Privacy Policy

1 Introduction

p8999 ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who uses the p8999 platform at https://p8999.vip. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This policy applies to all users of the Platform, including visitors who browse without registering, registered Players with active Accounts, and former Players whose Accounts have been closed. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2 Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is the licensed operator of p8999, operating under an international gaming license. Full operator details, including registered address and license information, are available on the About Us page.

All data protection queries, subject access requests, and formal complaints relating to the handling of your personal data should be directed to our dedicated support team at [email protected]. We will acknowledge all privacy-related correspondence within forty-eight (48) hours of receipt.

3 Data We Collect

p8999 collects personal data that falls into the following categories. We collect only what is necessary for the stated purpose — nothing more.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs required for KYC), or health data, except where expressly required under our responsible gaming obligations — for example, where a Player voluntarily discloses a gambling-related health concern to our support team.

4 How We Collect Data

p8999 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion.
• Automated Technologies: As you interact with our Platform, we automatically collect Technical Data and Usage Data through server logs, session cookies, and analytics tools operated solely on p8999's own infrastructure.
• Payment Processors: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, our payment partners share transaction confirmation data with us for the purpose of crediting your Account and maintaining financial records.
• KYC Verification Partners: Our licensed identity verification partner may share the result of a document verification check (pass/fail/refer) with us. Raw document images are retained by the verification partner in their encrypted environment, not on p8999 servers.
• Fraud Prevention Services: We may receive risk-flag signals from third-party fraud detection services to help us identify potentially fraudulent Accounts or transactions. No raw personal data from these services is stored beyond the flagging decision.

5 Purpose & Legal Basis for Processing

p8999 processes your personal data only where we have a lawful basis to do so. The primary purposes for which we process data, together with the corresponding legal basis, are set out below:

• Account Registration & Management — necessary for the performance of the contract between you and p8999.
• Age Verification & KYC Compliance — necessary to comply with legal obligations under our international gaming license, which mandates a minimum age of 21 years.
• Processing Deposits & Withdrawals in PKR — necessary for the performance of the contract and to comply with anti-money laundering (AML) obligations.
• Customer Support — necessary for our legitimate interests in providing effective assistance to players and maintaining service quality.
• Fraud Detection & Prevention — necessary for our legitimate interests in protecting the Platform, other players, and the integrity of the games from abuse and financial crime.
• Responsible Gaming Monitoring — necessary to comply with licensing obligations regarding player protection; also in our legitimate interest to prevent gambling harm.
• Regulatory Reporting — necessary to comply with legal obligations imposed by our licensing authority, including the reporting of suspicious transactions.
• Marketing Communications — based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing

p8999 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors receive only the transactional data necessary to execute your deposit or withdrawal. These partners are bound by their own regulatory obligations under Pakistan's financial services framework.
• KYC & Identity Verification Partners: Receive identity documents solely for the purpose of verifying your age and identity. They are prohibited from using your data for any other purpose.
• Fraud Prevention & AML Services: May receive hashed identifiers or risk signals to support fraud detection. No full identity data is shared beyond what is strictly necessary.
• Regulatory & Licensing Authorities: We may be required to disclose player data to our licensing authority or to law enforcement agencies where compelled by a valid legal order or where we identify activity reportable under applicable AML regulations.
• Group Companies: Where p8999 operates as part of a corporate group, limited operational data may be shared with affiliated entities solely for internal administrative purposes, subject to the same data protection standards as this policy.

All third parties with whom we share data are required to handle it securely and in accordance with applicable data protection law. We do not permit them to use your data for their own marketing or unrelated purposes.

7 Data Retention

p8999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the lifetime of your Account and for a period of five (5) years following Account closure, in accordance with standard gaming license record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AML regulations applicable to our international gaming license.
• KYC Documentation: Retained by our verification partner for the period mandated by applicable identity verification regulations, typically five (5) years post-relationship.
• Support Communications: Retained for two (2) years from the date of the interaction, to support quality assurance and dispute resolution.
• Marketing Preference Records: Retained indefinitely as evidence of consent or opt-out status, but the underlying contact data is deleted upon Account closure if you have not opted back in.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8 Security Measures

p8999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption at rest for sensitive stored data, including financial records and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication required for all p8999 staff accessing systems that handle personal data.
• Comprehensive audit logging of all access to personal data systems, with anomaly detection alerts.

9 Cookies & Tracking Technologies

p8999 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device that helps us recognise you and remember your preferences across sessions.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language choice, game lobby view settings, and responsible gaming reminder intervals. Disabling these affects your experience but not core access.
• Analytics Cookies: Used by p8999's own first-party analytics to understand aggregate usage patterns — pages visited, session durations, and feature engagement — so we can improve the Platform. These are anonymised and not linked back to individual identities.

p8999 does not use third-party advertising cookies, social media tracking pixels, or cross-site behavioural tracking technologies. You can manage or clear cookies at any time through your browser's settings. Note that deleting strictly necessary cookies will require you to log in again.

10 Your Rights

Subject to applicable data protection law and the terms of our international gaming license, you have the following rights in relation to your personal data held by p8999:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within thirty (30) days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AML and gaming license requirements.
• Right to Restrict Processing: You may request that we suspend processing of your data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request your data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease that processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing the request.

11 Minors & Age Policy

p8999 strictly prohibits use of the Platform by anyone under the age of 21 years. We do not knowingly collect personal data from individuals below this age threshold. Age verification is a mandatory step in the Account registration process.

If we become aware — through KYC checks, player reporting, or any other means — that personal data has been collected from a person under 21, we will immediately suspend the relevant Account, delete all associated data to the extent permitted by our AML obligations, and report the matter to our licensing authority if required.

If you are a parent or guardian and believe your child may have accessed the Platform and provided personal data, please contact us immediately at [email protected] and we will act promptly.

12 International Data Transfers

p8999 operates under an international gaming license and may store or process your data on servers located outside of Pakistan. Where data is transferred internationally, we ensure that appropriate safeguards are in place, including:

• Contractual clauses with all data processors requiring them to maintain security standards equivalent to those described in this policy.
• Transfer to jurisdictions that maintain an adequate level of data protection as recognised by our licensing authority.
• Encryption of data both in transit and at rest, regardless of the jurisdiction in which it is stored.

By using the Platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan. We take all reasonable steps to ensure such transfers are conducted securely and lawfully.

13 Changes to This Policy

p8999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players by email and display a prominent notice on the Platform for no less than seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of the Platform after the effective date of any revised policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by p8999, please get in touch with our support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Privacy-related queries acknowledged within 48 hours
• Languages: English and Urdu

For formal legal notices regarding data protection matters, please address correspondence to the registered operator of p8999 at the address published on the About Us page.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are available upon written request to our support team.