po999 Privacy Policy

po999 ("we", "us", "our") operates the online gaming and sports betting platform accessible at po999.ws (the "Platform"). In the course of providing our services — including account registration, casino gaming, sports betting, payment processing, and customer support — po999 collects and processes personal data relating to registered players ("you", "your").

This Privacy Policy ("Policy") describes in detail what personal data po999 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures in place to protect it, how long it is retained, and what rights you have in relation to your personal data.

By registering an account on po999 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the po999 Platform.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is po999, the operator of po999.ws. As the data controller, po999 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection principles.

po999 has appointed a designated point of contact for data protection matters. All queries, requests, and complaints relating to the processing of your personal data should be directed to the po999 support team at [email protected], clearly marked as a data protection matter in the subject line of your communication.

po999 collects the following categories of personal data from players, depending on how they interact with the Platform:

po999 does not intentionally collect special categories of personal data (such as health information, religious beliefs, or political opinions) and requests that players refrain from including such information in any communication with po999.

po999 collects personal data through the following channels and mechanisms:

• Direct provision by you — Information you submit during account registration, the KYC verification process, payment transactions, support interactions, or when completing any form on the Platform.
• Automated technical collection — Technical data including IP address, device identifiers, and session data collected automatically through cookies and server logs when you access and use the Platform.
• Third-party KYC service providers — Identity verification data returned from third-party KYC and document verification services where po999 uses such services to validate identity documents submitted during account registration.
• Payment processors — Transaction confirmation data and payment status updates received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and other payment processors when you make deposits or withdrawals.
• Game providers — Game session data and outcomes transmitted from third-party game providers whose games are accessible via the po999 Platform.
• Fraud prevention and compliance tools — Risk signals and compliance flags from fraud detection and anti-money-laundering screening services used to protect the platform integrity.

po999 processes your personal data for the following specific and defined purposes:

1. Account creation and management — To register your account, verify your identity, maintain your account settings, and administer your player profile on the po999 Platform.
2. Service delivery — To provide access to the po999 gaming lobby, process bets and game sessions, calculate and credit winnings, and administer bonuses and promotions.
3. Payment processing — To process deposits from and withdrawals to your designated Pakistani payment method, including reconciliation and error resolution.
4. KYC and identity verification — To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that your payment methods belong to you.
5. Legal and regulatory compliance — To fulfil anti-money-laundering (AML) obligations, maintain required transaction records, respond to lawful requests from regulatory or law enforcement authorities, and comply with applicable gaming compliance standards.
6. Fraud prevention and security — To detect and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct on the Platform.
7. Responsible gaming — To monitor gaming activity for signs of problematic behaviour, enforce self-imposed limits and exclusions, and fulfil responsible gaming obligations.
8. Customer support — To respond to your queries, resolve disputes, process complaints, and provide account assistance.
9. Platform improvement — To analyse aggregated usage patterns, identify technical issues, and improve the performance, design, and content of the po999 Platform.
10. Marketing communications — To send you promotional offers, bonus notifications, and relevant Platform updates where you have consented to receiving such communications and have not subsequently opted out.

Each category of processing activity carried out by po999 is grounded in one or more of the following lawful bases:

• Contractual necessity — Processing required to perform the contract between you and po999, including account administration, gaming services, and payment processing. Without this processing, po999 cannot provide the Platform services.
• Legal obligation — Processing necessary to comply with applicable laws, including KYC identity verification, AML transaction monitoring, record retention requirements, and responses to lawful regulatory demands.
• Legitimate interests — Processing carried out for po999's legitimate business interests where those interests are not overridden by your privacy rights, including fraud prevention, security monitoring, responsible gaming analysis, and platform improvement using anonymised analytics.
• Consent — Processing based on your explicit consent, primarily for marketing communications. You may withdraw consent for marketing at any time by contacting [email protected] without affecting the lawfulness of prior processing.

po999 does not sell, rent, or trade your personal data. po999 shares personal data only in the following limited and necessary circumstances:

• KYC and identity verification providers — Specialised third-party services that assist po999 in verifying player identity documents and detecting fraudulent identity submissions. These providers process data solely on po999's instructions and under binding data processing agreements.
• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, Visa/Mastercard, USDT network processors, and other payment providers who need to receive your payment details to process deposits and withdrawals. These providers operate their own privacy policies governing how they handle your financial data.
• Game software providers — Third-party gaming studios whose games are made available through the po999 Platform. These providers may receive your account identifier and session data to administer your game sessions. Game data is not shared with game providers in a form that identifies you by name without necessity.
• Fraud prevention and AML services — Screening and risk-scoring services used to detect fraud, money laundering, and other financial crime. Data shared with these services is limited to what is necessary for risk assessment purposes.
• Regulatory and law enforcement authorities — Where po999 is required by law, court order, or regulatory demand to disclose personal data. po999 will notify you of such disclosures where it is legally permitted to do so.
• Business successors — In the event of a merger, acquisition, or transfer of the po999 business, personal data held by po999 may be transferred to the acquiring entity. You will be notified of any such transfer and the acquiring entity's privacy practices.

All third parties with whom po999 shares personal data are required to handle it securely and in accordance with applicable data protection obligations. po999 does not authorise third-party processors to use your personal data for their own purposes beyond the specific function for which it was shared.

The po999 Platform serves players based in Pakistan. Some of the third-party processors with whom po999 shares data — including game providers, KYC services, and fraud prevention tools — may process data in jurisdictions outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection, po999 will implement appropriate safeguards including:

• Contractual clauses binding the recipient to process data only in accordance with po999's instructions and to maintain security standards equivalent to those applied within po999's own systems;
• Transfer only to recipients in jurisdictions that maintain data protection standards recognised as adequate by applicable frameworks;
• Minimisation of the personal data transferred to the minimum necessary for the specific processing function.

If you wish to obtain details of the safeguards applied to a specific international transfer of your personal data, please contact [email protected] with your request.

po999 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — Essential to the functioning of the Platform, including session management (keeping you logged in during a session), security tokens, and load balancing. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functionality cookies — Store your preferences — such as language settings, display preferences, and recently played games — so that these settings are retained between sessions. Disabling these cookies means your preferences will not be saved.
• Analytics cookies — Collect anonymised or pseudonymised data on how players navigate and use the Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the Platform and is not linked to your individual identity.
• Security and fraud prevention cookies — Help po999 identify suspicious session behaviour and detect automated bots or unauthorised access attempts. These are necessary for Platform integrity and cannot be disabled.

po999 does not use third-party advertising cookies or cookies that track your behaviour across websites outside the po999 Platform. You can manage cookie preferences through your browser settings. Blocking all cookies may significantly impair the functionality of the po999 Platform, including your ability to maintain a logged-in session.

po999 retains personal data for only as long as is necessary for the purposes set out in this Policy, or for as long as is required by applicable law. The following retention periods apply:

• Active account data — Retained for the full duration of the account relationship, from registration until closure.
• Closed account data — Following account closure, core account data (identity, transaction records, KYC documents) is retained for a period of five (5) years to satisfy compliance and AML record-keeping obligations. After this period, data is securely deleted or anonymised.
• KYC and identity documents — Retained for five (5) years from the date of submission or from account closure, whichever is later, in accordance with applicable compliance requirements.
• Payment and transaction records — Retained for five (5) years from the date of the transaction, as required by financial record-keeping obligations.
• Support communications — Retained for two (2) years from the date of the communication, or until the associated complaint is fully resolved, whichever is longer.
• Technical and analytics data — Aggregated analytics data is retained indefinitely in anonymised form. Raw technical logs including IP addresses are retained for up to twelve (12) months.
• Marketing consent records — Retained for the duration of the consent plus three (3) years after consent withdrawal, for evidential purposes.

On expiry of the applicable retention period, po999 will securely delete, destroy, or anonymise the relevant data. Anonymised data that cannot be linked back to an individual may be retained indefinitely for aggregated statistical purposes.

po999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

1. 256-bit SSL encryption — All data transmitted between your browser or mobile device and the po999 servers is encrypted in transit using industry-standard TLS/SSL protocols.
2. Hashed password storage — User passwords are stored exclusively as one-way cryptographic hashes. po999 cannot retrieve or read your password. In the event of a data breach, hashed passwords cannot be reversed to obtain your plain-text credential.
3. OTP two-factor authentication — Additional authentication via one-time password sent to your registered mobile number is applied on login from new devices or after extended inactivity.
4. Access controls — Access to personal data within po999's internal systems is restricted to personnel with a legitimate operational need. Access is logged and reviewed periodically.
5. Automated suspicious activity monitoring — Systems actively monitor for unusual login patterns, high-frequency transaction anomalies, and other signals of unauthorised access or fraud, with automated alerts and account protection triggered where thresholds are exceeded.
6. Security incident response — po999 maintains a documented incident response procedure. In the event of a personal data breach that poses a risk to affected players, po999 will notify affected individuals as required by applicable obligations.

po999 applies age verification as part of its KYC process. Where po999 becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete that data and permanently close the associated account. Any winnings associated with an underage account will be forfeited.

If you believe that po999 may have inadvertently collected personal data from a person under 21, please report this immediately to [email protected] so that appropriate action can be taken without delay.

As a player on po999, you hold the following rights in relation to your personal data. To exercise any of these rights, contact [email protected]. po999 will respond within 30 days of receiving a valid request. po999 may request evidence of your identity before processing any data subject request to protect against unauthorised requests.

po999 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, promotions, new game releases, and other Platform news where you have consented to receiving such communications during account registration or at a subsequent point.

po999 does not share your contact details with third parties for the purpose of direct marketing by those third parties. Marketing communications from po999 will always clearly identify po999 as the sender and will include an opt-out mechanism.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email sent by po999;
• Updating your communication preferences in your po999 account settings;
• Contacting po999 support at [email protected] and requesting removal from marketing communications.

Opting out of marketing communications does not affect transactional communications relating to your account — including deposit confirmations, withdrawal notifications, security alerts, and support responses — which will continue to be sent as they are necessary for account management.

The po999 Platform integrates third-party game software, payment gateways, and support tools. While po999 takes reasonable steps to ensure its third-party partners maintain appropriate data protection standards, po999 is not responsible for the privacy practices of third-party services operating outside the po999 Platform.

The po999 Platform does not contain links to external third-party websites for commercial or advertising purposes. Any third-party services accessed through the Platform — such as payment processor interfaces — operate under their own privacy policies, which players are encouraged to review independently.

po999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, Platform functionality, data processing practices, or operational circumstances. All amendments will be published on this page with the effective date updated accordingly.

Where a proposed amendment materially changes the way po999 processes your personal data — particularly where it may affect your rights or the protections applied to your information — po999 will endeavour to notify registered Account holders via the contact details associated with their accounts in advance of the amendment taking effect.

Continued use of the po999 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised terms, you should cease using the Platform and may request account closure by contacting [email protected].

The current version of this Privacy Policy is always available on the Platform at po999.ws/privacy-policy. If you are reading a cached or printed version, please verify that you are reviewing the most current version online.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by po999, please contact:

When submitting a data protection request, please include your registered mobile number and a clear description of your request. po999 may require you to verify your identity before processing any request that involves accessing, correcting, or deleting personal data.

If you are not satisfied with po999's response to a data protection complaint, you have the right to escalate the matter to any applicable data protection authority or regulator with jurisdiction over po999's processing activities.