Privacy Policy – m9999 Pakistan

1 Who We Are

m9999 is an online gaming and sports betting platform accessible at m9999.online. For the purposes of this Privacy Policy, m9999 is the data controller responsible for the personal information of registered players and website visitors in Pakistan and other permitted jurisdictions.

This Privacy Policy applies to all services offered through the m9999 platform including casino games, live dealer tables, card games such as Teen Patti and Rummy, Andar Bahar, Ludo games, sports betting, esports betting, roulette, and any other products offered now or in the future under the m9999 brand.

If you have any questions about how m9999 handles your personal data, the first point of contact is the m9999 support team at support@m9999.online.

2 What Data We Collect

m9999 collects personal data in two ways — information you provide directly and information collected automatically when you use the platform. Here is a breakdown of what we hold:

2.1 Information You Provide

2.2 Information Collected Automatically

• Device & Browser Data: Device type, operating system, browser version, screen resolution, and device language settings.
• Connection Data: IP address, mobile network name, approximate geographic location derived from IP, and connection timestamp.
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, and features accessed within the m9999 platform.
• Cookie Data: Session identifiers, preference cookies, analytics tracking IDs, and security tokens. Full details in Section 8 (Cookies & Tracking).

3 How We Collect Your Data

m9999 collects your personal information through the following channels:

• Account Registration Form: When you create your m9999 account, you submit your name, mobile number, email address, and date of birth directly through the registration interface.
• KYC Verification Submission: When requested, you upload identity and address documents through the secure verification portal within your m9999 account dashboard.
• Deposits and Withdrawals: When you initiate a transaction via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, transaction data is recorded in your m9999 account history.
• Platform Activity: Your interactions with the m9999 platform — games played, bets placed, pages visited — are recorded automatically through the platform's session logging infrastructure.
• Customer Support: Any communication you initiate with the m9999 support team via live chat or email is retained as part of your account record.
• Cookies and Similar Technologies: The m9999 website and platform use cookies to maintain session state, improve user experience, and collect analytics. See Section 8 for full details.

4 Why We Use Your Data

m9999 uses the personal data it collects for specific, legitimate purposes. We do not process your data for any purpose not listed here without first obtaining your explicit consent:

• Account Management: Creating and maintaining your m9999 player account, enabling login, processing password resets, and managing account preferences.
• Identity Verification (KYC): Confirming your identity in compliance with our licensing requirements and anti-money laundering obligations before approving withdrawals.
• Payment Processing: Processing PKR deposits and withdrawals via your chosen payment method and maintaining your transaction history.
• Game Delivery and Technical Performance: Delivering the games and betting markets you access on m9999 and diagnosing and fixing technical issues that affect your experience.
• Fraud Prevention and Security: Detecting and investigating unusual account activity, preventing unauthorised access, and protecting the integrity of m9999 gaming operations.
• Regulatory Compliance: Meeting obligations to the regulatory authority under whose licence m9999 operates, including transaction reporting and responsible gaming monitoring requirements.
• Responsible Gaming Monitoring: Monitoring gameplay patterns to identify signs of problem gambling behaviour and, where identified, contacting the player to offer support tools proactively.
• Customer Support: Responding to queries, investigating complaints, and maintaining a record of support interactions for quality assurance.
• Marketing (with consent only): Sending promotional emails, SMS notifications, and in-platform messages about m9999 bonuses, tournaments, and new game releases — only to players who have opted in to marketing communications.
• Platform Improvement: Using anonymised analytics data to understand how Pakistani players use m9999 and to improve the interface, game selection, and overall experience.

5 Legal Basis for Processing

m9999 processes your personal data only where a lawful basis exists under applicable data protection law. The legal bases for m9999's processing activities are:

• Contract Performance: Processing necessary to deliver the services you signed up for — account management, game delivery, payment processing, and customer support.
• Legal Obligation: Processing required to comply with our licensing terms, anti-money laundering regulations, KYC obligations, and any reporting requirements imposed by the relevant regulatory authority.
• Legitimate Interests: Processing for fraud prevention, platform security, and anonymised analytics where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have actively opted in. You can withdraw this consent at any time without affecting services.

6 Data Sharing

m9999 does not sell your personal data. We share your data only in the following limited, necessary circumstances:

• Payment Service Providers: Easypaisa, JazzCash, NayaPay, SadaPay, participating IBFT banks, and Visa/Mastercard processing partners receive the minimum data necessary to process your PKR transactions — typically your registered name, account reference, and transaction amount.
• KYC & Identity Verification Partners: Where m9999 uses a third-party verification service to process identity documents, that partner receives only the specific documents required for verification. These partners operate under strict data processing agreements with m9999.
• Game Software Providers: Third-party game studios whose titles are available on m9999 may receive anonymised gameplay and wagering data necessary to deliver their games. They do not receive personally identifiable information.
• Regulatory Authorities: m9999 is required under its licence to disclose certain transaction and player data to the relevant regulatory authority upon request. We comply with all lawful regulatory requests.
• Law Enforcement: m9999 will disclose personal data to law enforcement agencies when legally required to do so — for example, in response to a valid court order or formal investigation into fraud or money laundering activity.
• Anti-Fraud Systems: m9999 may share anonymised or pseudonymised account activity data with shared fraud prevention systems used across the gaming industry to detect and block fraudulent behaviour.

7 Payment Data at m9999

Pakistani players at m9999 deposit and withdraw using local payment methods — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, Visa, and Mastercard. Here is exactly how payment data is handled:

• m9999 does not store full card numbers, CVV codes, or mobile wallet PINs on its own servers. Card payments are processed through PCI-DSS Level 1 compliant gateways that handle all sensitive payment credentials directly.
• For Easypaisa and JazzCash transactions, only the registered mobile number and transaction confirmation reference are retained by m9999 — not your wallet PIN or OTP.
• A record of each transaction — date, amount in PKR, payment method type, and transaction status — is retained in your m9999 account history for a minimum of five years for regulatory and anti-money laundering compliance purposes.
• Transaction records may be reviewed by the m9999 compliance team as part of routine AML monitoring or in response to a specific investigation. Access to these records is restricted to authorised staff only.

8 Cookies and Tracking Technologies

m9999 uses cookies and similar tracking technologies to make the platform work correctly and to improve the experience for Pakistani players. Here is a clear breakdown of what we use and why:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in while navigating between pages, security tokens that protect against CSRF attacks, and cookies that remember your preferred language or currency display. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences across sessions — such as your preferred game category, last table settings, or notification preferences. These improve your experience without being strictly required.
• Analytics Cookies: m9999 uses anonymised analytics tools to understand how players navigate the platform — which games are most visited, where players drop off during registration, and which features are used most. This data is aggregated and does not identify individual players.
• What We Do Not Use: m9999 does not use third-party advertising cookies or tracking pixels that would allow external advertising networks to build a profile of your browsing behaviour across other websites based on your m9999 activity.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in and using the m9999 platform. Blocking functional and analytics cookies will not affect access to games or transactions.

9 Data Storage and Security

m9999 takes the security of your personal data seriously. The following security measures are in place across the platform's data infrastructure:

• Encryption in Transit: All data transmitted between your device and m9999 is protected by 256-bit SSL/TLS encryption. This applies to the website, platform interface, API connections, and payment gateway integrations.
• Encryption at Rest: Sensitive personal data — including identity documents, financial records, and account details — is encrypted at rest in m9999's data storage infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal player data is restricted on a need-to-know basis. Staff can only access the data categories their role requires, and all access is logged and audited.
• Intrusion Detection: m9999's infrastructure is monitored continuously for unusual access patterns, potential intrusion attempts, and data exfiltration indicators.
• Data Breach Response: In the event of a confirmed data breach affecting personal data, m9999 will notify affected players and, where required, the relevant regulatory authority within the legally required timeframe.

While m9999 implements robust security measures, no online system is completely immune to risk. You are also responsible for keeping your account credentials secure — do not share your password with anyone.

10 Data Retention

m9999 retains your personal data only for as long as it is necessary for the purposes described in this policy. Specific retention periods are as follows:

• Active Account Data: Retained for the lifetime of your m9999 account and for a minimum of five years after account closure, in compliance with anti-money laundering and regulatory record-keeping requirements.
• Transaction Records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction for AML compliance purposes.
• KYC Documents: Identity verification documents are retained for a minimum of five years after the closure of your m9999 account.
• Customer Support Records: Support chat transcripts and email exchanges are retained for three years from the date of the interaction.
• Analytics Data: Anonymised and aggregated analytics data has no fixed deletion schedule as it does not contain personal information.
• Marketing Consent Records: Records of your marketing opt-in or opt-out are retained for as long as your account is active and for two years after account closure.

After the applicable retention period expires, personal data is securely deleted or permanently anonymised.

11 Your Rights

As a player registered with m9999, you have the following rights in relation to your personal data. These rights apply regardless of where in Pakistan you are accessing the platform from: