Effective Date: 1 January 2025

d999 Privacy Policy – How We Handle Your Personal Data

Your privacy matters to d999. This Policy explains in plain language exactly what information we collect from Pakistani players, why we collect it, how we protect it and what rights you have over your own data. Please read it before creating your account.

Privacy at d999 – The Short Version

Before diving into the full policy below, here are the six things that matter most to players in Pakistan.

We Only Collect What We Need

d999 does not collect data for the sake of it. Every piece of information we hold on you has a specific, documented purpose — account verification, payment processing, fraud prevention or platform improvement. We do not collect anything beyond what is required for those functions.

We Do Not Sell Your Data

d999 does not sell, rent or trade your personal information to third-party marketers. Your data is shared only with partners who are directly involved in operating d999 — payment processors, identity verifiers, fraud detection systems — and only to the extent necessary to perform their function.

Industry-Standard Encryption

All data transmitted between your device and d999 is encrypted using SSL/TLS. Sensitive fields — passwords, payment credentials — are stored using appropriate cryptographic measures. d999 undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.

Your Rights Are Real

You have the right to access the data d999 holds about you, to correct inaccuracies, to request deletion in certain circumstances and to opt out of marketing communications at any time. These are not theoretical rights — you can exercise them by contacting d999 support and we will respond within 30 days.

KYC Is a Legal Requirement

d999 is legally required to verify the identity and age of all players and to comply with anti-money-laundering regulations. Collecting your CNIC or passport details is not optional — it is a regulatory obligation. We handle these documents with the highest level of security and retain them only for as long as legally required.

Marketing Opt-Out Is Simple

If d999 sends you promotional emails or SMS messages and you no longer want them, unsubscribing takes one click. Every marketing communication from d999 contains a clear unsubscribe link. You can also manage your communication preferences directly from within your d999 account settings at any time.

d999

This Privacy Policy applies to all users of d999. By registering an account or using the d999 platform in any way, you confirm that you have read and understood this Policy. It should be read alongside the Terms and Conditions.

1 Who We Are

d999 ("we", "us", "the Platform") operates the online gaming website accessible at d999.wine. d999 acts as the data controller in respect of the personal data of players registered on the platform. This means d999 determines the purposes and means of processing your personal information as described in this Policy.

When we refer to "personal data" in this document, we mean any information that relates to an identified or identifiable individual — that is, any information that could be used, alone or in combination with other data, to identify you as a specific person. This includes obvious things like your name and CNIC number, and also less obvious things like your IP address and device identifier when these can be linked to your account.

d999 is committed to handling personal data responsibly, transparently and securely. If you have questions about how your data is handled at d999, contact information is provided in Section 13 of this Policy.

2 What Data d999 Collects

d999 collects personal data through several channels — information you provide directly, information generated through your use of the platform, and in limited circumstances, information from third-party verification services. The table below summarises the main categories.

Category Examples How Collected
Identity Data Full name, date of birth, CNIC / passport number, photograph Registration form, KYC verification
Contact Data Email address, mobile number, postal address Registration form, account settings
Financial Data Mobile wallet number (Easypaisa / JazzCash), bank account details, transaction history Deposit / withdrawal forms, payment processor
Gaming Data Bet history, game sessions, win / loss records, bonus usage Automatically generated on platform
Technical Data IP address, device type, browser, operating system, session timestamps Automatically collected via cookies and server logs
Communications Data Support chat transcripts, emails, complaint records Customer support interactions
Verification Data Age verification results, identity check outcomes, AML screening results Third-party verification providers

d999 does not collect special category data (such as biometric data, health information or political opinions) except where legally required for responsible gaming interventions. We do not collect data about children — see Section 10 for our children's privacy policy.

3 How d999 Uses Your Data

d999 uses the personal data we hold for the following purposes:

Account Management & Service Delivery

To create and maintain your d999 account, process your deposits and withdrawals, credit winnings to your balance, and provide access to the game catalogue. Without this processing, d999 cannot provide you with a functional account.

Identity & Age Verification (KYC)

To confirm that you are who you say you are and that you meet the minimum age requirement of 18 years. d999 uses a combination of automated document verification and manual review. This is a legal obligation — d999 cannot permit gameplay without completing age and identity checks.

Anti-Money Laundering (AML) Compliance

d999 is required by applicable regulations to monitor transactions for signs of money laundering or other financial crime. This involves analysing deposit patterns, withdrawal requests and betting behaviour. Where suspicious activity is identified, d999 is legally obligated to file reports with relevant authorities — we cannot notify you when such a report has been filed.

Fraud Prevention & Platform Security

To detect and prevent fraudulent activity including account takeover, payment fraud, bonus abuse and bot usage. Technical data — particularly IP addresses and device fingerprints — plays a central role in this function at d999.

Responsible Gaming

To monitor gaming behaviour for indicators of problem gambling and to apply responsible gaming tools as described in the Responsible Gaming section. This may include applying deposit limits, triggering cooling-off periods or reaching out to players whose behaviour patterns suggest potential harm.

Customer Support

To respond to your enquiries, resolve disputes, process complaints and verify your identity when you contact d999 support. Support interaction records are retained as described in Section 7.

Platform Improvement

To analyse aggregated, anonymised usage data to understand how players interact with d999, identify technical issues and improve the platform experience. Individual-level behavioural data used for this purpose is anonymised before analysis wherever possible.

Marketing Communications

To send promotional emails, SMS notifications and in-platform messages about bonuses, new games and special offers at d999 — but only where you have given consent or where a legitimate interest applies. You can opt out at any time. See Section 11 for details.

d999

4 Legal Basis for Processing

d999 processes personal data only where a valid legal basis exists. The main bases we rely on are:

  • Contract Performance: Processing necessary to deliver the services you have signed up for — account management, payment processing, game access.
  • Legal Obligation: Processing required to comply with applicable law — KYC verification, AML monitoring, responsible gaming obligations, tax reporting.
  • Legitimate Interests: Processing necessary for d999's legitimate business interests where those interests are not overridden by your rights — fraud prevention, platform security, product analytics, dispute resolution.
  • Consent: Processing based on your freely given, specific, informed consent — primarily marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where d999 relies on legitimate interests as the legal basis, we have conducted a balancing test to confirm that our interests are not outweighed by your fundamental rights and freedoms. Documentation of these assessments is maintained internally.

5 Who d999 Shares Your Data With

d999 does not sell your personal data. We share data with third parties only in the following limited circumstances:

  • Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer partners and card payment gateways receive the financial data necessary to process your transactions. These processors are bound by strict data processing agreements.
  • Identity Verification Providers: Third-party KYC services receive identity documents you submit for verification. These providers are accredited and operate under contractual obligations with d999.
  • Fraud Detection & AML Services: Specialised platforms analyse transactional and behavioural data on d999's behalf to identify suspicious patterns. No unnecessary personal data is transmitted to these services.
  • Game Content Providers: Game developers whose titles are hosted on d999 receive anonymised or pseudonymised session data for technical operation purposes. They do not receive your identity or financial data.
  • Regulatory & Legal Authorities: d999 will disclose personal data to law enforcement, regulators or courts where required by law or valid legal process. d999 will only provide the specific data requested and will not proactively share data beyond legal requirements.
  • Professional Advisers: Lawyers, auditors and consultants engaged by d999 may access relevant data under strict confidentiality obligations in the course of providing professional services.

All third parties with whom d999 shares personal data are required to maintain appropriate security standards and to process the data only for the specified purpose. d999 does not permit third-party marketing use of your data without your explicit consent.

6 Cookies & Tracking Technologies

d999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. d999 uses the following categories of cookies:

  • Essential Cookies: Required for core platform functionality — keeping you logged in, maintaining your session, preventing cross-site request forgery. These cannot be disabled without breaking basic platform features.
  • Performance Cookies: Collect anonymised data about how players use d999 — which pages are visited most, where errors occur, how long sessions last. This data is used to improve the platform experience. No personally identifiable information is captured.
  • Functional Cookies: Remember your preferences — language settings, game display options, notification preferences — to personalise your d999 experience across sessions.
  • Security Cookies: Support fraud detection and account security functions, including device fingerprinting used to identify suspicious login attempts.

d999 does not use third-party advertising cookies. You may manage cookie preferences through your browser settings. Blocking essential cookies will affect platform functionality. A more detailed cookie notice is displayed when you first visit d999.

7 How Long d999 Keeps Your Data

d999 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to legal minimum retention requirements. The key retention periods are:

  • Account Data & Transaction Records: Retained for a minimum of 5 years following account closure to comply with AML and financial record-keeping obligations.
  • KYC / Identity Documents: Retained for a minimum of 5 years from the date of submission, or longer if required by applicable regulation.
  • Gaming History: Retained for a minimum of 3 years for dispute resolution and responsible gaming monitoring purposes.
  • Support Communications: Retained for 3 years from the date of the last interaction for dispute and complaint resolution purposes.
  • Marketing Data: Retained until you withdraw consent or opt out, after which it is deleted within 30 days.
  • Technical / Log Data: Retained for up to 12 months for security and fraud detection purposes, then deleted or anonymised.

When data is no longer required and retention obligations have been met, d999 deletes or anonymises it securely. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained for analytical purposes indefinitely.

d999

8 How d999 Protects Your Data

d999 implements a layered approach to data security combining technical, organisational and procedural controls:

  • SSL/TLS Encryption: All data in transit between your device and d999 servers is encrypted. The padlock icon in your browser confirms this connection is secure.
  • Password Security: Passwords are never stored in plain text. d999 uses industry-standard cryptographic hashing. Staff cannot read your password — only you know it.
  • Access Controls: Access to personal data within d999 is restricted to staff members who require it to perform their specific job functions. Access is logged and reviewed regularly.
  • Two-Factor Authentication: d999 supports 2FA for player accounts and requires it for all administrative access to backend systems.
  • Regular Security Testing: d999 conducts periodic penetration tests and vulnerability assessments on its infrastructure. Identified issues are remediated according to a risk-based prioritisation process.
  • Data Breach Response: d999 maintains a data breach response plan. In the event of a breach affecting your personal data, d999 will notify affected players and relevant authorities within the timeframes required by applicable law.

While d999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also play a role — keep your d999 password confidential, do not reuse it across other services, and enable two-factor authentication on your account.

9 Your Data Rights

As a d999 player, you have the following rights in relation to your personal data. These rights can be exercised by contacting d999 support as described in Section 13. d999 will respond to all data rights requests within 30 days of receipt.

Right of Access

Request a copy of all personal data d999 holds about you (a "Subject Access Request").

Right to Rectification

Request correction of inaccurate or incomplete personal data held by d999.

Right to Erasure

Request deletion of your data where it is no longer necessary for the purpose it was collected — subject to legal retention obligations.

Right to Restriction

Request that d999 temporarily stops processing your data while a dispute is being resolved.

Right to Portability

Receive your data in a structured, machine-readable format and transmit it to another controller where technically feasible.

Right to Object

Object to processing based on legitimate interests, including profiling for direct marketing purposes.

10 Children's Privacy

d999 is strictly an 18+ platform. d999 does not knowingly collect personal data from anyone under the age of 18. Age verification is required during the registration process and is enforced at the point of first withdrawal.

If d999 discovers that personal data has been collected from a person under 18 — whether through a false date of birth at registration or any other means — the following steps will be taken immediately: the account will be permanently closed, any balance will be forfeited, all data associated with the account will be deleted (subject to legal retention requirements for fraud records), and the matter may be reported to relevant authorities.

If you believe a minor may have registered on d999, please contact us immediately at support@d999.wine so we can investigate and take appropriate action.

11 Marketing Communications

d999 may send you marketing communications about bonuses, promotions, new game releases and platform updates. We will only send marketing messages where:

  • You have explicitly opted in to receive them during registration or in your account settings; or
  • You are an existing player and the communication relates to similar services to those you have already used, and you have not opted out of such communications.

Every marketing email or SMS from d999 contains a clear and functional unsubscribe mechanism. Clicking unsubscribe will remove you from all marketing lists within 5 business days. You will continue to receive essential transactional communications (deposit confirmations, withdrawal notifications, security alerts) regardless of marketing preferences — these are not marketing and cannot be disabled while your account is active.

d999 does not share your contact details with third-party marketers. If you receive unsolicited marketing claiming to be from d999 that you did not sign up for, please report it to support@d999.wine immediately — it may be a phishing attempt.

12 Changes to This Privacy Policy

d999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or the services we offer. When material changes are made:

  • The "Effective Date" at the top of this page will be updated.
  • Registered players will be notified by email where the changes are significant.
  • A notice will be displayed on the d999 platform for a period following publication of the updated Policy.

Your continued use of d999 following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any update to this Policy, you should cease using d999 and contact support to close your account and arrange withdrawal of any remaining balance.

Previous versions of this Privacy Policy are available on request from d999 support.

13 Contact d999 & How to Complain

For any questions about this Privacy Policy, to exercise your data rights or to raise a data protection complaint, contact d999 through the following channels:

Privacy & Data Requests
support@d999.wine

Please use the subject line "Privacy Request" for data rights enquiries.

Live Chat Support
Available 24/7 from within your d999 account after login
Response Commitment
Data rights requests acknowledged within 5 business days · Fully resolved within 30 days

If you are not satisfied with d999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. d999 will cooperate fully with any regulatory investigation.

This Privacy Policy was last updated on 1 January 2025. For related documents, see Terms and Conditions and Responsible Gaming.

Your Data Is Safe at d999 — Ready to Play?

Now you know exactly how d999 handles your information. Create your PKR account in under 60 seconds and enjoy 500+ certified games with instant Easypaisa and JazzCash payouts.

18+ only  ·  PKR accounts  ·  Your data, protected  ·  Play Responsibly