PC999 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy is published by PC999 ("pc999", "we", "our", "the Platform"), which operates the online gaming and betting platform accessible at pc999.biz. pc999 is the data controller for the personal information collected from Pakistani members who use our platform.

As the data controller, pc999 determines the purposes and means by which your personal data is processed. We are accountable for ensuring that processing activities comply with the principles set out in this Policy and with applicable data protection standards.

The designated contact for all data privacy matters at pc999 is our Data Protection Team, reachable at privacy@pc999.biz. For general account queries, you can also reach the main support team at support@pc999.biz or through live chat on the platform. All privacy-related requests will be handled exclusively by the Data Protection Team to ensure appropriate expertise and confidentiality.

pc999 collects personal data in several ways: data you provide directly, data generated by your use of the platform, and data received from third parties such as payment providers and identity verification services. The categories of data we collect are described below.

pc999 does not collect sensitive personal data (for example, biometric data, health information, religious beliefs or political opinions) unless specifically required by law or with your explicit consent for a defined purpose.

pc999 uses your personal data for specific, legitimate purposes. We do not use your data for profiling, automated decision-making, or any purpose not described here without first obtaining your consent.

• Account creation and management: Your identity and contact data is used to create and maintain your pc999 account, authenticate your login, and communicate important account notifications (password resets, security alerts, withdrawal confirmations).
• Payment processing: Your financial data is used to process deposits from and withdrawals to your registered payment methods. pc999 shares only the minimum necessary financial data with payment processors to complete transactions.
• Identity verification (KYC): Your identity documents and personal details are used to verify that you meet pc999's eligibility requirements — specifically that you are over 18, are who you say you are, and that your payment method belongs to you.
• Fraud prevention and security: Technical data (IP address, device fingerprint, session data) is analysed to detect suspicious activity, prevent unauthorised access, identify multiple accounts and combat bonus abuse and money laundering.
• Responsible gaming monitoring: Gaming data is reviewed to identify patterns that may indicate problem gambling behaviour. pc999 uses this data to proactively reach out to members who may benefit from responsible gaming tools.
• Regulatory compliance: pc999 is obligated by applicable law to maintain records of transactions and customer identity for defined periods. This data may be disclosed to regulatory authorities or law enforcement when legally required.
• Marketing communications (consent-based only): If you have consented to receive promotional communications, your contact data is used to send emails and SMS about offers, bonuses and platform updates relevant to Pakistani members. You can withdraw this consent at any time from your account settings.
• Platform improvement: Aggregated, anonymised usage data is used to understand how Pakistani members interact with pc999, which features are most valued, and where improvements are needed. This analysis uses anonymised data and does not involve individual profiling.

Every processing activity at pc999 is conducted on one of the following legal bases. We document the applicable basis for each activity and can provide this information upon request.

• Contractual necessity: Processing required to fulfil the contract between you and pc999 — including account management, payment processing and game delivery. Without this processing, we cannot provide the pc999 service.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight and platform improvement. These activities serve genuine legitimate interests of pc999 and our members, and have been assessed to confirm they do not override members' privacy rights.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, KYC requirements and regulatory record-keeping duties.
• Consent: Processing for marketing communications. Consent is obtained at registration and can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

pc999 does not sell your personal data. We share data with third parties only where it is necessary to operate the platform, required by law, or where you have given explicit consent. All third-party processors are bound by data processing agreements that require them to process your data only for the specified purpose and in accordance with pc999's instructions.

The categories of third parties with whom pc999 shares data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card payment processors. Data shared is limited to the information required to execute the specific transaction.
• Identity verification providers: Third-party KYC services that verify the authenticity of identity documents. These providers process your identity data under their own accredited security standards and return only a verification result to pc999.
• Game software providers: Evolution Gaming, Ezugi, Pragmatic Live and other licensed game studios. These providers receive session and transaction data necessary to operate the games you play. They operate under their own licences and data protections.
• Fraud detection and security services: Specialist technology providers that analyse technical data (IP addresses, device fingerprints) to detect suspicious activity and protect the platform and its members.
• Regulatory and law enforcement authorities: When legally required by applicable regulation or court order, pc999 will disclose relevant data to authorised authorities. pc999 will notify you of any such disclosure unless legally prohibited from doing so.
• Professional advisers: Legal, accounting and auditing professionals who are bound by confidentiality obligations and access your data only as necessary for their specific advisory role.

pc999 applies defined retention periods to each category of personal data. Data is deleted or fully anonymised once the retention period expires and there is no legal reason to extend it.

When your account is actively open and in use, all data relevant to running your account is retained. When you close your account voluntarily or pc999 closes it, the retention schedule above applies from the closure date unless a longer period is required by applicable law.

As a pc999 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection Team at privacy@pc999.biz. We will respond substantively within 30 calendar days of receiving your request. If your request is complex or you have submitted multiple requests, we may extend this period by up to 30 additional days — we will notify you if this applies.

• Right of access: You can request a copy of all personal data pc999 holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: If any personal data held about you at pc999 is inaccurate or incomplete, you can request that we correct it. Many basic details (email address, phone number) can also be updated directly from your account settings.
• Right to erasure: You can request that pc999 delete your personal data. We will do so where the data is no longer necessary for the purpose it was collected and where no legal obligation requires us to retain it. Legal retention obligations (particularly AML requirements) may prevent full deletion of certain categories of data.
• Right to restrict processing: You can request that pc999 pause its use of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold or while a complaint is being investigated.
• Right to data portability: You can request a copy of the personal data you provided to pc999 in a structured, commonly used machine-readable format, suitable for transfer to another controller.
• Right to object: You can object to processing based on legitimate interests, including profiling for responsible gaming purposes. pc999 will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where pc999 processes your data based on consent (marketing communications), you can withdraw that consent at any time from your account settings or by contacting support. Withdrawal does not affect the legality of processing already completed.

pc999 uses cookies and similar technologies to operate the platform correctly, remember your session, and understand how Pakistani members interact with different features. Here is a plain-language explanation of what we use and why.

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. You cannot opt out of these without stopping using pc999.
• Functional cookies: These remember your preferences, such as your preferred language, your last visited game category and your display settings. They improve your experience but are not essential — you can disable them without losing core platform functionality.
• Analytical cookies: pc999 uses anonymised analytics to understand which pages and features are most used, how long sessions last, and where players encounter difficulty. This data is aggregated and does not identify individual members. Analytics help pc999 improve the platform for Pakistani users.
• No third-party advertising cookies: pc999 does not deploy third-party advertising cookies on its platform. You will not be tracked across other websites for advertising purposes as a result of visiting pc999.

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies; however, doing so may affect the functionality of the pc999 platform. On your first visit, pc999 displays a cookie preference panel where you can accept or decline non-essential cookies. You can revisit these preferences at any time from the cookie settings link in the page footer.

pc999 applies a layered security approach to protect personal data against unauthorised access, disclosure, alteration and destruction. Our security measures include the following:

• Encryption in transit: All data transmitted between your device and pc999 servers is encrypted using TLS 1.3. This applies to account registration, login, payment transactions and all other data exchanges.
• Encryption at rest: Personal data stored on pc999 servers — including identity documents, financial records and betting history — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised pc999 personnel who require it for their specific job function. Role-based access controls are applied across all systems, and access events are logged for audit purposes.
• Two-factor authentication: pc999 offers two-factor authentication for member accounts and applies mandatory two-factor authentication for all internal staff with access to member data.
• Penetration testing: pc999 commissions regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: pc999 maintains a documented data breach response procedure. In the event of a security incident affecting personal data, we will notify affected members and relevant authorities within the timeframes required by applicable law.

If you suspect that your pc999 account has been accessed without your authorisation, contact our security team immediately at support@pc999.biz. We will investigate, lock the affected account pending review, and advise you on next steps within 2 hours of receiving your report.

pc999 strictly prohibits the use of its platform by anyone under 18 years of age. We do not knowingly collect personal data from children. Our registration process requires members to confirm they are 18 or older, and identity verification requirements are designed to detect and reject registrations from underage individuals.

If you believe that a minor has created an account at pc999 using false information, please contact us immediately at privacy@pc999.biz with the relevant details. We will investigate the report, close any confirmed underage account, delete the associated personal data (except where legal obligations require retention), and refund any deposits made by the minor to the payment method from which they were received.

pc999 reviews and updates this Privacy Policy regularly to reflect changes in our data processing practices, applicable law, and feedback from Pakistani members. When we make material changes — meaning changes that materially affect how we use your data or the rights available to you — we will:

• Send an email notification to your registered address at least 14 days before the changes take effect, clearly summarising what has changed and why.
• Display a prominent notice on the pc999 platform for at least 14 days following the update.
• Update the "Last Updated" date at the top of this Policy.

Your continued use of pc999 after the effective date of updated Terms constitutes your acceptance of the revised Policy. If you do not accept the changes, you may close your account and request deletion of your data as described in Section 7.

For minor, non-material changes — such as corrections of typographical errors or clarifications that do not change the substance of any provision — pc999 may update the Policy without advance notice, though the "Last Updated" date will always reflect the most recent revision.