s999 Privacy Policy — Your Data, Your Rights, Our Responsibility

s999 (referred to throughout this policy as "s999", "we", "us", or "the Platform") operates the online gaming website accessible at s999.me and all associated services, mobile interfaces, and communications channels connected to that domain.

s999 is the data controller for all personal data collected from players who register accounts, make deposits, place wagers, contact customer support, or otherwise interact with the Platform. As data controller, s999 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

s999 collects different categories of personal data depending on how you interact with the Platform. The table below sets out what we collect and when:

s999 only processes personal data where we have a lawful basis for doing so. The primary bases applicable to our processing activities are:

• Contract Performance: Processing your registration data, managing your account, processing deposits and withdrawals, and providing gameplay services are all necessary to fulfil our contractual obligations to you as an s999 player.
• Legal Obligation: Identity verification (KYC), anti-money laundering checks, and fraud prevention are legal requirements that s999 must comply with. We cannot operate without this processing.
• Legitimate Interest: Technical data collection for platform security, fraud detection, game fairness monitoring, and improving the s999 platform are processed on the basis of legitimate interest — where our operational needs are balanced carefully against your privacy interests.
• Consent: Marketing communications, optional cookies, and any processing not covered by the above are conducted only where you have explicitly opted in. You can withdraw consent at any time without affecting your account.

s999 does not engage in automated decision-making or profiling that produces legal or similarly significant effects without human review. Gaming outcome calculations are RNG-based and are not profiling in the data protection sense.

s999 collects personal data through the following channels:

• Direct Submission: Information you enter into s999 forms — registration, deposit, withdrawal, and support request forms. This is the primary source of identity and contact data.
• Automated Collection: Technical data collected automatically when you access the s999 website — IP address, device fingerprint, browser type, and session data. This collection is managed through server logs and first-party analytics.
• Payment Processors: Confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and bank IBFT integrations confirming transaction completion. s999 receives only the confirmation signals, not raw payment account credentials.
• Identity Verification Services: Where documents are submitted for KYC, verification is conducted by s999's internal compliance team. Third-party verification tools may be used where automated document reading assists the process, under strict data processing agreements.
• Cookies and Similar Technologies: As described in Section 8 of this policy.

s999 shares personal data only in the following strictly controlled circumstances:

• Payment Service Providers: Transaction data is shared with Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners solely for the purpose of processing deposits and withdrawals. All payment partners are required to handle data under terms no less protective than this policy.
• Identity Verification Partners: Where third-party tools assist with document verification, data is shared under formal data processing agreements with strict purpose limitation.
• Technology Infrastructure Providers: Cloud hosting, CDN, and database service providers may process data on s999's behalf as data processors. These providers are bound by contractual obligations to process data only as instructed by s999.
• Legal and Regulatory Authorities: s999 complies with lawful requests from relevant Pakistani regulatory bodies, financial intelligence authorities, and law enforcement agencies. Data is disclosed only to the extent required and only after verifying the legal basis for the request.
• Fraud Prevention: In cases of suspected fraud, account abuse, or money laundering, relevant data may be shared with fraud prevention organisations or law enforcement without prior notice.

s999 maintains a comprehensive security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL Encryption: All data in transit between your browser or app and s999 servers is encrypted using TLS 1.3 with 256-bit encryption keys. This means that even if a transmission were intercepted, it could not be read.
• Encrypted Data at Rest: Sensitive personal data stored on s999 servers — including identity documents, financial records, and account credentials — is encrypted using AES-256 at the storage layer.
• Access Controls: Personal data is accessible only to s999 staff and systems that require it to perform their specific function. Role-based access controls are enforced and all data access is logged.
• Regular Security Audits: s999's security infrastructure is subject to regular penetration testing and independent security audits. Vulnerabilities identified are prioritised and patched according to their severity.
• Password Security: Account passwords are stored as salted cryptographic hashes. s999 staff cannot retrieve your password — only reset it through a verified process.
• Incident Response: In the event of a data breach that poses a risk to player data, s999 will notify affected players within 72 hours of becoming aware of the incident. We will provide clear information about what data was affected and what steps to take.

s999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention periods apply:

After the applicable retention period, data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical analysis — this data cannot be traced back to any individual player.

s999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse how the site is used so we can improve it. The following categories of cookies are used on s999:

Cookie preferences can be updated at any time through your browser settings or by contacting s999 support. Disabling optional cookies will not affect your ability to play games, make deposits, or withdraw winnings.

s999 does not use cross-site tracking cookies or share cookie data with advertising networks. All analytics data collected is processed on s999's own infrastructure and is not sent to third-party advertising platforms.

As a Pakistani player registered with s999, you have the following rights over your personal data. All rights requests are processed free of charge and completed within 30 days:

s999 is an adult gaming platform. Registration is strictly prohibited for individuals under the age of 18. s999 does not knowingly collect personal data from anyone under 18 years old.

Where s999 discovers or is informed that an account has been created by a person under 18, the account is closed immediately, all balances are forfeited, and all personal data associated with the account is deleted as quickly as is consistent with our legal obligations. Any deposits made by minors will be reviewed on a case-by-case basis in consultation with the account holder's legal guardian.

s999 uses age verification checks at registration and during KYC processes to prevent underage access. If you believe a minor has registered on s999, please contact our support team immediately.

s999 reviews and updates this Privacy Policy whenever there is a change to our data processing practices, a change in applicable law, or where we identify that an update would improve clarity for Pakistani players.

Where an update materially changes your rights or how we process your data, s999 will notify you by email to your registered address at least 7 days before the change takes effect. For minor updates — corrections, clarifications, or administrative changes — the updated policy will be published on this page with a revised "Last Updated" date and no separate notification is sent.

Your continued use of s999 after the effective date of any policy update constitutes acceptance of the revised policy. If you disagree with an update, you have the right to close your account before it takes effect. Real-money account balances will be returned to your registered payment method in full.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how s999 handles your personal information, please get in touch with us:

• Email: support@s999.me — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 within your s999 account dashboard
• Response Time: Privacy enquiries are acknowledged within 48 hours and resolved within 30 days

s999's support team includes staff trained specifically on data protection matters. You will not be passed between departments or given generic responses — privacy requests are handled by people who understand both the policy and the Pakistani regulatory context.

For questions about our Terms of Service, see our Terms and Conditions page. For responsible gaming support, see our Responsible Gaming page. For answers to common questions about s999 in general, see our FAQ page.