SP 999 Privacy Policy – How We Protect Your Data in Pakistan

1. Who We Are

SP 999 is an online casino and sports betting platform operating at sp999.im. When this Privacy Policy refers to "SP 999", "we", "our", or "us", it means the entity responsible for operating the sp999.im platform and all associated services offered to players in Pakistan and other permitted jurisdictions.

SP 999 acts as the data controller in respect of the personal information collected from Pakistani players who register and use the platform. If you have any questions about how SP 999 handles your data, or if you wish to exercise any of the rights described in this policy, please contact us at support@sp999.im.

This policy applies to all personal data collected through the SP 999 website and platform, including data collected during account registration, deposits, gameplay, withdrawals, customer support interactions, and promotional participation. It covers Pakistani players and all other users of the sp999.im platform regardless of their location.

2. Personal Data We Collect

SP 999 collects the minimum personal data necessary to provide its services, comply with applicable regulations, and protect the security of the platform and its players. The categories of data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on official documents
• Date of birth — collected to verify that you meet the 18+ age requirement
• Mobile phone number — used as your primary contact identifier and for account security
• Email address (where provided)
• Country of residence and city

2.2 Financial and Payment Data

• Mobile wallet identifiers for Easypaisa, JazzCash, NayaPay, and SadaPay
• Bank account details (IBAN or account number) for IBFT transfers
• Masked card numbers for Visa/Mastercard transactions — SP 999 does not store full card numbers
• Transaction history: deposit amounts, withdrawal requests, dates, and methods

2.3 Gameplay and Betting Data

• Game session history including games played, stakes, outcomes, and session duration
• Sports betting selections, stake amounts, and settlement records
• Balance history and bonus activity

2.4 Technical and Device Data

• IP address at time of registration and at subsequent logins
• Device type, operating system, and browser version
• Mobile network operator (for mobile users)
• Session timestamps and platform navigation patterns

2.5 Verification Documents

Where SP 999 requests identity verification, you may be asked to provide a copy of your CNIC, passport, or other government-issued ID, along with supporting documents such as a utility bill for address verification. These documents are handled with heightened security measures and are used solely for verification purposes.

3. How We Collect Your Data

SP 999 collects personal data through the following channels:

• Directly from you during account registration, when you update your profile, when you contact customer support, and when you participate in promotions.
• Through your use of the platform — gameplay logs, betting activity, deposit and withdrawal requests, and session data are recorded automatically as part of normal platform operation.
• Via payment providers — when you initiate a transaction via Easypaisa, JazzCash, or other payment partners, SP 999 receives confirmation data from those providers to process and record the transaction.
• Through cookies and tracking technologies as described in Section 9 of this policy.
• From fraud prevention and identity verification services where SP 999 uses third-party tools to verify the accuracy of information you have provided and to screen against fraud databases.

4. Why We Use Your Personal Data

SP 999 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your SP 999 account, verifying your identity and age, and providing you with access to the platform's services.
• Processing transactions: Handling deposits, processing withdrawal requests, and maintaining accurate financial records of all transactions conducted through your account.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other forms of platform abuse that harm legitimate players.
• Regulatory compliance: Meeting anti-money laundering (AML) and know-your-customer (KYC) obligations, and maintaining records as required by applicable financial regulations.
• Customer support: Responding to your queries, resolving disputes, and providing assistance with account and payment issues.
• Platform improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game loading times, and enhance the overall SP 999 player experience.
• Responsible gaming: Monitoring account behaviour to identify potential signs of problem gambling and to enforce responsible gaming tools and limits set by you or applied as a protective measure by SP 999.
• Marketing communications: Sending you relevant promotional offers and bonus notifications where you have opted in to receive them, and where permitted under applicable regulations.

5. Legal Basis for Processing

SP 999 processes your personal data on the following legal grounds depending on the specific processing activity:

• Contractual necessity: Processing your registration data, transaction data, and account information is necessary to fulfil the contract between you and SP 999 — without this processing, SP 999 cannot provide its services.
• Legal obligation: Financial transaction records and identity verification data are processed and retained to comply with anti-money laundering regulations and other applicable legal requirements.
• Legitimate interests: Fraud prevention, security monitoring, and platform analytics are conducted based on SP 999's legitimate interest in operating a secure and fair platform for all Pakistani players.
• Consent: Marketing communications and non-essential cookies are processed based on your explicit consent, which can be withdrawn at any time.

6. Who We Share Your Data With

SP 999 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer networks, and Visa/Mastercard payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies governing how they handle payment data.
• Game providers: Certified game studios may receive anonymised session identifiers for the purpose of delivering game content and recording gameplay data. No personally identifiable information beyond what is technically necessary is shared with game providers.
• Identity verification services: Where SP 999 uses third-party KYC verification tools, the minimum information necessary to conduct the verification check is shared with the provider under a data processing agreement.
• Fraud prevention services: SP 999 may share device fingerprint data and behavioural signals with fraud detection partners to identify and prevent account abuse, cheating, and money laundering.
• Legal and regulatory authorities: SP 999 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by law or where SP 999 has a reasonable belief that disclosure is necessary to prevent or investigate criminal activity.
• Business transfers: If SP 999's business or platform is transferred to a third party through a merger, acquisition, or asset sale, player data may form part of the transferred assets. Affected players will be notified through their registered contact details in advance of such a transfer.

7. How Long We Keep Your Data

SP 999 retains personal data for the minimum period necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable regulations. The general retention framework applied by SP 999 is:

• Account and identity data is retained for the duration of your active account relationship with SP 999 and for five years following permanent account closure.
• Financial transaction records are retained for a minimum of seven years to comply with financial recordkeeping regulations applicable to payment service operations.
• Gameplay and betting data is retained for the duration of your active account and for three years following account closure.
• Technical and device data is retained on a rolling 12-month basis — older records are automatically purged.
• Identity verification documents are retained for five years following account closure, after which they are securely deleted.
• Support correspondence is retained for three years from the date of the last communication.

When data is no longer required and the applicable retention period has expired, SP 999 securely deletes or anonymises it. Anonymised data that cannot be attributed to any individual may be retained indefinitely for aggregated analytics purposes.

8. How We Protect Your Data

SP 999 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• TLS/SSL encryption for all data transmitted between your device and the SP 999 platform — the padlock icon in your browser confirms this encryption is active.
• Encrypted storage for sensitive data including passwords (stored as salted hashes) and payment identifiers.
• Access controls — SP 999 staff can only access player data on a strict need-to-know basis relevant to their specific role. Access to sensitive financial and identity data is further restricted and logged.
• Two-factor authentication options for player accounts to protect against unauthorised login.
• Regular security audits and penetration testing to identify and address vulnerabilities in SP 999's infrastructure before they can be exploited.
• Secure data centres with physical access controls, redundant power, and environmental monitoring for servers hosting SP 999 player data.

9. Cookies and Tracking Technologies

SP 999 uses cookies and similar tracking technologies to provide core platform functionality, remember your preferences, and analyse how the platform is used. A summary of the cookie categories used by SP 999 is provided below:

Cookie preferences shown above are illustrative. You can manage cookie settings through your browser. Disabling essential cookies will affect your ability to use the SP 999 platform normally.

10. Your Data Rights

As an SP 999 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact SP 999 at support@sp999.im with your account details and a clear description of your request. SP 999 will respond within 30 days.

11. Children and Minors

SP 999 does not knowingly collect personal data from anyone under the age of 18. The platform is intended exclusively for adult players and SP 999 applies strict age verification measures to prevent underage registration. If SP 999 discovers or is notified that a registered account belongs to a person under 18, the account will be immediately closed, all funds will be returned to the depositing payment method, and all personal data associated with the account will be deleted as soon as legally permissible.

If you believe that a minor may have registered an account on SP 999 using false information, please notify us immediately at support@sp999.im so we can investigate and take appropriate action.

12. Marketing Communications

SP 999 may send you promotional notifications, bonus offers, and platform news through SMS or email where you have explicitly opted in to receive such communications during account registration or in your account preferences. You can withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your SP 999 account settings.
• Replying "STOP" to any SMS communication sent by SP 999.
• Contacting support@sp999.im with a request to unsubscribe from marketing communications.

Withdrawing consent to marketing communications does not affect your ability to use the SP 999 platform or receive essential account-related messages such as transaction confirmations, security alerts, and account verification requests. These operational messages cannot be opted out of while your account is active.

13. Third-Party Links

The SP 999 platform does not contain outbound links to external websites beyond the payment and game provider integrations necessary to deliver the platform's core services. If SP 999 were to include links to third-party services in the future, this policy would be updated to reflect them. SP 999 is not responsible for the privacy practices of any third-party services you access independently outside of the SP 999 platform.

14. Updates to This Privacy Policy

SP 999 may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable regulations, or improvements to our data practices. When updates are made, the revised policy will be published on this page with an updated effective date. For material changes that significantly affect how your data is used, SP 999 will notify you through your registered contact details in advance of the change taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the SP 999 platform after a policy update constitutes your acknowledgement of the revised practices. If you disagree with any changes to this policy, you may request account closure and deletion of your data subject to the retention obligations described in Section 7.

15. Contact Us About Your Privacy

If you have any questions about this Privacy Policy, want to understand more about how SP 999 handles your personal data, or wish to exercise any of your data rights, please get in touch: