Privacy Policy – How m999 Protects Your Personal Data in Pakistan

This Privacy Policy explains how m999 (operating at m999.cash) collects, uses, stores and protects the personal information of its users. It applies to every person who visits, registers on or interacts with the m999 platform in any way — whether through the desktop website, mobile browser or any associated application.

At m999, we understand that Pakistani players place significant trust in us when they share their personal and financial information. That trust is not taken lightly. We have designed our data practices specifically around the needs and expectations of Pakistani users, applying the principles of data minimisation, purpose limitation and transparency in everything we do.

This policy is written in plain, straightforward English so that every m999 user — regardless of their technical background — can understand exactly how their data is being handled. If anything in this document is unclear, please reach out to our support team before continuing to use the platform.

By creating an account on m999 or by continuing to use the platform after this policy is made available to you, you confirm that you have read and understood its contents. This Privacy Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.

m999 is the data controller for all personal information collected through the m999.cash platform. As data controller, m999 determines the purposes and means of processing your personal data and bears responsibility for doing so in accordance with applicable data protection standards.

Our primary business is operating an online casino and sports betting platform specifically for Pakistani users. All operations — including data processing, financial transactions and customer support — are oriented around serving the Pakistani market in Pakistani Rupees (PKR) through payment methods used locally in Pakistan.

For all data-related enquiries, corrections, deletion requests or complaints, you can contact us directly:

• Email: privacy@m999.cash
• General Support: support@m999.cash
• Live Chat: Available 24/7 after logging in to your m999 account

m999 collects personal data in three main ways: information you provide directly when registering or transacting, information generated automatically through your use of the platform, and information collected through third-party payment processors as part of transaction verification.

m999 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs or health data, except where such information is voluntarily disclosed in the context of responsible gaming self-exclusion requests.

Every piece of data collected by m999 is used for a specific, documented purpose. We do not collect data speculatively and we do not use your data in ways unrelated to operating and improving the m999 platform. Below are the primary purposes for which your data is used:

• Account Creation and Management: Your identity and contact data are used to create and maintain your m999 account, verify that you are a unique individual, and communicate account-related information such as transaction confirmations, security alerts and policy updates.
• Payment Processing: Financial data and transaction records are used to process deposits, verify the source of funds, execute withdrawal requests and maintain an accurate audit trail of all account transactions.
• Identity Verification (KYC): m999 is required to verify the identity of users who meet certain transaction thresholds or who trigger compliance review criteria. KYC data is used solely for this verification purpose and is handled with heightened security controls.
• Fraud Prevention and Security: Technical data including IP addresses, device identifiers and session patterns are analysed by our security systems to detect unusual activity, prevent unauthorised account access and identify potential fraud or money laundering patterns.
• Legal and Regulatory Compliance: Certain data is retained and may be disclosed to comply with applicable laws, regulatory requirements or lawful requests from government authorities. m999 only shares data with authorities when legally compelled to do so.
• Responsible Gaming: m999 uses transaction and session data to monitor for responsible gaming indicators — such as significantly increased betting volume or signs of problem gambling behaviour — and to apply protective measures where appropriate.
• Platform Improvement: Anonymised, aggregated usage data helps us understand how the m999 platform is being used, identify areas for improvement and develop new features that better serve Pakistani players.
• Customer Support: Communications data from your interactions with the m999 support team is retained to maintain a complete support history for your account and to improve the quality of our service over time.

m999 processes your personal data only where there is a valid legal basis to do so. The applicable legal bases for our main processing activities are as follows:

• Contract Performance: Processing your account registration data, financial transactions and game activity is necessary to fulfil the contract between you and m999 as set out in our Terms and Conditions. Without this processing, we cannot operate your account.
• Legal Obligation: KYC identity verification, anti-money-laundering checks and retention of transaction records are required by applicable regulatory and legal frameworks. m999 must carry out this processing regardless of user preference.
• Legitimate Interests: Fraud detection, platform security monitoring, responsible gaming monitoring and product improvement analytics are conducted on the basis of m999's legitimate interest in operating a safe, secure and sustainable platform. These interests are balanced against the privacy rights of users.
• Consent: Where m999 sends optional marketing communications or uses non-essential cookies that are not required for the platform to function, this is done only with your prior consent. You may withdraw consent for these activities at any time.

m999 does not sell your personal data to any third party under any circumstances. We do, however, share data with carefully selected service providers and in specific legally required circumstances. Every third party with whom we share data is bound by strict data processing agreements that limit their use of your data to the specific purpose for which it was shared.

Categories of recipients who may receive your data include:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card processing partners receive the minimum data required to process your deposits and withdrawals. This typically includes your account reference and transaction amount.
• Identity Verification Partners: Where m999 uses a third-party KYC verification service to process your identity documents, your document data is shared solely for verification purposes and is not retained by the third party beyond the verification period.
• Fraud Prevention and Security Services: Anonymised technical data such as IP addresses and device fingerprints may be shared with security partners to cross-reference known fraud patterns. No directly identifiable personal information is shared for this purpose.
• Regulatory and Law Enforcement Authorities: m999 will disclose your data to Pakistani regulatory authorities, law enforcement agencies or courts where legally required by a valid formal request or court order. m999 will make reasonable efforts to notify you of such requests unless legally prohibited from doing so.
• Professional Advisers: Legal advisers, auditors and compliance consultants may access account and transaction data in the course of their professional engagements with m999, subject to professional confidentiality obligations.

m999 uses cookies and similar tracking technologies to ensure the platform functions correctly, to protect your account from session hijacking, and to gather anonymised analytics data that helps us improve the experience for Pakistani players. Cookies are small data files stored in your browser.

m999 does not use advertising cookies or tracking pixels that serve advertisements. We do not participate in cross-site behavioural tracking. The analytics data we collect is processed in aggregated, anonymised form and is not linked back to individual player identities.

You can manage your cookie preferences from your browser settings. Deleting essential cookies may log you out of your m999 account and require you to log back in. On mobile browsers, cookie management options are available through the browser's privacy settings menu.

m999 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by legal and regulatory obligations. Below are the standard retention periods for key data categories:

When the applicable retention period expires, m999 either deletes the data securely or anonymises it irreversibly so that it can no longer be associated with any individual. Data subject to an active legal hold, regulatory investigation or pending dispute may be retained beyond standard periods until the matter is resolved.

As an m999 user, you have rights in relation to your personal data. m999 is committed to respecting and facilitating these rights. To exercise any of the rights described below, contact us at privacy@m999.cash with the subject line indicating the right you wish to exercise and your registered account details.

• Right to Access: You can request a copy of the personal data m999 holds about you. We will provide this within 30 days of a valid verified request, in a readable format, free of charge for the first request in any 12-month period.
• Right to Correction: If any personal data m999 holds about you is inaccurate or incomplete, you have the right to request a correction. You can update basic account information directly from your m999 account settings.
• Right to Erasure: You may request deletion of your personal data. This right applies where the data is no longer necessary for the purpose it was collected and no overriding legal retention obligation applies. Note that financial transaction records and KYC data cannot be deleted during their mandatory retention periods.
• Right to Restrict Processing: In certain circumstances you may request that m999 stops using your data for specific purposes while retaining it — for example, if you contest the accuracy of data that is under review.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format so that it can be transferred to another service provider, where technically feasible.
• Right to Object: You may object to data processing conducted on the basis of legitimate interests. m999 will cease that processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where m999 relies on your consent to process data (such as for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

m999 applies multiple layers of technical and organisational security controls to protect your personal and financial data. Security is not treated as an afterthought — it is built into the platform architecture from the ground up.

• TLS Encryption: All data transmitted between your device and m999 servers is encrypted using TLS 1.2 or higher. This prevents interception of your login credentials, payment details and personal information in transit.
• Data Encryption at Rest: Sensitive data stored on m999 servers — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: m999 internal access to your personal data is restricted on a strict need-to-know basis. Staff members only access account data when required to resolve a specific support or compliance matter relating to your account.
• Two-Factor Authentication: m999 strongly recommends enabling two-factor authentication (2FA) on your account. This adds a second verification step at login, significantly reducing the risk of unauthorised access even if your password is compromised.
• Fraud Detection Systems: Automated fraud detection monitors account activity in real time, flagging unusual login locations, device changes and suspicious transaction patterns for security review.
• Regular Security Audits: m999's technical infrastructure undergoes regular security reviews and penetration testing to identify and address vulnerabilities before they can be exploited.

m999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm their age, and our KYC procedures are specifically designed to detect and prevent underage registration.

If m999 discovers that a user account belongs to a person under 18, we will:

• Immediately suspend the account and all associated transactions
• Delete any personal data collected in connection with the underage account as soon as reasonably practicable after confirming the account holder's age
• Return any deposits made by the account to the source payment method where technically feasible, after deducting the value of any bets placed (which will be voided)

Parents and guardians who believe a minor has created an m999 account should contact us immediately at support@m999.cash with relevant details. We will act on confirmed reports without delay.

m999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform functionality. When we make changes:

• The updated policy will be published on this page with a revised "Last Updated" date
• For material changes that meaningfully affect how your data is used, we will notify registered users via email at least 7 days before the changes take effect
• Minor updates — such as clarifications, correction of typographical errors or changes required by law — may be published without advance notification

Your continued use of m999 after a policy update takes effect constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you should stop using the platform and contact us to request account closure and data deletion where applicable under the retention rules above.

We recommend reviewing this page periodically, particularly before making large deposits or withdrawals, to ensure you are comfortable with how your data is being handled.

For any questions, requests or concerns relating to this Privacy Policy or the handling of your personal data by m999, please use the following contact channels:

• Privacy Requests: privacy@m999.cash (access, correction, deletion, portability)
• General Support: support@m999.cash
• Live Chat: Available 24/7 via the m999 platform after login

If you submit a privacy complaint, m999 will acknowledge it within 2 business days and aim to resolve it within 30 days. For complex matters requiring further investigation, we will keep you updated on progress throughout the process.

If you are not satisfied with m999's response to a privacy complaint, you may raise the matter with your relevant data protection authority or seek independent legal advice. m999 cooperates fully with regulatory investigations relating to data protection matters.