Your Privacy Matters
at dt999

01 Introduction

This Privacy Policy (hereinafter "Policy") describes how dt999 (hereinafter "dt999", "we", "us", "our") collects, uses, stores, discloses and protects personal information relating to individuals (hereinafter "Player", "User", "you", "your") who access and use the dt999 online gaming platform at https://dt999.cam and its associated subdomains, mobile interfaces, and applications.

dt999 is committed to handling your personal data with integrity, transparency and in accordance with the data protection obligations imposed by the laws of its licensing jurisdiction and applicable international standards. This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, both of which are incorporated herein by reference.

Pakistan does not currently have a comprehensive standalone data protection law equivalent to international frameworks such as the GDPR. However, dt999 applies international best-practice data protection standards to all players regardless of their country of residence, including players based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

02 Definitions

The following terms carry the meanings assigned below throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living natural person, directly or in combination with other available data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means dt999 as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of dt999 strictly in accordance with dt999's written instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a specified purpose.
• "KYC" means Know Your Customer — mandatory identity and age verification procedures required under applicable AML and licensing obligations.
• "Cookies" means small text files placed on your device by the Platform that record session information, preferences and behavioural data for functional and analytical purposes.

03 Data We Collect

dt999 collects the following categories of personal data from players:

3.1 Registration Data

When you create an Account, we collect your full legal name, date of birth, residential address, email address, phone number, and chosen username. This data is required to create and manage your Account and to fulfil our KYC obligations.

3.2 Identity Verification Data

During the KYC process, we may collect copies of government-issued identification documents (e.g., Pakistani CNIC, passport), proof of address (utility bills, bank statements), and where required, source-of-funds documentation. This data is collected to verify your identity and age and to comply with anti-money laundering obligations.

3.3 Financial Data

We collect information about your deposit and withdrawal transactions, including payment method details (masked card numbers, mobile wallet references such as Easypaisa account references or JazzCash account references, or bank transfer references including HBL, UBL, Meezan Bank and Bank Alfalah), transaction amounts and timestamps. Full payment credential details are handled by our licensed payment processing partners and are not retained on dt999 servers.

3.4 Behavioural and Usage Data

We automatically collect data about how you interact with the Platform, including pages visited, games played, wager amounts and outcomes, session durations, device type, operating system, browser type, IP address, and approximate geographic location derived from IP address.

3.5 Communications Data

If you contact our support team via live chat or email, we retain records of those communications including timestamps, the support agent involved, and the content of the exchange, for quality assurance, dispute resolution and regulatory purposes.

3.6 Responsible Gambling Data

Where you use responsible gambling tools — such as setting deposit limits, loss limits, session time limits, cooling-off periods or activating self-exclusion — we record this information to enforce your chosen restrictions and to monitor compliance with responsible gambling obligations.

04 How We Collect Data

dt999 collects personal data through the following channels:

• Directly from you: Information you provide when registering, completing KYC, making a deposit or withdrawal, contacting support, or updating your Account profile.
• Automatically: Technical data collected via cookies, server logs, pixel tags and similar technologies when you access and interact with the Platform.
• From third parties: Identity verification agencies, fraud prevention services, payment processors and, where applicable, publicly available sources such as sanctions screening databases.
• From responsible gambling referral schemes: Where a player has self-excluded through a third-party responsible gambling service that operates a cross-operator exclusion registry, we may receive notification of that exclusion and act accordingly.

05 Data Processing & Use

dt999 processes your personal data for the following purposes:

06 Legal Basis for Processing

dt999 processes personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract with you — i.e., operating your Account, processing transactions and delivering gaming services.
• Legal obligation: Processing required to comply with our licensing conditions, AML regulations, responsible gambling obligations and any lawful regulatory direction.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics and service improvement, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain optional features, where you have provided explicit, freely withdrawable consent.

07 Data Sharing & Disclosure

dt999 does not sell your personal data. We may share your data with the following categories of recipient strictly on a need-to-know basis:

• Licensed payment processors: To facilitate deposit and withdrawal transactions on your behalf.
• KYC and identity verification providers: To perform identity, age and document verification as part of our compliance obligations.
• Fraud prevention and AML screening services: To detect and prevent fraudulent transactions, money laundering and other financial crime.
• Responsible gambling service providers: To enforce self-exclusion registrations and responsible gambling restrictions where applicable.
• Licensing and regulatory authorities: Where we are legally required to disclose data to our licensing authority, a court of competent jurisdiction, or law enforcement agencies.
• IT infrastructure and cloud service providers: Who host, maintain and secure our platform systems, acting strictly as data processors under contractual obligations.
• Professional advisers: Including legal counsel, auditors and compliance consultants, where disclosure is necessary for the provision of professional services to dt999.

All third-party processors engaged by dt999 are required by contract to implement appropriate data protection safeguards and to process personal data only in accordance with dt999's documented instructions.

08 International Data Transfers

dt999 operates internationally and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, dt999 takes appropriate steps to ensure that your data remains protected at a standard consistent with this Policy, including through contractual protections with receiving parties.

Pakistani users acknowledge that their data may be processed in the operator's licensing jurisdiction and by third-party service providers located in other countries. By using the platform, you consent to such transfers to the extent permitted by applicable law.

09 Data Retention

dt999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting any legal, regulatory, accounting or reporting obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in accordance with AML and licensing record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication, unless longer retention is required for ongoing dispute resolution or regulatory purposes.
• Marketing consent records: Retained for as long as you maintain a marketing consent preference, and for three (3) years following withdrawal of consent as evidence of the withdrawal.
• Anonymised analytics data: May be retained indefinitely as it cannot be attributed to any identifiable individual.

When retention periods expire, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

10 Security Measures

dt999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, without limitation:

• Encryption of data in transit using TLS/SSL protocols and encryption of sensitive data at rest.
• Role-based access controls ensuring that only authorised personnel access personal data relevant to their specific responsibilities.
• Regular security assessments and vulnerability testing of platform systems.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Staff training on data protection obligations and secure data handling practices.
• Incident response procedures for detecting, investigating and responding to data security breaches.

11 Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small data files stored on your device when you visit a website. They allow the platform to recognise your device, remember your preferences, maintain your session state, and gather analytics information about how the site is used.

11.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, authentication tokens and security cookies. They cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options and previously entered form data to improve your experience across sessions.
• Analytics Cookies: Collect anonymised or pseudonymised data about how players use the Platform — pages visited, time spent, navigation paths — to help us identify areas for improvement.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests. These are only placed with your prior consent and may be withdrawn at any time.

11.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to view, delete and block cookies from specific sites. Note that disabling strictly necessary cookies may impair your ability to use the Platform. For full cookie management instructions, consult your browser's help documentation.

12 Your Data Rights

Subject to applicable law and our regulatory obligations, you hold the following rights in respect of your personal data held by dt999:

• Right of Access: You may request a copy of the personal data dt999 holds about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated. Minor corrections can often be made directly through your Account profile.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal, regulatory or contractual retention obligations.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances, such as while a dispute over the accuracy of your data is being resolved.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used and machine-readable format, where processing is based on consent or contract.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the legal basis, and in all cases where data is processed for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat or the support email address listed in Section 15. We will respond to verified data rights requests within a reasonable timeframe consistent with applicable law. We may need to verify your identity before processing certain requests.

13 Minors & Age Policy

The dt999 platform is strictly for adults aged 18 years or over, or the higher minimum age required by the applicable licensing jurisdiction. dt999 does not knowingly collect personal data from individuals under the minimum eligible age. If we become aware that a minor has provided personal data during registration, we will suspend the Account, delete the data, and return any deposited funds to the verified payment method used.

If you believe a minor has registered on our platform, please notify our support team immediately. We take age verification seriously and apply KYC processes precisely to prevent underage gambling in accordance with our licensing obligations.

14 Policy Amendments

dt999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. When material changes are made, we will notify registered players via their registered email address or through a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" displayed at the top of this Policy indicates when the current version entered into force. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

15 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way dt999 processes your personal data, please contact us through the following channels:

• Live Chat: 24/7 live chat is available directly through the platform dashboard — the fastest channel for all data-related enquiries.
• Support Email: [email protected] — please allow up to 48 hours for a response during peak periods.
• Support Languages: English and Urdu.
• Cities Served: Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other locations across Pakistan.

For responsible gambling-related enquiries, please visit our Responsible Gambling page. For legal terms governing platform use, please review our Terms & Conditions.