dw999 Privacy Policy

1. Introduction

dw999 ("the Platform", "we", "us", "our") operates the online betting and casino platform available at dw999.org. In the course of providing our services — including sports betting, live casino, slot games, payment processing, customer support, and account management — dw999 collects and processes certain personal data relating to registered users ("you", "your", "the Player").

This Privacy Policy is intended to provide a clear, honest, and comprehensive account of how dw999 handles your personal data. It covers what data we collect, the purposes for which we use it, the legal bases on which processing is carried out, how long we retain data, the circumstances under which we may share data with third parties, and the rights you hold with respect to your own information.

This Privacy Policy should be read in conjunction with the dw999 Terms & Conditions, which govern your use of the platform more broadly. Defined terms used in the Terms & Conditions carry the same meaning in this Privacy Policy unless otherwise stated.

2. Data Controller

For the purposes of applicable data protection legislation, dw999 acts as the data controller in respect of personal data collected from users of the dw999.org platform. As data controller, dw999 determines the purposes and means by which your personal data is processed.

Where dw999 engages third-party service providers to carry out specific processing activities on its behalf — such as payment gateway operators, KYC verification providers, or fraud detection systems — those parties act as data processors under instruction from dw999 and are not permitted to use your data for their own independent purposes.

All data rights requests, privacy queries, and complaints may be directed to the dw999 data team using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

dw999 collects the following categories of personal data in connection with platform use:

3.1 Identity Data

• Full legal name as it appears on your Pakistani National Identity Card (CNIC) or NICOP
• Date of birth (used for age verification — dw999 is strictly 21+)
• CNIC or NICOP number (collected during KYC verification)
• Photograph of identity document (front and back, where required for KYC)

3.2 Contact Data

• Registered mobile number (Pakistani format, e.g. 03XX-XXXXXXX)
• Email address where provided during registration or support interactions
• City or region of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad)

3.3 Account and Transaction Data

• dw999 account username and encrypted password credential
• Account registration date and history of login activity
• Deposit and withdrawal history, including amounts, timestamps, and payment method references
• Betting and gaming history — markets wagered on, stakes, outcomes, winnings
• Bonus and promotion claim history
• Applied responsible gaming settings (deposit limits, session timers, self-exclusion status)

3.4 Technical and Device Data

• IP address at time of login and transaction
• Device type, operating system, and browser version
• Mobile network operator (e.g. Jazz, Zong, Telenor, Ufone) where identifiable from network metadata
• Session duration and navigation patterns within the dw999 platform
• Referring URL where you arrived at dw999.org from another web page

3.5 Communications Data

• Records of live chat conversations with dw999 support agents
• Email correspondence relating to your account, disputes, or support requests
• Records of any complaints or dispute submissions made to dw999

4. How We Collect Your Data

dw999 collects personal data through the following channels:

• Direct registration: Data you provide when creating your dw999 account, including name, mobile number, and date of birth
• KYC submission: Identity documents and supporting materials you upload during the verification process
• Platform activity: Data generated automatically as you use the dw999 platform — bets placed, games played, deposits made, pages visited
• Payment processing: Transaction references and confirmation data received from JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 payment channels
• Support interactions: Information you provide when contacting dw999 customer support via live chat or email
• Cookies and tracking technologies: Technical data collected automatically via browser cookies and session tracking as described in Section 9
• Third-party verification providers: Identity and fraud-risk signals returned by KYC and AML screening services in response to data submitted by you during registration

5. Purpose and Legal Basis for Processing

The table below sets out the primary purposes for which dw999 processes your personal data and the corresponding legal basis for each processing activity:

Where dw999 relies on legitimate interest as the legal basis for processing, we have assessed that our legitimate interest in operating a secure, compliant, and fraud-free platform is not overridden by your privacy interests, given the nature of the data processed and the safeguards in place.

Where processing is based on consent — in particular, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

dw999 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 payment infrastructure providers receive transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are independent data controllers for their own payment processing activities.
• KYC and identity verification providers: Third-party identity verification services receive the identity documents and personal details you submit during KYC in order to perform document authenticity checks and biometric verification where applicable.
• Fraud and AML screening services: Transaction data and risk signals are shared with specialist anti-fraud and anti-money laundering screening providers to identify suspicious activity patterns.
• Game content providers: Where you play games hosted by third-party studio providers, your player account identifier and game session data are shared with that provider to deliver the game and record outcomes. Game providers do not receive your full identity data.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, dw999 will disclose personal data to competent authorities. dw999 will notify you of such disclosures where legally permitted to do so.
• Platform infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on dw999's behalf under data processing agreements requiring equivalent security standards.

7. Data Retention

dw999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with standard anti-money laundering record-keeping requirements applicable to online gaming operators.
• KYC identity documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction, to allow reference in the event of disputes arising from historical transactions or account actions.
• Technical and device logs: Retained for twelve (12) months from the date of generation, after which they are deleted or irreversibly anonymised.
• Marketing preference records: Retained for the duration of your account and for two (2) years following account closure as evidence of your consent status.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with any individual. Anonymised and aggregated data may be retained indefinitely for platform analytics purposes.

8. Security Measures

dw999 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser or device and the dw999 platform is encrypted using TLS 1.2 or higher (HTTPS). Unencrypted HTTP access is not permitted.
• Encryption at rest: Sensitive personal data fields in dw999 databases — including identity document data, payment method references, and password credentials — are encrypted at rest using AES-256 standard encryption.
• Password security: User passwords are stored as salted cryptographic hashes. dw999 support personnel do not have access to plaintext passwords and will never request your password via any communication channel.
• Access controls: Access to systems containing personal data is restricted on a role-based, need-to-know basis. All internal data access is logged and subject to periodic audit review.
• Two-factor authentication: dw999 supports OTP-based two-factor authentication for account login, which we strongly recommend all users enable from account settings.
• Penetration testing: dw999 conducts periodic third-party security assessments and penetration tests against platform infrastructure to identify and remediate vulnerabilities.

Whilst dw999 takes all reasonable and proportionate steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, enabling two-factor authentication, and not sharing your login credentials with anyone.

9. Cookies and Tracking Technologies

dw999 uses cookies and similar tracking technologies on the dw999.org platform. Cookies are small text files stored on your device by your browser when you visit a website. They serve a variety of functions essential to platform operation and user experience.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Store your preferences such as language settings, selected odds format, and responsible gaming limit displays. Disabling these cookies will mean your preferences are not remembered between sessions.
• Analytics cookies: Used in aggregate, anonymised form to understand how users navigate the dw999 platform — which pages are visited most, where users encounter friction, and how platform performance can be improved. No individually identifiable data is included in analytics reporting.
• Anti-fraud and security cookies: Used to fingerprint device characteristics for the purpose of identifying suspicious login activity, multi-account detection, and bot traffic identification.

9.2 Managing Cookies

You may manage or disable cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core dw999 platform features. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, Edge, or the built-in browser of your Android or iOS device).

10. Your Data Rights

As a dw999 account holder, you hold the following rights in respect of your personal data, exercisable by contacting the dw999 support team:

• Right of access: You may request a copy of all personal data dw999 holds about you, together with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your dw999 account. For identity data, corrections require supporting KYC documentation.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to dw999's legal retention obligations (see Section 7). Where legal retention requirements apply, full erasure cannot be carried out until those periods expire.
• Right to restrict processing: You may request that dw999 restrict the processing of your data in specific circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request an export of personal data you have provided to dw999 in a structured, commonly used, machine-readable format (CSV or JSON).
• Right to object: You may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes. dw999 will assess the objection and cease processing unless compelling legitimate grounds override your objection.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via account settings or by contacting support.

dw999 will respond to all data rights requests within seven (7) business days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further fourteen (14) days with notification to you. All requests are handled at no charge.

11. Minors and Age Restrictions

dw999 employs age verification as part of the KYC process to enforce this restriction. Where there is any reasonable doubt as to a user's age, dw999 will suspend the account pending satisfactory age verification documentation. Parents and guardians who believe a minor may have accessed the dw999 platform should contact support immediately so that the account can be investigated and closed without delay.

12. Marketing Communications

dw999 may send promotional communications — including bonus offers, PSL season promotions, new game launch notifications, and platform updates — to users who have opted in to receive marketing messages during registration or subsequently through account settings.

Marketing communications are sent via the mobile number or email address registered to your dw999 account. You may opt out of marketing communications at any time by:

• Updating your communication preferences in your dw999 account settings
• Contacting dw999 support and requesting removal from marketing lists
• Following the unsubscribe instruction included in any marketing email

Opting out of marketing communications does not affect your receipt of transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent as a necessary part of operating your account and cannot be disabled while your account remains active.

13. International Data Transfers

dw999 operates as an internationally licensed online gaming platform. Some of the third-party service providers used by dw999 — including cloud infrastructure providers, KYC verification services, and game studio partners — may process personal data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, dw999 ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements incorporating standard contractual clauses requiring the recipient to maintain data protection standards equivalent to those applied by dw999
• Transfers only to service providers who have demonstrated compliance with recognised international data security frameworks
• Limiting the scope of data transferred to the minimum necessary for the service being provided

14. Changes to This Privacy Policy

dw999 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — affecting the way in which we use your personal data in a significant manner — dw999 will notify registered users via platform announcement or direct communication to your registered contact details, with a minimum of seven (7) calendar days' notice before the changes take effect.

For minor or non-substantive amendments, such as typographical corrections or clarifications that do not alter the substance of data processing activities, changes may take effect immediately upon publication. The effective date shown at the top of this page will be updated each time a new version is published.

Your continued use of the dw999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure.

15. Contact and Data Rights Requests

For any questions, concerns, or requests relating to this Privacy Policy or the personal data dw999 holds about you, please contact the dw999 data team through the following channel:

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 directly from the dw999 platform
Response Time: Live chat within 3–5 minutes; data rights requests within 7 business days

When submitting a data rights request, please include your registered dw999 account username and a clear description of your request. For identity verification purposes, dw999 may ask you to confirm certain account details before processing a data access or deletion request.