we999 Privacy Policy

we999 ("we999," "we," "us," or "our") operates the online gaming platform accessible at we999.live, providing cricket betting, live casino, slots, Andar Bahar, and related gaming services to users in Pakistan and other permitted jurisdictions. we999 is the data controller responsible for the personal information collected through this platform.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify you as an individual — including your name, CNIC number, email address, mobile number, financial account details, IP address, and device identifiers.

All privacy-related enquiries, data access requests, and complaints may be directed to the we999 Data Protection contact at [email protected] with the subject line "Privacy Request — [your full name and account ID]."

we999 collects personal data through several channels: information you provide directly at registration or during account operation, information generated automatically by your use of the platform, and information received from trusted third-party verification and payment partners. The specific categories of data collected are set out below.

we999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless specifically required for responsible gaming self-exclusion processes, in which case such data is processed only with your explicit consent.

we999 uses the personal data it collects for clearly defined purposes only. Data is never processed for purposes beyond what is described below without obtaining fresh consent from you:

• Account creation and management: To register your we999 account, verify your identity in compliance with Know Your Customer (KYC) requirements, and manage ongoing account operations including password resets and account security.
• Service delivery: To facilitate cricket betting, live casino sessions, slot gameplay, and all other gaming services available on the we999 platform in PKR.
• Payment processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, debit card, and USDT, and to maintain accurate transaction records as required by anti-money-laundering regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bot activity, and any other prohibited conduct as defined in the we999 Terms and Conditions.
• Responsible gaming compliance: To monitor gaming patterns, enforce deposit and loss limits you have set, administer cooling-off periods and self-exclusions, and fulfil we999's duty of care obligations to all players aged 21 and above.
• Legal and regulatory compliance: To fulfil obligations under applicable anti-money-laundering, counter-terrorism financing, and gaming regulatory frameworks, including responding to lawful requests from relevant authorities.
• Customer support: To respond to your queries, process complaints, and maintain support correspondence records for quality assurance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

we999 processes personal data in accordance with recognised legal bases for data processing. The applicable legal basis varies depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the we999 platform services to you under the Terms and Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, KYC requirements, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for we999's legitimate business interests where those interests are not overridden by your fundamental rights — including fraud prevention, platform security, and aggregate analytics.
• Consent: Processing carried out on the basis of your explicit, freely given consent — including marketing communications and the processing of any sensitive personal data related to responsible gaming tools. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

we999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the following limited and defined circumstances:

• Payment processors: we999 shares the minimum necessary financial data with PCI-DSS compliant payment processors enabling PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT, and debit card. These processors are bound by strict data processing agreements and may not use your data for any purpose beyond the specific transaction they are processing.
• Identity verification providers: we999 may share identity data (including CNIC information) with licensed KYC and AML verification service providers to fulfil regulatory obligations. These providers act as data processors under written agreements with we999.
• Game software providers: Certain technical and gaming session data is shared with we999's licensed game software providers to facilitate game delivery, audit game outcomes, and resolve disputes. No financial or identity data beyond what is technically necessary is shared.
• Regulatory and law enforcement authorities: we999 may disclose personal data to regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or where we999 has reasonable grounds to believe disclosure is necessary to prevent criminal activity or protect the safety of a person.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of we999's assets, personal data held by we999 may be transferred to the successor entity, subject to that entity providing equivalent privacy protections. Affected users will be notified prior to any such transfer.

The we999 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your login session, and collect anonymised aggregate analytics. we999 does not use cross-site tracking cookies or serve third-party advertising cookies.

The categories of cookies used by we999 are as follows:

• Strictly necessary cookies: Essential for platform operation — including session cookies that keep you logged into your we999 account, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and last-selected payment method. Disabling these cookies will not break the platform but will mean your preferences are not saved between sessions.
• Analytics cookies: Collect anonymised, aggregated data about how users navigate the we999 platform — including pages visited, session duration, and feature usage. This data is used solely to improve the platform and is never linked back to individual user accounts.

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from accessing certain parts of the we999 platform. For detailed browser-specific instructions on managing cookies, please consult your browser's help documentation.

we999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for aggregate analytics and platform improvement purposes.

we999 respects your rights over your personal data. You may exercise any of the following rights at any time by contacting [email protected] with subject line "Data Rights Request":

• Right of access: Request a copy of all personal data we999 holds about you, along with information about how it is being processed. we999 will respond within 30 days.
• Right to rectification: Request correction of any inaccurate or incomplete personal data we999 holds about you. Corrections to identity data may require re-submission of supporting CNIC documentation.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you have withdrawn consent and no other legal basis applies. Note that we999 may be obliged to retain certain data for the regulatory periods outlined in Section 7, which will limit the scope of any erasure request.
• Right to restriction: Request that we999 restrict processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved.
• Right to data portability: Request an export of your personal data in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible and where processing is carried out by automated means.
• Right to object: Object to processing of your personal data carried out on the basis of legitimate interests, including profiling. we999 will cease such processing unless compelling legitimate grounds can be demonstrated that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing communications), withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

we999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the we999 platform is encrypted using 256-bit TLS 1.3 protocol. HTTP connections are automatically redirected to HTTPS.
• Encryption at rest: Personal data and financial records stored on we999 servers are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within we999's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: The we999 platform supports and encourages two-factor authentication (2FA) for all user accounts to prevent unauthorised access.
• Penetration testing and vulnerability scanning: we999's platform infrastructure undergoes regular third-party penetration testing and continuous automated vulnerability scanning.
• Incident response: we999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we999 will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach.

No data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While we999 takes all reasonable and industry-standard precautions, we cannot provide an absolute guarantee of security. Users are responsible for keeping their account credentials secure and should notify we999 immediately upon suspecting any unauthorised account access.

The we999 platform is strictly intended for users aged 21 years and above. we999 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is strictly prohibited and represents a material breach of the we999 Terms and Conditions.

we999 employs age verification measures at registration, including CNIC-based identity verification, to ensure that the platform is not accessed by underage individuals. Where we999 discovers or has reasonable grounds to suspect that a user is under the age of 21, the account will be immediately suspended, all balances forfeited, and any personal data collected will be deleted as soon as reasonably practicable, subject to any overriding legal obligation to retain it.

If you believe that we999 may have inadvertently collected personal data from an individual under the age of 21, please contact [email protected] immediately so that appropriate action can be taken.

we999 reserves the right to update or modify this Privacy Policy at any time. Changes may be made in response to new regulatory requirements, changes to our data processing activities, or improvements to our privacy practices. The version number and effective date at the top of this policy will be updated whenever a new version is published.

For material changes — meaning changes that significantly affect how we process your personal data or that reduce your rights under this policy — we999 will notify registered users via email to the address registered on your we999 account at least 14 days before the changes take effect. Your continued use of the we999 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes.

For minor or clarificatory changes that do not materially affect your rights, we999 may update the policy without individual notification, relying on the updated policy being prominently linked from the we999 platform footer.

For all privacy-related queries, data subject rights requests, complaints, or concerns regarding we999's handling of your personal data, please contact the we999 data protection team through the following channel:

• Email: [email protected]
• Subject line format: "Privacy Request — [Full Name] — [Account ID]"
• Response time: Acknowledgement within 5 business days; full response within 30 days
• Live support: Available 24/7 via the chat widget on the we999 platform for general privacy queries

If you are not satisfied with we999's response to a privacy concern or data subject rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. we999 will cooperate fully with any such regulatory investigation.