WE 999 Privacy Policy – How We Protect Your Data in Pakistan

1 About This Policy

This Privacy Policy applies to all personal data collected and processed by we 999, operating at we999.world. The terms "we 999," "we," "our," and "us" refer to the we 999 platform and its operating company. The terms "you," "your," and "player" refer to any person who accesses, browses, registers on, or interacts with the we 999 platform in any capacity.

By creating a we 999 account, making a deposit, or simply browsing the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This policy is written specifically for our Pakistani user base and reflects how we 999 operates within the digital landscape relevant to Pakistan — including the payment methods, device types, and connectivity conditions typical for Pakistani players.

2 What Data We Collect

We 999 collects personal data in two broad categories: information you provide directly, and information collected automatically as you use the platform.

We 999 does not collect biometric data, social media credentials, or any information beyond what is described in the table above. If we need additional information for a specific compliance purpose, we will notify you directly and explain why it is required.

3 How We Collect Your Data

We 999 collects your personal data through the following channels:

• Registration form: When you create your we 999 account, you provide your name, date of birth, email address, and mobile number directly through the registration form at we999.world.
• Deposit and withdrawal forms: When you initiate a financial transaction on we 999, your payment method details and transaction information are captured through our certified payment gateway partners.
• Identity verification submissions: When we 999 requests Know Your Customer (KYC) documentation, you submit copies of identity documents directly through a secure upload tool within your account dashboard.
• Platform usage: As you use we 999 — browsing the lobby, placing bets, activating bonuses, using live chat — our servers automatically log the technical and activity data described in Section 2.
• Cookies and similar technologies: We 999 uses cookies, session tokens, and local storage on your device to maintain your login session, remember your preferences, and support platform analytics. Details are in Section 6.
• Customer support interactions: When you contact we 999 via live chat or email, the content of those communications is stored in our support system for record-keeping and quality assurance purposes.

4 Why We Use Your Data

We 999 uses your personal data only for clearly defined purposes. Every use of your data has a lawful basis — either contractual necessity, legal obligation, or legitimate interest as described below.

• Account creation and management: Your name, email, and contact details are used to create and maintain your we 999 player account and to communicate essential account information including security alerts, deposit confirmations, and withdrawal notifications.
• Payment processing: Financial data is used exclusively to process deposits and withdrawals between your registered Pakistani payment method and your we 999 balance. We 999 does not use payment data for any purpose other than transaction processing and fraud prevention.
• Identity verification and compliance: We 999 is required to verify the identity and age of players as part of responsible gaming obligations. KYC documents are used solely for this verification purpose and are not shared with third parties except where legally required.
• Fraud detection and security: Technical data — IP addresses, device identifiers, login patterns — is used by we 999's security systems to detect and prevent fraudulent account activity, unauthorised access, and abuse of promotional offers.
• Responsible gaming monitoring: Account activity data — session durations, deposit frequency, bet sizing — is used by we 999 to identify players who may be showing signs of problem gambling and to apply responsible gaming interventions such as deposit limit prompts and support outreach.
• Platform improvement: Aggregated, anonymised usage data is used internally by we 999 to understand how players use the platform, identify technical issues, and improve the gaming experience. This analysis does not identify individual players.
• Marketing communications: If you have opted in to marketing emails or notifications during registration or subsequently via account settings, we 999 will use your email address to send promotional offers and platform updates. You can opt out at any time via the unsubscribe link in any marketing email or by updating your notification preferences in account settings.

5 Who We Share Your Data With

We 999 does not sell your personal data. We share your data only in the limited circumstances described below, and only with partners who are contractually required to handle it with the same level of care as we 999 does.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT processors, and Visa/Mastercard network processors receive the minimum necessary transaction data to process your deposits and withdrawals. These processors operate under their own privacy policies and financial regulations.
• Identity verification services: When KYC verification is required, we 999 may use a third-party document verification service to confirm the authenticity of identity documents submitted. These services process only the specific document submitted for verification and do not retain data beyond the verification period.
• Technology and infrastructure partners: We 999 uses cloud hosting, security monitoring, and platform analytics services provided by established technology companies. These partners process technical and usage data strictly as data processors under we 999's instructions and are prohibited from using player data for their own purposes.
• Legal and regulatory authorities: We 999 will disclose player data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, court order, or applicable law. We 999 will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event that we 999 is acquired by or merged with another company, player data may be transferred as part of that transaction. Any acquiring party will be required to honour this Privacy Policy or provide players with adequate notice before applying different data practices.

6 Cookies & Tracking Technologies

We 999 uses cookies and similar browser-based technologies to make the platform work correctly and to understand how it is used. Here is a clear breakdown of what we use and why:

• Essential cookies: Required for the platform to function. These maintain your login session, keep your account secure, and enable core features like the game lobby and deposit flows. You cannot disable these without breaking the platform.
• Functional cookies: Remember your preferences — such as your preferred language or table stake settings — so you do not have to re-enter them every session on we 999.
• Analytics cookies: Used by we 999's internal analytics to understand which games are most popular, where players encounter difficulties, and how the platform can be improved. Data collected through analytics cookies is aggregated and does not identify individual players.
• Security cookies: Help we 999 detect and block automated bots, credential stuffing attacks, and other suspicious access patterns that could harm player accounts.

We 999 does not use third-party advertising cookies or tracking pixels from social media platforms. You can manage cookie settings in your browser at any time. Note that disabling essential cookies will prevent we 999 from functioning correctly — if you do not accept essential cookies, please do not use the platform.

7 Data Retention

We 999 retains your personal data for as long as your account is active and for such period afterwards as is required to comply with our legal and regulatory obligations. Specific retention periods are as follows:

• Active account data: Retained for the full duration of your we 999 account being active, plus a minimum of 5 years after account closure to meet standard financial record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of 5 years from the date of the transaction in compliance with financial compliance obligations.
• KYC verification documents: Identity documents submitted for verification are retained for 5 years from the date of submission or the date of account closure, whichever is later.
• Support communications: Live chat logs and email correspondence with we 999 support are retained for 2 years from the date of the interaction, or until the associated account is closed, whichever is later.
• Technical / log data: Server logs and technical usage data are retained for 12 months in active systems and may be archived for a further 12 months before deletion.

When data reaches the end of its retention period, it is deleted or anonymised so that it can no longer be associated with your identity. We 999 does not retain personal data beyond what is necessary for legitimate operational or legal purposes.

8 Data Security

We 999 implements a comprehensive set of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• All data in transit between your device and we 999 servers is protected by TLS encryption. HTTP connections are automatically redirected to HTTPS.
• Database storage is encrypted at rest. Access to production databases is restricted to a small number of authorised engineering personnel and requires multi-factor authentication.
• Payment data is handled exclusively through certified payment gateway partners. We 999 does not store full card numbers, CVV codes, or Easypaisa/JazzCash PIN credentials on our own infrastructure.
• We 999 conducts quarterly penetration testing by independent security specialists. Any vulnerabilities identified are patched according to a defined remediation schedule.
• All we 999 staff who handle personal data undergo data protection training and are bound by confidentiality agreements.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that materially affects your personal data, we 999 will notify affected players by email within 72 hours of becoming aware of the breach, and will provide clear guidance on recommended protective steps.

9 Your Rights Over Your Data

As a we 999 player, you have the following rights regarding your personal data. All requests can be submitted to support@we999.world and will be responded to within 14 days:

10 Children's Privacy

We 999 is strictly an adult platform. No person under the age of 18 is permitted to register an account, make a deposit, or participate in any game on we999.world. We 999 does not knowingly collect personal data from individuals under 18.

If we 999 discovers that a player under the age of 18 has registered and provided personal data, the account will be closed immediately, all associated data will be deleted, and any deposits or winnings will be handled in accordance with our Terms and Conditions and applicable law.

If you believe a minor is using a we 999 account — including your own account — please report this immediately to support@we999.world. We treat all such reports as an urgent priority.

11 Third-Party Links

The we 999 platform does not contain links to external websites. All navigation on we999.world directs players to pages within the we 999 domain. This Privacy Policy applies exclusively to data collected and processed by we 999 at we999.world and does not cover the data practices of any payment provider, verification service, or other third party whose services are accessed in the course of using we 999.

For information about how Easypaisa, JazzCash, NayaPay, SadaPay, or any bank handles data shared during payment processing, please consult the respective provider's privacy policy directly.

12 Changes to This Privacy Policy

We 999 may update this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or the data processing activities described herein. The date of the most recent update is always displayed at the top of this page.

When material changes are made to this Privacy Policy — changes that significantly affect how your data is collected, used, or shared — we 999 will notify registered players by email to their registered address at least 14 days before the changes take effect. For minor clarifications and non-material updates, the revised policy will be published on this page without prior notice.

Continued use of we 999 after any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with changes to this policy, you must close your account before the changes take effect.

13 Contact & Complaints

For any questions, requests, or concerns relating to this Privacy Policy or the way we 999 handles your personal data, please contact us through the following channels:

If you believe we 999 has not handled your personal data in accordance with this Privacy Policy and you are not satisfied with our response to your complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. We 999 is committed to cooperating fully with any such investigation.