don999 Privacy Policy – Your Data, Your Rights, Our Responsibility

At don999, we take your privacy seriously — not as a legal obligation we are trying to minimise, but as a genuine commitment to the Pakistani players who trust us with their personal information every time they register, deposit, and play on our platform. This policy was written with that trust in mind.

When you create an account on don999, deposit PKR through Easypaisa or JazzCash, place a bet on a PSL match, or contact our support team, you share personal information with us. This policy explains precisely what information that is, why we need it, what we do with it, who (if anyone) we share it with, how long we keep it, and what rights you have over it.

We have written this policy in English that reflects how Pakistani users actually communicate — no impenetrable legal language, no vague corporate phrasing. If anything in this policy is unclear, you can contact the don999 privacy team directly through the contact details at the end of this page.

don999 collects personal data in three main ways: information you provide directly when registering or using the platform, information generated automatically as you use the service, and in limited cases, information received from third parties involved in processing your transactions.

Information you provide directly to don999:

• Full legal name as it appears on your CNIC or other government-issued identification document.
• Date of birth — used to verify that you meet the 18+ minimum age requirement on don999.
• Mobile phone number — used for account verification, security notifications, and support communications.
• Email address — used for account verification, transaction receipts, and promotional communications (where opted in).
• Payment method details — Easypaisa/JazzCash account numbers, IBFT bank account details, or card numbers (stored in tokenised form only; don999 does not store raw card data).
• CNIC number and copies of identity documents submitted during KYC (Know Your Customer) verification.
• Information you provide when contacting don999 customer support.

Information collected automatically when you use don999:

• IP address and general geographic location derived from it.
• Device type, operating system, and browser type used to access don999.
• Session data including login times, session duration, and pages visited within the don999 platform.
• Game activity data — games played, bets placed, bet amounts, results, and win/loss history on don999.
• Transaction history — deposit and withdrawal timestamps, amounts, methods, and reference numbers.
• Cookie and similar tracking technology data (see Section 6 for full cookie details).

Every use of your personal data by don999 is tied to a specific, legitimate purpose. The table below sets out the primary purposes for which don999 processes your data:

don999 does not use automated decision-making processes that produce legally significant effects on players without human oversight. Where algorithms are used to flag accounts for review (for example, in fraud detection or responsible gaming monitoring), a human review follows before any account action is taken.

don999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is required to fulfil the don999 player agreement — account management, payment processing, and game settlement all fall into this category. Without this processing, don999 cannot provide the service you have signed up for.
• Legal obligation: Processing required by applicable law — particularly anti-money laundering (AML) regulations and age verification requirements. don999 is legally required to collect and retain certain data as part of its regulatory compliance obligations.
• Legitimate interests: Processing that serves don999's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, and analytics used to improve the don999 service. don999 has assessed these interests carefully and believes they do not disproportionately impact player privacy.
• Consent: Processing based on your explicit opt-in consent — specifically, marketing communications. You can withdraw consent for marketing at any time by contacting don999 support or using the unsubscribe option in any marketing email.

don999 does not sell, rent, or trade your personal data. We share data only in the following limited and specific circumstances:

• Payment processors: To process your PKR deposits and withdrawals, don999 shares necessary transaction data with payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, and card processing networks. These providers receive only the data required to process your specific transaction and are contractually bound to handle it securely.
• Identity verification providers: For KYC compliance, don999 may use accredited third-party identity verification services. These services verify the authenticity of your identity documents against official databases. They do not retain your data beyond the verification process.
• Game software providers: Third-party game developers whose games are hosted on don999 may receive anonymised game activity data necessary to deliver and support their game software. They do not receive your name, payment details, or contact information.
• Fraud prevention services: don999 uses specialist fraud detection tools. These services process certain technical data (IP address, device fingerprint, transaction patterns) to identify suspicious activity and protect the platform and its players.
• Legal and regulatory authorities: don999 will disclose personal data to law enforcement, financial intelligence units, or regulatory authorities where required to do so by law. don999 cannot decline lawful requests from authorities with proper legal standing.
• Business successors: In the event that don999 is acquired by or merges with another entity, player data may be transferred to the acquiring organisation. don999 will notify players in advance of any such transfer and the Privacy Policy will continue to apply to the transferred data.

don999 implements a multi-layered approach to data security covering transmission, storage, and access controls. The key security measures in place for all player data are as follows:

• 256-bit SSL/TLS encryption on all connections between player devices and don999 servers. This ensures that data in transit — including login credentials, payment details, and personal information — cannot be intercepted or read by unauthorised parties.
• Encrypted data storage for sensitive fields including passwords (hashed, never stored in plain text), payment method tokens, and identity document data. Raw card numbers are never stored on don999 servers.
• Role-based access controls ensuring that don999 staff members can only access the player data that is genuinely required for their specific role. Customer support agents, for example, can see account details needed to assist you but cannot access payment card data.
• Regular security audits and penetration testing conducted by independent security specialists to identify and address vulnerabilities before they can be exploited.
• Intrusion detection systems monitoring don999's infrastructure for anomalous access patterns and potential security incidents around the clock.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. In the event of a data breach that affects your personal information, don999 will notify you promptly and take immediate remedial action as required by applicable law.

You also play a role in keeping your don999 account secure — use a strong unique password, enable two-factor authentication where available, and never share your login credentials with anyone else.

don999 uses cookies and similar browser-based tracking technologies to make the platform work properly, remember your preferences, and understand how players use the service so we can improve it. A cookie is a small text file stored in your browser when you visit don999.

The categories of cookies used by don999 are as follows:

You can manage cookie preferences in your browser settings. Blocking essential cookies will prevent don999 from functioning correctly. Functional and analytics cookies can be disabled without affecting core platform access, though some features may not work optimally.

You have meaningful rights in relation to the personal data don999 holds about you. These are not theoretical entitlements — they are practical rights you can exercise by contacting don999 support. The time to respond to privacy requests is within 30 days of receipt.

don999 sends marketing communications — including promotional offers, bonus announcements, and PSL betting previews — only to players who have explicitly opted in to receive them. Opting in is voluntary and separate from the account registration process.

You can opt out of all marketing communications from don999 at any time by:

• Using the unsubscribe link at the bottom of any don999 marketing email.
• Contacting don999 customer support and requesting to be removed from all marketing lists.
• Updating your communication preferences in your don999 account settings.

Opt-out requests are processed within 3 business days. You may continue to receive transactional communications — such as deposit confirmations, withdrawal receipts, and account security notifications — regardless of your marketing opt-out status, as these are necessary to operate your account.

don999 is strictly an 18+ platform. We do not knowingly collect any personal data from individuals under 18 years of age. Age verification is conducted during registration and at the point of KYC verification, and don999 will immediately close any account found to belong to a minor.

If you believe a minor has created an account on don999 using false information, please contact our support team immediately. We will investigate the report promptly and take appropriate action, including closure of the account and deletion of any personal data the minor may have provided.

Parents and guardians are encouraged to use parental control tools available through their internet service provider or device operating system to help prevent minors from accessing online gaming platforms including don999.

don999 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Account data (name, contact details, login credentials): Retained for the duration of your active account plus 5 years after account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for 7 years after the date of each transaction, as required by Pakistani financial regulatory obligations applicable to the don999 platform.
• KYC and identity verification documents: Retained for 5 years after account closure or the end of the business relationship, whichever is later. Copies are securely encrypted throughout the retention period.
• Customer support communications: Retained for 3 years from the date of the interaction, after which they are deleted unless they relate to an ongoing dispute or legal matter.
• Marketing opt-in records: Retained until you opt out, plus 1 year as proof of consent.
• Anonymised analytics data: No fixed retention limit — since this data is anonymised, it does not constitute personal data under applicable privacy law and is retained indefinitely for platform improvement purposes.

When retention periods expire, don999 securely deletes or anonymises the relevant data. Anonymisation renders the data incapable of being linked back to any individual player.

don999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, don999 will notify active players via email and/or a prominent notice on the don999 platform before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically — particularly before making significant use of the don999 platform — to stay informed about how your personal data is handled.

Continued use of don999 after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should stop using don999 and may request account closure.

If you have any questions about this Privacy Policy, want to exercise any of your privacy rights, or want to report a potential privacy concern related to don999, you can reach our privacy team through the following channels:

• Email: support@don999.im — include "Privacy Request" in the subject line for prompt routing to the correct team.
• Live Chat: Available 24/7 through the don999 platform. Ask to be connected to the privacy team for data-related queries.

don999 commits to acknowledging all privacy requests within 48 hours and providing a substantive response within 30 days. For complex requests, we will notify you if additional time is required and keep you informed throughout.