Privacy Policy – How kd999 Collects, Uses & Protects Your Data

1. Who We Are

This Privacy Policy is issued by kd999, the operator of the online betting and casino platform accessible at kd999.club ("kd999", "we", "us", "our"). kd999 is the data controller in respect of personal data collected from Players who register accounts and use the Services provided through the Platform.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact kd999 at [email protected].

2. Personal Data We Collect

2.1 Registration Data

When you create a kd999 account, we collect the personal information you provide during the registration process, including:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Mobile phone number (used for SMS verification and JazzCash/Easypaisa payment processing);
• City of residence (e.g. Karachi, Lahore, Islamabad, Rawalpindi);
• Chosen username and account credentials.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your identity before processing withdrawals above threshold limits, kd999 may collect:

• A copy of your Computerised National Identity Card (CNIC) or equivalent government-issued identity document;
• Proof of address documentation;
• Selfie or live verification image where requested.

2.3 Transactional Data

kd999 collects records of all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and processing records, payment method identifiers (e.g. JazzCash account number, Easypaisa wallet identifier, bank account details), and betting and gaming activity including bet amounts, outcomes, and game history.

2.4 Technical and Usage Data

When you access the kd999 Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, page views, and navigation patterns;
• Referring URL and search terms used to reach the Platform;
• Crash reports and performance data for the purpose of platform improvement.

2.5 Communications Data

If you contact kd999 support — by email to [email protected] or through the in-platform chat — we retain records of that correspondence, including the content of messages, attachments, and associated metadata. This data is retained to maintain an accurate record of Player interactions and to ensure consistency in support resolution.

3. How kd999 Uses Your Personal Data

kd999 uses the personal data described above for the following purposes:

• Account creation and management: To register your kd999 account, verify your identity, and maintain your account in good standing;
• Service delivery: To operate the sportsbook, casino, and slots services and to process your bets, casino wagers, and PKR wallet transactions;
• Payment processing: To facilitate deposits via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card networks, and to process withdrawal requests to your registered payment methods;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other prohibited activities;
• Legal and regulatory compliance: To meet anti-money laundering (AML), know-your-customer (KYC), and other applicable legal obligations;
• Customer support: To respond to your enquiries, resolve disputes, and communicate important account information;
• Responsible gaming: To monitor your gaming behaviour and, where patterns of concern are identified, to communicate responsible gaming information and offer access to player protection tools;
• Platform improvement: To analyse usage patterns, diagnose technical issues, and develop new features based on aggregated and anonymised player behaviour data;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences. You may opt out at any time.

4. Legal Basis for Processing

kd999 processes your personal data on the following legal grounds:

• Contract performance: Processing necessary to provide the kd999 Services and manage your account in accordance with our Terms and Conditions;
• Legal obligation: Processing required to comply with applicable AML, KYC, and regulatory requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, and platform improvement where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time.

5. Data Sharing & Third Parties

5.1 Service Providers

kd999 engages third-party service providers who process personal data on our behalf under contractual data processing agreements. These include payment processors (for JazzCash, Easypaisa, and bank transfers), identity verification service providers, cloud hosting and infrastructure providers, fraud detection technology providers, and customer support platform operators. All such providers are contractually bound to process personal data only on kd999's instructions and in accordance with this Privacy Policy.

5.2 Legal Disclosures

kd999 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory instruction. kd999 will, where legally permissible, notify affected Players of such disclosures.

5.3 No Commercial Data Sales

kd999 does not sell, rent, or otherwise commercially transfer personal data to third-party advertisers, data brokers, or marketing companies. Your personal information is not a commercial product.

6. Payment Data

kd999 processes payment data — including JazzCash mobile wallet numbers, Easypaisa identifiers, Pakistani bank account details, and card data — for the purpose of facilitating deposits and withdrawals. All payment data is handled under security standards aligned with PCI-DSS requirements.

kd999 does not store full card numbers on its servers. Card transactions are processed through certified payment gateways. Mobile wallet transactions via JazzCash and Easypaisa are processed through the respective operator APIs under the security frameworks those operators maintain.

Payment identifiers are retained for the duration of your kd999 account and for the minimum period required by applicable AML and financial record-keeping regulations thereafter.

7. Cookies & Tracking Technologies

7.1 Essential Cookies

kd999 uses essential cookies that are necessary for the Platform to function correctly. These include session authentication cookies, load balancing cookies, and cookies that remember your language and display preferences. Essential cookies cannot be disabled without impairing your ability to use the Platform.

7.2 Analytical Cookies

kd999 uses first-party analytical cookies to understand how Players navigate the Platform, which pages and features are most used, and where technical errors occur. This data is used in aggregate and anonymised form to improve the kd999 experience. You may opt out of analytical cookies through your browser settings.

7.3 No Third-Party Advertising Cookies

kd999 does not deploy third-party advertising or cross-site tracking cookies. No external advertising networks are given access to your browsing behaviour on the kd999 Platform.

8. Data Retention

kd999 retains personal data for as long as your account remains active and for such additional periods as are required by applicable legal, regulatory, and business obligations. Specific retention periods are as follows:

• Account and registration data: Retained for the duration of your kd999 account and for a minimum of five years following account closure, in accordance with AML record-keeping requirements;
• KYC verification documents: Retained for a minimum of five years following the completion of verification, as required by applicable financial regulations;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• Communications data: Retained for a period of three years from the date of the communication, unless a longer retention period is required for dispute resolution purposes;
• Technical and usage data: Retained in aggregate form for up to 24 months for platform analytics purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with kd999's data disposal procedures.

9. Data Security

kd999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and kd999's servers;
• Encrypted storage of sensitive personal data including passwords (hashed) and identity documents;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Two-factor authentication for internal kd999 systems accessing personal data;
• Regular security reviews and penetration testing;
• Automated monitoring for unusual data access patterns and potential security incidents.

While kd999 applies industry-standard security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their kd999 account and to enable two-factor authentication. If you suspect that your kd999 account has been compromised, contact [email protected] immediately.

10. Your Data Rights

As a kd999 Player, you hold the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data kd999 holds about you;
• Right to Rectification: You may request correction of inaccurate personal data. Certain data, such as your legal name and date of birth, may require documentary evidence to amend;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to Restriction: You may request that kd999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful;
• Right to Portability: You may request a copy of personal data you provided to kd999 in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objections to marketing will be honoured immediately;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". kd999 will respond within 30 days. Identity verification may be required before processing data rights requests.

11. Children's Privacy

kd999 does not knowingly collect personal data from individuals under the age of 18. The Platform is strictly for adult players. If kd999 becomes aware that personal data has been collected from a minor, the associated account will be immediately closed and all collected data deleted, with any balance returned to the deposit source.

Parents or guardians who believe their child has created a kd999 account should contact [email protected] immediately for expedited account closure.

12. International Data Transfers

kd999's platform infrastructure may involve the transfer of personal data to servers or service providers located outside Pakistan. Where such transfers occur, kd999 ensures that appropriate safeguards are in place to protect the personal data being transferred, including contractual protections with service providers. kd999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary safeguards.

13. Changes to This Privacy Policy

kd999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. Where changes are material, kd999 will notify registered Players by email or via a prominent in-platform notice prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the kd999 Platform following notification of policy changes constitutes your acknowledgment of the revised Privacy Policy.

14. Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how kd999 handles your personal data, please contact us using the details below:

• Data Privacy Contact: [email protected]
• Subject Line: Privacy Enquiry / Data Rights Request
• Response Time: Within 30 days for formal data rights requests; within 48 hours for general privacy enquiries.
• Platform: kd999.club

kd999 takes all privacy concerns seriously. If you are not satisfied with our response to a privacy enquiry, you may seek further recourse through applicable data protection channels in your jurisdiction.