Privacy Policy — How e999 Protects Your Personal Data

e999 ("e999", "we", "us", "our") operates the online casino platform available at e999.world. For the purposes of this Privacy Policy, e999 is the data controller — meaning we are the organisation responsible for deciding how and why your personal data is collected and processed.

This Privacy Policy applies to all personal data collected through the e999 website, mobile platform, customer support channels and any other interaction you have with e999. It applies to all registered players and to visitors who browse e999.world without registering.

If you have any question about this Privacy Policy or how e999 handles your personal data, you can contact our dedicated privacy team at any time at support@e999.world. We aim to respond to all privacy-related enquiries within 48 hours.

e999 collects personal data in the following categories. We only collect data that is necessary for the purposes described in this Privacy Policy — we do not collect data speculatively or without a clear need.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data for identification purposes (beyond what is required for identity verification), or health data — except where relevant to a responsible gaming assessment that you have voluntarily initiated.

e999 uses the personal data we collect for specific, legitimate purposes directly related to operating the platform and maintaining our obligations to you as a player. We do not use your data for purposes beyond what is described below.

• Account Operation: To create, manage and maintain your e999 account, process logins, record your preferences and provide access to all platform features.
• Payment Processing: To process deposits, withdrawals and bonus payments accurately and securely in Pakistani Rupees via your chosen payment method.
• Identity Verification (KYC): To verify your identity as part of our Know Your Customer obligations, confirm your age is 18 or above, and prevent fraud and money laundering.
• Gameplay & Platform Delivery: To deliver games, record wager results, calculate winnings, apply bonus credits and maintain accurate account balances.
• Customer Support: To respond to your queries, complaints and requests, and to maintain records of support interactions for quality assurance purposes.
• Fraud Prevention & Security: To detect, investigate and prevent fraudulent activity, money laundering, unauthorised account access and other security threats.
• Responsible Gaming: To monitor account activity for patterns that may indicate problem gambling, to apply responsible gaming limits you have set, and to action self-exclusion requests.
• Legal Compliance: To fulfil our obligations under applicable laws and regulatory requirements, including responding to lawful requests from authorities.
• Platform Improvement: To analyse aggregated usage data (with personal identifiers removed) to identify how the platform can be improved for all players.
• Marketing Communications: To send you promotional offers, bonus notifications and platform updates — only if you have provided consent, and always with the ability to opt out.

Every time e999 processes your personal data, we do so on one of the following legal grounds:

• Contractual Necessity: Processing that is necessary to deliver the services you have contracted with e999 to receive — including account management, payment processing and game delivery. Without this processing, we cannot provide the platform to you.
• Legal Obligation: Processing required to comply with applicable law — including identity verification (KYC/AML requirements), transaction record retention, and responding to lawful authority requests.
• Legitimate Interests: Processing that serves e999's legitimate business interests, provided those interests are not outweighed by your rights — including fraud detection, platform security monitoring and anonymised analytics.
• Consent: Processing based on your explicit, freely given consent — which applies primarily to marketing communications. You may withdraw consent for consent-based processing at any time without affecting any other aspect of your account.

Where we rely on legitimate interests, we have conducted an assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request details of any such assessment by contacting support@e999.world.

e999 does not sell your personal data to any third party. We share personal data only in the following specific, controlled circumstances:

• Payment Processors: We share necessary financial and identity data with our payment partners — Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners and card processors — solely to process your deposits and withdrawals. These providers are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
• Identity Verification Providers: We use third-party KYC verification services to validate identity documents, perform liveness checks and confirm age. These providers process your verification data only for that specific purpose and are contractually prohibited from any secondary use.
• Fraud Prevention & Security Services: Aggregated or pseudonymised transaction data may be shared with fraud detection tools to identify suspicious patterns. No identifiable data is exposed to these tools beyond what is strictly necessary.
• Game Providers: When you play a game on e999, your player identifier (not your full personal details) is shared with the relevant game provider for the purposes of delivering the game, recording results and calculating payouts.
• Legal Authorities: We will disclose personal data to law enforcement, regulatory authorities or courts where we are legally required to do so. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of e999's business assets, your personal data may form part of the transferred assets. You will be notified of any such transfer and the privacy commitments in this policy will continue to apply.

e999 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our retention periods are as follows:

When retention periods expire, e999 securely deletes or anonymises personal data so that it can no longer be associated with any individual. Data that has been anonymised may be retained indefinitely for aggregate statistical purposes.

If you request account closure, we will process your request promptly and cease all active processing. However, data subject to legal retention obligations will be kept for the periods described above, after which it will be deleted.

e999 uses cookies and similar tracking technologies on our platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies help us keep you logged in, remember your preferences and understand how players use the platform.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to see which cookies are stored and delete or block them selectively. Note that blocking essential and security cookies will impair your ability to use the e999 platform.

As an e999 player, you have the following rights over the personal data we hold about you. To exercise any of these rights, please contact us at support@e999.world with the subject line "Data Rights Request". We will respond within 30 days.

Protecting your personal data is a technical and organisational priority at e999. We maintain the following security measures at all times:

• SSL/TLS Encryption: All communications between your browser or app and the e999 servers are encrypted using TLS 1.2 or higher. This prevents interception of your data in transit.
• Data Encryption at Rest: Sensitive personal data and financial records stored on our servers are encrypted using industry-standard encryption algorithms. The encryption keys are stored separately from the data.
• Access Controls: Access to personal data within e999's internal systems is strictly limited to staff who require it to perform their job functions. All internal access is logged, monitored and subject to regular audit.
• Payment Data Tokenisation: e999 does not store raw payment card numbers. Card data is immediately tokenised by our payment processor, meaning we hold only a secure reference token that cannot be used to reconstruct your card details.
• Two-Factor Authentication: e999 offers two-factor authentication to all players and strongly encourages its use. Internal systems also require multi-factor authentication for all staff access.
• Penetration Testing: e999 engages independent security experts to conduct regular penetration testing of our platform and infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: e999 maintains a documented data breach response plan. In the event of a breach affecting player data, we will notify affected players and relevant authorities as required by law without undue delay.

e999 is strictly an adult platform. We do not knowingly collect, use or retain personal data from anyone under the age of 18 years. The collection of data from minors is not part of our business model and we take active steps to prevent it.

During registration, all players are required to confirm they are 18 or older and to provide a date of birth. Identity verification checks are performed and may include document verification that confirms age. Where we discover or have reason to believe that an account holder is under 18, the account will be immediately suspended and investigated, and any data relating to a confirmed minor will be deleted as quickly as our legal obligations permit.

e999 may send you promotional communications — including bonus offers, new game announcements, VIP Club updates and special promotions — via email and SMS. We will only send marketing communications to you if you have explicitly consented to receive them during registration or at a later point through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in every promotional email.
• Replying STOP to any promotional SMS.
• Updating your communication preferences in your e999 account settings.
• Contacting our support team at support@e999.world with a request to be removed from marketing lists.

Opting out of marketing communications does not affect transactional communications — we will continue to send you account-related messages such as deposit confirmations, withdrawal notifications, verification requests and security alerts, as these are necessary for the operation of your account.

e999 does not share your contact details with third-party marketing agencies or partners for the purpose of third-party marketing to you. All marketing you receive from e999 is sent directly by e999 on our own behalf.

e999 may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable law or regulatory guidance, or changes in our platform operations. The effective date of the current version is displayed at the top of this page.

Where we make material changes to this Privacy Policy — meaning changes that significantly affect how we use your data or the rights available to you — we will notify you via email to your registered address and/or via a prominent notification on the e999 platform, no less than 14 days before the change takes effect. This gives you the opportunity to review the changes and, if you do not agree, to close your account before the new policy applies to you.

Minor changes — such as clarifications to existing provisions, corrections of typographical errors or updates to contact details — may be made without advance notice. We recommend bookmarking this page and checking the "Last Updated" date periodically.

If you have any question, concern or request relating to this Privacy Policy or how e999 handles your personal data, we want to hear from you. Our team takes privacy seriously and every enquiry is treated with care and responded to promptly.

You can reach our privacy team through the following channels:

• Email: support@e999.world — please use the subject line "Privacy Enquiry" or "Data Rights Request" so we can route your message to the right team member.
• Live Chat: Available 24/7 through the e999 platform. For complex data rights requests, we recommend email to ensure a full written response.

We aim to respond to all privacy-related enquiries within 48 hours and to fully resolve data rights requests within 30 days. Where a request is particularly complex or where we receive a high volume of requests simultaneously, we may extend the response window by a further 30 days — we will always notify you if this applies to your request.

If you are not satisfied with our response to any privacy concern, you have the right to escalate the matter through the dispute resolution process described in our FAQ.