e999 Privacy Policy

1 About This Policy

This Privacy Policy is issued by e999 ("e999", "we", "us", "our") in respect of all personal data collected from players and visitors interacting with the e999 online casino and sportsbook platform accessible at https://e999.blog and any associated mobile or digital services.

This Policy explains what personal data we collect, the purposes for which we process it, the parties with whom we may share it, how long we retain it, how we protect it, and the rights you hold regarding your personal information. This Policy forms part of e999's overall legal framework alongside the Terms & Conditions and Responsible Gaming Policy.

By registering for an e999 account, accessing the Platform, or submitting personal information through any e999 service channel, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Personal Data We Collect

e999 collects the following categories of personal data from players and platform visitors:

e999 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required for responsible gaming assessments and only with explicit consent.

3 How We Collect Your Data

e999 collects personal data through the following methods:

• Direct Submission: Information you voluntarily provide during account registration, KYC submissions, deposit and withdrawal requests, contact form submissions, and live chat or email interactions with our support team.
• Automated Collection: Technical data and usage data collected automatically through cookies, server logs, and platform analytics tools as you navigate and interact with the e999 Platform.
• Payment Processors: Financial data received from our payment processing partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) upon completion of deposit and withdrawal transactions.
• Identity Verification Services: Confirmation data received from third-party identity verification providers engaged to assist with KYC procedures, including CNIC validity checks.
• Fraud Prevention Services: Risk signals and device fingerprinting data from fraud detection services used to protect the platform and players from fraudulent activity.

4 How We Use Your Personal Data

e999 uses collected personal data for the following defined purposes:

4.1 Account Management

To create, verify, maintain, and manage your e999 account; to process your login requests; to communicate account status changes; and to respond to your support queries and complaints.

4.2 Payment Processing

To process PKR deposits from and withdrawals to your JazzCash, EasyPaisa, or bank account; to verify that payment accounts belong to the registered account holder; and to maintain an accurate financial transaction record as required under our gaming license.

4.3 Identity & Age Verification (KYC)

To verify that you are who you say you are and that you meet the 21+ age requirement for use of the e999 Platform. KYC verification is a regulatory obligation under our international gaming license and is not optional.

4.4 Regulatory Compliance

To meet anti-money laundering (AML) obligations, counter-terrorist financing (CTF) requirements, and gaming license regulatory reporting obligations. Transaction monitoring and suspicious activity reporting are legal requirements of our operating license.

4.5 Platform Security & Fraud Prevention

To detect and prevent account fraud, bonus abuse, money laundering, identity theft, and other prohibited conduct. Technical data and usage patterns are analysed for anomalies that may indicate fraudulent or abusive activity.

4.6 Responsible Gaming Monitoring

To identify players who may be experiencing gambling-related harm based on behavioural indicators in their transaction and usage data, and to implement responsible gaming interventions where appropriate under our gaming license obligations.

4.7 Marketing Communications

To send promotional offers, bonus notifications, and platform updates via SMS or email to players who have opted in to marketing communications. You may opt out at any time through your account settings or by contacting support. Marketing communications are never sent to self-excluded players.

4.8 Platform Improvement

To analyse aggregated and anonymised usage data for the purpose of improving platform features, game selection, payment processing efficiency, and customer support quality. No individual player is identified in platform improvement analysis.

5 Legal Basis for Processing

e999 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the agreement between e999 and you as a registered player, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with gaming license regulatory requirements, AML/CTF obligations, KYC requirements, and financial record-keeping obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your individual rights.
• Consent: Processing for marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting processing conducted prior to withdrawal.

6 Data Sharing & Disclosure

e999 does not sell, rent, or trade personal player data to third parties. Data is shared only in the following strictly defined circumstances:

6.1 Authorised Service Partners

e999 engages third-party service providers to support platform operations, including payment processors, identity verification services, fraud detection providers, cloud hosting providers, and customer support software vendors. These providers process player data only on e999's instruction and under binding data processing agreements that prohibit independent use of player data.

6.2 Regulatory & Legal Disclosure

e999 may disclose personal data to our gaming license regulatory authority, law enforcement agencies, financial intelligence units, or courts of law where required or compelled by applicable legal obligation, regulatory directive, or valid court order. e999 will, where legally permitted, notify the affected player of any such disclosure.

6.3 Business Transfer

In the event of a merger, acquisition, or transfer of all or substantially all of e999's business assets to a successor entity, player data may be transferred as part of that transaction. Players will be notified in advance of any such transfer and will retain all privacy rights under this Policy or its successor.

7 Payment Data & Financial Security

Financial data associated with your e999 account — including your JazzCash and EasyPaisa account numbers, HBL, UBL, and Meezan Bank account details, and transaction history — is handled under the following specific protections:

• Payment credentials are transmitted exclusively over encrypted HTTPS connections and are never stored in plain text on e999 systems.
• Full payment account numbers are masked in all internal records and support interfaces, with only partial digits visible for identification purposes.
• Player funds are held in segregated accounts separate from e999's operational accounts. Your PKR balance represents a real liability of e999 to you, not a pool of operational funds.
• All financial transactions are logged with immutable timestamps and are subject to regular reconciliation audits as required by our gaming license.
• Withdrawals are only processed to payment accounts registered in the name matching your verified e999 account — ensuring your funds can only reach you.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small data files stored on your device by your web browser when you visit the e999 Platform. e999 uses cookies to maintain your session state, remember your preferences, and protect the platform from fraud and abuse.

8.2 Types of Cookies e999 Uses

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, login persistence, and security tokens. These cannot be disabled without preventing platform access.
• Functional Cookies: Remember your language preference, display settings, and responsible gaming tool configurations across sessions.
• Analytical Cookies: Collect anonymised data about how players navigate and use the platform to help e999 improve functionality and user experience. No individual player is identified in analytical data.
• Security Cookies: Used by fraud prevention systems to detect and prevent suspicious login attempts, account takeovers, and bot activity.

8.3 What e999 Does Not Use

e999 does not use third-party advertising cookies, behavioural profiling cookies, social media tracking pixels, or any cookies that facilitate cross-site tracking of your browsing behaviour outside the e999 Platform.

8.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the e999 Platform.

9 Data Retention

e999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to applicable regulatory minimum retention requirements:

At the end of each applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10 Data Security

e999 implements the following technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• Encryption in Transit: All data transmitted between player devices and e999 servers uses TLS 1.3 / AES-256 encryption over HTTPS. Plain HTTP access is not supported.
• Encryption at Rest: Sensitive personal data fields (including identity numbers, financial data, and passwords) are encrypted at the database level using industry-standard encryption.
• Access Controls: Internal access to player data is restricted to authorised personnel on a need-to-know basis. All internal data access is logged and subject to regular access review audits.
• Password Security: Player account passwords are stored as salted cryptographic hashes — e999 staff cannot see your password in plain text under any circumstance.
• Infrastructure Security: e999 servers are hosted in secured data centre environments with physical access controls, network firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident Response: e999 maintains a data breach incident response plan. In the event of a breach affecting player data, affected players will be notified in accordance with applicable regulatory requirements.

11 Responsible Gaming & Data Processing

e999 processes player transaction and usage data for responsible gaming monitoring purposes as a requirement of our international gaming license. This processing is conducted in the following ways:

• Automated monitoring of deposit frequency, loss patterns, and session duration to identify potential indicators of problem gambling behaviour.
• Flagging of accounts that exhibit multiple high-risk indicators for review by our responsible gaming team, who may reach out to affected players with wellbeing information or tool recommendations.
• Enforcement of responsible gaming tools set by the player — including deposit limits and self-exclusion — using account and payment data to prevent circumvention.
• Permanent retention of self-exclusion records to prevent self-excluded players from re-registering with e999 during their exclusion period.

This processing is conducted in players' legitimate interests and under our regulatory obligation. Players may learn more about responsible gaming tools available to them on our Responsible Gaming page.

12 Exercising Your Data Rights

As an e999 player, you may exercise the following rights in respect of your personal data by submitting a written request to our support team via the contact details in Section 15:

• Access: Receive a full copy of the personal data e999 holds about you, together with information about how it is used.
• Correction: Request correction of any inaccurate, outdated, or incomplete personal data in your account record.
• Erasure: Request deletion of your personal data, subject to regulatory retention obligations that may require us to retain certain records for defined periods after account closure.
• Portability: Receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transfer to another service provider.
• Objection: Object to processing based on legitimate interests at any time. Object to marketing communications via account settings or support request.
• Restriction: Request temporary restriction of processing while a data accuracy dispute or unlawful processing objection is investigated.

e999 will respond to all data rights requests within 30 calendar days of receipt. Identity verification will be required before actioning any request to protect against fraudulent access to player data. In complex cases, the response period may be extended by a further 60 days, in which case you will be notified of the extension and its reason.

13 Children's Privacy & Under-21 Policy

The e999 Platform is strictly for adults aged 21 and above. e999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, securely delete all collected data (subject to any regulatory obligations to retain evidence of the breach), and void any associated bets or balances.

Parents or guardians who believe that a minor may have accessed the e999 Platform using their details are urged to contact our support team immediately so that the matter can be investigated and resolved without delay.

14 Updates to This Privacy Policy

e999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Where updates are material — meaning they affect player rights or how personal data is used in a significant way — e999 will notify registered players via email or a prominent platform notice at least 14 days before the changes take effect.

The current version of this Privacy Policy is always accessible at https://e999.blog/privacy-policy. The effective date shown at the top of the Policy reflects the date of the most recent update. Continued use of the e999 Platform after an updated Policy takes effect constitutes acceptance of the revised terms.

15 Contact — Data & Privacy Queries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by e999, please contact our support team using the details below:

If you are dissatisfied with e999's response to a data rights request or privacy complaint, you may escalate the matter to the relevant regulatory authority under our applicable international gaming license. Details of the applicable regulatory authority and its complaint mechanism are available upon request from our support team.