1Who We Are
This Privacy Policy is issued by we 999, the operator of the online betting and casino platform accessible at we999.link ("we 999", "Platform", "we", "us", "our"). We 999 acts as the data controller for personal information collected from players registered on the platform.
When this policy refers to "you" or "your", it means any individual who visits, registers on, or uses the we 999 platform, including Pakistani players accessing the site via mobile browser or desktop.
If you need to contact us regarding your personal data, please email support@we999.link with the subject line "Privacy Request". We respond to all privacy-related correspondence within 48 hours on business days.
2Personal Data We Collect
We 999 collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment and verification services.
Information You Provide to we 999
- Registration data: Full legal name, date of birth, mobile number, email address, and chosen username when you create a we 999 account.
- Verification documents: Copy of your Pakistani CNIC or other government-issued identity document, and proof of address (such as a utility bill) when requested during identity verification.
- Payment information: Mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT transfers, or card details when making deposits or withdrawals. Card numbers are not stored by we 999 directly — they are handled by our certified payment processor.
- Communications: Any messages, complaints, or information you send to we 999 customer support, including live chat transcripts and emails.
Information Generated by Your Use of we 999
- Transaction data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history.
- Device and access data: IP address, device type and model, operating system, browser type, session timestamps, and pages visited on we 999.
- Gameplay data: Bet amounts, game selections, session durations, and gaming patterns — used for responsible gaming monitoring and platform improvement.
- Location data: Approximate geographic location derived from IP address — used to confirm access is from an eligible region and for fraud prevention.
Information Received from Third Parties
- Identity verification results and fraud screening data from our identity verification provider, used to confirm your age and identity when you register or when we 999 requests enhanced verification.
- Payment confirmation and transaction status data from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard networks when you make deposits or withdrawals.
We 999 does not collect sensitive categories of personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data unless specifically required by legal obligations and notified to you at the time of collection.
The following table summarises the main data categories we collect and why:
| Data Category | Examples | Primary Purpose |
|---|
| Identity Data | Name, date of birth, CNIC number | Account registration, age verification, KYC compliance |
| Contact Data | Mobile number, email address | Account communications, support, security alerts |
| Payment Data | Wallet numbers, bank details | Processing PKR deposits and withdrawals |
| Transaction Data | Bet history, deposit records | Account management, responsible gaming, AML compliance |
| Technical Data | IP address, device type | Fraud prevention, platform security, access control |
| Usage Data | Pages visited, session duration | Platform improvement, responsible gaming monitoring |
3How We Use Your Personal Data
We 999 uses the personal data it collects for the following specific purposes:
- Operating your account: Creating and managing your we 999 player account, authenticating your login sessions, and providing you with access to all platform features.
- Processing transactions: Handling PKR deposits and withdrawals through your chosen payment method and maintaining accurate records of all financial activity on your account.
- Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years before and during your use of we 999.
- Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling, applying deposit limits and self-exclusion tools that you have requested, and fulfilling we 999's obligations under its responsible gaming policy.
- Customer support: Responding to your queries, resolving complaints, and providing assistance with your we 999 account.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal activity on the we 999 platform.
- Legal compliance: Meeting our anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations applicable to the we 999 platform.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use we 999 and improve the platform experience over time.
- Promotions and bonuses: Administering bonus offers you have claimed and ensuring wagering requirements are met in accordance with the Terms and Conditions.
- Marketing communications (with consent): Sending you promotional emails or notifications about we 999 offers if you have opted in to receive such communications. See Section 12 for how to manage this.
We 999 does not use automated decision-making or profiling that produces legal or similarly significant effects on individual players, beyond standard fraud risk scoring and responsible gaming monitoring which form part of our regulatory obligations.
4Legal Basis for Processing Your Data
We 999 processes your personal data on one or more of the following legal bases depending on the specific purpose:
- Contract performance: Processing necessary to fulfil our obligations to you under the we 999 Terms and Conditions — including account operation, payment processing, and customer support.
- Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC requirements, and data retention obligations mandated by our operating licence.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests do not override your fundamental rights.
- Consent: Processing for marketing communications, where we have obtained your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5Who We Share Your Data With
We 999 shares personal data only with the categories of recipients described below. We do not sell player data. All data sharing is subject to contractual confidentiality obligations and data processing agreements where required.
- Payment processors: Your payment method details are shared with the relevant payment service provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, Visa/Mastercard networks) solely to process your PKR transactions. These providers receive only the minimum data required to execute the transaction.
- Identity verification providers: When we 999 requests KYC verification, we share relevant identity documents and personal details with our certified identity verification partner for the purpose of confirming your identity and age.
- Fraud prevention services: We share technical data (IP address, device fingerprint, transaction patterns) with fraud detection services to protect the we 999 platform and its players from fraudulent activity.
- Technology and infrastructure providers: Companies that provide the hosting, cloud infrastructure, and security services that power the we 999 platform. These providers operate under strict data processing agreements and may not use your data for their own purposes.
- Game content providers: When you play live dealer or RNG games on we 999, the relevant game provider processes gameplay data (bet amounts, outcomes, session timing) to operate the game. These providers are certified and operate under confidentiality obligations.
- Regulatory and law enforcement authorities: We 999 may disclose personal data to competent authorities where required by applicable law, legal process, or an order from a regulatory body with jurisdiction over the platform.
We 999 will never share your personal data with insurance companies, data brokers, market research firms, or third-party advertisers without your explicit prior consent.
6International Data Transfers
The we 999 platform is operated with infrastructure that may involve processing your personal data in locations outside Pakistan. Where this occurs, we 999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.
Safeguards we rely on for international transfers include data processing agreements incorporating standard contractual clauses, and transfers only to service providers operating in jurisdictions with recognised data protection standards.
If you have questions about the specific safeguards applied to any international transfer of your we 999 data, please contact us at support@we999.link.
7How Long We Keep Your Data
We 999 retains personal data for as long as it is necessary for the purpose for which it was collected, unless a longer retention period is required by applicable law. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active we 999 account, plus a minimum of 5 years following account closure. This period reflects anti-money laundering and KYC record-keeping requirements.
- Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction, in compliance with financial record-keeping obligations.
- Customer support communications: Correspondence with we 999 support is retained for 3 years from the date of the last interaction, or longer if related to an unresolved complaint or legal matter.
- Technical and usage data: Log data and session information are retained for up to 12 months from collection, after which they are deleted or permanently anonymised.
- Marketing consent records: Records of marketing consent or opt-out are retained for the duration of the relationship plus 3 years to demonstrate compliance.
When the applicable retention period expires, we 999 securely deletes or permanently anonymises the data in question. Anonymised data — from which individual identity cannot be reconstructed — may be retained indefinitely for analytical and platform improvement purposes.
8Cookies and Tracking Technologies
We 999 uses cookies and similar tracking technologies on the we999.link platform. Cookies are small text files placed on your device that help the platform function correctly and help us understand how players use the site.
| Cookie Type | Purpose | Can Be Disabled? |
|---|
| Essential | Keeps you logged in to your we 999 account, maintains session state, and enables core platform functions. | No — required for platform operation |
| Security | Fraud detection, bot prevention, and protection of we 999 account sessions from unauthorised access. | No — required for security |
| Performance | Anonymised analytics helping we 999 understand which pages and features Pakistani players use most, used to improve the platform. | Yes — via cookie preferences |
| Functional | Remembers your preferences such as language, last game played, and notification settings on we 999. | Yes — disabling may affect experience |
We 999 does not use advertising or tracking cookies that share your data with third-party ad networks. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent the we 999 platform from functioning correctly.
9Your Rights Over Your Personal Data
As a we 999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@we999.link with the subject line "Privacy Request – [Right You Are Exercising]". We will respond within 30 days.
Right to AccessRequest a copy of the personal data we 999 holds about you and how it is being used.
Right to CorrectionRequest correction of inaccurate or incomplete personal data on your we 999 account.
Right to DeletionRequest deletion of your personal data where we no longer have a lawful basis for retaining it.
Right to Restrict ProcessingRequest that we pause processing of your data while a complaint or correction request is being resolved.
Right to PortabilityRequest your personal data in a structured, machine-readable format where technically feasible.
Right to ObjectObject to processing based on legitimate interests, including responsible gaming profiling and analytics.
Please note that some rights are subject to legal exceptions. For example, we 999 cannot delete transaction records that we are legally required to retain under anti-money laundering regulations, even if you request it. Where a legal exception applies, we will explain this clearly in our response.
10Security Measures
We 999 implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
- TLS (Transport Layer Security) encryption for all data transmitted between your device and the we 999 platform.
- Encryption of sensitive data fields (including payment information and identity documents) at rest within we 999 infrastructure.
- Role-based access controls — we 999 staff can only access player data where it is genuinely necessary for their specific job function.
- Intrusion detection systems and real-time monitoring for unusual access patterns or potential data security events.
- Regular security reviews and vulnerability assessments of the we 999 platform and its third-party integrations.
- Contractual data security requirements imposed on all third-party service providers who process player data on behalf of we 999.
While we 999 takes its security responsibilities seriously, no platform can guarantee absolute security. You also have a role to play — use a strong, unique password for your we 999 account and do not share your login credentials with anyone.
If you suspect your we 999 account has been accessed by someone else, change your password immediately from account settings and contact support@we999.link. We treat all suspected security incidents as high priority.
11Children and Minors
We 999 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 18 years of age. The we 999 registration process requires date of birth confirmation and age verification, and accounts where the player is found to be under 18 will be closed immediately.
If you believe a minor has registered at we 999, please contact us at support@we999.link immediately with details. We will investigate and take appropriate action promptly.
Parents and guardians are encouraged to use parental control software on shared devices to prevent minors from accessing online gambling platforms including we 999.
12Marketing Communications
We 999 may send you promotional emails, SMS messages, or in-app notifications about bonuses, new games, and platform updates — but only if you have opted in to receive them. We do not send unsolicited marketing communications.
You can manage your communication preferences at any time:
- From within your we 999 account settings under "Communication Preferences".
- By clicking the unsubscribe link included at the bottom of every we 999 marketing email.
- By replying STOP to any we 999 SMS marketing message.
- By contacting support@we999.link with "Unsubscribe" in the subject line.
Please allow up to 48 hours for changes to communication preferences to take effect across all we 999 channels. Note that opting out of marketing communications does not affect transactional messages — you will still receive account security alerts, deposit confirmations, and withdrawal notifications.
13Changes to This Privacy Policy
We 999 may update this Privacy Policy from time to time as the platform evolves or as regulatory requirements change. When we make material changes — changes that significantly affect how we use your personal data or your rights as a player — we will notify registered players by email to the address on their we 999 account and post the revised policy here with a new effective date.
Minor clarifications or administrative updates that do not materially affect the substance of this policy will be posted here without individual notification, but the effective date will always be updated.
Your continued use of the we 999 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may request account closure by contacting support before the effective date.
14Contact Us About Privacy
If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how we 999 handles your personal information, please get in touch:
Privacy queries: support@we999.link — use the subject line "Privacy Request" for the fastest routing to the right team. We respond within 48 hours on business days.
If you are not satisfied with our response to a privacy concern, you have the right to escalate to a relevant data protection authority. We will provide guidance on the appropriate escalation path when responding to your complaint if it is not resolved at the first stage.
We 999 takes privacy complaints seriously and commits to a fair, documented, and transparent complaints process for all Pakistani players.
