Privacy Policy –
dan999 Platform

01 Who We Are

dan999 is an internationally licensed online casino and sports betting platform serving adult players (21+) across Pakistan. We operate under an international gaming licence, the details of which are published on our About Us page. For all matters relating to data privacy, dan999 acts as the data controller responsible for the personal information collected through the platform.

Our platform is designed specifically for the Pakistani market, offering PKR-denominated accounts, locally familiar payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and sports markets covering cricket, PSL, and other events popular among Pakistani players. The personal data we collect is processed in connection with these services.

References to "dan999", "we", "us", or "our" throughout this Privacy Policy refer to the entity operating the dan999 platform. References to "you", "your", or "Player" refer to any individual who accesses, registers on, or interacts with the platform in any capacity.

02 Data We Collect

dan999 collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and in limited cases from trusted third-party verification providers. The categories of data we collect are set out below.

2.1 Registration & Account Data

When you create a dan999 account, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you meet the 21+ age requirement);
• Email address and mobile phone number;
• Residential address, city (e.g. Karachi, Lahore, Islamabad, Faisalabad), and country;
• Username and encrypted password;
• Preferred language and currency settings.

2.2 Identity Verification (KYC) Data

Under our international gaming licence and applicable anti-money laundering obligations, we are required to verify the identity of all registered players. KYC data we may collect includes:

• Scanned copies or photographs of government-issued identity documents (CNIC, passport, or driver's licence);
• Proof of residential address (utility bill, bank statement, or similar document dated within the last three months);
• Proof of payment method ownership (screenshot or photo of JazzCash/EasyPaisa wallet, bank card, or bank account statement);
• Selfie or live photograph for identity matching purposes.

2.3 Financial & Transaction Data

To facilitate deposits, withdrawals, and transaction monitoring, dan999 collects:

• Payment method identifiers (JazzCash or EasyPaisa account numbers, bank account details, card type and last four digits);
• Deposit and withdrawal amounts, dates, and reference numbers;
• Transaction history and account balance movements;
• Records of bonus credits, wagering activity, and promotional participation.

dan999 does not store full card numbers, CVV codes, or complete bank account credentials. Payment processing is handled by PCI-DSS compliant third-party payment processors.

2.4 Usage & Behavioural Data

When you use the dan999 platform, we automatically collect technical and behavioural data including:

• IP address and approximate geolocation derived from it;
• Device type, operating system, browser type, and version;
• Pages visited, time spent on each page, and navigation paths;
• Games played, bet amounts, outcomes, and session durations;
• Clicks, searches, and interaction patterns within the platform interface.

2.5 Communications Data

If you contact dan999 customer support via live chat or email, we retain records of those communications, including the content of messages, support ticket reference numbers, timestamps, and any documentation you attach. These records are maintained for service quality, staff training, and dispute resolution purposes.

03 How We Use Your Data

dan999 uses the personal data we collect for the following purposes:

Purpose	Data Used	Legal Basis
Account registration & management	Registration data, contact details	Contract performance
Age & identity verification (KYC)	KYC documents, date of birth	Legal obligation
Processing deposits & withdrawals	Financial & transaction data	Contract performance
Fraud prevention & security	Usage data, IP address, transaction data	Legitimate interest
Anti-money laundering compliance	KYC data, transaction history	Legal obligation
Customer support & dispute resolution	Communications data, account data	Contract performance
Responsible gaming monitoring	Behavioural data, betting patterns	Legal obligation / Legitimate interest
Platform analytics & improvement	Anonymised usage data	Legitimate interest
Marketing communications (opted-in)	Contact details, preferences	Consent
Regulatory reporting	KYC data, transaction records	Legal obligation

dan999 will not use your personal data for any purpose that is incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent.

04 Legal Basis for Processing

dan999 processes your personal data on the following legal bases, in accordance with applicable international data protection standards:

4.1 Contract Performance

The majority of processing activities — including account management, payment processing, and customer support — are necessary for the performance of the contract between you and dan999 (i.e., the Terms & Conditions you accepted upon registration). Without this processing, dan999 cannot provide the platform services to you.

4.2 Legal Obligation

Certain processing activities are mandatory under applicable law and our gaming licence conditions. These include KYC identity verification, age verification, anti-money laundering transaction monitoring, and regulatory reporting. We have no discretion to omit this processing, and it cannot be objected to by individual players.

4.3 Legitimate Interest

We process some data on the basis of dan999's legitimate business interests, where those interests are not overridden by your privacy rights. Examples include fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics used to improve the platform. In each case, we have carried out a balancing assessment to confirm that our interests do not override your fundamental privacy rights.

4.4 Consent

Where we rely on consent — primarily for marketing communications and non-essential cookies — we will always seek your explicit, freely given, and informed consent before processing. You may withdraw your consent at any time by contacting our support team or adjusting your account preferences, without any negative consequences for your continued use of the platform.

05 Data Sharing & Disclosure

dan999 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. We may share your data with carefully selected third parties only as described below:

5.1 Licensed Service Providers

We share data with third-party service providers who support the operation of the platform under strict data processing agreements. These include:

• KYC / Identity verification providers – to perform automated and manual identity checks;
• Payment processors – including gateways that handle JazzCash, EasyPaisa, and card transactions;
• Fraud detection and anti-money laundering screening providers;
• Cloud hosting and infrastructure providers – who store platform data on secure, access-controlled servers;
• Customer support platform providers – for live chat and ticketing systems;
• Game content providers – who may receive anonymised session data to ensure fair game delivery.

All service providers are contractually obligated to process your data only for the specific purpose for which it was shared, to maintain appropriate security measures, and to delete or return the data upon termination of their engagement with dan999.

5.2 Regulatory & Law Enforcement Authorities

dan999 may disclose personal data to our gaming licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, protect the safety of individuals, or comply with a court order or regulatory direction. We will notify you of any such disclosure where legally permitted to do so.

5.3 Business Transfers

In the event that dan999 is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify registered players of any such transfer in advance and ensure that your data continues to be protected to the same standard under the new entity.

06 Cookies & Tracking Technologies

dan999 uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to prevent fraud, and to understand how players use the site. Below is a full explanation of the cookies we use and the purpose of each category.

6.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account authentication, prevent cross-site request forgery attacks, and remember your language and currency preferences. The platform cannot function without these cookies and they cannot be disabled.

6.2 Security & Fraud Prevention Cookies

These cookies help dan999 detect and prevent fraudulent activity, bot traffic, and account takeover attempts. They work alongside our server-side fraud detection systems to identify unusual access patterns. These cookies are considered essential for platform integrity and are always active.

6.3 Analytics Cookies

With your consent, dan999 uses anonymised analytics cookies to understand aggregate usage patterns — for example, which pages are most visited, how long players spend on the platform, and which features are most frequently used. The data collected through analytics cookies does not identify you as an individual and is used solely to improve the platform experience.

6.4 Responsible Gaming Cookies

If you have set deposit limits, session time limits, or requested a cooling-off period through your account settings, cookies are used to remember and enforce those preferences across your sessions. These cookies are essential to our responsible gaming obligations and are always active for players who have enabled such controls.

6.5 Managing Cookies

You can manage or delete non-essential cookies at any time through your browser settings. Please note that disabling essential or security cookies may prevent the platform from functioning correctly and may result in your account being temporarily inaccessible. For detailed instructions on managing cookies in your specific browser, please refer to your browser provider's help documentation.

07 Data Retention

dan999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence conditions. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years	Legal obligation / Dispute resolution
KYC identity documents	Duration of account + 5 years	AML regulatory requirement
Transaction & financial records	Duration of account + 7 years	Financial regulatory requirement
Customer support communications	3 years from last interaction	Dispute resolution / Quality assurance
Betting & gaming history	Duration of account + 5 years	Regulatory compliance / Responsible gaming
Usage & analytics data (anonymised)	26 months	Platform improvement
Marketing consent records	Until consent withdrawn + 3 years	Proof of consent
Self-exclusion records	Indefinite	Responsible gaming obligation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Requests for early deletion are handled in accordance with Section 9 – Your Rights, subject to overriding legal and regulatory retention obligations.

08 Data Security

dan999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and the dan999 platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption;
• Encryption at rest: Sensitive data stored on dan999 servers, including KYC documents and payment identifiers, is encrypted at rest using AES-256;
• Access controls: Access to personal data within dan999's systems is restricted on a strict need-to-know basis, with role-based permissions and multi-factor authentication required for all administrative access;
• Penetration testing: The platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities;
• Fraud monitoring: Real-time automated systems monitor account activity for patterns consistent with fraud, account takeover, or money laundering;
• Incident response: dan999 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the relevant regulatory authority within the timeframes required under our licensing obligations.

09 Your Rights

As a data subject, you have a number of rights with respect to your personal data held by dan999. We are committed to honouring these rights in accordance with applicable data protection standards. Your rights are as follows:

9.1 Right of Access

You have the right to request a copy of all personal data that dan999 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a valid request. A copy of your account data is also available directly within your account settings for standard transaction and activity records.

9.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For basic account details such as your email address or phone number, you can update these directly in your account settings. For KYC-verified data (such as your full name or date of birth), corrections must be submitted to our support team along with supporting documentation.

9.3 Right to Erasure

You may request that dan999 delete your personal data. However, this right is not absolute — we may be unable to delete certain data where retention is required by law (for example, AML transaction records and KYC documents must be retained for the periods specified in Section 7). Where we are legally unable to fulfil an erasure request in full, we will inform you of the specific data categories that must be retained and the legal basis for their retention.

9.4 Right to Restrict Processing

In certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing — you may request that dan999 restrict the processing of your personal data to storage only, pending resolution of the relevant matter.

9.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, machine-readable format, and to request that it be transferred to another data controller where technically feasible.

9.6 Right to Object

You have the right to object to processing carried out on the basis of dan999's legitimate interests, including profiling for responsible gaming purposes. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests. You also have an absolute right to object to processing for direct marketing purposes at any time.

9.7 Exercising Your Rights

To exercise any of the rights above, please contact our data protection team at support@dan999.ws with the subject line "Data Rights Request" and a clear description of your request. We will acknowledge receipt within 5 business days and respond substantively within 30 days. Where a request is complex or numerous, the response period may be extended by a further 60 days, with prior notification.

10 Children & Minors

The dan999 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory step in the registration process, and all accounts are subject to KYC verification that includes documentary proof of age.

If dan999 becomes aware that personal data has been collected from an individual below the minimum age of 21, we will immediately close the relevant account, void all transactions associated with it, and securely delete the personal data collected, subject only to any mandatory regulatory retention obligations.

Parents or guardians who believe that a minor has registered on the dan999 platform or has accessed it without authorisation are urged to contact our support team immediately via live chat or at support@dan999.ws so that we can take prompt action.

11 International Data Transfers

dan999 is an internationally licensed platform and, as a result, your personal data may be transferred to and processed in countries outside of Pakistan. This may occur in connection with our use of cloud hosting infrastructure, KYC verification providers, and payment processing partners whose operations span multiple jurisdictions.

Whenever personal data is transferred internationally, dan999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Contractual clauses between dan999 and the recipient that impose binding data protection obligations;
• Transfer to jurisdictions that are recognised as providing an adequate level of data protection by the relevant regulatory authority;
• Technical measures including end-to-end encryption and pseudonymisation of data prior to transfer.

Details of the specific safeguards applied to any given international transfer are available on written request to our data protection team.

12 Third-Party Links & Integrations

The dan999 platform may contain references to third-party game content providers and payment processors whose own privacy practices are governed by their respective privacy policies. dan999 is not responsible for the privacy practices of any third party, and the inclusion of a reference to a third-party service on our platform does not constitute an endorsement of their privacy practices.

We encourage you to review the privacy policy of any third-party service provider whose services you use in connection with your dan999 account, particularly payment processors and mobile wallet providers such as JazzCash and EasyPaisa, whose data handling practices are separate from and independent of this Privacy Policy.

13 Policy Updates

dan999 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players by email and by displaying a prominent notice on the platform for a minimum of 30 days following the update. The "Last Updated" date at the top of this page will reflect the date on which the most recent version came into effect.

Your continued use of the dan999 platform following notification of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to any updated Privacy Policy, you must stop using the platform and may request account closure in accordance with our Terms & Conditions.

Previous versions of this Privacy Policy are available upon written request to our data protection team and will be provided within 5 business days.

14 Contact & Complaints

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which dan999 handles your personal data, please contact our dedicated data protection team through the following channels:

• Live Chat: Available 24/7 directly on the dan999 platform — select "Privacy / Data" as the subject category for priority routing.
• Email: support@dan999.ws — use the subject line "Privacy Policy Enquiry" and allow up to 5 business days for an initial response.

We take all privacy complaints seriously and will investigate each one thoroughly. If you are not satisfied with our response to your complaint, you have the right to escalate the matter to our gaming licensing authority or the applicable data protection supervisory authority in your jurisdiction.

For matters relating to responsible gaming data, including self-exclusion records and betting history, please also refer to our Responsible Gaming page for additional guidance and contact options.