i999 Privacy Policy – How We Handle Your Personal Data

1. Introduction

i999 ("we", "us", "our") operates the online gaming and sports betting platform accessible at i999.lat (the "Platform"). This Privacy Policy describes how i999 collects, uses, stores, and protects the personal information of users ("you", "your") who register for or access the Platform.

By creating an i999 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Privacy Policy, you should not use the Platform.

This Policy applies to all users of i999 regardless of their location. Pakistani players should be aware that by using the Platform, their personal data may be processed in jurisdictions outside Pakistan. i999 applies appropriate safeguards when transferring data internationally.

2. Data We Collect

i999 collects personal data across several categories depending on how you interact with the Platform:

2.1 Registration Data

• Full name as provided during account creation.
• Date of birth (used to verify the 18+ age requirement).
• Email address and/or mobile phone number (used as primary contact identifier).
• Residential address (may be collected for KYC verification purposes).
• Username and encrypted password.

2.2 Identity Verification Data

• Copy of government-issued photo ID (e.g., CNIC, passport) — collected when KYC verification is required prior to withdrawal processing.
• Utility bill or bank statement as proof of address, where required.

2.3 Financial Data

• Payment method identifiers — such as JazzCash or Easypaisa account numbers, partial bank account numbers, or masked card details — used to process deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and associated payment methods.

2.4 Platform Activity Data

• Betting history, game session logs, wager amounts, and outcomes.
• Login timestamps, session durations, and device identifiers.
• In-game settings, preference selections, and responsible gaming tool activations.

2.5 Technical Data

• IP address, browser type, operating system, and device type.
• Referral URL (the page from which you accessed i999).
• Cookie identifiers and session tokens.

2.6 Communications Data

• Records of support interactions via live chat or email.
• Complaint submissions and associated correspondence.

3. How We Use Your Data

i999 uses your personal data for the following purposes:

• Account Management: Creating and administering your i999 account, verifying your identity, and maintaining your account security.
• Transaction Processing: Processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods.
• Platform Operation: Delivering gaming services, settling bets, calculating balances, and maintaining game integrity.
• Legal Compliance: Meeting KYC, anti-money laundering (AML), and responsible gaming obligations required by i999's applicable gaming licence.
• Fraud Prevention: Detecting and investigating suspected fraudulent activity, bonus abuse, or platform manipulation.
• Customer Support: Responding to queries, complaints, and support requests submitted to i999 via live chat or email.
• Responsible Gaming: Monitoring usage patterns to identify potential gambling harm and administering self-exclusion, deposit limit, and session limit tools.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, navigation, and game offerings.

4. Legal Basis for Processing

i999 processes personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil the agreement between i999 and the user under the i999 Terms & Conditions — including account operation, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with gaming licence conditions, AML regulations, KYC requirements, and any mandatory data retention obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement — where these interests are not overridden by your individual rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing

5.1  i999 does not sell your personal data to third parties. We share personal data only in the circumstances described below:

• Payment Processors: Transaction data is shared with payment providers — including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card processing networks — strictly to the extent necessary to process your deposit or withdrawal.
• Game Providers: Session and wager data may be shared with certified game studio providers to deliver game services and resolve disputes. Providers are contractually bound to use this data only for service delivery.
• Identity Verification Services: KYC data may be processed by contracted identity verification partners for the purpose of age and identity verification. These partners operate under strict data processing agreements.
• Regulatory Authorities: i999 may disclose personal data to regulatory bodies, licensing authorities, or law enforcement agencies where required by applicable law or valid legal order.
• Fraud Prevention Networks: i999 may share data with fraud prevention services to protect the Platform and its users from financial crime. Shared data is limited to what is strictly necessary for this purpose.

5.2  All third-party data processors used by i999 are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for purposes beyond those specified by i999.

6. Cookies & Tracking

6.1  i999 uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies used are as follows:

• Essential Cookies: Required to maintain your login session, apply account settings, and enable core Platform functions. These cannot be disabled without affecting Platform usability.
• Performance Cookies: Used to measure page load times, identify technical errors, and analyse navigation patterns in aggregate anonymised form. No individually identifiable data is retained for performance analysis.
• Preference Cookies: Store your language settings, display preferences, and responsible gaming tool configurations between sessions.

6.2  i999 does not use third-party advertising or behavioural tracking cookies. Your browsing activity on the Platform is not shared with external advertising networks.

6.3  Most browsers allow you to manage cookie settings. Disabling essential cookies may impair Platform functionality, including the ability to log in to your i999 account.

7. Data Retention

7.1  i999 retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and licensing obligations.

7.2  Transaction records, KYC documentation, and betting history may be retained for a minimum of five years following account closure to comply with AML regulatory requirements and gaming licence conditions.

7.3  Following expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with i999's internal data management procedures.

7.4  Where you exercise your right to erasure (see Section 9), i999 will delete data that is not subject to a mandatory retention obligation. Data that must be retained for legal or regulatory reasons will be held securely and isolated from active processing systems.

8. Data Security

8.1  i999 applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the Platform.
• Encrypted storage of sensitive fields including passwords (which are stored as irreversible cryptographic hashes, never in plain text) and payment identifiers.
• Role-based access controls restricting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.

8.2  Notwithstanding these measures, no data transmission over the internet is completely secure. i999 cannot guarantee the absolute security of data and accepts no liability for breaches resulting from events outside its reasonable control.

8.3  If i999 becomes aware of a data security incident that materially affects your personal data, we will notify affected users and relevant authorities in accordance with our legal obligations.

9. Your Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by i999:

• Right of Access: You may request a copy of the personal data i999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of personal data that i999 is not legally required to retain.
• Right to Restriction: You may request that i999 restrict processing of your data in certain circumstances, such as while a dispute is under investigation.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact i999 support at [email protected]. i999 will acknowledge your request within 5 business days and respond substantively within 30 days.

10. Children's Privacy

10.1  The i999 Platform is strictly for individuals aged 18 years and above. i999 does not knowingly collect personal data from any person under the age of 18.

10.2  If i999 discovers that personal data has been collected from a person under the age of 18, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on i999, please notify us immediately at [email protected].

11. Third-Party Links

The i999 Platform does not contain links to external third-party websites. If at any time you navigate away from i999 to an external site through your own means, i999's Privacy Policy does not apply to that site. i999 accepts no responsibility for the privacy practices or content of any external website.

12. Policy Changes

12.1  i999 reserves the right to update this Privacy Policy at any time. Material changes — such as changes to data categories collected, new purposes for processing, or changes to your rights — will be communicated to registered users via email or Platform notification prior to taking effect.

12.2  The most current version of this Privacy Policy is always available on the Platform. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data i999 holds about you, please contact our support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the Platform after logging in to your i999 account.
• Languages: Support is provided in English. Urdu-language assistance is available on request.

i999 will acknowledge privacy-related requests within 5 business days and aims to provide a full response within 30 calendar days.