999 — Pakistan's online casino and sports betting platform. 21+ only. Gambling involves financial risk. Please play responsibly.