p6999 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by p6999 ("the Company," "we," "us," or "our") and applies to all personal data collected through the p6999 Platform at p6999.biz, including all subdomains, associated mobile interfaces, and related services (collectively, "the Platform"). This Policy applies to all registered users, prospective users, and visitors to the Platform.

p6999 is committed to protecting the privacy and personal information of all individuals who interact with our Platform. We process personal data only for legitimate, clearly defined purposes and take appropriate technical and organisational measures to ensure that your data is handled securely and in accordance with applicable international privacy standards.

By accessing the p6999 Platform, creating an account, or using any service offered by p6999, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is p6999, the operator of the Platform at p6999.biz.

As the data controller, p6999 determines the purposes and means by which your personal data is processed. Where p6999 engages third-party service providers who process personal data on our behalf (for example, payment processors or KYC verification services), those third parties act as data processors under contractual obligations imposed by p6999 and may not use your data for their own purposes.

All data-related enquiries, rights requests, and complaints should be directed to p6999 using the contact details provided in Section 16 of this Policy.

p6999 collects the following categories of personal data in connection with the provision and operation of the Platform:

p6999 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required for responsible gaming assessments and only with your explicit consent.

p6999 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings, you provide data directly to p6999.
• Automatically through Platform use: When you browse the Platform, log in, play games, or place bets, p6999's systems automatically collect technical and usage data including your IP address, device identifiers, session information, and interaction logs. This data is collected through server logs and cookies (see Section 10).
• From third-party payment providers: When you deposit or withdraw via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other integrated payment providers, those providers share necessary transaction data with p6999 to confirm payment status and maintain accurate account records.
• From identity verification providers: Where p6999 uses third-party KYC service providers to verify your identity or age, those providers may return verified identity data to p6999 as part of the verification process.

p6999 processes your personal data only where it has a legitimate legal basis for doing so. The following table sets out the primary purposes for which p6999 processes personal data and the legal basis applicable to each:

p6999 does not sell your personal data to any third party. p6999 shares your personal data only in the following limited circumstances:

• Payment processors: p6999 shares necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment providers for the purpose of processing your transactions. These providers operate under their own privacy policies and are not permitted to use your data for any purpose other than completing the requested transaction.
• KYC and identity verification services: Where third-party identity verification providers are used to complete KYC checks, p6999 shares the minimum personal data necessary for those checks. These providers are contractually bound to maintain data security and use your data solely for verification purposes.
• Gaming content providers: Game providers whose titles appear on the p6999 Platform may receive anonymised or pseudonymised usage data for game performance and fairness auditing purposes. They do not receive personally identifiable information about you.
• Legal and regulatory authorities: p6999 may disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or in connection with an investigation into fraud, money laundering, or other illegal activity.
• Business transfers: In the event of a merger, acquisition, or sale of p6999's business or assets, personal data held by p6999 may be transferred to the acquiring entity. Where such a transfer occurs, p6999 will ensure that the receiving entity is bound by this Privacy Policy or an equivalent data protection standard.

In all cases where data is shared with third parties, p6999 ensures that appropriate contractual protections are in place governing the third party's use, storage, and security of the shared data.

The p6999 Platform is operated on an international basis and your personal data may be processed in countries outside of Pakistan. This is necessary because some of p6999's third-party service providers — including certain payment processors, technology infrastructure providers, and gaming content suppliers — operate servers or offices in other jurisdictions.

Where personal data is transferred internationally, p6999 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries that provide an adequate level of data protection, as recognised by applicable international standards.
• Implementing contractual protections (such as standard contractual clauses) with third-party recipients of data in countries that do not have an adequacy determination.
• Conducting due diligence on the data protection practices of all third-party service providers that handle personal data on p6999's behalf.

If you would like further information about the international transfer arrangements applicable to your personal data, please contact p6999 using the details in Section 16.

p6999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data (active accounts): Retained for the duration of your account's existence and for a minimum of five (5) years following account closure.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the customer relationship, in compliance with anti-money laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with financial record-keeping standards.
• Customer support records: Retained for three (3) years following the last interaction, or longer if related to an unresolved legal claim or complaint.
• Technical and usage data: Typically anonymised or deleted within 24 months of collection, unless required for longer periods for security or fraud prevention purposes.

When data has reached the end of its applicable retention period, p6999 ensures its secure deletion or irreversible anonymisation so that it can no longer be associated with any individual.

p6999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and unlawful processing. These measures include:

• Encryption in transit: All data transmitted between your device and p6999's servers is encrypted using 256-bit Transport Layer Security (TLS) — the same standard used by international banking institutions.
• Encryption at rest: Sensitive personal data stored on p6999's servers is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to personal data within p6999 is restricted on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Penetration testing and security audits: p6999 conducts regular security reviews and vulnerability assessments to identify and remediate potential weaknesses in the Platform's security architecture.
• Incident response: p6999 maintains a documented data breach response procedure. In the event of a security incident involving personal data, p6999 will take immediate containment measures and notify affected users and relevant authorities as required by applicable law.

While p6999 takes all reasonable steps to protect your personal data, no system is entirely immune to security risks. You also play an important role in protecting your data — particularly by keeping your p6999 login credentials confidential and not sharing them with others.

p6999 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used on p6999:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They enable core functions such as session management, security controls, and load balancing. No personal data is used for advertising purposes through these cookies.
• Functional Cookies: These cookies remember your preferences (such as language settings and game preferences) to provide a more personalised experience. Disabling functional cookies may impair certain Platform features.
• Analytics Cookies: p6999 uses analytics tools to understand how users interact with the Platform — including which games are most popular, how long sessions last, and where technical issues occur. This data is used in aggregated, anonymised form to improve the Platform.
• Security Cookies: These cookies support p6999's fraud detection and account security measures, including tracking unusual login patterns or suspicious activity.

You can control cookie settings through your browser's privacy settings. Disabling certain categories of cookies may affect the functionality of the p6999 Platform. Strictly necessary cookies cannot be disabled without preventing the Platform from operating.

The p6999 Platform is strictly intended for adults aged 21 years and above. p6999 does not knowingly collect personal data from individuals under the age of 21.

All registrations on p6999 are subject to age verification procedures designed to confirm that the registering individual meets the minimum age requirement. Where p6999 discovers or has reasonable grounds to suspect that an account belongs to a person under 21 years of age, the account will be immediately suspended pending investigation. Any funds held in such an account will be withheld and returned to the payment source used for the relevant deposits following completion of the investigation.

Subject to applicable law and certain limitations, you have the following rights in relation to the personal data that p6999 holds about you:

To exercise any of these rights, please contact p6999 at [email protected] with the subject line "Data Rights Request." p6999 will respond to all verifiable requests within 30 days. We may request proof of identity before processing your request.

Please note that certain rights may be limited where p6999 is required to retain your data for legal or regulatory compliance purposes — for example, anti-money laundering record-keeping requirements that override a deletion request.

p6999 may send you promotional communications about bonuses, new games, sports betting promotions, and other Platform updates where you have opted in to receive such communications during registration or through your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences within your p6999 account settings.
• Contacting p6999 support at [email protected] with the subject line "Unsubscribe."

Please note that opting out of marketing communications does not affect p6999's ability to send you transactional communications that are necessary for the operation of your account — such as deposit confirmations, withdrawal notifications, security alerts, or material updates to these policies. These service communications will continue regardless of your marketing preference settings.

p6999 does not share your contact details with third-party marketers for the purpose of sending you advertising from those third parties.

The p6999 Platform may contain links to third-party websites or integrate third-party services (such as payment processors) that operate independently of p6999. This Privacy Policy applies only to data collected and processed by p6999 and does not extend to the privacy practices of third-party platforms.

p6999 is not responsible for the content, privacy practices, or data protection standards of any third-party website or service. When you follow a link to a third-party site or interact with a third-party service provider (such as completing a JazzCash or EasyPaisa transaction on their own interface), that interaction is governed by the third party's own privacy policy.

We recommend reviewing the privacy policies of any third-party services you use in connection with your p6999 account, particularly your payment provider's privacy policy, which will explain how your mobile wallet or banking data is handled on their side.

p6999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. All amendments will be posted on this page with an updated effective date displayed at the top of the document.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — p6999 will provide more prominent notice, which may include a notification displayed within the Platform or a communication to your registered contact details.

Your continued use of the p6999 Platform following the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact support to close your account.

We recommend checking this page periodically to stay informed of any updates. The current version of the Policy is always available at p6999.biz/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by p6999, please contact us using the following details:

• Email: [email protected] — please include "Privacy Enquiry" or "Data Rights Request" in your subject line for prioritised routing.
• Live Chat: Available 24 hours a day, 7 days a week, through the in-platform live chat function accessible after logging into your p6999 account. For sensitive data requests, email is preferred to maintain a written record.

p6999 will acknowledge all written privacy-related enquiries within five (5) business days and aims to provide a substantive response within thirty (30) days. Where a request is complex or high in volume, we may extend this period by a further thirty (30) days and will notify you of the extension.

If you are dissatisfied with p6999's response to a privacy complaint, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction. p6999 will provide information about applicable regulatory bodies upon request.