o999 Privacy Policy

This Privacy Policy ("Policy") describes how o999 ("o999", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of users ("you", "User", "Player") who access or use the o999 online casino and sports betting platform available at o999.vu ("Platform"). This Policy forms part of the o999 Terms & Conditions and should be read alongside them.

o999 is Pakistan's premier online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities. Our Platform offers cricket and PSL betting, live casino games, video slots, Lucky Dice, football betting, and related gaming services — all processed natively in Pakistani Rupees (PKR) via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

By registering an account on o999 or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the o999 Platform.

For the purposes of applicable data protection legislation, o999 is the data controller responsible for the personal data collected through the Platform. o999 operates under an internationally recognised gaming licence and is subject to the data protection requirements of its licensing jurisdiction.

o999 has designated a data protection point of contact who is responsible for overseeing compliance with this Policy and applicable data protection obligations. For any data-related queries or requests, please use the contact details provided in Section 15 of this Policy.

o999 collects the following categories of personal data in connection with your use of the Platform:

o999 does not intentionally collect sensitive personal data categories — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required for responsible gaming assessments conducted at the player's request or in compliance with licensing obligations.

o999 collects personal data through the following channels and mechanisms:

• Direct provision: Data you enter during account registration, KYC document submission, deposit/withdrawal requests, live chat interactions, or contact form submissions.
• Automated collection: Technical data (IP address, device identifiers, session data) collected automatically when you access the Platform via cookies, log files, and similar tracking technologies — see Section 8 for full cookie details.
• Payment providers: Transaction confirmation and reference data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate deposits or withdrawals.
• Identity verification services: Confirmation data from third-party KYC providers used to verify your CNIC and identity documents against government databases as part of our regulatory obligations.
• Gaming platform logs: Automatically generated records of all game sessions, bets placed, outcomes, and account activity that occur on the o999 Platform.

o999 uses the personal data it collects for the following purposes:

• Account creation and management: Creating, verifying, and maintaining your o999 account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, verifying payment methods, and maintaining accurate transaction records.
• Regulatory compliance: Fulfilling obligations under our international gaming licence, including KYC identity verification, age verification (21+ policy), anti-money laundering (AML) screening, and statutory record-keeping.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Gaming service delivery: Providing the casino games, sportsbook, live betting, and other features of the o999 Platform, including personalising your game lobby experience.
• Responsible gaming: Monitoring account activity to identify patterns consistent with problem gambling behaviour, enforcing self-imposed deposit and session limits, and administering self-exclusion requests.
• Customer support: Responding to your queries, resolving disputes, and processing complaints submitted via live chat or email.
• Service improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience for Pakistani players.
• Marketing communications: Sending promotional offers, bonus notifications, and Platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time.

o999 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and operate your o999 account and deliver the gaming services you have requested — including payment processing and account management.
• Legal obligation: Processing required to comply with our gaming licence conditions, AML regulations, KYC requirements, age verification obligations, and statutory record-keeping duties.
• Legitimate interests: Processing necessary for fraud prevention, Platform security, service improvement, and responsible gaming monitoring — where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, which requires your explicit prior consent. You may withdraw this consent at any time through your account settings or by contacting support.

o999 does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Pakistani financial regulations.
• KYC and identity verification providers: Third-party identity verification services receive your CNIC and identity document data solely for the purpose of verifying your identity and age in compliance with our licensing obligations.
• Game software providers: Where o999 licenses third-party casino games, the software provider may receive anonymised session and bet data necessary for game operation and integrity monitoring. Personal identity data is not shared with game providers.
• Regulatory and licensing authorities: o999's licensing authority and relevant regulatory bodies may require access to player data as part of compliance monitoring, audits, or investigations. o999 is legally obligated to cooperate with such requests.
• Law enforcement: o999 may disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required by applicable law, court order, or where disclosure is necessary to prevent serious crime.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by o999 may access personal data on a strictly need-to-know, confidential basis in connection with their professional services to o999.

o999 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and gather analytical data. Cookies are small text files stored on your device by your browser when you visit the Platform.

o999 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including maintaining your login session, processing transactions, and enforcing security controls. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Used to remember your preferences, language settings, and game lobby configuration so that your experience is consistent across sessions.
• Analytical cookies: Used by o999 to understand how Pakistani players use the Platform — including which games and sections are most popular — so that we can improve the service. Data collected is aggregated and anonymised where possible.
• Security cookies: Used for fraud detection, bot prevention, and identifying unusual account activity patterns that may indicate unauthorised access.

You can manage cookie preferences through your browser settings. Blocking all cookies will affect Platform functionality, particularly login persistence and transaction processing. o999 does not use third-party advertising or retargeting cookies.

o999 retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to the following retention considerations:

• Active accounts: Personal data associated with your o999 account is retained for the full duration of your account relationship with o999.
• Closed accounts: Following account closure, o999 retains certain personal data — including identity documents, transaction records, and KYC files — for a minimum period required by our gaming licence and applicable anti-money laundering regulations. This period is typically five (5) years from the date of account closure, though specific regulatory requirements may mandate longer retention in certain circumstances.
• Marketing data: Marketing opt-in records and communication history are retained for the duration of your consent plus a reasonable period to demonstrate compliance with consent obligations.
• Technical logs: Server logs and security monitoring data are typically retained for a shorter period commensurate with their fraud detection and security purposes.

When personal data is no longer required and no legal retention obligation applies, o999 securely deletes or irreversibly anonymises that data so that it can no longer be attributed to an individual.

o999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive account and financial data at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented need to access it.
• Multi-factor authentication options for player account access.
• Continuous security monitoring and intrusion detection systems.
• Regular security assessments and penetration testing of Platform infrastructure.
• Formal data breach response procedures, including obligations to notify affected players and relevant authorities where required by applicable law.

Subject to applicable data protection legislation and our regulatory obligations, you have the following rights in respect of the personal data o999 holds about you:

• Right of access: You may request a copy of the personal data o999 holds about you. o999 will respond to verified access requests within thirty (30) days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data corrections may require re-submission of KYC documents.
• Right to erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where o999 has no legitimate reason to retain it. This right is subject to overriding legal retention obligations, including gaming licence and AML record-keeping requirements.
• Right to restriction: You may request that o999 restrict processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests. o999 will assess whether its legitimate interests override your objection.
• Right to data portability: Where processing is based on your consent or a contract with you, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where o999 processes your data on the basis of your consent — specifically for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact o999 via live chat or at the support email address provided in Section 15. o999 may need to verify your identity before processing a data rights request. All requests will be handled within thirty (30) days of receipt, with a possible extension of a further sixty (60) days for complex or multiple requests.

The o999 Platform is strictly restricted to individuals who are 21 years of age or older. o999 does not knowingly collect personal data from individuals under the age of 21. o999 enforces its 21+ age policy through KYC identity verification, which requires all players to submit a valid Pakistani CNIC confirming their date of birth before any withdrawal is processed.

If o999 discovers or is informed that a registered account belongs to an individual under the age of 21, that account will be immediately closed, all winnings voided, and any deposited funds (verified as belonging to the minor or their guardian) returned. Any personal data associated with the underage account will be retained only for the minimum period required by our regulatory obligations and then securely deleted.

o999 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, PSL betting markets, and other Platform features — but only where you have given your explicit prior consent to receive such communications during registration or at a later point through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your o999 account settings.
• Clicking the unsubscribe link included in any marketing email sent by o999.
• Contacting o999 customer support via live chat and requesting removal from marketing lists.

Withdrawing marketing consent does not affect your ability to use the o999 Platform or receive service communications — such as account security alerts, KYC verification requests, withdrawal confirmations, and support responses — which are necessary for account management and are not subject to marketing opt-in requirements.

o999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, o999 will provide notice to registered players via a prominent notice on the Platform upon next login, or by email to the address registered on your account, specifying the effective date of the changes.

Your continued use of the o999 Platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. o999 recommends that you periodically review this Policy to stay informed. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data o999 holds about you — including data access requests, rectification requests, erasure requests, or marketing opt-out requests — please contact us through the following channels:

• Live Chat: Available 24/7 directly on the o999 Platform. This is the fastest channel for Pakistani players to reach our support team for any account or data-related query.
• Support Email: [email protected] (plain text — not a clickable link). o999 endeavours to respond to all email enquiries within twenty-four (24) hours.

When submitting a data rights request, please include your registered email address and mobile number so that o999 can verify your identity before processing the request. o999 will not process data access or erasure requests without satisfactory identity verification to protect against unauthorised access to another person's data.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. © 2026 o999. All rights reserved.