n99999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how n99999 ("we", "us", "our" or the "Platform") collects, processes, stores, discloses and protects the personal data of individuals ("Users", "you" or "your") who access or use the n99999 website at https://n99999.cam and any associated services.

n99999 is an English-language online gaming information and entertainment platform targeting Pakistani users. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy applies to all personal data we collect whether through the registration process, account activity, payment processing, customer support interactions or general platform usage.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data as described herein, you should discontinue use of the Platform. This Policy should be read in conjunction with our Terms & Conditions.

2 Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — any information that directly or indirectly identifies a natural person, including names, email addresses, phone numbers, IP addresses, payment information and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, n99999 acts as Data Controller for data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of n99999 under a contractual obligation and pursuant to our documented instructions.
• "Cookies" — small text files placed on your device by the Platform or third-party services to enable functionality, analytics and security features.
• "KYC" — Know Your Customer verification, comprising identity, age and payment method verification required under applicable compliance obligations.
• "Third-Party Service Providers" — independent companies engaged to assist in platform operations, including payment processors, analytics providers, fraud prevention services and cloud hosting providers.

3 Data We Collect

We collect personal data in several ways depending on how you interact with the Platform. The categories of data we collect, and the context in which they are gathered, are set out in the table below:

Payment method references: Where users deposit or withdraw using payment methods familiar to Pakistani users — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah — we collect transaction reference data sufficient to verify and record the transaction. We do not store full card numbers or wallet PINs. Payment providers' own privacy policies govern how they handle your data at their end.

4 How We Use Your Data

n99999 uses the personal data we collect only for the purposes described in this Policy and in accordance with applicable law. Our primary processing purposes are as follows:

• Account Management: To create, maintain, verify and operate your registered account, including processing registrations, authenticating login attempts and enforcing account security measures.
• Transaction Processing: To facilitate deposits, withdrawals and bonus credit, and to maintain accurate financial records of all account activity.
• Identity & Age Verification (KYC): To verify that you meet the minimum age requirement (18+ or higher as required by the applicable operator or licence jurisdiction) and to confirm identity as required under applicable anti-money laundering and compliance obligations.
• Customer Support: To respond to your inquiries, resolve complaints, process account requests and deliver support in English and Urdu.
• Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, account takeovers, bonus abuse and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling Monitoring: To identify usage patterns that may indicate problem gambling behaviour and to enforce deposit limits, loss limits, session reminders or self-exclusion requests.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the quality, stability and relevance of the Platform's features and content.
• Legal Compliance: To meet our obligations under applicable law and to cooperate with regulatory or law enforcement authorities as required.
• Marketing Communications: To send promotional communications where you have opted in to receive them, and as permitted by applicable law. You may withdraw marketing consent at any time.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without appropriate human review and, where required, your explicit consent.

5 Legal Basis for Processing

Where applicable data protection law requires us to identify a lawful basis for each processing activity, we rely on the following grounds:

• Contractual Necessity: Processing required to fulfil our obligations under the user agreement, including account operation, transaction processing and KYC completion.
• Legal Obligation: Processing necessary to comply with applicable law, including anti-money laundering regulations, age verification requirements and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and service improvement — provided these interests are not overridden by your data protection rights.
• Consent: Where you have given clear, informed and freely given consent — for example, to receive marketing communications or to participate in optional surveys. Consent may be withdrawn at any time without detriment.

6 Data Sharing & Disclosure

n99999 does not sell, rent or trade personal data. We may share data only in the following limited and controlled circumstances:

• Service Providers (Data Processors): We engage vetted third-party providers for services including cloud hosting, analytics, payment processing, identity verification and fraud detection. These providers operate under written data processing agreements and may only use personal data as instructed by us.
• KYC & AML Partners: To meet identity verification and anti-money laundering obligations, we may share identity documents and verification data with licensed KYC or AML service providers.
• Legal & Regulatory Disclosure: We may disclose personal data to law enforcement agencies, regulators or courts where required by applicable law, valid legal process or court order. We will notify affected users where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of our business assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained.
• With Your Consent: We may share data with third parties where you have given explicit and informed consent for a specific purpose.

Payment provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned as familiar Pakistani payment rails for informational context only. These providers are independent entities and are not data processors acting on our behalf solely by virtue of being mentioned on our Platform.

7 Cookies & Tracking Technologies

The Platform uses cookies and similar technologies to deliver core functionality, maintain security and analyse usage patterns. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens and load-balancing cookies. They cannot be disabled without impacting core functionality.
• Functional Cookies: Remember your preferences, such as language settings, display options and session history, to provide a more personalised experience.
• Analytical / Performance Cookies: Collect aggregated, anonymised data about how users navigate the Platform — including pages visited, time on page and error occurrences. This data is used to improve Platform performance and content quality.
• Security Cookies: Assist in detecting and preventing fraudulent activity, credential stuffing attacks and unusual session behaviour.

You may configure your browser to refuse cookies or to alert you before a cookie is placed. Note that disabling certain cookies may affect the functionality or security of the Platform. Where cookie consent is required by applicable law, we will present you with a clear and informed consent mechanism.

8 Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are:

• Active Accounts: Personal data is retained for the duration of your active account relationship with the Platform.
• Account Closure: Following account closure, personal data required for legal, regulatory or compliance purposes (including KYC records and transaction histories) is retained for the minimum period required by applicable law — which may be five years or longer depending on jurisdiction and regulatory requirements.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Customer Support Records: Retained for a reasonable period following resolution of a support interaction, typically not exceeding three years.
• Technical & Log Data: Retained for security monitoring and fraud investigation purposes, typically for periods not exceeding 12 months unless required for ongoing legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents identification. Where anonymisation rather than deletion is applied, the anonymised data may be retained for statistical or analytical purposes.

9 International Data Transfers

The Platform operates internationally, and personal data may be transferred to, stored or processed in jurisdictions outside Pakistan. Where such transfers occur, we apply appropriate safeguards to ensure that your personal data continues to receive an adequate level of protection.

Transfer mechanisms we may rely upon include: contractual clauses that bind data recipients to data protection obligations consistent with applicable standards; transfers to jurisdictions recognised as providing adequate data protection; or transfers where your explicit consent has been obtained following clear disclosure of the relevant risks.

Pakistani users should be aware that data protection standards in third-country jurisdictions may differ from those in Pakistan. If you require specific information about the safeguards in place for a particular transfer, please contact us using the details in Section 15.

10 Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by n99999:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legitimate interests and legal retention obligations.
• Right to Restrict Processing: You may request that we limit the way we process your data in certain circumstances, such as where accuracy is contested or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the rights listed above, please contact us at [email protected] with "Data Rights Request" in the subject line. We will respond within a reasonable timeframe — typically 30 calendar days — and may require identity verification before actioning your request.

11 Children's Privacy

The Platform is strictly intended for adults aged 18 or older, or the higher minimum age required by the applicable operator or licence jurisdiction. We do not knowingly collect personal data from persons under the applicable minimum age.

If we become aware that personal data has been collected from an individual who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account or provided personal data to us, please contact us immediately at [email protected].

12 Security Measures

n99999 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields at rest using industry-standard cryptographic standards.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security reviews, vulnerability assessments and penetration testing of Platform infrastructure.
• Incident response procedures covering detection, containment, notification and remediation of data breaches.
• Staff training on data protection obligations and information security best practices.

While we apply commercially reasonable security standards, no system is entirely immune from risk. Users are encouraged to select strong, unique passwords and to enable two-factor authentication where available. If you suspect your account has been compromised, contact support immediately.

13 Third-Party Links & Services

The Platform may contain references to or links to third-party websites, operators or services. This Privacy Policy applies only to data processed by n99999 through the Platform. We are not responsible for the privacy practices or data handling of third-party operators, payment providers or any other external services that you may access via the Platform.

We strongly recommend that you review the privacy policies of any third-party service you interact with — including gaming operators, payment providers and any other external platforms — before providing personal data to them. Their data practices are governed by their own policies and are entirely independent of this Policy.

14 Policy Amendments

We reserve the right to update or amend this Privacy Policy at any time. Where changes are material, we will update the effective date at the top of this page and, where appropriate, post a notice on the Platform to draw your attention to the changes.

We encourage you to review this Policy periodically. Your continued use of the Platform following publication of an updated version constitutes acceptance of the revised Policy. If you do not agree with any change, you should discontinue use of the Platform and request account closure.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, in both English and Urdu.

The email address above is displayed as plain text for contact purposes only. It is not a clickable link. We aim to acknowledge all data rights requests within five business days and to provide a substantive response within 30 calendar days. If we require additional time, we will inform you before the initial deadline expires.