m999game Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by m999game in connection with the operation of the m999game platform accessible at m999game.bio. It applies to all registered account holders, visitors to the platform who have not registered an account, and any individual who communicates with m999game through any channel including live chat, email, or messaging services.

The purpose of this Policy is to provide full transparency regarding m999game's data practices — to tell you plainly what information we collect about you, why we need it, who we share it with, how long we keep it, and what you can do about it. At m999game, we take data protection seriously not because regulations require us to, but because Pakistani players trusting us with their personal and financial information deserve to know exactly how that information is handled.

By creating an m999game account and using the platform, you consent to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not create an account or continue using the m999game platform. This Policy should be read alongside the m999game Terms & Conditions, which govern your use of the platform as a whole.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the operating entity behind the m999game platform. m999game operates the platform at m999game.bio and is responsible for determining the purposes and means of processing personal data collected through it.

All data protection enquiries, subject access requests, correction requests, and deletion requests should be directed to the m999game privacy team using the contact details set out in Section 15 of this Policy. m999game is committed to responding to all data subject requests within the timeframes set out in Section 11.

m999game collects the following categories of personal data from users of the platform:

m999game does not collect sensitive personal data beyond what is listed above. m999game does not collect biometric data, health data, ethnic origin data, or religious belief data from players. CNIC data collected for identity verification is used solely for that purpose and is not cross-referenced against any database for marketing, demographic profiling, or any purpose beyond confirming legal identity and age.

m999game collects personal data through the following channels and mechanisms:

• Direct provision by you: Information you enter directly into the platform — including mobile number at registration, payment details at deposit, CNIC documentation during KYC verification, and any information provided when contacting m999game support via live chat or email.
• Automated collection during use: Technical and gameplay data is collected automatically as you interact with the m999game platform. This includes server-side logs of login events, bet placements, game launches, and all other platform interactions, as well as client-side data such as device type and browser version collected through standard web technologies.
• Payment processor data: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or USDT TRC20, m999game receives transaction confirmation data from the relevant payment processor. This data includes transaction reference numbers, amounts, timestamps, and payment method identifiers — but does not include your payment account password or PIN.
• Identity verification providers: When you submit CNIC documentation for KYC verification, m999game may use a third-party identity verification service to validate the authenticity of the document. The verification service provides m999game with a pass or fail result and may retain a copy of submitted documents in accordance with its own data retention policy.
• Cookies and similar technologies: See Section 8 for a full description of cookies and tracking technologies used on the m999game platform.

m999game processes your personal data for the following specific purposes:

1. Account creation and management: To create, maintain, and manage your m999game account, including authenticating your identity on login, managing your PKR wallet balance, and providing access to all platform features.
2. Payment processing: To process deposits to your m999game PKR Wallet from Pakistani payment methods and to process approved withdrawals back to your verified payment account.
3. Identity verification and KYC compliance: To verify your identity through CNIC documentation prior to processing withdrawals, as required by applicable anti-money laundering (AML) standards. KYC verification confirms that you are who you say you are and that you meet the 21+ age requirement.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account abuse, bonus abuse, money laundering, and other prohibited conduct on the m999game platform. This includes automated analysis of gameplay and transaction patterns.
5. Customer support: To respond to queries, complaints, and disputes raised through m999game's support channels, and to maintain records of communications for quality assurance and training purposes.
6. Responsible gaming monitoring: To monitor gameplay patterns for indicators of problematic gambling behaviour and to apply responsible gaming tools and restrictions in accordance with your account settings or m999game's responsible gaming obligations.
7. Platform improvement: To analyse aggregated, anonymised usage data to understand how players use the platform and to inform product development, feature prioritisation, and user experience improvements.
8. Legal and regulatory compliance: To comply with applicable legal obligations, including responding to lawful requests from regulatory or law enforcement authorities, maintaining required records, and reporting obligations under anti-money laundering regulations.
9. Direct communications: To send account-related SMS notifications, including OTP codes, withdrawal alerts, login alerts from new devices, and responsible gaming reminders. m999game does not send unsolicited marketing messages without your explicit opt-in consent.

m999game processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your registration data, payment data, and gameplay data is necessary to perform the contract between m999game and you as a registered user — specifically, to provide the gaming and betting services described in the Terms & Conditions.
• Legal obligation: Identity verification (KYC) and anti-money laundering data processing are carried out to comply with applicable legal and regulatory obligations. This processing cannot be waived or restricted by user preference.
• Legitimate interests: Fraud prevention, security monitoring, and platform improvement activities are carried out on the basis of m999game's legitimate interests in operating a secure, compliant, and well-functioning platform. These interests are balanced against your privacy rights and do not override them where your interests are stronger.
• Consent: Where m999game seeks to process data for purposes beyond those listed above — such as sending optional promotional communications — we will seek your explicit, freely given, and withdrawable consent at the relevant time. You may withdraw consent at any time without affecting the lawfulness of prior processing.

m999game does not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT TRC20 network operators receive the transaction data necessary to process deposits and withdrawals. Each payment processor operates under its own privacy terms and data security obligations.
• Identity verification providers: Third-party KYC service providers receive CNIC documentation and personal identification data for the purpose of document authenticity verification and age confirmation. These providers are contractually bound to use submitted data solely for verification purposes.
• Game and platform providers: Game studios and software providers whose games are hosted on the m999game platform receive anonymised session identifiers and gameplay data necessary to deliver game functionality and support. Personal identity data is not shared with game studios.
• Regulatory and law enforcement authorities: m999game will disclose personal data to competent regulatory, law enforcement, or judicial authorities when required to do so by a valid legal order, warrant, or regulatory obligation. m999game will notify affected users of such disclosures where legally permitted to do so.
• IT infrastructure and security providers: Cloud hosting providers, cybersecurity monitoring services, and server infrastructure operators may have access to data stored on systems they manage. These providers are bound by data processing agreements that restrict their use of data to the provision of infrastructure services only.

The m999game platform uses cookies and similar client-side storage technologies to deliver core platform functionality and to collect session and usage data. The following categories of cookies are used:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and cookies that store your language and display preferences. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players interact with the m999game platform — including which pages are visited, how long sessions last, and which features are used most frequently. This data is used to improve the platform and does not identify individual users.
• Security cookies: Used to detect and prevent suspicious activity, including potential bot activity, multiple simultaneous sessions from unexpected geographic locations, and other security anomalies. These cookies do not collect personal data beyond what is necessary for security monitoring.
• Functional cookies: Store your personal preferences, such as remembered login settings and responsible gaming tool configurations, so that you do not need to re-enter them on each visit.

m999game does not use third-party advertising or retargeting cookies. Your browsing activity on m999game is not shared with advertising networks or used to serve targeted advertisements on other websites. You may manage cookie preferences through your browser settings, however disabling essential cookies will affect your ability to use the platform.

m999game implements layered technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport encryption: All data transmitted between your device and m999game servers is encrypted using TLS 1.3 protocol with 256-bit AES encryption. The SSL certificate is maintained and renewed on a mandatory schedule.
• Password security: Passwords are stored as salted cryptographic hashes using industry-standard algorithms. m999game staff cannot retrieve your password — it can only be reset through a verified identity confirmation process.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Internal access is logged and periodically audited. No single staff member has unrestricted access to all categories of player data.
• Intrusion detection: m999game operates automated intrusion detection and anomaly monitoring systems that generate alerts for unusual access patterns, login anomalies, and potential data exfiltration attempts.
• Two-factor authentication: Administrative access to m999game backend systems requires two-factor authentication as a mandatory control. Player accounts can optionally enable 2FA from account security settings.
• Data breach response: In the event of a data security incident that poses a risk to your rights, m999game will notify affected players promptly and take immediate steps to contain and remediate the incident.

m999game retains your personal data for only as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account data and gameplay records: Retained for the duration of your active m999game account relationship, and for a period of 5 years following account closure. This retention period is driven by anti-money laundering record-keeping obligations.
• Identity verification documents (CNIC): Retained for a period of 5 years following the last financial transaction on the account, or from account closure — whichever is later. KYC records are subject to mandatory retention under AML compliance requirements.
• Financial transaction records: All deposit and withdrawal records are retained for a minimum of 5 years in accordance with financial record-keeping requirements applicable to gaming operators.
• Customer support communications: Live chat transcripts and support email records are retained for 2 years following the closure of the relevant support case, for quality assurance and dispute reference purposes.
• Technical and session logs: Server-side session and access logs are retained for a rolling 12-month period and then automatically purged, except where a specific security incident or investigation requires extended retention.
• Responsible gaming records: Records of self-exclusion, cooling-off periods, and deposit limit settings are retained for the full duration of the exclusion period plus 5 years, to prevent circumvention through re-registration.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with m999game's data deletion procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained indefinitely for analytical and platform improvement purposes.

As a registered m999game player, you have the following rights over your personal data. You may exercise these rights at any time by contacting the m999game privacy team through the support channels set out in Section 15:

All data rights requests must be submitted with sufficient information to verify your identity. m999game will not act on data rights requests that it cannot verify as originating from the Account holder. m999game aims to respond to all verified data rights requests within 30 calendar days. Where a request is complex or where a high volume of requests has been received, m999game may extend this period by up to a further 60 days, with notice provided to the requesting party.

Age verification through CNIC documentation is mandatory before any withdrawal is processed. This serves both as an identity verification mechanism and as a confirmation that the account holder meets the 21+ age requirement. Parents and guardians of individuals who may be under 21 and who have access to devices capable of accessing the m999game platform are encouraged to implement appropriate device-level parental controls.

If you become aware that an individual under the age of 21 has created or is using an m999game account, please contact m999game support immediately via live chat so that the account can be reviewed and the appropriate action taken promptly.

m999game's primary operations and player data are managed through infrastructure that may be located in multiple jurisdictions. Where personal data is transferred outside Pakistan to jurisdictions that may not have equivalent data protection laws, m999game ensures that appropriate safeguards are in place to protect the transferred data.

These safeguards may include: contractual clauses requiring receiving parties to provide equivalent data protection standards; transfers only to service providers who maintain internationally recognised data security certifications; and technical measures including encryption that protect data regardless of its geographic location.

Payment processing data transferred to JazzCash, EasyPaisa, and Pakistani banking partners remains within Pakistan's financial infrastructure and is subject to the regulations of the State Bank of Pakistan and applicable financial data protection standards.

m999game reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform features. Material changes to this Policy will be communicated to registered m999game account holders via SMS notification to the registered mobile number and via an in-platform notification displayed upon next login, no less than 7 days before the updated Policy takes effect, except where immediate changes are required to address an urgent legal or security matter.

The most current version of this Privacy Policy is always available on this page, with the effective date shown in the page header. Continued use of the m999game platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with changes to the Privacy Policy, you should cease using the platform and contact m999game support to request account closure and data handling in accordance with your applicable data rights.

For all privacy-related enquiries, data access requests, correction requests, deletion requests, or complaints regarding m999game's data processing practices, please contact the m999game privacy team using the channels below. All contact details are provided as plain text and are not hyperlinked in accordance with platform policy.

• Privacy & Data Enquiries: Contact m999game support via 24/7 live chat and specify that your query relates to a privacy or data protection matter. The support team will escalate to the privacy team on the same business day.
• Support Email: [email protected] (plain text — not a hyperlink)
• Business & Compliance Email: [email protected] (plain text — not a hyperlink)
• Response Time Target: All privacy enquiries and data rights requests are acknowledged within 5 business days and resolved within 30 calendar days, subject to identity verification and the complexity of the request.