Privacy Policy – How do999 Protects Your Data in Pakistan

1. Introduction

This Privacy Policy explains how do999 (referred to in this document as "we", "us", or "the platform") collects, uses, stores, and protects the personal data of users who register an account on do999.net or access any service offered through the platform, including the mobile application and all games and betting markets.

By registering an account on do999 you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. This policy should be read together with the do999 Terms and Conditions.

If you have any questions about how your data is handled, or if you wish to exercise any of your data rights, you can contact the support team at any time. Contact details are provided at the end of this policy.

2. Data We Collect

The categories of personal data do999 collects from registered users are as follows:

do999 does not collect sensitive personal data such as biometric data, health data, religious beliefs, or political opinions. Where identity verification requires a document such as a CNIC, the document is used solely for verification purposes and is not retained beyond what is necessary for that process.

3. How We Collect Your Data

Data is collected through the following means:

• Directly from you: When you register an account, complete your profile, make a deposit or withdrawal, place a bet, or contact support, you provide data directly to do999.
• Automatically during use: When you use the website or mobile app, technical data such as your IP address, device information, and session activity is collected automatically through server logs and similar mechanisms.
• From payment processors: When you complete a deposit or withdrawal via JazzCash, Easypaisa, Raast, bank transfer, or card, our payment processing partners may share confirmation data and transaction references with do999 to facilitate the transaction.
• From identity verification services: Where identity verification is required, do999 may use third-party verification services that return a verified/not verified result along with the data submitted for verification.

4. How We Use Your Data

do999 uses your personal data for the following purposes:

Account Operation

Your identity and contact data are used to create and maintain your account, authenticate your logins, send transactional notifications (such as deposit confirmations and withdrawal updates), and communicate with you about your account status.

Transaction Processing

Financial data is used to process PKR deposits and withdrawals through your chosen payment method, verify that transactions are originating from accounts held in your name, and maintain accurate records of your account balance and transaction history.

Fraud Prevention and Security

Technical data and usage patterns are analysed to detect suspicious activity, prevent unauthorised account access, identify potential fraud, and investigate any unusual transaction patterns. This is a core operational requirement — without this processing, the platform would be significantly more vulnerable to misuse that ultimately harms legitimate users.

Responsible Gaming

Usage data — including session duration, betting frequency, deposit patterns, and the responsible gaming settings you have chosen — is used to monitor for indicators that a user may need support, and to enforce any limits or self-exclusions that have been applied to your account.

Platform Improvement

Aggregated and anonymised usage data may be used to understand how users navigate the platform, which features are most used, and where the user experience can be improved. This analysis does not involve identifying individual users.

Legal and Compliance

Do999 may process personal data where necessary to comply with applicable legal obligations, respond to lawful requests from authorities, or establish, exercise, or defend legal claims.

5. Data Sharing

do999 does not sell personal data to third parties. Data may be shared with the following categories of recipients only where necessary:

• Payment processors: JazzCash, Easypaisa, Raast, and banking partners receive the transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and handle data in accordance with applicable financial regulations.
• Identity verification providers: Where do999 uses a third-party service to verify identity documents, the relevant data is shared with that provider solely for the purpose of completing verification.
• Fraud prevention and security services: Technical and usage data may be shared with fraud detection partners to identify and prevent abuse across the platform.
• Legal authorities: do999 will disclose personal data to law enforcement or regulatory authorities where required to do so by a lawful order or legal obligation.

6. Payment Data Handling

All financial transactions on do999 are denominated in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, the payment is processed through secure channels.

do999 does not store full payment credentials on its own servers. JazzCash wallet numbers, Easypaisa account numbers, bank account details, and card numbers are handled by the relevant payment processor and are not retained by do999 beyond what is needed to match a transaction to your account and process reversals where necessary.

Transaction records — the amount, method type, date, and reference number — are retained in your account history for the period described in the Retention section below. These records are necessary for support queries, dispute resolution, and regulatory compliance.

7. Cookies and Tracking Technologies

do999 uses cookies and similar tracking technologies on the website and in the mobile app. These fall into the following categories:

Essential Cookies

These are necessary for the platform to function. They maintain your login session, remember your account preferences, and ensure that features like the bet slip and game lobby operate correctly. These cookies cannot be disabled without breaking core platform functionality.

Analytics Cookies

do999 uses analytics tools to understand aggregate usage patterns — for example, which pages are most visited and how users navigate between sections. This data is aggregated and does not identify individual users. These cookies can be declined without affecting your ability to use the platform.

Security Cookies

Some cookies are used to detect and prevent fraud and unauthorised access. They may track unusual login patterns or flag sessions that appear inconsistent with your normal activity. These are a security feature rather than a tracking mechanism.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to stay logged in and use some platform features.

8. Security Measures

do999 implements technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These include:

• Encryption of data in transit using TLS/HTTPS across all platform connections.
• Encrypted storage of sensitive personal data including identity information.
• Access controls ensuring that only authorised personnel can access personal data, and only to the extent needed to perform their role.
• Monitoring systems that detect unusual access patterns and flag potential breaches for investigation.
• Regular review of third-party service providers to verify that they maintain appropriate security standards.

No online platform can guarantee absolute security. In the event of a data breach that affects your personal information, do999 will notify affected users as promptly as possible and take steps to contain and remediate the breach.

9. Data Retention

do999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations.

Broadly, the retention periods that apply are:

• Active account data: Retained for the duration of your account being active on the platform.
• Transaction records: Retained for a minimum of five years following the transaction date, in accordance with standard financial record-keeping requirements.
• Identity verification records: Retained for the period required to satisfy verification obligations, and for a defined period after account closure.
• Support communications: Retained for a period sufficient to handle any disputes that may arise from the matters discussed, typically two years.
• Closed account data: Following account closure, personal data is reviewed and deleted or anonymised within a reasonable period, except where retention is required for fraud prevention, legal obligations, or unresolved disputes.

10. Your Data Rights

As a user of do999, you have the following rights in relation to your personal data:

• Right of access: You can request a summary of the personal data do999 holds about you. Contact support to make this request.
• Right to correction: If any personal data held about you is inaccurate, you can request that it be corrected. You can update most contact information directly in your account settings. For identity data, contact support.
• Right to deletion: In certain circumstances you can request that personal data be deleted. Note that data needed for legal compliance, fraud prevention, or unresolved financial obligations may not be immediately deletable.
• Right to object: You can object to processing of your personal data where that processing is based on legitimate interests rather than a contractual necessity.
• Right to data portability: You can request a copy of certain data in a structured, machine-readable format.

To exercise any of these rights, contact do999 support with your registered email address and a clear description of your request. do999 will aim to respond within 30 days.

11. Minors

do999 is strictly for users aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. If do999 becomes aware that personal data has been collected from an underage user, the account will be closed and the data deleted in accordance with the retention procedures described above.

If you believe a minor has created an account on do999, please contact support immediately so the account can be reviewed and closed.

12. Updates to This Policy

do999 may update this Privacy Policy from time to time. When changes are made, the "Last Updated" date at the top of this page will be revised. For material changes — for example changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — do999 will notify active users via email or in-platform notification before the changes take effect.

Continued use of the platform after an updated policy has been published constitutes acceptance of the revised policy. If you do not agree with an update, you should stop using the platform and contact support to close your account.

13. Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to report a data concern, contact do999 support:

You can also visit the FAQ page for answers to common questions, or the Responsible Gaming page for information on managing your account and gaming activity.