u9999 Privacy Policy
Your Data. Your Rights.

This Privacy Policy ("Policy") sets out the basis on which u9999 ("u9999", "we", "us", "our") collects, processes, stores, and discloses personal data obtained from users ("you", "your") of the u9999 online gaming platform, accessible at u9999.biz (the "Platform"). This Policy applies to all visitors, registered users, and former users of the Platform, regardless of the device or method used to access it.

At u9999, we recognise that players — particularly those in Pakistan who trust us with their financial and identity information — deserve a clear, honest account of how their data is handled. This Policy is written to give you exactly that. It describes every category of personal data we process, the purpose and legal basis for each processing activity, who we share it with, how long we keep it, and the rights you can exercise at any time.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy. Where any term used in this Policy is defined in the Terms & Conditions, the same definition applies here unless the context requires otherwise.

u9999 is the operator of the Platform and acts as the data controller in respect of all personal data collected through the Platform. As data controller, u9999 determines the purposes for which, and the means by which, your personal data is processed.

The Platform is designed and operated specifically to serve players in Pakistan and other eligible international markets. All player communications, account interfaces, and support services are provided in English. PKR (Pakistani Rupees) is the primary transactional currency, and the Platform integrates directly with Pakistani payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

u9999 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the categories of data we collect and their purpose:

u9999 does not knowingly collect any special category data (such as health data, racial or ethnic origin, or political opinions) unless this is provided voluntarily by you in the context of a responsible gaming self-exclusion request or similar welfare-related communication.

u9999 collects personal data through a number of channels. Understanding these channels helps you make informed decisions about the information you provide to us.

• Direct Submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, submit a support ticket, or respond to a survey, you provide us with data directly.
• Automated Platform Data: When you browse or use the Platform, our servers automatically record technical and usage data including your IP address, session duration, pages visited, games played, and bet amounts.
• Cookies and Similar Technologies: u9999 uses first-party cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse Platform performance. Full details are provided in Section 10.
• Payment Providers: When you transact via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other payment methods, our payment processing partners share transaction confirmation data with us to reconcile your account balance.
• Identity Verification Partners: For KYC and age verification, u9999 may use third-party identity verification services that cross-reference the documents you submit against authoritative databases. These partners act as data processors under our instruction.
• Fraud Detection Services: u9999 uses automated risk-scoring tools that process certain Technical Data and Usage Data to identify potentially fraudulent or suspicious activity patterns in real time.

u9999 processes your personal data for the following purposes. Each purpose is matched to a legal basis in Section 6:

• Creating, managing, and maintaining your u9999 player account.
• Verifying your identity and age (21+) in compliance with applicable gaming licence conditions.
• Processing deposits and withdrawals in PKR via your chosen payment method.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct in accordance with our Terms & Conditions.
• Providing customer support and resolving account disputes or complaints.
• Administering bonuses, promotions, and loyalty rewards, and enforcing their associated terms.
• Sending you account-related notifications, security alerts, and transactional communications (these are not optional as they are necessary for account operation).
• Sending you promotional communications about u9999 offers and new features — only where you have given us explicit consent to do so, and always with an easy opt-out mechanism.
• Enforcing responsible gaming tools, including deposit limits, session timers, and self-exclusion orders you have set on your account.
• Analysing Platform usage patterns to improve game offerings, site performance, and the overall player experience.
• Meeting our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements.

u9999 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing that is necessary to provide you with the services described in our Terms & Conditions — including account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with our obligations under gaming regulations, AML/CTF legislation, tax reporting requirements, and other applicable laws.
• Legitimate Interests: Processing that serves u9999's legitimate business interests — such as fraud detection, platform security, and usage analytics — provided that these interests are not overridden by your own data protection rights.
• Consent: Processing based on a freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without detriment to your account.

u9999 does not sell, rent, or exchange your personal data with third-party marketing organisations. We share your data only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers require transaction data to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC / Identity Verification Providers: Third-party verification services receive the identity documents you submit during the KYC process. They act solely as data processors under contractual data processing agreements with u9999.
• Game Content Providers: Casino game studios and software providers integrated into the Platform may receive anonymised session and wagering data for the purposes of game performance monitoring and RNG certification. No directly identifying data is shared unless required by regulatory audit.
• Fraud and Risk Management Partners: Automated fraud detection services may receive Technical Data and Usage Data to generate risk scores. These services do not retain identifiable data beyond the period required for scoring.
• Regulatory and Law Enforcement Authorities: u9999 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by law, court order, or regulatory directive. We will notify you of any such disclosure unless prohibited from doing so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of u9999's business assets, personal data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

All third-party data processors engaged by u9999 are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared, and that require them to implement security standards commensurate with those maintained by u9999.

u9999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any identifiable individual. Anonymised and aggregated data — which cannot identify you — may be retained indefinitely for statistical and platform improvement purposes.

u9999 implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include but are not limited to:

• Transit Encryption: All data transmitted between your device and the u9999 Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. The padlock icon in your browser confirms an active encrypted connection.
• At-Rest Encryption: Sensitive data fields — including identity documents, financial data, and password hashes — are encrypted within our database systems using AES-256 encryption.
• Access Controls: Internal access to personal data is governed by the principle of least privilege. Staff members can only access data for which they have a documented operational requirement, and all access events are logged.
• Two-Factor Authentication (2FA): u9999 offers 2FA for all registered user accounts. We strongly recommend enabling this feature from within your account security settings. All internal administrative accounts are required to use 2FA.
• Regular Security Audits: Our infrastructure undergoes periodic independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: u9999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected users without undue delay as required by applicable standards.

u9999 uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how users interact with our site so we can continue improving it.

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core functionality.
• Preference Cookies: Store your Platform preferences — such as language settings and responsible gaming dashboard configurations — so you do not need to re-enter them on each visit.
• Analytics Cookies: First-party analytics tools collect aggregated, anonymised data on how users navigate the Platform, which pages are most visited, and where users encounter errors. This data guides Platform improvements.
• Security Cookies: Short-lived cookies used by our fraud detection systems to differentiate legitimate user sessions from automated bot traffic.

u9999 does not use third-party advertising cookies or allow external ad networks to track your behaviour across other websites via the u9999 Platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair your ability to use the Platform.

As a u9999 user, you hold the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team at support@u9 999.biz with the subject line "Data Rights Request":

• Access: You may request a copy of all personal data u9999 holds about you. We will provide this in a structured, commonly used format within 30 days of a verified request.
• Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number) can be made directly from within your account settings.
• Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that we may be required to retain certain data beyond your request to fulfil legal and regulatory obligations — in such cases, we will explain precisely what data must be retained and why.
• Restriction: You may request that we temporarily restrict processing of your data — for example, while you contest the accuracy of data we hold, or while a complaint is under review.
• Portability: You may request that we provide your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Object: You may object to processing carried out on the basis of our legitimate interests. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Automated Decisions: If u9999 makes any decision about you based solely on automated processing (such as an automated account suspension for suspicious activity), you have the right to request human review of that decision.
• Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

The u9999 Platform is strictly intended for adults aged 21 years and above. u9999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step of the registration and KYC process — every new account must pass identity and age checks before full Platform access is granted.

If u9999 discovers or is credibly informed that personal data belonging to a person under 21 has been collected, we will immediately suspend the relevant account, delete all associated personal data, and — where required by applicable law — notify the appropriate regulatory authority.

u9999 operates globally and, as a result, your personal data may be processed in countries outside Pakistan. This may occur when we use third-party service providers — such as KYC verification platforms or fraud detection tools — that are hosted in other jurisdictions.

Where personal data is transferred internationally, u9999 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. These safeguards may include:

• Standard contractual clauses approved by recognised data protection authorities that bind the recipient to equivalent data protection obligations.
• Transfers to countries that have been formally recognised as providing an adequate level of data protection comparable to international standards.
• Binding corporate rules where data is transferred within a corporate group that has adopted group-wide data protection standards.

You may request details of the specific safeguards in place for any international transfer of your personal data by contacting us at [email protected].

u9999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, updates to the Platform, new regulatory requirements, or evolving best practices in data protection. The current version of this Policy will always be accessible on this page, clearly dated with the effective date of the most recent revision.

Where a change to this Policy is material — meaning it significantly affects how we process your personal data or the rights available to you — u9999 will notify you by email to the address registered on your account, and/or via a prominent notice on the Platform login page, at least 14 days before the change takes effect. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically. The version history below tracks significant revisions:

• v2.4 — 1 January 2026: Updated data retention table; added Section 13 on international transfers; expanded cookie policy to reflect removal of third-party ad cookies.
• v2.3 — 1 July 2025: Added Pakistani payment provider details; clarified KYC data retention obligations; updated 2FA security guidance.
• v2.2 — 1 January 2025: Expanded data subject rights section; added automated decision-making rights; updated breach notification procedures.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way u9999 handles your personal data, please reach out to our dedicated data privacy team. We are committed to resolving all queries fairly and promptly.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or gaming regulatory body in the jurisdiction applicable to your account. u9999 will cooperate fully with any such regulatory investigation.