w3999 Privacy Policy

Who We Are

w3999 is an online gaming platform operating at w3999.club, providing sports betting, live casino, jackpot slots, Crash Goal, and wallet services to registered users. The platform is built specifically for Pakistani players and supports local payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK.

For the purposes of this Privacy Policy, w3999 is the data controller — meaning we determine the purposes and means by which your personal data is processed. When we engage third-party service providers (such as payment processors, KYC verification providers, or game content suppliers), those parties act as data processors on our behalf and are contractually bound to process your data only in accordance with our instructions and this Policy.

If you have any questions about how w3999 handles your personal data, you can contact our support team directly. Contact details are provided in Section 13 of this Policy.

Data We Collect

w3999 collects personal data across several categories depending on how you interact with the platform. The following table summarises the categories of data we collect and their purpose:

How We Collect Your Data

w3999 collects your personal data through the following means:

• Direct Collection: Information you provide when registering a w3999 account, completing KYC verification, making a deposit or withdrawal request, contacting support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically as you interact with the w3999 platform, including via cookies, server logs, and analytics tools. See Section 7 for full details on our cookie practices.
• Third-Party Sources: Identity verification data received from our KYC service providers following document checks. Fraud risk signals from payment processors and financial crime screening services. We do not purchase data lists from brokers.
• Inferred Data: Data derived from your behaviour on the platform, such as responsible gaming risk indicators generated from betting patterns, session frequency, and deposit activity. This is used solely to protect you and fulfil our responsible gaming obligations.

Where you provide us with personal data relating to a third party — for example, nominating a next of kin for an account closure request — you confirm that you have obtained that person's consent to share their data with w3999 for the purpose stated.

How We Use Your Data

w3999 uses your personal data for the following purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

• Account Management: Creating and maintaining your w3999 account, authenticating your identity at login, and managing your account settings and preferences.
• Transaction Processing: Processing deposits, withdrawals, and internal wallet transfers in PKR via JazzCash, EasyPaisa, Raast, and supported bank channels.
• KYC & Compliance: Verifying your age (21+) and identity to comply with applicable gaming regulations, and monitoring your account for signs of financial crime in accordance with anti-money laundering obligations.
• Platform Security: Detecting and preventing fraud, unauthorised account access, bonus abuse, and prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns and session behaviour to identify potential problem gambling indicators, and contacting you if responsible gaming thresholds are triggered.
• Customer Support: Responding to your support queries, resolving disputes, and improving the quality of our customer service based on interaction records.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the w3999 platform, fix bugs, and optimise the user experience for Pakistani players.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates via email or SMS — only where you have opted in to receive such communications. You may opt out at any time.
• Legal Obligations: Retaining records as required by applicable law and responding to lawful requests from regulatory authorities.

Legal Basis for Processing

w3999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing that is necessary to fulfil our contract with you — i.e., to operate your w3999 account, process transactions, and deliver platform services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and anti-money laundering requirements, age verification obligations, and responses to regulatory authority requests.
• Legitimate Interests: Processing necessary for w3999's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and platform performance analysis — provided those interests are not overridden by your rights and interests.
• Consent: Processing for purposes where we have asked for and received your explicit consent, such as sending marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where w3999 relies on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental privacy rights. If you wish to understand the specific legitimate interest basis applied to any particular processing activity, please contact us at the details provided in Section 13.

Data Sharing & Third Parties

w3999 does not sell your personal data. We share your data with third parties only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and applicable financial regulations.
• KYC & Identity Verification Providers: Certified identity verification partners receive copies of your KYC documents and identity data to perform age and identity checks. These providers are contractually prohibited from using your data for any purpose other than verification.
• Game Content Providers: Third-party casino game and sports data providers receive anonymised session identifiers necessary to deliver live casino, slot, and betting content. They do not receive your name, contact details, or financial data.
• Fraud & Security Services: Specialist fraud screening providers may receive your technical data (IP address, device fingerprint) to assess risk signals associated with your account activity.
• Regulatory Authorities: w3999 will disclose your personal data to relevant regulatory or law enforcement authorities where required to do so by law, court order, or to protect the rights, safety, or property of w3999 or its users.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of w3999's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance where required by applicable law.

Cookies & Tracking Technologies

w3999 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, and understand how users interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming limit display preferences. Disabling these cookies may affect your user experience.
• Analytics Cookies: Collect anonymised information about how users navigate the w3999 platform — pages visited, time on page, error events. This data is used in aggregate form only to improve the platform. No individual user is identified from analytics data.
• Security Cookies: Used to detect suspicious session activity, multiple account detection, and bot behaviour patterns. These are essential for platform security and cannot be opted out of.

w3999 does not use advertising or retargeting cookies. We do not place cookies that track your behaviour on third-party websites outside of the w3999 platform.

You can manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary or security cookies may prevent you from accessing your w3999 account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Retention

w3999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the lifetime of your w3999 account, plus a minimum of five (5) years following account closure to comply with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documents: Retained for five (5) years from account closure or the date of the last verified transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the interaction unless the communication relates to an unresolved dispute or legal matter, in which case retention continues until resolution.
• Marketing Consent Records: Retained for as long as your account is active, and for two (2) years following account closure or opt-out, whichever is earlier.
• Technical & Log Data: Retained for twelve (12) months from collection for security and fraud investigation purposes, then deleted or anonymised.

After the applicable retention period has expired, w3999 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Where complete deletion is not immediately possible due to backup systems, we will isolate and protect the data from further processing until deletion is feasible.

Data Security

w3999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the w3999 platform is encrypted using TLS 1.2 or higher. You will see a padlock icon and HTTPS in your browser address bar confirming this protection is active.
• Encryption at Rest: Personal data and financial records stored within w3999 infrastructure are encrypted at rest using AES-256 encryption standards.
• Access Controls: Role-based access controls ensure that only authorised w3999 personnel can access personal data, and only to the extent required for their specific job function. All access is logged and subject to regular audit.
• Two-Factor Authentication: w3999 supports two-factor authentication (2FA) for all user accounts, providing an additional layer of security beyond your password. We strongly recommend all w3999 users enable 2FA from their account security settings.
• Penetration Testing: w3999 conducts regular security assessments and penetration testing of our platform infrastructure to identify and address vulnerabilities before they can be exploited.
• Incident Response: w3999 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and relevant regulatory authorities within the timeframe required by applicable law.

While w3999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — always use a strong, unique password for your w3999 account and never share your login credentials with anyone.

Your Rights Over Your Data

As a w3999 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact w3999 support as detailed in Section 13. We will respond to all valid rights requests within thirty (30) days of receipt.

• Right of Access: You have the right to request a copy of the personal data w3999 holds about you, along with information about how it is processed. We will provide this in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly from your w3999 account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. This right is subject to legal retention obligations; we cannot erase data that we are required by law to retain.
• Right to Restriction: You have the right to request that we temporarily restrict processing of your data while a rectification or objection request is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where w3999 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

Children & Minors

The w3999 platform is strictly intended for adults aged 21 years and above. w3999 does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

All new w3999 account registrations are subject to mandatory KYC age verification before withdrawal privileges are activated. Accounts where age verification fails or where the registered user is found to be under 21 will be immediately closed and any deposited funds handled in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that a minor has registered a w3999 account or provided personal data to the platform without your knowledge, please contact w3999 support immediately at [email protected]. We will investigate the matter urgently, close the account, and delete any associated personal data as quickly as legally permissible.

Changes to This Privacy Policy

w3999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered w3999 email address summarising the key changes.
• Display a prominent banner on the w3999 platform notifying users of the update for a period of at least 14 days following publication.

Your continued use of the w3999 platform following notification of a Policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you must cease using the platform and contact support to request account closure and deletion of your personal data (subject to legal retention requirements).

We encourage you to review this Privacy Policy periodically to stay informed about how w3999 is protecting your personal information. The most current version of this Policy will always be available at w3999.club/privacy-policy.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way w3999 processes your personal data, please get in touch with our support team using the details below:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from your w3999 account dashboard in English and Urdu
• Response Time: Privacy-related queries are typically responded to within 48 hours; formal data rights requests are handled within 30 days

When contacting us about a privacy matter, please include your registered w3999 account email address and a clear description of your query or request. If you are submitting a formal data rights request under Section 10, please specify the right you are exercising to help us handle your request promptly.