Privacy Policy – How m9999 Protects Your Data in Pakistan

m9999 ("we," "us," "our") operates the online betting and gaming platform accessible at m9999.im. We are the data controller for all personal information collected through the m9999 platform. This means we determine the purposes for which your data is collected and the manner in which it is processed.

If you have any questions about how m9999 handles your personal information, you can reach our privacy team directly at privacy@m9999.im. We aim to respond to all data-related enquiries within 5 working days.

This Privacy Policy covers all services and features offered on the m9999 platform, including sports betting, cricket betting, live in-play wagering, casino games, slots, Aviator, crash games, promotional offers, and the m9999 website itself. It applies regardless of the device you use to access the platform.

m9999 collects personal data in two main categories: information you provide directly when using the platform, and information that is collected automatically as a result of your device and browser interacting with our systems.

m9999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information unless specifically required for responsible gaming purposes (for example, documenting a medical self-exclusion request). In such cases, the data is collected only with your explicit consent and stored with additional security controls.

Personal data reaches m9999 through three main channels:

Every piece of personal data m9999 holds serves a specific purpose. We do not collect data speculatively or "just in case." The primary purposes for which m9999 processes your personal information are:

• Account creation and management: To register your account, maintain it, and let you access m9999 services.
• Identity verification (KYC): To confirm you are who you say you are, that you are 18 or over, and that you are not on any self-exclusion register. This is a legal obligation for licensed betting platforms.
• Processing transactions: To handle deposits, bets, winnings, and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard.
• Anti-money laundering (AML): To monitor transactions and detect patterns that may indicate financial crime. This is a legal obligation and is not optional.
• Responsible gaming: To enforce deposit limits, self-exclusions, and other protections you have put in place, and to identify patterns that may indicate problem gambling.
• Customer support: To respond to your queries, complaints, and feedback.
• Platform security: To detect and prevent fraud, account takeovers, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Service improvement: To analyse how users interact with m9999 so we can fix problems and build better features.
• Direct marketing (opt-in only): To send you information about promotions and new features on m9999 where you have opted in to receive such communications. You can opt out at any time.
• Legal compliance: To meet our obligations under applicable laws, including responding to lawful requests from regulatory or law enforcement authorities.

m9999 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Processing necessary to provide you with the m9999 service you have agreed to when registering, including running your account, settling bets, and processing payments.
• Legal obligation: Processing required by law, including KYC identity verification, AML monitoring, responsible gaming obligations, and responding to lawful regulatory requests.
• Legitimate interests: Processing that serves m9999's legitimate business interests — such as fraud prevention, platform security, and service analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — primarily for direct marketing communications. You can withdraw this consent at any time.

m9999 does not sell, rent, or trade your personal information to third parties for commercial or marketing purposes. We share your data only in the following circumstances and only with the categories of recipient listed below:

• Identity verification providers: Third-party KYC services that help us confirm your identity and age using your CNIC or passport details. These providers are contractually bound to use your data only for the purpose of verifying your identity for m9999.
• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT networks, and card processors who facilitate your financial transactions. They receive only the transaction data necessary to process the payment.
• Game providers: Third-party studios whose games are hosted on m9999 (such as slots, live casino, and Aviator). These providers may receive a pseudonymised player identifier for the purpose of running the game and calculating results. They do not receive your name, CNIC, or payment details.
• Fraud prevention and AML services: Specialist providers that help m9999 detect unusual patterns and prevent financial crime. Data shared with these services is subject to strict confidentiality agreements.
• Regulatory and law enforcement authorities: Where m9999 is legally required to disclose information — for example, in response to a court order, regulatory investigation, or law enforcement request — we will comply with that requirement and, where permitted by law, notify you.
• Group companies: m9999 may share data within its corporate group for the purposes of platform operation, risk management, and compliance. All group companies are bound by the same data protection standards.

m9999 uses cookies and similar technologies to make the platform work properly, to understand how it is being used, and — with your consent — to personalise your experience. Here is a breakdown of what we use:

• Strictly necessary cookies: These are essential for the platform to function. They keep you logged in, maintain your session, remember your bet slip contents, and enable security features. You cannot opt out of these without losing access to the platform.
• Performance & analytics cookies: These help m9999 understand how users navigate the platform — which pages are visited most, where users drop off, and what features are used. This data is aggregated and anonymised. m9999 uses this to improve the platform experience.
• Functionality cookies: These remember your preferences — such as your preferred language or odds format — so you don't have to reset them every visit.
• Marketing cookies (consent only): These track whether you came to m9999 from a particular referral source. They are only placed with your consent and can be declined without affecting your ability to use the platform.

You can manage cookie preferences through the cookie settings available when you first visit m9999. You can also adjust settings in your browser to block or delete cookies, but doing so may affect how certain parts of the platform function.

m9999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, unless a longer retention period is required by law. The general retention periods applied by m9999 are:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, to satisfy legal and regulatory record-keeping obligations including AML requirements.
• KYC and identity documents: Retained for 5 years after the end of the business relationship, as required by applicable financial regulations.
• Transaction records: Retained for 5 years from the date of the transaction.
• Support communications: Retained for 2 years from the date of the conversation, unless they are relevant to an ongoing dispute or investigation.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent history.
• Technical and usage data (logs): Retained for 12 months and then automatically deleted unless required for an ongoing investigation.

When data is no longer needed and no legal obligation requires its retention, m9999 securely deletes or anonymises it so that it can no longer be associated with any individual.

You have specific rights over your personal data held by m9999. These rights are genuine and we take requests seriously. Here is what you can ask for and how to do it:

To exercise any of these rights, contact m9999 at privacy@m9999.im. You will need to provide enough information to verify your identity before we act on the request. We will respond within 30 days. There is no charge for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

Security is taken seriously at m9999. The platform uses a layered approach to protect the personal and financial data of all users. Key security measures include:

• TLS/SSL encryption: All data transmitted between your device and m9999 servers is encrypted using 256-bit TLS (transport layer security). Look for the padlock icon in your browser's address bar.
• Encrypted data at rest: Sensitive data stored on m9999 servers — including identity documents, payment details, and KYC records — is encrypted at the storage level.
• Access controls: Access to personal data within m9999 is restricted on a need-to-know basis. Employees who do not require access to specific data categories for their job function do not have it.
• Two-factor authentication: 2FA is available to all users on m9999 and is strongly recommended. Internal staff with access to sensitive systems are required to use it.
• Regular security testing: m9999 conducts periodic security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to affect your rights and freedoms, m9999 will notify you as quickly as possible and no later than required by applicable law.

While m9999 takes all reasonable precautions to protect your data, no online system can be guaranteed to be 100% secure. You also have a role to play in protecting your account — use a strong, unique password and enable 2FA.

m9999 is strictly an adult platform. You must be at least 18 years of age to register, deposit, or place any bet or wager on m9999. We do not knowingly collect personal information from anyone under the age of 18.

If m9999 discovers that personal data has been collected from a minor — through misrepresentation of age during registration or any other means — the account will be immediately suspended, any pending transactions reversed where possible, and all personal data associated with that account deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered on m9999 using your or their own details, please contact us immediately at privacy@m9999.im so we can investigate and take appropriate action without delay.

The m9999 platform may contain references to third-party game providers and payment services. While m9999 carefully selects its partners, we are not responsible for the privacy practices of third-party websites or services that operate independently from our platform.

When you interact with a third-party game provider's content on m9999, that provider's own privacy practices will apply to any data they collect independently. m9999 does not control how third-party providers handle data that is transmitted directly to them through their integrated services.

We encourage you to review the privacy policies of any third-party service you interact with. If you have concerns about a specific provider's data practices, please contact m9999 support and we will do our best to clarify what data is shared and under what conditions.

m9999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to our platform. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send a notification to your registered email address at least 7 days before the changes take effect (for significant changes affecting your rights).
• Display an in-platform notice prompting you to review the updated Policy.

Your continued use of m9999 after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a change, you may close your account and request deletion of your data (subject to the retention obligations described in Section 8).

If you have any questions, concerns, or requests relating to this Privacy Policy or the way m9999 handles your personal data, our dedicated privacy team is ready to help. There are several ways to get in touch:

• Email (privacy matters): privacy@m9999.im — preferred for all data rights requests, erasure requests, and detailed privacy enquiries.
• Email (general support): support@m9999.im — for general account and platform questions.
• In-platform live chat: Available 24/7 from your logged-in account dashboard.

We aim to acknowledge all privacy-related queries within 2 working days and resolve them fully within 30 days. For particularly complex requests, we may need additional time and will notify you if that is the case.

This Privacy Policy was last updated on 1 January 2025. Previous versions are available on request. Related documents: Terms and Conditions · Responsible Gaming Policy · FAQ.