ds999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data processed by ds999 in connection with the operation of the ds999 online gaming platform, accessible at https://ds999.club ("Platform"). It covers data collected through the website, mobile interfaces, live chat support, email correspondence, and all other channels through which you interact with ds999.

ds999 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is written in plain English so that every player — whether based in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan — can clearly understand how their information is handled.

By registering an account or continuing to use the ds999 Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact support to arrange account closure.

This Policy should be read alongside the ds999 Terms & Conditions and Responsible Gaming policy, all of which form part of the overall agreement between you and ds999.

2 Data Controller

For the purposes of this Policy, ds999 acts as the data controller in respect of personal data collected through the Platform. As data controller, ds999 determines the purposes and means by which your personal data is processed.

Where ds999 engages licensed third-party processors — such as payment service providers, identity verification services, or cloud infrastructure providers — those parties act as data processors under instruction from ds999 and are contractually bound to handle your data only in accordance with ds999's documented instructions and applicable data protection standards.

3 Personal Data We Collect

ds999 collects the following categories of personal data:

ds999 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity verification purposes.

4 How We Collect Your Data

ds999 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Collection: Technical data such as IP addresses, device identifiers, and session data is collected automatically each time you access the Platform, using server logs, cookies, and similar technologies.
• Third-Party Sources: ds999 may receive data from identity verification providers, payment processors (such as JazzCash, EasyPaisa, HBL, and Meezan Bank), fraud detection services, and publicly available sources in order to verify the information you have provided and to fulfil regulatory obligations.
• Inferred Data: ds999 may derive insights about your gaming behaviour and risk profile from your usage data for the purpose of responsible gaming monitoring and platform improvement. Such inferences are not used for automated decision-making that produces legal or similarly significant effects without human review.

5 Legal Basis for Processing

ds999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the ds999 Terms & Conditions and deliver the services you have requested — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of ds999's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — for example, receiving optional marketing communications — you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

6 How We Use Your Data

ds999 uses the personal data it collects for the following specific purposes:

• Creating and managing your ds999 player account, including verifying your identity and age eligibility (21+).
• Processing deposits and withdrawals via JazzCash, EasyPaisa, Raast, SadaPay, HBL, UBL, Meezan Bank, USDT TRC20, and Visa/Mastercard, and maintaining accurate transaction records.
• Detecting, investigating, and preventing fraud, money laundering, account takeover, bonus abuse, and other prohibited conduct as defined in the ds999 Terms & Conditions.
• Fulfilling regulatory and legal obligations, including responding to requests from competent authorities and maintaining records required by applicable AML legislation.
• Operating and improving the ds999 Platform, including debugging, load balancing, A/B testing, and feature development informed by aggregated usage analytics.
• Providing customer support via live chat and email, including maintaining records of your queries and the resolutions provided.
• Monitoring your gaming behaviour for responsible gaming purposes — including identifying patterns consistent with problem gambling and intervening where appropriate — as part of our duty of care to all players.
• Sending you transactional communications such as account confirmations, security alerts, deposit confirmations, withdrawal notifications, and material updates to this Policy or the Terms & Conditions.
• Sending promotional communications about ds999 offers and features, where you have opted in to receive such communications and have not subsequently withdrawn consent.

7 Data Sharing & Disclosure

ds999 does not sell your personal data. Data may be shared with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, SadaPay, HBL, UBL, Meezan Bank, USDT TRC20 processors, and Visa/Mastercard acquirers — to process your financial transactions.
• Identity Verification (KYC) Partners: Licensed third-party KYC service providers who assist ds999 in verifying player identity, age, and source of funds in accordance with AML obligations.
• Fraud Prevention Services: Specialist platforms used to detect and prevent fraudulent activity, multi-accounting, and payment fraud.
• Cloud Infrastructure Providers: Hosting and cloud services companies that store Platform data on behalf of ds999 under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Where ds999 is legally required to disclose data in response to a court order, regulatory investigation, or other lawful request, it will do so. ds999 will notify you of such disclosure where it is legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of the ds999 business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.

8 International Data Transfers

ds999 may transfer your personal data to servers or processors located outside Pakistan in connection with cloud hosting, KYC verification, or fraud prevention services. Where such transfers occur, ds999 takes appropriate steps to ensure that your data receives a level of protection consistent with the standards set out in this Policy.

Safeguards applied to international transfers may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those applied within ds999's own operations.
• Transfers to recipients in jurisdictions that maintain recognised data protection frameworks.
• Appropriate technical and organisational security measures applied by the recipient as contractually required.

You may request further information about the specific safeguards applied to any particular international transfer by contacting ds999 support.

9 Data Retention

ds999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for the duration required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC Documentation: Retained for the period specified by the applicable licensing authority's AML guidelines — typically five (5) years from the end of the business relationship.
• Support Communications: Live chat transcripts and email records are retained for up to three (3) years from the date of the interaction, unless a longer period is required for an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as you hold an account with ds999, or until you withdraw consent, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player.

10 Cookies & Tracking Technologies

ds999 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform effectively. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for Platform functionality — including maintaining your login session, remembering your game state, and enabling secure payment flows. These cookies cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — such as which pages are most visited and where errors occur. This data helps ds999 improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorised account access attempts.
• Preference Cookies: Used to remember your Platform settings and preferences, such as language preferences and display configurations, so that you do not have to re-enter them on each visit.

ds999 does not deploy third-party advertising cookies or cross-site tracking pixels. Where you access the Platform from a browser that supports cookie preference settings, you may manage non-essential cookies through your browser's built-in controls. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.

11 Your Data Rights

As a ds999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact ds999 support via live chat or at [email protected]. ds999 will respond to verified requests within 30 calendar days.

• Right of Access: You may request a copy of the personal data ds999 holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data ds999 holds about you is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ds999's legal retention obligations. Note that data subject to AML or regulatory retention requirements cannot be deleted until the applicable retention period has elapsed.
• Right to Restriction: You may request that ds999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request that ds999 provide your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring. ds999 will assess whether its legitimate interests override your rights on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on consent — such as marketing communications — you may withdraw consent at any time without affecting the lawfulness of prior processing.

12 Children & Minors

The ds999 Platform is strictly intended for users aged 21 and above. ds999 does not knowingly collect personal data from individuals under the age of 21. If ds999 discovers or is notified that personal data has been collected from an individual who is under 21, the following steps will be taken immediately:

• The account will be suspended pending investigation.
• All personal data associated with the account will be reviewed and, where the individual is confirmed to be under 21, permanently deleted in accordance with this Policy.
• Any deposits made to the account will be returned via the original payment method after identity confirmation.
• The incident will be reported to the relevant regulatory body where required.

If you believe that a minor has registered an account on ds999, please report it immediately to [email protected] so that appropriate action can be taken without delay.

13 Security Measures

ds999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security: All data transmitted between your device and ds999 servers is encrypted via TLS/SSL with a minimum 256-bit key length.
• Data-at-Rest Encryption: Sensitive stored data — including financial records and KYC documentation — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within ds999's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and periodic security training.
• Intrusion Detection: ds999 deploys automated intrusion detection and rate-limiting systems to identify and respond to unauthorised access attempts in real time.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, ds999 will notify affected players and relevant regulatory authorities within the timeframe required by applicable law.

While ds999 takes all reasonable steps to secure your data, no transmission over the internet or electronic storage system is 100% secure. You play a role in security too — use a strong, unique password for your ds999 account, enable any available two-factor authentication, and report any suspicious activity to support immediately.

14 Third-Party Links

The ds999 Platform may from time to time reference or link to third-party services — such as payment gateways, verification portals, or responsible gaming resources. These third-party services operate their own privacy policies, which are independent of this Policy.

ds999 is not responsible for the privacy practices or the content of any third-party service. We recommend that you read the privacy policy of any third-party service before submitting personal data to it. ds999's data protection obligations do not extend to data you independently submit to third-party platforms.

15 Updates to This Policy

ds999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. When material changes are made, ds999 will publish the revised Policy on this page with an updated effective date and, where practicable, notify registered players via email or an in-Platform notification.

Your continued use of the ds999 Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you disagree with any changes, please stop using the Platform and contact support to arrange account closure before the revised Policy takes effect.

We encourage you to review this page periodically to remain informed of how ds999 is protecting your data, particularly if you have been inactive on the Platform for an extended period.

16 Contact & Complaints

If you have questions, concerns, or complaints about the way ds999 processes your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 on the ds999 Platform — the fastest route for data queries and support requests.
• Email: [email protected] — for formal written data rights requests and privacy complaints.

ds999 aims to acknowledge all formal privacy complaints within 24 hours and to resolve them within 30 calendar days. For complex matters, the resolution period may be extended and you will be kept informed of progress throughout.

If you are not satisfied with ds999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction, or to the regulatory body under whose licence ds999 operates.

ds999 support is available to players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Rawalpindi, Multan, and all other cities and regions.