don999 Privacy Policy

1About This Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and use of personal data by don999 in connection with the online gaming platform operated at https://don999.bet (the "Platform"). It applies to all registered players, prospective players who browse the Platform without registering, and any individual whose personal data is submitted to don999 in connection with account-related activity.

don999 is committed to protecting the privacy and personal data of everyone who interacts with its Platform. This Policy has been drafted to clearly set out our data practices in plain, accessible language — while maintaining the precision required of a legally sound privacy document. We are committed to the responsible handling of personal data in accordance with internationally recognised data protection principles.

Please read this Policy carefully before creating a don999 account or depositing funds. By registering an account on don999, you confirm that you have read, understood, and accepted the practices described in this Policy. If you do not agree with any part of this Policy, you must not use the Platform.

2Data Controller

For the purposes of this Policy, don999 acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, don999 determines the purposes for which personal data is processed and the manner in which such processing takes place.

don999 operates the Platform under internationally recognised online gaming standards. All data processing activities are conducted in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

Where don999 engages third-party service providers — such as payment processors, fraud prevention services, or game studios — to process data on its behalf, those parties act as data processors and are contractually bound by data processing agreements that mandate compliance with don999's data protection standards and applicable law.

3Data We Collect

don999 collects personal data from you directly (when you provide it during registration, KYC, or when contacting support) and indirectly (automatically, through your use of the Platform). The categories of personal data we collect are described below.

4How We Use Your Data

don999 uses the personal data it collects for specific, defined purposes. We do not use personal data for any purpose incompatible with the purpose for which it was originally collected, and we do not engage in any form of automated decision-making that produces legal or similarly significant effects on players without human review.

• Account Creation and Management: Identity and Contact Data are used to create and maintain your don999 account, verify your identity, and communicate with you about account-related matters.
• Payment Processing: Financial Data is used to process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard. Transactions are denominated in PKR.
• Regulatory Compliance and KYC: Identity Data and KYC Documents are used to satisfy our obligations under anti-money laundering (AML) and Know Your Customer (KYC) requirements. This includes age verification to enforce the 21+ player requirement.
• Fraud Prevention and Security: Technical Data and Transaction Data are analysed to detect and prevent fraudulent activity, account takeover, collusion, and money laundering.
• Platform Personalisation: Usage Data is used to personalise your don999 experience, including displaying relevant game recommendations and promotions based on your activity history.
• Customer Support: Communications Data is used to resolve your queries, complaints, and disputes efficiently and accurately.
• Responsible Gaming Enforcement: Responsible Gaming Data is used to enforce the deposit limits, loss limits, and self-exclusion settings you have configured. This data is also used to identify patterns that may indicate problem gambling behaviour, enabling don999 to proactively reach out with support resources.
• Marketing Communications: Where you have explicitly opted in, Contact Data may be used to send you promotional emails regarding don999 bonuses, new game launches, and seasonal offers. You may withdraw this consent at any time from your account settings.
• Platform Analytics and Improvement: Aggregated, anonymised Usage Data and Technical Data are used to analyse platform performance, identify popular features, and inform product development decisions.

5Legal Basis for Processing

Every processing activity conducted by don999 is grounded in a recognised legal basis. The primary legal bases on which don999 relies are as follows:

• Contractual Necessity: Processing of Identity, Contact, Financial, and Transaction Data is necessary for don999 to perform its contractual obligations to you — namely, operating your account, processing your deposits and withdrawals, and providing access to the gaming platform.
• Legal Obligation: Processing of KYC Documents, Identity Data, and Transaction Data for AML compliance and age verification purposes is necessary for don999 to comply with its legal obligations under applicable gaming regulations and financial crime prevention standards.
• Legitimate Interests: Processing of Technical Data and Usage Data for fraud prevention, platform security, and analytics is conducted on the basis of don999's legitimate interest in operating a secure, fair, and commercially sustainable gaming platform — provided those interests are not overridden by your data protection rights.
• Consent: Processing of Contact Data for marketing communications and the placement of non-essential cookies is conducted on the basis of your freely given, informed, and specific consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6Data Sharing

don999 does not sell, rent, or trade your personal data to any third party for that party's own commercial purposes. Data is shared with third parties only in the circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

• Payment Processors: Financial Data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors solely to execute deposit and withdrawal transactions. Each payment partner is contractually bound to process this data only for payment execution purposes.
• KYC and Identity Verification Partners: Identity Data and KYC Documents may be shared with licensed identity verification service providers who assist don999 in fulfilling its age verification and AML obligations. These partners operate under strict data processing agreements.
• Fraud Prevention Services: Technical Data and Transaction Data may be shared with specialist fraud prevention providers to identify and prevent fraudulent activity on the Platform. These providers are prohibited from using don999 data for any other purpose.
• Game Studios and Software Providers: Where you play games powered by third-party studios on the don999 platform, limited technical and transaction data (such as player session identifiers and wager amounts) may be shared with the relevant studio for the purpose of game operation and fairness auditing. Personal identity data is not shared with game studios.
• Regulatory and Law Enforcement Authorities: don999 may be required by law, court order, or regulatory directive to disclose personal data to competent authorities. In such cases, don999 will disclose only the minimum data required to satisfy the legal obligation and will notify the affected player where legally permissible to do so.
• Professional Advisers: Legal, accounting, and compliance advisers engaged by don999 may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

7Cookies & Tracking Technologies

don999 uses cookies and similar tracking technologies on the Platform to enable essential functionality, improve performance, and (where you have consented) to deliver a more personalised experience. A cookie is a small text file stored on your device by your web browser when you visit a website.

The cookies used on the don999 Platform fall into the following categories:

You can manage your non-essential cookie preferences at any time through the Cookie Settings panel accessible from the footer of the Platform. Please note that disabling certain cookies may affect the functionality of the don999 Platform. Your browser settings can also be configured to block or delete cookies, though this may prevent you from accessing your account.

8Data Retention

don999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.

9Data Security

don999 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the don999 Platform is encrypted using industry-standard 256-bit SSL/TLS encryption. This applies equally to account login, deposits, withdrawals, and all forms submitted on the Platform.
• Payment Data Tokenisation: JazzCash, EasyPaisa, and card payment data is tokenised at point of entry. don999 servers never store raw payment credentials — only encrypted tokens issued by payment processors are retained for transaction reference purposes.
• Access Controls: Access to personal data within don999's systems is restricted on a strict need-to-know basis. Staff with access to player data undergo background checks, mandatory data protection training, and are bound by confidentiality agreements.
• Two-Factor Authentication: All player accounts have the option to enable 2FA, adding an additional layer of protection against unauthorised account access. Internal don999 systems that handle personal data require mandatory 2FA for all staff.
• Penetration Testing: The don999 Platform undergoes regular independent penetration testing and security audits conducted by qualified third-party security professionals. Identified vulnerabilities are remediated on a prioritised basis.
• Incident Response: don999 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay and in accordance with applicable legal requirements.

10Your Rights

As a player on don999, you have the following rights in respect of your personal data. don999 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers.

• Right of Access: You have the right to request a copy of the personal data don999 holds about you, along with information about how it is being used. Requests will be responded to within 30 days.
• Right to Rectification: If any personal data don999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account settings; for KYC data corrections, contact support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing exists. Note that don999 may be legally required to retain certain data (e.g., AML records) even following a valid erasure request.
• Right to Restriction of Processing: In certain circumstances, you may request that don999 restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where don999 relies on legitimate interests as the legal basis. You have an absolute right to object to processing of your data for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: don999 does not make decisions with legal or similarly significant effects on players based solely on automated processing without human review. Where any automated profiling is used in a risk-assessment context, you have the right to request human review of that decision.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your don999 account username and a description of the right you wish to exercise. don999 will respond within 30 days and may request identity verification before processing your request.

11International Data Transfers

don999 is an internationally operated online gaming platform. As a result, personal data collected from Pakistani players may be transferred to, stored in, and processed in countries outside Pakistan. This may include countries where data protection laws differ from those applicable in your jurisdiction.

Wherever don999 transfers personal data internationally, it ensures that appropriate safeguards are in place to protect your data at the destination. These safeguards include:

• Contractual data processing agreements with all recipients that impose data protection obligations equivalent to those described in this Policy.
• Transfer to service providers located in jurisdictions recognised as providing an adequate level of data protection.
• Application of technical security measures (including encryption) that remain in force regardless of the jurisdiction in which data is stored or processed.

If you would like further information about the international transfer safeguards applicable to your personal data, contact [email protected].

12Children & Minors

don999 operates a strict 21+ age policy. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. Registration on the Platform by individuals under 21 is explicitly prohibited by don999's Terms & Conditions.

Age verification is a mandatory step in the don999 KYC process. No withdrawal will be processed before the player's age has been confirmed against a valid government-issued identity document. Any account found to belong to an individual under the age of 21 will be immediately closed, all funds frozen, and all personal data associated with the account reviewed in accordance with our safeguarding obligations.

13Changes to This Policy

don999 reserves the right to update, amend, or replace this Privacy Policy at any time. The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision. Material changes to this Policy — particularly those that affect how your personal data is used or the rights available to you — will be communicated to you via the email address registered to your don999 account prior to taking effect.

Minor amendments, such as clarifications to existing language or corrections to typographical errors, will be published on this page without prior email notification. It is your responsibility to review this Policy periodically. Your continued use of the don999 Platform following the publication of any amendment constitutes acceptance of the revised Policy.

If any amendment to this Policy requires a new or expanded consent from you, don999 will seek that consent explicitly before proceeding with the relevant processing activity.

14Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by don999, please contact our Data Protection team using the details below:

If you are not satisfied with don999's response to a privacy concern, or if you believe that don999 has processed your personal data in a manner that is inconsistent with this Policy or applicable data protection law, you have the right to escalate your complaint to an independent supervisory authority or data protection regulator in your jurisdiction. don999 will cooperate fully with any such regulatory investigation.

For complaints specifically relating to responsible gaming matters — including the enforcement of self-exclusion, deposit limits, or concerns about underage access — please mark your email with the subject line "Responsible Gaming – Privacy Concern" and our dedicated team will respond with priority handling.