At 999d Casino, your privacy is treated with the same seriousness as your account security. This Privacy Policy explains in plain terms exactly what personal data 999d collects from Pakistani members, why we collect it, how we use and protect it, who we share it with, and what rights you have over it. Please read this document carefully before using 999d.bid.
Privacy at a Glance
These six principles define how 999d Casino approaches the personal data of every Pakistani member. They summarise the full policy below — please read the complete text for binding detail.
999d collects personal data strictly on a need-to-know basis. We collect what is required to operate your account, process payments, verify your identity, and comply with our international gaming licence obligations. We do not collect data speculatively or build marketing profiles beyond what is necessary for platform personalisation.
All personal data held by 999d is protected using 256-bit SSL encryption during transmission and AES-256 encryption at rest. Access to personal data within 999d's systems is role-restricted, logged, and audited. 999d applies the same technical security standards to personal data as it does to financial transaction data.
999d does not sell, rent, or trade personal data belonging to Pakistani members — or any members — to third-party marketers, data brokers, or unrelated commercial entities. Your CNIC details, mobile number, payment information, and gaming history are never sold. Data sharing with third parties occurs only as described in this Privacy Policy.
999d sends promotional communications — including bonus offers, deposit match notifications, and cricket betting alerts — only to members who have opted in to receive them. You can update your communication preferences at any time from your 999d account settings. Opting out of marketing does not affect your ability to use the 999d platform.
As a 999d member, you have specific rights over the personal data we hold about you — including the right to access it, correct inaccuracies, request deletion (subject to legal retention obligations), and object to certain processing activities. These rights are explained in full in Section 9 of this Privacy Policy and can be exercised by contacting 999d support.
999d's data practices are governed by the requirements of our international gaming licence, which mandates specific data collection, retention, and security standards. Our licence requires us to maintain member data records for regulatory audit purposes, to conduct AML transaction monitoring, and to implement responsible gaming monitoring systems — all of which involve personal data processing as described herein.
This Privacy Policy sets out the basis on which 999d Casino collects, uses, stores, shares, and otherwise processes personal data relating to individuals who visit, register on, or otherwise interact with the 999d platform. It applies to all 999d members, prospective members who browse 999d.bid without registering, and individuals who contact 999d's support team.
999d is committed to handling personal data responsibly, transparently, and in accordance with the data protection obligations imposed by our international gaming licence and applicable international privacy standards. This Policy is reviewed and updated periodically to reflect changes in our data practices, regulatory requirements, or the services we offer. The current version is always available at 999d.bid/privacy-policy.
Throughout this Policy, "personal data" means any information that relates to an identified or identifiable natural person. "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
999d Casino operates as the data controller in respect of personal data collected from members and visitors of 999d.bid. As data controller, 999d determines the purposes for which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection standards.
999d operates under an international gaming licence issued by a recognised gaming regulatory authority. Our data processing obligations are defined in part by the requirements of that licence, which mandates specific data collection, retention, security, and audit standards that 999d must maintain as ongoing licence conditions.
999d collects personal data across several categories depending on the nature of your interaction with the platform. The specific data collected from any individual member depends on the services they use and the verification stage their account has reached.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Registration Data | Mobile number, chosen username, date of birth, country of residence | Account registration |
| Identity Verification | CNIC number, CNIC copy (front and back), selfie photograph, proof of address | Withdrawal KYC stage |
| Payment Data | JazzCash/EasyPaisa account number, bank account details (HBL/UBL/Meezan), USDT wallet address, transaction history | Deposit and withdrawal |
| Gaming Activity | Game sessions, bet amounts, win/loss records, game preferences, cricket betting markets accessed | Ongoing platform use |
| Technical Data | IP address, device type, browser type, operating system, session timestamps, cookies | All platform visits |
| Support Communications | Live chat transcripts, support ticket content, email correspondence | Support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, cool-off periods, responsible gaming questionnaire responses | Account management |
| Marketing Preferences | Communication opt-in/opt-out status, bonus claim history, preferred notification channel | Registration and account settings |
999d does not collect special category personal data (such as health data, political opinions, or biometric data) unless specifically required by our licence obligations in the context of responsible gaming monitoring, in which case such processing will be conducted with your explicit consent or under applicable legal authority.
999d collects personal data through several distinct channels and mechanisms:
The majority of personal data 999d holds is provided directly by you during the registration process, identity verification, payment processing, support interactions, and responsible gaming tool configuration. This includes all data you enter into account forms, verification portals, and cashier interfaces on 999d.bid.
When you visit 999d.bid or use the 999d platform, certain technical data is collected automatically through cookies, server logs, and device fingerprinting technologies. This includes your IP address, device identifiers, browser configuration, session duration, pages visited, and interaction patterns within the platform. This data is used for platform security, fraud prevention, and service improvement purposes.
999d may receive personal data about you from the following third-party sources in limited circumstances:
999d processes personal data for specific, documented purposes, each of which is supported by an appropriate legal basis. The following table sets out the primary processing purposes and their corresponding legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract with the Member |
| Identity verification (KYC) | Legal obligation (gaming licence requirement) |
| Payment processing (deposits and withdrawals) | Performance of contract; legal obligation |
| Fraud prevention and platform security | Legitimate interests of 999d and its members |
| Anti-money laundering (AML) monitoring | Legal obligation (licence compliance) |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Platform analytics and improvement | Legitimate interests of 999d |
| Marketing communications (opted-in members only) | Consent |
| Regulatory reporting and audit | Legal obligation (licence compliance) |
999d does not sell, rent, or commercially trade personal data belonging to its members. Data sharing occurs only in the specific circumstances described below, and only to the extent necessary for the stated purpose.
999d engages carefully selected third-party service providers who process personal data on our behalf as data processors, subject to binding data processing agreements that require them to process data only on 999d's documented instructions and to maintain appropriate security standards. These providers include:
999d may disclose personal data to regulatory authorities, law enforcement agencies, and gaming regulatory bodies where required to do so by applicable law, regulatory obligation, court order, or our gaming licence conditions. Such disclosures are made only to the extent required by the applicable legal obligation and are documented internally.
In the event of a merger, acquisition, restructuring, or sale of all or part of 999d's business, personal data held by 999d may be transferred to the relevant successor entity. Members will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, in advance of the transfer taking effect.
999d.bid uses the following categories of cookies and similar tracking technologies:
You may control non-essential cookies through your browser settings or through 999d's cookie preference centre, accessible from the footer of 999d.bid. Please note that disabling functional or analytical cookies may affect certain features of the 999d platform. Essential and security cookies cannot be disabled as they are necessary for platform operation and security.
999d does not use third-party advertising cookies or permit advertising networks to place cookies on 999d.bid for the purpose of tracking members across external websites for advertising purposes.
999d retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:
Where personal data is retained beyond the initial processing purpose solely to fulfil legal or regulatory retention obligations, access to that data is restricted to authorised compliance personnel only and it is not used for any other purpose during the retention period.
As a 999d member, you have the following rights in relation to the personal data we hold about you. These rights may be subject to certain limitations where legal obligations require us to retain or process data notwithstanding your request.
To exercise any of these rights, contact 999d's data protection team at [email protected] with the subject line "Data Rights Request" and your registered mobile number for account verification. 999d will acknowledge your request within 3 business days and respond substantively within 30 days. Where a request is particularly complex or numerous, the response period may be extended by a further 60 days with prior notice to you.
999d implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
As an internationally licensed online gaming platform, 999d may transfer personal data to countries outside of Pakistan and outside the jurisdiction in which our gaming licence is issued. Such transfers occur in the following circumstances:
Where personal data is transferred internationally, 999d ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that applied within 999d's primary operating jurisdiction. These safeguards include contractual data protection clauses in service provider agreements, and selection of providers who operate in jurisdictions with recognised data protection frameworks.
999d Casino is strictly restricted to individuals aged 21 and above. 999d does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory requirement of our gaming licence and is conducted using CNIC-based verification at the withdrawal stage of account operation.
Where 999d discovers that personal data has been collected from an individual who is under 21 years of age, that account will be immediately suspended and all personal data relating to the underage individual will be handled in accordance with applicable data protection law. The account balance will be returned to the originating payment method after deduction of any winnings, which shall be forfeited, and the data will be retained only to the extent required to document the incident for regulatory reporting purposes.
If you are a parent or guardian and believe a minor in your care has registered a 999d account, please contact 999d support at [email protected] immediately. We will investigate and take appropriate action as a matter of priority.
999d's responsible gaming monitoring systems process gaming activity data, deposit patterns, session duration data, and account behaviour data on an automated basis to identify members who may be exhibiting indicators of problem gambling. This monitoring is a mandatory requirement of 999d's international gaming licence and is conducted in the legitimate interests of member welfare and our regulatory compliance obligations.
Where the responsible gaming monitoring system identifies a member as potentially at risk, 999d may take the following actions involving their personal data:
999d sends promotional communications to members — including bonus offers, deposit promotions, cricket betting alerts, new game announcements, and platform updates — only where the member has provided explicit opt-in consent to receive such communications during registration or subsequently through account settings.
Marketing communications from 999d may be delivered via the following channels, subject to individual member preferences: SMS to the registered mobile number; in-platform notifications displayed upon 999d login; and push notifications where the 999d mobile application is used.
You may withdraw consent to receive marketing communications at any time by updating your notification preferences in your 999d account settings, or by requesting opt-out through 999d's live chat support. Opt-out requests are processed within 5 business days. Withdrawing marketing consent does not affect your access to the 999d platform or any of its services.
999d does not conduct email marketing to members and does not share member contact details with third-party marketing organisations for their own promotional purposes. Any SMS communication you receive purportedly from 999d that you did not opt in to receive should be reported to [email protected] immediately.
999d reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, services offered, or applicable privacy law standards. The current version of this Policy, with its effective date, is always available at 999d.bid/privacy-policy.
Where material changes are made to this Policy — meaning changes that affect your rights or the way in which we process your personal data in a significant way — 999d will notify active members through an in-platform notice displayed upon 999d login, and via SMS to the registered mobile number, a minimum of 14 days before the amended Policy takes effect.
Your continued use of the 999d platform following the effective date of an amended Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the amended Policy, you should cease using the 999d platform and contact support to request account closure in accordance with the Terms & Conditions.
For all privacy-related questions, data subject rights requests, complaints about 999d's data processing practices, or to report a suspected data security incident, please contact 999d's dedicated data protection team using the contact details below.
Data protection and privacy enquiries should be directed to: [email protected] (plain text — not a clickable link) — please include "Privacy Enquiry" or "Data Rights Request" in the subject line of your message, together with your registered mobile number, so your request is correctly routed and verified.
999d commits to acknowledging all privacy enquiries within 3 business days of receipt. Substantive responses to data subject rights requests will be provided within 30 days as described in Section 9. For general account and platform support, 999d's 24/7 live chat team is available directly on 999d.bid.
Your Data. Your Platform.
Now you know exactly how 999d handles your personal data — with transparency, security, and genuine respect for your privacy rights. 500+ games, live cricket, and instant JazzCash withdrawals, all on a licensed and secure platform built for Pakistan. 21+