Privacy Policy — pc999 Platform

1 Introduction

pc999 ("we", "us", "our") operates the online gaming platform accessible at pc999.ws (the "Platform"). We understand that privacy matters deeply to our players, and we take our obligations as a data controller seriously. This Privacy Policy sets out, in clear terms, how pc999 handles the personal information of individuals who access, register on, or otherwise interact with the Platform.

This Privacy Policy should be read alongside our Terms & Conditions, which together constitute the full legal framework governing your relationship with pc999. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

2 Data We Collect

pc999 collects personal data in several categories depending on how you interact with the Platform. The categories below describe the types of information we may hold about you:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Residential address, city, and country (e.g., Karachi, Lahore, Islamabad, Faisalabad).
• Email address and mobile phone number used for account registration and communication.
• CNIC number or passport number submitted during KYC verification.

2.2 Financial Data

• JazzCash or EasyPaisa mobile wallet number used for deposits or withdrawals.
• Bank account details (account title, IBAN, bank name — e.g., HBL, UBL, Meezan Bank) provided for withdrawal processing.
• Transaction history including deposit amounts, withdrawal requests, and balances in PKR.
• Payment method verification documents where required under AML obligations.

2.3 Gaming & Behavioural Data

• Game history, bet amounts, session durations, and win/loss records across all product verticals (casino, slots, cricket betting, live games).
• Responsible gaming tool settings including deposit limits, session limits, and any self-exclusion periods applied.
• Bonus redemption history and promotional participation records.

2.4 Technical & Device Data

• IP address and approximate geographic location derived from it.
• Device type, operating system, and browser version used to access the Platform.
• Cookie identifiers, session tokens, and analytics data (described further in Section 8).
• Login timestamps and access logs retained for security and fraud detection purposes.

2.5 Communications Data

• Records of support interactions, including live chat transcripts and email correspondence.
• Feedback, complaints, and dispute records.
• Survey responses and voluntary information provided by you at any point.

3 How We Collect Your Data

pc999 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal request, contacting support, or responding to a promotion.
• Automated collection: Technical and behavioural data collected automatically as you navigate and interact with the Platform, including through cookies and server logs.
• Third-party verification providers: Identity and document verification services used during the KYC process may return supplementary data confirming or contradicting information you have provided.
• Payment processors: Payment partners such as JazzCash, EasyPaisa, and banking institutions may share transaction confirmation data with pc999 as part of the payment processing workflow.
• Regulatory sources: In certain circumstances, pc999 may receive data from or be required to cross-check against government registers, sanctions lists, or regulatory databases as part of our AML and compliance obligations.

4 Purposes & Legal Basis for Processing

pc999 processes your personal data for the purposes listed in the table below. For each purpose, we identify the applicable legal basis on which we rely to process your data lawfully.

5 Data Sharing

pc999 does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Identity verification providers: Third-party KYC service providers who assist pc999 in verifying player identity and age in accordance with our licensing requirements.
• Payment processors and banking partners: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and other approved payment partners who process your deposit and withdrawal transactions.
• Game software providers: Licensed game developers and content aggregators whose games are accessible through the pc999 lobby. These providers receive the minimum session data necessary to operate their games.
• Fraud and AML screening services: Third-party compliance platforms used to screen transactions and accounts against sanctions lists, politically exposed persons databases, and fraud indicators.
• Regulatory and law enforcement authorities: Where pc999 is legally required to disclose personal data to regulators, licensing authorities, courts, or law enforcement agencies, we will do so in accordance with applicable legal process.
• IT and hosting infrastructure providers: Cloud infrastructure and data centre providers who store and process Platform data on behalf of pc999 under strict data processing agreements.

All third parties with whom pc999 shares personal data are contractually required to handle that data securely, use it only for the purposes for which it was shared, and comply with applicable data protection obligations.

6 International Data Transfers

As an internationally licensed platform, pc999 may transfer certain personal data to recipients located outside Pakistan, including in jurisdictions where the Platform's licensing authority or hosting infrastructure is based. Where such transfers occur, pc999 takes appropriate steps to ensure that your data receives a level of protection equivalent to that provided under applicable data protection standards.

These steps may include entering into standard contractual clauses with data recipients, implementing technical safeguards such as encryption in transit and at rest, and restricting the categories of data transferred to the minimum necessary for the relevant purpose.

7 Data Retention

pc999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing authority. The following general retention principles apply:

• Active account data: Retained for the duration of the account relationship and for a period of at least five years following account closure, in accordance with AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five years in accordance with financial regulation and licensing requirements.
• Gaming activity records: Retained for a minimum of three years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Retained for a period of three years from the date of the interaction, or longer if a dispute remains unresolved.
• Marketing consent records: Retained for as long as you remain opted in, and for one year following opt-out to evidence compliance with consent obligations.

When personal data is no longer required, pc999 will securely delete or anonymise it in accordance with our data destruction procedures.

8 Cookies & Tracking Technologies

The pc999 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain the security of your session, and to understand how players interact with our services so we can improve them.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to operate. They maintain your login session, remember your account preferences, and protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember choices you make on the Platform such as language preferences, game lobby layout, and responsible gaming settings.
• Analytics Cookies: Help pc999 understand aggregate usage patterns — which sections of the Platform are visited most frequently, how players navigate between pages, and where technical errors occur. Data collected by analytics cookies is aggregated and does not identify you individually.
• Security Cookies: Used for fraud detection, bot prevention, and account security monitoring. These cookies help pc999 identify unusual patterns that may indicate unauthorised access attempts.

8.2 Cookie Management

You may control non-essential cookies through the cookie preference centre accessible on the Platform. You may also manage cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from accessing your pc999 account. Please note that cookie preference settings are stored per device and per browser — if you switch devices or clear your browser data, you may need to re-apply your preferences.

9 Security Measures

pc999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the pc999 Platform.
• Encryption at rest for sensitive personal data stored on our servers, including identity documents and financial information.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player personal data.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised login.
• Regular security audits and penetration testing conducted by independent security specialists.
• Staff training on data protection obligations and incident response procedures.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pc999 will notify affected individuals and the relevant authority in accordance with applicable legal requirements and without undue delay.

10 Your Data Rights

Subject to applicable law and any overriding legal obligations on pc999 (such as AML record-keeping requirements), you have the following rights in respect of the personal data we hold about you:

• Right of Access: You may request a copy of the personal data pc999 holds about you, together with information about how it is used.
• Right to Rectification: If any personal data pc999 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that pc999 delete your personal data. This right is subject to any overriding legal obligation to retain data (for example, for AML compliance).
• Right to Restriction: You may ask pc999 to restrict processing of your personal data in specific circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you oppose erasure.
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that pc999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where pc999 processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact pc999 via live chat support within your account dashboard or by emailing [email protected]. We will respond to your request within a reasonable timeframe and in any event within 30 days, unless the complexity of the request justifies an extension, in which case we will notify you accordingly.

11 Children & Minors

The pc999 Platform is strictly intended for individuals aged 21 years and above. pc999 does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and pc999 actively works to prevent underage access to its services.

If pc999 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, the data will be deleted or returned to the extent legally permissible, and any funds deposited will be handled in accordance with applicable regulatory guidance.

If you believe that a minor has registered an account on pc999 or that personal data of a minor has been submitted to us, please contact [email protected] immediately so that appropriate action can be taken without delay.

12 Third-Party Links & Services

The pc999 Platform may, from time to time, contain references or links to third-party game providers or informational resources. pc999 is not responsible for the privacy practices of any third-party websites or services. If you navigate away from the pc999 Platform to a third-party site, you do so at your own risk, and we encourage you to read the privacy policy of any site you visit before submitting any personal information to it.

The inclusion of any third-party game provider or service within the pc999 Platform does not constitute an endorsement of that party's data practices beyond what is required by our data processing agreements with them.

13 Marketing Communications

With your consent, pc999 may send you promotional communications about new games, special offers, bonuses, PSL season promotions, and other pc999 services via email and SMS. You will have the opportunity to opt in to marketing communications during the registration process or at any subsequent point through your account settings.

If you no longer wish to receive marketing communications from pc999, you may opt out at any time by:

• Updating your communication preferences within your pc999 account settings.
• Clicking the "unsubscribe" link included in any marketing email sent by pc999.
• Contacting our support team via live chat or at [email protected] with a clear request to opt out.

Please note that opting out of marketing communications does not affect the delivery of service-related or transactional messages, such as deposit confirmations, withdrawal notifications, security alerts, or updates to our terms and policies. These messages are sent on the basis of contractual necessity and are not subject to marketing opt-out.

14 Changes to This Privacy Policy

pc999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our licensing requirements, or our data processing practices. When material changes are made, pc999 will provide advance notice by email or through a prominent notice on the Platform before the revised policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent version of this Privacy Policy was published. We encourage you to review this page periodically to stay informed about how pc999 protects your personal data. Your continued use of the Platform following the publication of any amendments constitutes your acknowledgment of the updated Privacy Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which pc999 handles your personal data, please do not hesitate to get in touch with us through any of the following channels:

• Live Chat Support: Available 24/7 directly within your pc999 account dashboard. This is the fastest way to reach our team for any privacy-related query.
• Email: [email protected] — please include "Privacy Request" in your subject line along with your registered username so your query can be routed to the appropriate team promptly.

We are committed to addressing privacy queries fairly, transparently, and without unnecessary delay. All formal data subject requests received in writing will be acknowledged within three business days and resolved within 30 days wherever possible.