Privacy Policy — How o999 Collects, Uses, and Protects Your Data

1. Introduction

This Privacy Policy ("Policy") is published by o999 ("we", "us", "our", "the Platform") and applies to all individuals who visit, register with, or otherwise interact with the o999 platform at o999.one. This Policy describes the types of personal information o999 collects, the purposes for which it is used, the conditions under which it may be disclosed, and the rights available to individuals with respect to their personal data.

o999 is committed to handling your personal information with transparency, integrity, and in accordance with applicable data protection principles. We collect only the information that is genuinely necessary to provide our gaming and betting services, comply with legal and regulatory requirements, and protect the security of the platform and its users.

This Policy should be read alongside the o999 Terms & Conditions, which govern the overall relationship between you and the platform.

2. Data Controller

For the purposes of this Privacy Policy, o999 acts as the data controller in respect of the personal information it collects and processes about registered players, prospective players, and website visitors. As data controller, o999 determines the purposes and means by which your personal data is processed.

o999 operates the platform at o999.one under an international gaming licence and is subject to the data protection requirements imposed by its licensing jurisdiction, as well as applicable principles of data privacy under international standards.

If you have any questions about how o999 processes your personal data, or wish to exercise any of the rights described in Section 10 of this Policy, please contact the o999 Data Support team via live chat or by email. The support email address is displayed as plain text in the footer of this page.

3. Information We Collect

o999 collects personal information from players through several channels, including the registration process, account usage, payment transactions, customer support interactions, and through automated technical means as you browse the platform. The categories of personal data collected include:

3.1 Registration and Identity Data

• Full legal name as it appears on your Pakistani CNIC;
• Date of birth (for 21+ age verification purposes);
• CNIC number and a copy of your CNIC document (for KYC verification);
• Pakistani mobile number registered to your identity;
• Email address;
• Residential city or area (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi).

3.2 Financial and Payment Data

• JazzCash or EasyPaisa mobile wallet account reference linked to your CNIC;
• Bank account details where bank transfer methods (HBL, UBL, Meezan Bank) are used;
• Transaction history including deposits, withdrawals, and bet settlements in PKR;
• Payment method screenshots submitted for verification purposes.

3.3 Gaming and Betting Activity Data

• Game session history, including games played, wagers placed, and outcomes;
• Sports bets placed, markets selected, odds accepted, and bet outcomes;
• Bonus and promotional offer redemption history;
• Responsible gaming settings applied to your account, including deposit limits and self-exclusion records.

3.4 Technical and Usage Data

• IP address and approximate geographic location;
• Browser type, version, and operating system;
• Device identifiers and screen resolution;
• Pages visited, time spent on pages, and navigation paths;
• Session login and logout timestamps.

3.5 Communications Data

• Records of live chat support interactions;
• Email correspondence between you and the o999 support team;
• Records of any complaints or formal dispute submissions.

4. How We Use Your Data

o999 uses the personal information it collects for the following purposes:

o999 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated screening tools are used (for example, in fraud detection), flagged accounts are reviewed by o999 compliance staff before any action is taken.

5. Legal Basis for Processing

o999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to provide the gaming and betting services you have contracted with o999 to receive, including account management, payment processing, and game delivery;
• Legal Obligation: Processing is required to comply with anti-money laundering regulations, age verification requirements, licensing conditions, and other applicable legal obligations;
• Legitimate Interest: Processing is necessary for o999's legitimate interests in operating a secure, fraud-free platform, preventing misuse, improving services, and ensuring the integrity of gaming outcomes — where these interests are not overridden by your data protection rights;
• Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

o999 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your personal data may however be shared with the following categories of recipients in the circumstances described:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank, to the extent necessary to process your PKR deposits and withdrawals;
• Identity Verification Providers: Third-party KYC service providers engaged to assist o999 in verifying the identity and age of players as required by licensing obligations;
• Game Content Providers: Licensed third-party providers of casino games, live dealer tables, and slot content may receive limited session data necessary to deliver game services;
• Regulatory and Licensing Authorities: o999's licensing authority and any relevant regulatory body that is legally entitled to request player data in connection with its supervisory functions;
• Law Enforcement Agencies: Where o999 is required by a valid legal order, court order, or law enforcement request to disclose personal data, it will do so in accordance with applicable law;
• Fraud Prevention and Security Services: Third-party fraud detection platforms that assist o999 in identifying and preventing account abuse, money laundering, and platform manipulation;
• Professional Advisers: Lawyers, auditors, and accountants engaged by o999 on a confidential basis where disclosure is necessary for the provision of professional services.

7. Cookies and Tracking Technologies

The o999 platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, analyse platform performance, and support fraud prevention functions. The categories of cookies used on o999 include:

• Essential Cookies: Strictly necessary for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing access to the platform;
• Functional Cookies: Store your language preferences, game display settings, and other user interface choices to personalise your experience;
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the o999 platform, including which pages are visited most frequently and where navigation errors occur. This data is used solely to improve platform performance;
• Security Cookies: Support o999's fraud detection and account security systems by tracking login patterns and flagging anomalous behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core platform features. o999 does not use third-party advertising cookies or behavioural profiling cookies for cross-site tracking.

8. Data Security

o999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted to and from the o999 platform;
• Encrypted storage of sensitive personal data, including identity documents and payment references, at rest;
• Role-based access controls ensuring that o999 staff can only access player data to the extent required for their specific job function;
• Regular security audits and vulnerability assessments of the o999 platform infrastructure;
• Two-factor authentication options available to players for additional account protection;
• Incident response procedures in place to identify, contain, and notify affected parties in the event of a data breach within the timeframe required by applicable regulations.

9. Data Retention

o999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or licensing obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your account being open and active on the o999 platform;
• Post-Closure Account Data: Following account closure — whether initiated by you or by o999 — player identity, financial transaction, and gaming activity records are retained for a minimum of five years to satisfy anti-money laundering record-keeping requirements;
• KYC Documents: Identity verification documents (CNIC copies, address proof) are retained for a minimum of five years following account closure or the completion of the transaction for which they were submitted;
• Support Communications: Live chat logs and email correspondence are retained for three years from the date of the interaction;
• Technical and Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it does not relate to identifiable individuals.

Once the applicable retention period expires, personal data is securely deleted or anonymised in accordance with o999's data destruction procedures.

10. Your Rights

Subject to applicable law and the conditions attached to each right, you have the following rights in relation to the personal data o999 holds about you:

To exercise any of these rights, contact the o999 support team via 24/7 live chat or by email (address displayed in the footer). o999 will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, and you will be notified accordingly.

Please note that certain rights may be limited where o999 is required to retain or process data to comply with a legal obligation, or where the exercise of the right would adversely affect the rights and freedoms of others.

11. Children and Minors

The o999 platform is strictly intended for adults aged 21 and above. o999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is an integral part of the o999 registration and KYC process, and all new accounts are subject to age confirmation requirements.

If o999 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted to the extent permitted by law, and the matter will be escalated through o999's underage gambling procedures.

12. Third-Party Services

The o999 platform integrates with third-party services including payment gateways, game content providers, and identity verification systems. When you interact with these integrated services — for example, by initiating a JazzCash deposit or launching a live dealer game — your data may be processed by the relevant third-party provider in accordance with their own privacy policies.

o999 is not responsible for the privacy practices of third-party providers, although it takes reasonable steps to ensure that all third-party partners engaged by the platform operate to a standard consistent with o999's data protection commitments. You are encouraged to review the privacy policies of any third-party services you use in connection with your o999 account.

o999 does not embed third-party social media widgets, advertising networks, or cross-site tracking tools on the platform. All analytics and performance monitoring are conducted using first-party data only.

13. Changes to This Policy

o999 reserves the right to amend this Privacy Policy at any time. When material changes are made, the updated Policy will be published on this page with a revised effective date displayed prominently at the top of the document. For significant changes that materially affect how your data is used, o999 will notify registered players via email or via an in-platform notification.

Your continued use of the o999 platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using the platform and may request account closure by contacting support.

14. Contact and Complaints

If you have any question, concern, or complaint regarding this Privacy Policy or the way o999 handles your personal data, you are encouraged to contact the o999 Data Support team in the first instance:

• Live Chat: Available 24/7 directly on the o999 platform. Average first response time is 3–5 minutes;
• Email: The support email address is displayed as plain text in the footer of this page. Please use the subject line "Privacy Enquiry" and include your registered o999 username and a clear description of your query.

o999 will acknowledge all privacy-related enquiries within 48 hours and aims to provide a full response within 30 days. Where a complaint relates to the processing of personal data and cannot be resolved directly with o999, you may have the right to lodge a complaint with the relevant data protection authority in the jurisdiction applicable to your situation.

For questions related to responsible gaming rather than data privacy, please visit the o999 Responsible Gaming page, which contains dedicated information and self-help tools for players who need support with their gaming behaviour.