Privacy Policy Last Updated: June 2026

1. Data Controller

For the purposes of this Privacy Policy, ns999 acts as the data controller in respect of all personal data collected from players and visitors to the ns999 Platform at ns999.app. The data controller is responsible for determining the purposes and means of processing personal data collected through the Platform. Enquiries regarding the processing of personal data may be directed to the ns999 support team via live chat or email at [email protected].

2. Personal Data We Collect

ns999 collects personal data from players and visitors in the categories set out below. Collection is limited to data that is necessary for the purposes described in this Privacy Policy.

• Registration Data: Full name, date of birth, email address, username, and password (stored in hashed, non-reversible form). This data is provided directly by the player at the time of account creation.
• KYC & Identity Verification Data: Copies of government-issued identity documents such as the CNIC (Computerised National Identity Card) or passport, proof of address documentation, and where required, source-of-funds documentation. This data is collected to fulfil AML and KYC regulatory obligations.
• Financial Data: Deposit and withdrawal records, payment method identifiers (such as JazzCash or Easypaisa account references, bank account numbers, or card BINs), and transaction history. Full payment card numbers are not stored by ns999; card processing is handled by licensed third-party payment processors.
• Gameplay & Betting Records: Records of all casino game sessions, sports bets, wager amounts, game outcomes, and bonus activity associated with your ns999 account. These records are maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring.
• Device & Technical Data: IP address, browser type, operating system, device type, session timestamps, and cookies. This data is collected automatically when you access the Platform.
• Communications Data: Records of support interactions via live chat or email, including the content of messages and the dates and times of communications.
• Responsible Gaming Data: Records of self-exclusion requests, deposit limit settings, cooling-off periods, and any concerns raised through responsible gaming channels. This data is maintained separately with enhanced access controls.

3. How We Collect Personal Data

ns999 collects personal data through the following channels:

• Directly from you when you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically through technical systems when you access or use the Platform, including cookies, server logs, and analytics tools.
• From third parties where permitted by law, including licensed KYC verification service providers, fraud prevention databases, and payment processing partners who may share data with ns999 for the purpose of verifying your identity or processing your transactions.

4. Purposes & Legal Basis for Processing

ns999 processes personal data for the following purposes, each of which has a corresponding legal basis:

• Account Management: Processing is necessary for the performance of the contract between you and ns999 (the Terms & Conditions). This covers registration, login, account maintenance, and account closure.
• KYC & AML Compliance: Processing is required by law. ns999 is subject to anti-money laundering and know-your-customer obligations that require identity verification before certain account actions are permitted.
• Payment Processing: Processing is necessary for the performance of the contract. ns999 must process financial data to facilitate deposits and withdrawals.
• Fraud Prevention & Security: Processing is in the legitimate interests of ns999 and its players. Monitoring for fraudulent activity, account abuse, and security incidents protects the integrity of the Platform and the funds of all players.
• Customer Support: Processing is necessary for the performance of the contract. Support interactions require access to account and communication data to resolve queries and complaints.
• Responsible Gaming: Processing is in the legitimate interests of ns999 and is required by applicable operating standards. Monitoring gameplay patterns and maintaining self-exclusion records protects vulnerable players.
• Platform Improvement & Analytics: Processing is in the legitimate interests of ns999. Aggregated and anonymised usage data is used to improve the Platform, fix technical issues, and optimise the user experience.
• Marketing Communications: Where you have given explicit consent, ns999 may send you promotional communications regarding new games, bonuses, and features. You may withdraw this consent at any time by contacting support.

5. Data Sharing & Disclosure

ns999 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances:

• Payment Service Providers: Financial data is shared with licensed payment processors including mobile wallet operators (JazzCash, Easypaisa), banks (HBL, UBL, Meezan Bank, Bank Alfalah), and international payment services (Visa/Mastercard, Skrill, Neteller, USDT TRC20 processors) solely for the purpose of processing your transactions.
• KYC Verification Partners: Identity document data is shared with licensed KYC and identity verification service providers for the purpose of completing regulatory identity checks.
• Fraud Prevention Services: Technical and financial data may be shared with fraud prevention databases and services to identify and prevent fraudulent activity, money laundering, and account abuse.
• Regulatory & Law Enforcement Authorities: ns999 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving ns999, personal data held on the Platform may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

6. International Data Transfers

ns999 operates internationally and may transfer personal data to third-party service providers located outside of Pakistan. Where personal data is transferred to countries that may not have equivalent data protection laws, ns999 implements appropriate safeguards — such as contractual data protection clauses — to ensure that your personal data is processed with an equivalent level of protection to that which applies within jurisdictions with established privacy frameworks. By using the ns999 Platform, you consent to the transfer of your personal data on this basis.

7. Data Retention

ns999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by applicable anti-money laundering regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Retained for a maximum of three (3) years from the date of the most recent communication, unless a longer period is required to resolve an open dispute.
• Marketing Consent Records: Retained for the duration of the consent and for a period of three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ns999's data destruction procedures.

8. Security Measures

ns999 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between players' browsers and ns999 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate operational need.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Mandatory two-factor authentication for internal system access by ns999 personnel.

While ns999 takes all reasonable steps to protect personal data, no method of electronic transmission or storage is completely secure. Players are responsible for maintaining the security of their own ns999 account credentials and for immediately reporting any suspected unauthorised access to support.

9. Cookies & Tracking Technologies

ns999 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform, which pages are visited most frequently, and where technical errors occur. This data is used to improve the Platform.
• Preference Cookies: Used to remember player preferences such as language settings and display configurations across sessions.

ns999 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements on other websites. You may configure your browser settings to refuse or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your ns999 account.

10. Your Data Rights

Subject to applicable law and regulatory retention obligations, you have the following rights in respect of your personal data held by ns999:

• Right of Access: You may request a copy of the personal data ns999 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ns999's legal retention obligations.
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on consent or contract, you may request that your personal data be provided to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact ns999 customer support via live chat on the Platform or by email. ns999 will respond to verified requests within 30 days. Identity verification will be required before personal data is disclosed or modified.

11. Children & Minors

The ns999 Platform is strictly prohibited for persons under the age of 18 years. ns999 does not knowingly collect personal data from individuals under 18. Age is verified as part of the mandatory KYC process. If ns999 becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted and the associated account will be permanently closed. If you believe a minor has accessed the Platform, please contact ns999 support immediately.

12. Responsible Gaming Data

Personal data collected in connection with responsible gaming activities — including self-exclusion requests, deposit limit settings, cooling-off records, and any communications relating to problem gambling — is treated with enhanced confidentiality. This data is accessible only to ns999 personnel with a specific operational responsibility for responsible gaming compliance. Responsible gaming data is retained in accordance with the retention periods set out in Section 7. If you are self-excluded from ns999, your exclusion record is retained for the duration of the exclusion and for a minimum of five years thereafter to prevent re-registration during the exclusion period.

13. Amendments to This Policy

ns999 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, ns999 will notify registered players via the email address on file or via a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the ns999 Platform following notification of an amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how ns999 has processed your personal data, please contact the ns999 Data Protection team via:

• Live Chat: Available 24/7 on the ns999 Platform.
• Email: [email protected]

ns999 will acknowledge all privacy-related complaints within 48 hours and will endeavour to resolve complaints within 30 days. If you are not satisfied with ns999's response to your complaint, you may have the right to escalate your complaint to a relevant supervisory authority.