Privacy Policy — 999dk

This Privacy Policy ("Policy") is issued by 999dk ("we", "us", "our", "the Operator", "the Platform") and applies to all personal data collected in connection with your use of the 999dk online betting and casino platform, accessible at https://999dk.cam, including any related subdomains, mobile interfaces, applications and promotional communications.

999dk is committed to handling your personal information responsibly, transparently and in accordance with the data protection principles applicable under the Operator's licensing jurisdiction. This Policy is intended to give you a clear, plain-English explanation of our data practices — not a document designed to obscure what we actually do with your information.

By registering an Account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process personal data as described herein, you should not register an Account or use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated into our overall user agreement framework.

For the purposes of this Policy, the following definitions apply:

999dk collects only the Personal Data that is necessary for the purposes described in this Policy. The categories of data we collect, and the circumstances in which each arises, are set out below.

3.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, residential address, email address, username and password, and — where applicable — telephone number and nationality.
• KYC documentation: Government-issued photo identification (such as a CNIC, passport or driving licence), proof of address (a utility bill or bank statement dated within three months), and where relevant, documentation evidencing the source of deposited funds.
• Payment information: Details of the payment method used for deposits or withdrawals, such as bank account or mobile-wallet identifiers. We do not store full card numbers on our servers; payment card data is handled by certified payment processors.
• Support communications: Records of any communications you send to our support team, including email content, chat transcripts and complaint correspondence.
• Responsible gambling preferences: Self-exclusion requests, deposit limits, session timer settings and any other self-imposed account controls you activate.

3.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers and screen resolution.
• Usage data: Pages visited, time spent on pages, navigation paths, bet and game history, session duration and login timestamps.
• Cookies and similar technologies: Session cookies, analytics cookies and functional cookies as described in Section 9.

3.3 Data from Third Parties

• KYC and identity verification providers: Verification results and risk scores returned by third-party identity services used to confirm your eligibility to hold an Account.
• Payment processors: Transaction confirmation data, dispute records and fraud alerts from payment service providers.
• Fraud and AML screening: Risk indicators and screening results from Anti-Money Laundering compliance service providers.

We process your Personal Data for the following purposes. Where a specific legal basis applies to each purpose, that basis is described in Section 5.

999dk processes Personal Data only where a valid legal basis exists. The primary bases applicable to this Platform are:

• Contractual necessity: Processing required to perform the contract between you and 999dk — including Account registration, bet settlement, payment processing and KYC verification. Without this processing, we cannot provide the Platform's services.
• Legal obligation: Processing necessary to comply with our obligations under applicable law and our licensing framework, including AML checks, age verification and regulatory reporting.
• Legitimate interests: Processing carried out for 999dk's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and improving our services. We have assessed these interests and consider them proportionate.
• Consent: Processing for marketing communications and non-essential cookies, where your specific consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

999dk does not sell your Personal Data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• KYC and identity verification providers: We share registration and documentation data with third-party identity verification services to confirm your eligibility. These providers act as Data Processors under contractual obligations consistent with this Policy.
• Payment service providers: Necessary financial data is shared with payment processors to execute deposits and withdrawals. These providers operate under their own regulatory frameworks and data protection obligations.
• AML and fraud screening services: Transaction data and risk-relevant account information is shared with compliance screening services as required by our AML obligations.
• Technology and infrastructure partners: Data may be processed by our hosting, analytics and platform infrastructure providers acting as Data Processors. All such providers are bound by data processing agreements.
• Regulatory and law-enforcement authorities: Where legally required, 999dk will disclose relevant data to competent regulatory bodies, law enforcement agencies or courts of competent jurisdiction. We will seek to notify you of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of all or part of 999dk's business, your Personal Data may form part of the transferred assets. You will be notified of any such change and of any resulting changes to data processing arrangements.

7.1 999dk retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations.

7.2 Account and transaction records — including betting history, deposit and withdrawal records, and KYC documentation — are typically retained for a minimum period of five (5) years following Account closure or the last transaction, in accordance with standard AML and licensing record-keeping requirements. Specific retention periods may vary depending on the applicable regulatory framework.

7.3 Support communication records are retained for a period sufficient to resolve disputes, respond to regulatory enquiries and fulfil legitimate interest purposes, generally not exceeding three (3) years from the date of the last communication.

7.4 Marketing consent records and opt-out data are retained indefinitely to demonstrate compliance and to ensure that withdrawn consent is honoured.

7.5 Where data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures. Anonymised data that can no longer identify an individual may be retained for statistical and analytical purposes indefinitely.

999dk implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Transport layer encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL (256-bit). You can verify this via the padlock indicator in your browser address bar.
• Access controls: Internal access to Personal Data is restricted on a need-to-know basis. Staff and contractors with access to Personal Data are subject to confidentiality obligations.
• Infrastructure security: Our platform infrastructure is hosted in secured data centres with physical access controls, network monitoring, intrusion detection and regular security assessments.
• Password security: Account passwords are stored using industry-standard cryptographic hashing. We do not store plaintext passwords and cannot retrieve your password — only reset it.
• Breach response: We maintain a data breach response procedure. In the event of a breach likely to cause harm to affected individuals, we will notify them and relevant authorities in accordance with applicable law and our licensing obligations.

999dk uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse usage patterns. The categories of cookies we use are described below.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair core Platform functionality. Disabling analytics or marketing cookies will not prevent you from using the Platform.

Subject to the Operator's applicable licensing jurisdiction and relevant data protection law, you hold the following rights in respect of your Personal Data. To exercise any of these rights, contact us at [email protected] with a description of your request. We will respond within a reasonable period and in any event within the timeframe required by applicable law.

Please note that certain rights may be subject to limitations where legal obligations require us to retain or continue processing data — for example, KYC and AML records that must be maintained under licensing requirements. We will always explain any such limitation clearly when responding to your request.

The 999dk Platform is strictly intended for adults aged 18 years or above, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect Personal Data from individuals under the minimum eligible age.

Where 999dk reasonably suspects or discovers that an Account has been registered by a minor, the Account will be immediately suspended and all associated data reviewed. Any winnings or bonuses generated by an underage Account will be forfeited. The Personal Data collected during the registration and KYC process may be retained to the extent required to investigate the breach and fulfil any reporting obligations, but will not be used for any other purpose.

If you believe that a minor has registered an Account using your information, or that someone under the eligible age has accessed the Platform, please contact us immediately at [email protected]. We recommend the use of parental control software on shared devices to prevent minors from accessing gambling platforms.

The 999dk Platform integrates with third-party service providers to deliver its full range of features — including identity verification, payment processing, game content, live-dealer streaming, sports data feeds and platform analytics. Where these providers process your Personal Data on our behalf, they do so as Data Processors under contractual obligations that require them to maintain appropriate security standards and to process data only in accordance with our instructions.

999dk does not accept responsibility for the privacy practices of third-party websites linked from the Platform, where such links exist. Users who follow external links do so at their own discretion and should review the privacy policies of any third-party site visited. Note that 999dk's current policy restricts external links on the Platform to an absolute minimum.

Third-party game studios, sports data providers and live-dealer suppliers whose content appears on the Platform operate under their own data agreements with 999dk. Their brand identities and game interfaces may involve their own proprietary technology but their data processing on the Platform is subject to our overarching data governance requirements.

999dk may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements or platform functionality. When material changes are made — particularly those affecting your rights or how we use your Personal Data — we will provide advance notice through an on-platform notification or an email to your registered address.

The "Last updated" date at the top of this page reflects when the most recent version became effective. We encourage you to review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

If you have any concerns about a proposed change to this Policy, you may raise them with our support team before the effective date of the amendment.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your Personal Data is handled, please contact 999dk using the details below. All correspondence relating to data privacy should be directed to the same support channel; please mark your subject line clearly as a "Privacy Request" to ensure prompt routing.