pd999 Privacy Policy

01 Introduction

pd999 takes your right to privacy seriously. Whether you are visiting from Karachi, Lahore, Islamabad, Faisalabad, or anywhere else in Pakistan — or accessing our platform from abroad — we are committed to being transparent about what personal data we collect, why we collect it, and how we protect it.

This Policy applies to all personal data processed by pd999 in connection with your use of the Platform, including account registration, deposits and withdrawals, gaming activity, customer support interactions, and any marketing communications you have opted into.

pd999 operates in compliance with applicable data protection legislation and international best-practice standards for the handling of personal information in the online gaming industry. Where our legal obligations under data protection law conflict with any other provision of our Terms & Conditions, our data protection obligations take precedence.

This Policy was last updated on 1 January 2026. We recommend reviewing it periodically, as it may be updated to reflect changes in our data practices or applicable law.

02 Data Controller

For the purposes of applicable data protection law, pd999 is the data controller in respect of all personal data collected through the Platform. This means pd999 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

All formal data protection correspondence, Data Subject Access Requests, and privacy complaints should be directed to our designated Data Protection contact using the details set out in Section 16 of this Policy. We will acknowledge all formal requests within 3 business days and aim to provide a substantive response within 30 calendar days.

03 Data We Collect

pd999 collects personal data across several categories. The table below provides a clear reference of the data types we collect and the primary purpose associated with each category:

pd999 does not intentionally collect any special category personal data (such as biometric data, health information, religious beliefs, or political opinions) beyond what may be incidentally contained in identity documents submitted for KYC purposes.

04 How We Collect Your Data

pd999 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or completing any form on the Platform.
• Automated Technical Collection: Technical data such as IP addresses, device identifiers, and browser information is collected automatically through standard web server logs and session management systems when you access the Platform.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or a crypto payment channel, our payment processing partners may share transaction-level data with us for reconciliation and fraud detection purposes.
• Cookies and Similar Technologies: As described in Section 9 of this Policy, we collect certain usage and preference data through cookies and local storage technologies.
• Third-Party Verification Services: In some circumstances, we may use third-party identity verification providers to cross-reference information you provide during KYC against external data sources, such as national identity registries, where permitted by applicable law.
• Responsible Gaming Registers: If you have registered with a self-exclusion scheme or responsible gaming database, we may receive a notification through that scheme, which may contain basic identification data necessary to enforce the exclusion on our Platform.

05 Legal Basis for Processing

pd999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and pd999 — including account management, payment processing, and the delivery of gaming services — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering obligations, Know Your Customer requirements, age verification, and financial record-keeping requirements, is carried out on the basis of legal obligation.
• Legitimate Interests: Certain processing activities — such as fraud detection, platform security, responsible gaming monitoring, and internal analytics — are carried out on the basis of pd999's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Where you have provided explicit, freely given consent — such as opting in to receive marketing communications about new pd999 bonuses and promotions — we process your data on the basis of that consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 How We Use Your Data

pd999 uses your personal data for the following purposes:

• To create and manage your pd999 account and verify your identity and age (21+ requirement);
• To process deposits and withdrawals through your chosen payment method, whether USDT, BTC, JazzCash, EasyPaisa, or bank transfer;
• To deliver the gaming services you request, including cricket betting, slots, Keno, Cannon Fishing, and live casino products;
• To conduct anti-money laundering (AML) screening and comply with Know Your Customer (KYC) obligations under applicable financial crime regulations;
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and to enforce any self-exclusion or deposit limits you have set;
• To investigate, respond to, and resolve disputes, complaints, and customer support queries;
• To detect, prevent, and investigate fraud, cheating, collusion, and other prohibited activities on the Platform;
• To send you transactional communications — such as deposit confirmations, withdrawal updates, and account security alerts — which are necessary for the operation of your account;
• To send you marketing communications about pd999 bonuses, promotions, and new features, but only where you have provided your explicit consent and only until that consent is withdrawn;
• To analyse platform usage patterns and improve the performance, security, and user experience of the pd999 platform.

07 Data Sharing & Disclosure

pd999 does not sell your personal data. We share your data only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share necessary financial data with our payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and crypto payment gateways — to process your deposit and withdrawal transactions. These providers are contractually bound to process your data only for payment purposes.
• Identity Verification Providers: We may share your identity data with third-party KYC verification services to confirm your identity and age during the verification process.
• Game Software Providers: Third-party game providers whose products are accessible through the pd999 platform may receive minimal technical data (such as a pseudonymous player identifier) necessary to deliver the game. These providers do not receive your full identity data.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of pd999, its users, or the public.
• Fraud Prevention Databases: We may share data with cross-industry fraud prevention databases where required to detect or prevent financial crime.
• Self-Exclusion Schemes: Where you request self-exclusion through a recognised responsible gaming scheme, we may share the minimum data necessary to register your exclusion with the scheme operator.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of pd999's assets, your personal data may be transferred to the acquirer as part of the transaction, subject to the same privacy protections described in this Policy.

All third parties with whom we share personal data are subject to contractual data processing agreements that require them to maintain appropriate security standards and to use the data only for the purposes for which it was shared.

08 Crypto & Payment Data

Given that pd999 is a USDT and Bitcoin-friendly platform, a number of specific privacy considerations apply to crypto transactions:

• Blockchain Transparency: Transactions conducted on public blockchains (such as TRC-20 or ERC-20 networks for USDT, or the Bitcoin network) are recorded permanently on the public ledger. pd999 has no ability to alter or delete blockchain transaction records. Your USDT wallet address and transaction amounts are publicly visible on-chain, independent of pd999's data practices.
• Wallet Address Storage: pd999 stores your submitted crypto wallet addresses in encrypted form for withdrawal verification and AML compliance purposes. Wallet addresses are treated as personal data within our systems.
• PKR Conversion Records: Where you deposit via JazzCash, EasyPaisa, or bank transfer in Pakistani Rupees (PKR), the converted USDT equivalent and the exchange rate applied at the time of the transaction are retained in your account transaction history for a minimum of five years in line with financial record-keeping requirements.
• No Storage of Full Payment Credentials: pd999 does not store full bank account numbers, full CNIC numbers in plain text, or payment card details (note: pd999 does not currently accept card payments). All sensitive financial identifiers are tokenised or partially masked in our systems.

09 Cookies & Tracking Technologies

pd999 uses cookies and similar browser-based technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login session management, security token validation, and language/region preferences. These cookies cannot be disabled without impairing the functionality of the Platform.
• Analytical Cookies: We use analytics cookies to understand how users interact with the pd999 platform — including which games are most popular, which pages generate the most support requests, and how users navigate through the site. This data is used in aggregate, anonymised form to improve platform performance. No individual user is identified in our analytics reports.
• Functional Cookies: These cookies remember your preferences — such as your preferred deposit method, game display settings, and responsible gaming reminder intervals — to provide a more personalised experience on return visits.

pd999 does not use advertising or tracking cookies from third-party ad networks, social media platforms, or data brokers. We do not participate in cross-site behavioural advertising or audience retargeting programmes.

You can control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your pd999 account. Disabling analytical or functional cookies will not prevent access to the Platform but may reduce personalisation features.

10 Data Security

pd999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Transport Layer Security: All data transmitted between your device and pd999 servers is protected by TLS 1.3 encryption, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data stored on pd999 servers — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within pd999's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data categories necessary for their specific role. All internal data access is logged and monitored.
• Two-Factor Authentication: pd999 strongly recommends enabling 2FA on your account. 2FA is enforced for all internal pd999 staff accounts that have access to user data.
• Regular Security Audits: pd999 conducts periodic security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, pd999 will notify affected users without undue delay and will take all necessary steps to contain and remediate the breach.

11 Data Retention

pd999 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

Following the expiry of the applicable retention period, pd999 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification. In some cases, anonymised aggregate data may be retained indefinitely for statistical analysis purposes, but this data cannot be used to identify you.

12 Your Data Rights

As a pd999 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 16:

• Right of Access: You have the right to request a copy of the personal data pd999 holds about you, along with information about how it is being processed. We will provide this within 30 days of receiving a valid request.
• Right to Rectification: If any of your personal data held by pd999 is inaccurate or incomplete, you have the right to request that it be corrected. You can update most profile information directly within your pd999 account settings.
• Right to Erasure: You may request the deletion of your personal data. Please note that this right is subject to our legal obligations to retain certain data for AML, KYC, and financial record-keeping purposes as described in Section 11. Where erasure is not possible in full due to legal obligations, we will erase all data that can be lawfully deleted and will explain why certain data must be retained.
• Right to Restrict Processing: You may request that pd999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to pd999 in a structured, commonly used, machine-readable format, and to request that this data be transferred directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where pd999 relies on legitimate interests as its legal basis for processing, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where pd999 processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal.

We will not charge a fee for handling data rights requests, except in cases of manifestly unfounded or excessive requests, where we reserve the right to charge a reasonable administrative fee or to refuse the request.

13 Children & Minors

pd999 strictly prohibits persons under the age of 21 from registering an account or accessing any real-money gaming service on the Platform. We do not knowingly collect personal data from any individual under the age of 21.

If pd999 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, we will:

• Immediately suspend the account and cease all processing of personal data associated with that account;
• Delete the personal data as promptly as possible, subject to any overriding legal obligations to retain transaction records;
• Reverse or void any financial transactions associated with the account where technically and legally possible;
• Where appropriate, report the matter to the relevant child protection or regulatory authority.

If you have reason to believe that a minor has registered an account on pd999, please contact our support team immediately. We take such reports extremely seriously and will investigate without delay.

14 International Data Transfers

pd999 operates internationally and may process or store your personal data on servers or through service providers located outside of Pakistan. Where your personal data is transferred internationally, pd999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards used for international transfers may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into our agreements with international service providers;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where applicable within pd999's group of companies.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting our support team.

15 Amendments to This Policy

pd999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or other operational requirements. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this document;
• Provide notice to registered users via email or an on-platform notification, where the changes are material and affect the rights of existing users;
• Publish the updated Policy at https://pd999.pro/privacy-policy.

Your continued use of the pd999 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and request account closure prior to the amendment's effective date.

16 Contact & Complaints

For any privacy-related queries, Data Subject Access Requests, or formal complaints regarding pd999's data processing practices, please use the following contact channels:

• Live Chat Support: Available 24/7 through the live chat widget on the pd999 Platform. For privacy matters, please state "Data Privacy Request" at the start of your session so it is routed to the appropriate team.
• Email: [email protected] — please include "Privacy Policy Request" in the subject line. We aim to acknowledge all privacy-related emails within 3 business days and to provide a full response within 30 calendar days.

If you are not satisfied with how pd999 has handled your privacy complaint after exhausting our internal process, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.