ur999 Privacy Policy

This Privacy Policy ("Policy") is published by ur999 ("ur999", "we", "us", "our") and applies to all personal data collected through the ur999 website at ur999.ws, the ur999 Login portal, all associated gaming products (including the cricket sportsbook, slot library, Fortune Tree, Kalaka Bingo, and live dealer tables), and any communications between ur999 and its members.

ur999 is Pakistan's premier online gaming destination, serving members across Karachi, Lahore, Islamabad, Faisalabad, and beyond. We understand that our members place significant trust in us when they share their personal information, and we take that responsibility seriously. This Policy sets out, in straightforward legal English, exactly what data we collect, why we need it, how it is processed, who it may be shared with, and how long we keep it.

By registering an account on ur999, accessing ur999 Login, or continuing to use any ur999 product or service, you confirm that you have read, understood, and accepted this Privacy Policy in its entirety. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and ur999.

For the purposes of applicable data protection law, ur999 acts as the data controller in respect of all personal data collected from members and visitors to the ur999 platform. As data controller, ur999 determines the purposes for which and the means by which personal data is processed.

ur999 operates under an internationally recognised gaming licence. Where ur999 engages third-party service providers to process personal data on its behalf (for example, KYC verification providers or payment processors), those third parties act as data processors and are contractually bound to process personal data only in accordance with ur999's documented instructions and in compliance with applicable data protection obligations.

For all data-related queries, requests, or complaints, you may contact ur999's data team via live chat inside your account dashboard or by emailing [email protected]. We aim to acknowledge all data-related correspondence within 48 hours and to provide a substantive response within 10 business days.

ur999 collects the following categories of personal data from members and, where applicable, from third-party sources as part of our KYC and fraud prevention processes:

ur999 does not collect sensitive personal data beyond what is required for CNIC-based age and identity verification. We do not collect biometric data, health data, religious affiliation, or political opinions.

ur999 collects personal data through the following channels:

• Directly from you: When you complete the ur999 registration form, access ur999 Login, submit KYC documents, make a deposit or withdrawal, use our responsible gaming tools, or contact our support team.
• Automatically during platform use: Technical data such as IP addresses, device identifiers, session logs, and cookie data is collected automatically each time you visit or interact with the ur999 platform. See Section 8 for our full Cookies & Tracking policy.
• From third-party KYC providers: ur999 uses certified third-party identity verification services to cross-reference the CNIC details you provide against official databases. These providers return a verification result and confidence score to ur999 and do not retain your data beyond the verification transaction.
• From payment processors: When you make a deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, Raast, 1LINK, SadaPay, USDT TRC20, or Cash OTC, the relevant payment processor may share transaction metadata with ur999 for reconciliation and fraud prevention purposes.
• From responsible gaming monitoring tools: Where ur999 operates automated responsible gaming monitoring, patterns in your gaming activity data may trigger alerts that are reviewed by our responsible gaming team.

ur999 processes your personal data for the following specific purposes. We do not process personal data for any purpose beyond those listed below without first obtaining your explicit consent or as otherwise required by law:

• Account creation and management: To register your ur999 account, maintain your member profile, and authenticate your ur999 Login sessions securely.
• Identity verification and KYC compliance: To verify your age (21+) and identity as required under our international gaming licence, and to ensure compliance with Anti-Money Laundering (AML) obligations.
• Transaction processing: To process deposits and withdrawals accurately and to maintain complete financial records of all transactions on your account.
• Gaming service delivery: To provide access to all ur999 products — including cricket betting, slots, Fortune Tree, Kalaka Bingo, and live casino — and to maintain your gaming session history and preferences.
• Responsible gaming: To monitor gaming activity patterns, enforce deposit and loss limits you have set, manage self-exclusion periods, and identify members who may be exhibiting signs of problem gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, unauthorised account access, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, and manage complaints through our live chat and email support channels.
• Legal and regulatory compliance: To fulfil our obligations under our international gaming licence, including regulatory reporting, audit requirements, and co-operation with law enforcement or regulatory authorities where legally required.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the ur999 platform, game offerings, and user experience. This analysis does not involve individually identifiable data.

ur999 relies on the following legal bases for processing your personal data:

• Contractual necessity: The majority of our data processing — account management, transaction processing, KYC, and gaming service delivery — is necessary for the performance of the contract between you and ur999 (i.e., our Terms & Conditions). Without this processing, ur999 could not provide you with a functional gaming account.
• Legal obligation: Certain processing activities — particularly KYC identity verification, AML reporting, and co-operation with regulatory authorities — are required by the conditions of ur999's international gaming licence and by applicable law. ur999 has no discretion to opt out of these processing activities.
• Legitimate interests: ur999 processes Technical Data and Communication Data on the basis of its legitimate interests in operating a secure, fraud-free platform and in improving the quality of its services. We have assessed that these interests are not overridden by your privacy rights in the context of a regulated gaming platform.
• Consent: Where ur999 sends you promotional communications about new games, bonuses, or PSL-related offers, we do so only on the basis of your explicit opt-in consent provided during registration or in your account communication preferences. You may withdraw this consent at any time via your account dashboard.

ur999 does not sell, rent, or commercially transfer your personal data to any third party. We may share your data with the following categories of third parties strictly as necessary for the purposes described in Section 5:

• KYC and identity verification providers: Certified third-party providers used to verify CNIC details and confirm age eligibility. These providers act as data processors under contract with ur999.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, 1LINK, and USDT TRC20 network providers as required to process your deposits and withdrawals.
• Gaming technology providers: Software providers who supply the games, live casino streams, sportsbook data feeds, and platform infrastructure that power ur999's products. These providers may access anonymised session data for technical support and game integrity purposes.
• Regulatory and law enforcement authorities: ur999 will disclose personal data to relevant authorities where required to do so by law, under the conditions of our gaming licence, or pursuant to a valid legal order.
• Fraud prevention networks: Where ur999 identifies suspected fraudulent activity, relevant account details may be shared with industry fraud prevention bodies to protect the integrity of the wider online gaming ecosystem.

ur999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and understand how members interact with our site. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for ur999 Login session management, security token validation, and fraud detection. The platform cannot function without them and they do not require your consent.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalised experience across visits.
• Analytics cookies: ur999 uses aggregated, anonymised analytics to understand which pages and games are most popular, how members navigate the platform, and where technical issues may be occurring. This data does not identify you personally.
• Session security cookies: Short-lived cookies that bind your authenticated session to your device and browser, preventing session hijacking and cross-site request forgery attacks.

You can control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent ur999 Login from functioning correctly and will restrict your access to all gaming products.

ur999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence and applicable law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, ur999 will securely delete or anonymise the relevant personal data in a manner that ensures it cannot be reconstructed or re-identified.

As a member of ur999, you have the following rights in relation to your personal data. To exercise any of these rights, please contact ur999 support via live chat or by emailing [email protected]. We will respond within 10 business days and will not charge a fee for exercising these rights in ordinary circumstances.

ur999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your browser and the ur999 platform is encrypted using TLS 1.2 or higher. ur999 does not accept unencrypted connections to any part of the platform that handles personal or financial data.
• Encryption at rest: Sensitive personal data — including CNIC details, payment method information, and account credentials — is encrypted at rest in ur999's database infrastructure.
• Access controls: Access to personal data within ur999 is restricted on a strict need-to-know basis. All staff with access to member data are subject to background verification, confidentiality agreements, and role-based access controls. Access is logged and periodically audited.
• Two-factor authentication: ur999 Login supports and encourages the use of two-factor authentication (2FA) to protect your account from unauthorised access.
• Penetration testing: ur999's platform infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities.
• Incident response: ur999 maintains a documented data breach response plan. In the event of a data breach that poses a material risk to your rights, ur999 will notify affected members promptly and report to relevant authorities as required under our licensing obligations.

ur999 operates a strict 21+ age policy across all products and services. The ur999 platform is not directed at, and must not be accessed by, any person under the age of 21. ur999 does not knowingly collect or process personal data from individuals under 21 years of age.

ur999 enforces CNIC-based age verification as part of the KYC process, which serves as our primary mechanism for confirming that members meet the minimum age requirement. Any account found to have been registered by a person under 21 will be immediately suspended, all winnings will be voided, and deposited funds will be returned net of any bonuses claimed, in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has accessed ur999 or provided personal data to the platform, please contact us immediately at [email protected]. ur999 will promptly investigate and delete any personal data found to have been collected from a minor.

ur999 strongly recommends the use of parental control software on any shared or family device that could be used to access the ur999 platform. Responsible gaming starts at home.

ur999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform functionality, legal obligations, or regulatory requirements. When material changes are made, ur999 will notify registered members via email or via an on-platform notification displayed upon ur999 Login.

The "Last updated" date at the top of this page reflects the date on which the most recent version of this Policy came into effect. We recommend that members review this page periodically — particularly ahead of major platform updates or changes to our product lineup — to remain informed of how ur999 handles their personal data.

Your continued use of the ur999 platform following notification of any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should cease using ur999 and contact support to discuss voluntary account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to ur999's handling of your personal data, please reach out to our team through any of the following channels:

• Live Chat: Available 24/7 inside your ur999 account dashboard. This is the fastest way to reach our support and data team.
• Email: [email protected] — for formal data subject requests including access, erasure, and portability requests. Please include your registered name and ur999 account reference in all correspondence.

ur999 aims to acknowledge all privacy-related correspondence within 48 hours and to provide a full substantive response within 10 business days. For complex data subject access requests, this period may be extended by an additional 10 business days, in which case ur999 will notify you of the extension and the reason for it.

If you are dissatisfied with ur999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to the dispute resolution body applicable under ur999's gaming licence framework.