pl999 Privacy Policy
— Your Data, Your Rights
At pl999, we take the privacy of every Pakistani player seriously. This Policy explains exactly what personal data we collect, why we collect it, how we protect it, and what rights you have over your own information.
Six Privacy Principles pl999 Upholds
These six principles guide every data-related decision we make at pl999, from product design to how our support team handles your account information.
Data Minimisation
pl999 collects only the personal data that is genuinely necessary to provide you with a secure, compliant, and functional gaming experience. We do not harvest data for its own sake.
No Data Sales
pl999 does not sell, rent, or trade your personal data to advertisers, data brokers, or marketing companies. Your information is not a commercial product at pl999.
Encryption at Every Step
All data transmitted between your device and pl999 servers is protected by industry-standard TLS encryption. Sensitive account data is encrypted at rest using AES-256 protocols.
Your Rights Are Respected
You have the right to access, correct, export, or request deletion of your personal data at any time. pl999 will action all valid data rights requests within 30 days of receipt.
Transparent Processing
This Privacy Policy describes every category of personal data pl999 processes and the specific legal basis for processing each category. There are no hidden data practices.
Limited Retention
pl999 retains personal data only for as long as required to fulfil the purposes described in this Policy or to comply with applicable legal obligations. Expired data is securely deleted.
1. Who We Are
This Privacy Policy is issued by pl999, the operator of the online gaming platform accessible at pl999.win ("pl999", "we", "us", or "our"). pl999 operates under an international gambling licence and serves players primarily located in Pakistan.
For the purposes of data protection law, pl999 is the data controller in respect of the personal data of registered players and website visitors. Any questions about this Policy or about how pl999 handles your data should be directed to our support team via 24/7 live chat at pl999.win.
2. Personal Data We Collect
pl999 collects personal data in three ways: data you provide directly, data generated through your use of the platform, and data received from trusted third parties.
2.1 Data You Provide Directly
- Pakistani mobile number (used as your account identifier and for OTP authentication)
- Date of birth (used for mandatory age verification)
- Full legal name (collected at withdrawal verification stage)
- National Identity Card (CNIC) number or copy (collected where required by anti-money laundering obligations)
- Payment method details (Easypaisa number, JazzCash number, bank account details — held in tokenised form where applicable)
- Profile preferences, responsible gaming limits, and self-exclusion settings you configure in your account
- Messages and transcripts from your interactions with pl999 support via live chat
2.2 Data Generated by Your Use of the Platform
- Login timestamps, session durations, and device identifiers
- IP address and approximate geographic location (province/city level, derived from IP)
- Browser type, operating system, and screen resolution
- Game activity records including game titles played, wager amounts in PKR, game outcomes, and session totals
- Deposit and withdrawal transaction records including amounts in PKR, timestamps, payment method used, and transaction reference numbers
- Bonus claims, wagering progress records, and promotion interaction history
- Clickstream data showing pages visited within pl999.win and navigation patterns
2.3 Data Received from Third Parties
- Age and identity verification outcomes from third-party verification providers
- Fraud risk scores and device reputation signals from anti-fraud technology partners
- Payment status and confirmation data from Easypaisa, JazzCash, UBL, HBL, MCB Bank, SadaPay, and Raast infrastructure
- Responsible gaming flag data from self-exclusion registers where pl999 has a legal or contractual obligation to check
3. How pl999 Uses Your Personal Data
pl999 processes personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Mobile number, date of birth, password hash, device identifiers |
| Age and identity verification | Date of birth, full name, CNIC number or document copy |
| Processing deposits and withdrawals | Payment method details, transaction amounts in PKR, bank/wallet account numbers |
| Fraud prevention and AML compliance | Transaction history, IP address, device fingerprint, identity documents |
| Delivering customer support | Account details, support chat transcripts, transaction records |
| Responsible gaming management | Session data, deposit totals, limit settings, self-exclusion status |
| Platform analytics and improvement | Aggregated clickstream data, game activity data (anonymised where possible) |
| Legal and regulatory compliance | Identity documents, transaction records, correspondence history |
pl999 does not use your personal data to build advertising profiles, does not share your data with social media platforms for targeting purposes, and does not send unsolicited marketing communications via SMS or WhatsApp without your explicit prior consent.
4. Legal Basis for Processing
pl999 relies on the following legal bases to process your personal data:
- Contractual necessity: Processing required to create and manage your account, process transactions, and deliver the gaming services you have contracted for.
- Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, age verification requirements, and obligations under pl999's operating licence.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
- Consent: Processing for optional marketing communications, where you have given explicit, freely withdrawable consent. You may withdraw this consent at any time by contacting support.
5. Data Sharing
pl999 shares personal data with the following categories of third parties, strictly to the extent necessary for the purposes described in this Policy:
- Payment processors: Easypaisa, JazzCash, UBL, HBL, MCB Bank, SadaPay, and Raast receive transaction data necessary to process deposits and withdrawals.
- Identity verification providers: Third-party KYC providers receive identity document data to perform age and identity checks required under our licence.
- Anti-fraud technology partners: Fraud prevention platforms receive device and behavioural signals to identify suspicious account activity.
- Game content providers: Game studios (such as Pragmatic Play, Evolution Gaming, and NetEnt) receive session data necessary to deliver and audit game outcomes.
- Regulatory and law enforcement authorities: pl999 will disclose personal data to competent authorities where required by applicable law or court order.
- Cloud and infrastructure providers: Servers and databases used to run pl999 are hosted by enterprise-grade cloud providers operating under strict data processing agreements.
All third-party processors are bound by contractual data processing agreements that restrict them to using your data solely for the purpose for which it was shared. pl999 does not permit third-party processors to use your data for their own marketing or commercial purposes.
6. Cookies & Tracking Technologies
6.1 What Cookies pl999 Uses
pl999 uses the following categories of cookies and similar technologies on pl999.win:
- Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
- Functional cookies: Store your platform preferences such as language settings and responsible gaming configuration. Disabling these will not prevent access but may degrade the experience.
- Analytics cookies: First-party analytics cookies that collect anonymised aggregate data about page performance and user navigation patterns. No personally identifiable data is included in analytics reports.
6.2 What pl999 Does Not Use
pl999 does not use third-party advertising cookies, social media tracking pixels, or cross-site retargeting technologies. Your browsing activity on pl999.win is not shared with ad networks.
6.3 Managing Cookies
You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into your pl999 account. Blocking analytics cookies will not affect your ability to use any platform feature.
7. Payment Data
pl999 processes payment data — including your Easypaisa mobile number, JazzCash number, UBL or HBL account number, and transaction amounts in PKR — solely to facilitate deposits and withdrawals. Payment data is transmitted to payment processors via encrypted channels.
pl999 does not store full bank account numbers or payment card details on its own servers. Where payment details are retained for the purpose of processing repeat withdrawals to the same method, they are stored in tokenised form. The underlying payment credentials are held by the relevant payment processor, not by pl999.
All financial transactions processed through pl999 are subject to anti-money laundering monitoring. Transactions that trigger AML thresholds will be subject to enhanced due diligence, which may include requests for additional identity documentation.
8. Data Security
pl999 implements the following technical and organisational measures to protect the personal data of Pakistani players:
- TLS 1.3 encryption for all data in transit between user devices and pl999 servers
- AES-256 encryption for sensitive data stored at rest, including identity documents and payment tokens
- Bcrypt password hashing — pl999 never stores passwords in recoverable plain text
- Multi-factor OTP authentication for all account login sessions
- Role-based access controls limiting internal staff access to personal data on a need-to-know basis
- Regular third-party security penetration testing of the pl999 platform
- Automated suspicious activity monitoring with real-time alerting for anomalous login patterns
In the event of a personal data breach that is likely to result in a risk to the rights of affected players, pl999 will notify the relevant supervisory authority and affected players in accordance with applicable law and without undue delay.
9. Data Retention
pl999 retains personal data for the following periods:
- Active account data: Retained for the duration of your account's existence and for 5 years after account closure, to comply with AML record-keeping obligations.
- Transaction records: Retained for 7 years from the date of the transaction to satisfy financial record-keeping requirements under applicable law.
- Identity verification documents: Retained for 5 years from the date of verification or account closure, whichever is later.
- Support correspondence: Retained for 2 years from the date of the last interaction to enable complaint resolution and quality assurance.
- Analytics data: Retained in anonymised, aggregated form indefinitely. Personally identifiable analytics data is anonymised after 12 months.
- Marketing consent records: Retained until consent is withdrawn and for 1 year thereafter to demonstrate compliance.
After the applicable retention period expires, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to any individual.
10. Your Data Rights
As a pl999 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact pl999 support via live chat and we will respond within 30 days.
Your Data Rights at a Glance
Right of Access
You have the right to request a copy of the personal data pl999 holds about you, together with information about how it is being used. pl999 will provide this in a clear, readable format within 30 days.
Right to Rectification
If any personal data pl999 holds about you is inaccurate or incomplete, you have the right to request correction. Where technically possible, pl999 will update your records promptly upon receiving a valid request.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to retention obligations under applicable law.
Right to Restrict Processing
You may request that pl999 restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
Right to Data Portability
Where processing is based on your consent or on a contract with you, and processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
Right to Object
You have the right to object to processing of your personal data where pl999 relies on legitimate interests as the legal basis. pl999 will cease processing unless it can demonstrate compelling legitimate grounds that override your rights.
Right to Withdraw Marketing Consent
Where you have consented to receive promotional communications from pl999, you may withdraw that consent at any time by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
11. Children's Privacy
pl999 services are strictly for adults aged 18 and above. pl999 does not knowingly collect or process personal data relating to individuals under the age of 18. If you believe that pl999 may have inadvertently collected data from a person under 18, please contact support immediately. pl999 will investigate and, where confirmed, delete all associated data without delay and close the relevant account.
12. International Data Transfers
pl999 operates under an international gaming licence and uses cloud infrastructure that may involve the transfer and storage of data in jurisdictions outside Pakistan. Where such transfers occur, pl999 ensures that appropriate safeguards are in place, including standard contractual clauses, data processing agreements with adequate data protection standards, and — where applicable — adequacy determinations recognised under applicable data protection law.
All payment data relating to Pakistani payment methods (Easypaisa, JazzCash, UBL, HBL, MCB, SadaPay, Raast) is processed through infrastructure that meets the security standards required by Pakistan's banking and payments regulatory framework.
13. Changes to This Privacy Policy
pl999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. Material changes — meaning changes that may significantly affect how we use your personal data or your rights — will be communicated to registered players via their registered mobile number at least 7 days before the change takes effect.
The "Last Updated" date at the top of this Policy will always reflect when the most recent revision was made. Continued use of the pl999 platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a potential data protection concern, please contact the pl999 privacy support team:
pl999 Privacy Support
Live Chat: Available 24/7 at pl999.win — fastest response channel
Email (plain text): support@pl999.win
Response Commitment: Within 30 days for formal data rights requests; within 3 minutes via live chat for general privacy queries
Where you believe that pl999 has not adequately addressed a privacy concern, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
Questions About Your pl999 Account Data?
Our support team is available 24/7 to help with data rights requests, privacy concerns, or questions about how your information is used. You can also review our Terms & Conditions and Responsible Gaming policy.