py999 Privacy Policy – How We Handle Your Personal Data

At py999, we understand that your personal information is yours — and that you're trusting us with it when you register, deposit money, and use our platform. We take that responsibility seriously. This Privacy Policy explains in clear terms what information py999 collects from Pakistani players, the specific purposes for which it is used, the limited circumstances under which it may be shared with third parties, and the controls you have over your own data.

py999 is built specifically for the Pakistani market. Our payment infrastructure, customer support, and gaming content are all designed around Pakistani users — and so is our approach to data privacy. We collect only the information needed to operate the platform legally and safely. We do not build advertising profiles. We do not sell your data. We do not share your data with parties who have no legitimate reason to receive it.

This Policy should be read alongside the py999 Terms and Conditions and the Responsible Gaming Policy. Together, these three documents describe the complete relationship between you and py999.

1. What Personal Data py999 Collects

py999 collects personal data in two broad categories: information you provide directly, and information generated automatically by your use of the platform.

1.1 Information You Provide Directly

• Registration data: Your full legal name, Pakistani mobile number, date of birth, and the password you choose for your py999 account.
• Identity verification documents: A copy of your Computerised National Identity Card (CNIC) and, where required, a proof of address document and a photograph for liveness verification during KYC.
• Payment details: Your JazzCash or Easypaisa account number, bank account details for IBFT withdrawals, or the masked card number of a Visa/Mastercard you register for payments. py999 does not store full card numbers — these are handled by our PCI-DSS compliant payment processors.
• Support communications: Any messages, chat transcripts, emails, or documents you send to the py999 customer support team in connection with your account.
• Responsible gaming preferences: Deposit limits, self-exclusion elections, session reminders, and any other responsible gaming settings you configure in your account.

1.2 Automatically Collected Information

• Device and browser data: Device type, operating system version, browser type and version, screen resolution, and mobile network operator.
• Connection data: IP address and approximate geographic location derived from your IP address.
• Usage data: Pages visited on py999.ws, games played, bets placed (amounts, markets, outcomes), session duration and timing, and navigation patterns within the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bonus credits, and balance adjustments associated with your py999 account.
• Cookie data: Identifiers stored in cookies and similar technologies that enable py999 to recognise your device across sessions. See Section 6 for full cookie details.

2. How py999 Collects Your Data

Data is collected through the following channels on py999:

• Registration form: The account creation form at py999.ws collects your name, mobile number, and date of birth at sign-up.
• KYC verification process: When your account reaches the verification threshold — or when you request a withdrawal above a certain amount — py999 will request identity documents through the verification portal in your account settings.
• Payment transactions: When you initiate a deposit or withdrawal, py999's payment processing infrastructure captures the relevant financial identifiers needed to complete and record the transaction.
• Platform activity tracking: py999's servers automatically record your interactions with the website and platform, including game sessions and betting activity, using standard web server logging and event tracking technologies.
• Customer support interactions: When you contact py999 support — via live chat, email, or any other channel — the conversation is recorded and associated with your account for quality and compliance purposes.
• Cookies and local storage: py999 uses cookies and browser local storage to maintain your session, remember your preferences, and support platform analytics. You can manage cookie preferences — see Section 6.

3. How py999 Uses Your Personal Data

py999 uses your data only for the purposes described below. We do not use your data for purposes incompatible with the reason it was originally collected.

3.1 Marketing Communications

py999 will only send you promotional messages — about new games, bonus offers, or PSL event promotions — if you have explicitly opted in to marketing communications during registration or via your account settings. You can withdraw this consent and unsubscribe from marketing messages at any time by updating your account preferences or by contacting support. Withdrawing marketing consent does not affect your ability to use py999.

4. Who py999 Shares Your Data With

py999 does not sell your personal data. We share data only with the specific categories of third parties listed below, and only to the extent necessary for the stated purpose.

4.1 Payment Processors

To process your deposits and withdrawals, py999 shares the minimum necessary payment identifiers with Pakistani payment providers including JazzCash, Easypaisa, NayaPay, SadaPay, and our bank transfer and card processing partners. These providers are contractually bound to protect your data and use it only for the purpose of processing your specific transaction.

4.2 Identity Verification Services

During KYC, py999 may use a third-party identity verification provider to validate your CNIC against official records. The identity data shared is used only for verification purposes and is not retained by the verification provider beyond the verification event, except as required by law.

4.3 Game Software Providers

py999 licenses games from software suppliers. When you play a game, a session token and gameplay data are passed to the game server operated by the relevant supplier. py999 does not share your name, payment details, or contact information with game suppliers — only a pseudonymous session identifier and your in-game activity.

4.4 Regulatory and Law Enforcement Disclosure

py999 will disclose your personal data to regulatory authorities, law enforcement agencies, or courts if required to do so by applicable law, court order, or regulatory direction. py999 will not disclose data in response to informal or unofficial requests that are not backed by a formal legal instrument.

4.5 Business Transfers

In the event that py999 undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the new entity as part of that transaction. py999 will notify registered players of any such transfer and the new entity will be bound by obligations equivalent to this Privacy Policy.

5. Payment Data & Financial Security

5.1 How Payment Data is Handled

py999 places particular care around financial data. When you deposit via JazzCash or Easypaisa, your transaction is initiated through an encrypted connection directly with the mobile wallet provider. py999 receives confirmation of the transaction and the transaction reference — not your wallet PIN or full account credentials.

For bank IBFT transactions, py999 collects your bank account number and account holder name to facilitate the withdrawal. This information is used only for the specific withdrawal request and is stored in encrypted form in py999's secure database.

5.2 PCI-DSS Compliance for Card Payments

For Visa and Mastercard payments, py999 works with PCI-DSS Level 1 compliant payment processors. Full card numbers are never transmitted to or stored on py999's servers. The card details you enter on the payment page are handled entirely by the card processor in their secure environment — py999 receives only a tokenised reference that allows us to identify your registered card for future transactions without ever seeing the actual card number.

5.3 Transaction Records

A complete record of all financial transactions on your py999 account is maintained in py999's secure database. This record is used for account management, customer support, audit purposes, and AML compliance. You can view your full transaction history at any time from your account dashboard.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files that websites store on your device. py999 uses cookies to keep you logged in between visits, remember your preferences, detect fraudulent access patterns, and understand how players use the platform so we can improve it.

6.2 Types of Cookies py999 Uses

6.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely. Note that disabling essential cookies will prevent you from logging into py999, as session management depends on them. Disabling analytics cookies will not affect your ability to use the platform — it simply means py999 receives less data about your browsing behaviour to use in platform improvements.

6.4 No Third-Party Advertising Trackers

py999 does not load third-party advertising trackers, pixels, or social media widgets on py999.ws. The only third-party scripts loaded on py999 are those directly necessary to operate the platform — including payment gateway scripts and game software. py999 does not share your browsing behaviour on the platform with Facebook, Google Ads, or any other advertising network.

7. How Long py999 Keeps Your Data

py999 retains your personal data for as long as your account is active and for a defined period thereafter. The specific retention periods below reflect legal requirements that apply to gaming and financial services businesses.

• Account registration data (name, mobile number, DOB): Retained for the duration of account activity plus five years after account closure, as required for AML compliance.
• Transaction records (deposits, withdrawals, bets): Retained for seven years from the date of each transaction, in line with financial record-keeping requirements.
• KYC documents (CNIC copy, address proof): Retained for five years after account closure or the last transaction date, whichever is later.
• Customer support communications: Retained for three years from the date of the interaction.
• Session and device logs: Retained for 12 months from the date of the session, then deleted or anonymised.
• Marketing consent records: Retained for three years from the date of consent or withdrawal of consent, as proof of permission status.

When the applicable retention period expires, py999 deletes your data or anonymises it in a way that makes it impossible to re-identify you, unless a specific legal requirement compels us to retain it for longer.

8. Security Measures at py999

py999 implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following technical and organisational measures are in place.

8.1 Technical Security

• All data transmitted between your device and py999.ws is encrypted using TLS 1.3, the current industry standard for web transport security.
• Personal data stored in py999's database is encrypted at rest using AES-256 encryption.
• Account passwords are hashed using bcrypt with a unique salt per user — py999 never stores your password in plain text and cannot read it.
• Access to py999's production data environment is restricted to authorised personnel and governed by role-based access controls and multi-factor authentication requirements.
• py999's infrastructure is monitored 24/7 for unusual access patterns, intrusion attempts, and data exfiltration activity.

8.2 Organisational Security

• All py999 employees and contractors who handle personal data are bound by confidentiality agreements and receive data security training.
• Access to customer personal data is granted on a need-to-know basis — most support team members can see only the data relevant to their specific support function.
• py999 conducts regular internal security reviews and engages third-party security firms to conduct periodic penetration testing of the platform.

8.3 Breach Notification

In the unlikely event of a data breach that affects your personal information, py999 will notify you via your registered mobile number or email address within a reasonable timeframe after the breach is identified. py999 will also report the breach to relevant regulatory authorities as required by applicable law.

9. Your Data Rights as a py999 Player

As a user of py999, you have the following rights with respect to your personal data. To exercise any of these rights, contact the py999 privacy team at support@py999.ws.

10. Minors and py999

py999 is strictly an 18+ platform. The collection and processing of personal data from individuals under the age of 18 is not permitted and is actively prevented by py999's age verification procedures. If py999 identifies or is informed that data belonging to a minor has been collected in error, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe your child has registered an account on py999, please contact our support team immediately at support@py999.ws with the relevant details. We take these reports seriously and will respond and act within 24 hours.

11. Changes to This Privacy Policy

py999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements in our data practices. When material changes are made, py999 will notify registered players via their registered mobile number or email address before the changes take effect.

The effective date at the top of this Policy reflects when the current version came into force. Continued use of py999 after an updated Policy's effective date constitutes your acceptance of the changes. If you do not accept a material change, you should stop using py999 and contact support to close your account before the effective date.

Minor, non-material changes — such as clarifications of existing language that do not alter the substance of py999's data practices — may be made without individual notification. The updated Policy will be published on this page with an updated effective date.

12. Contact py999 About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how py999 has handled your personal information, please contact us through the following channels:

• Email: support@py999.ws — mark your subject line "Privacy Query" for fastest routing to the privacy team
• Live Chat: Available 24/7 on py999.ws — request to speak with the privacy or data team when connecting
• Account support form: Available in your account settings under "Help & Support"

py999 aims to acknowledge all privacy-related queries within 24 hours and to provide a substantive response within 15 working days. Complex data access requests may take up to 30 days — if this is the case, we will inform you of the extended timeline and the reason for it.