pi999 Privacy Policy

pi999 (referred to in this Policy as "pi999," "we," "us," or "our") operates the online sportsbook and casino platform accessible at pi999.org. We provide Pakistani players with access to sports betting markets — including cricket, PSL, UFC, football, and e-sports — alongside a full suite of live casino and slot games.

pi999 acts as the data controller in respect of the personal data of all registered Users and visitors to the pi999.org platform. As data controller, pi999 determines the purposes for which, and the manner in which, your personal data is collected and processed.

This Privacy Policy applies to all personal data collected through the pi999 website, mobile browser experience, and any associated services, including customer support interactions, KYC verification processes, and promotional communications. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

pi999 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the categories of personal data we may collect:

pi999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what is strictly necessary for responsible gaming assessments. Where any such data is voluntarily provided by a User during a responsible gaming interaction, it will be handled with heightened care and used only for the stated purpose.

pi999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting Support, participating in promotions, or responding to surveys.
• Automated technologies: Technical and usage data collected automatically when you visit pi999.org, including through cookies, server logs, and pixel tags. See Section 7 for full details on our cookies practice.
• Third-party sources: Data received from our KYC verification partners (identity and address verification), payment processors (transaction confirmation data), fraud prevention services, and, where applicable, publicly available sources for anti-money laundering screening.
• Device and network data: Information collected from the device and network you use to access pi999, including mobile networks operated by Jazz, Zong, Telenor, and Ufone across Pakistan, as well as broadband and fibre connections.

pi999 uses personal data for a defined set of purposes. We do not use your data beyond these stated purposes without obtaining fresh consent or establishing a new lawful basis:

• Account registration and management: Creating and maintaining your pi999 account, verifying your identity, managing your account settings and preferences.
• Processing transactions: Handling deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, USDT TRC20, Raast, and retail cash deposit channels.
• KYC and regulatory compliance: Verifying your age (21+ requirement), identity, and source of funds in accordance with our gaming licence obligations and applicable anti-money laundering regulations.
• Providing betting and gaming services: Delivering sportsbook, live casino, and slot services; settling bets; computing and displaying odds; managing your bonus and promotional eligibility.
• Responsible gaming enforcement: Monitoring for signs of problem gambling, enforcing deposit limits and self-exclusion periods, and conducting proactive outreach where at-risk behaviour is detected.
• Fraud prevention and security: Detecting and preventing cheating, account takeover, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: Responding to enquiries, resolving disputes, and managing complaint escalations via live chat and email.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Users who have opted in. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated usage data to improve the pi999 platform, identify technical issues, and develop new features and markets relevant to Pakistani players.

pi999 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to open and operate your pi999 account, process your bets and transactions, and deliver the services you have contracted for.
• Legal obligation: Processing required to comply with our gaming licence conditions, KYC and anti-money laundering obligations, and any orders or requests from competent regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for pi999's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your own data protection rights.
• Consent: Processing based on your explicit consent, including for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pi999 does not sell, rent, or trade personal data. We share data with third parties only where strictly necessary for the following purposes:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, and other financial institutions require transaction data to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification partners receive your identity documents and personal details to conduct age and identity checks required by our licensing obligations.
• Fraud prevention and AML screening services: Aggregated and individual data may be shared with specialist fraud detection and anti-money laundering screening providers to protect the integrity of the platform.
• Technology and hosting partners: Cloud infrastructure, database, and security service providers process data on pi999's behalf under binding data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities: pi999 will disclose personal data to competent authorities where required or permitted to do so by applicable law, a court order, or our gaming licence conditions.
• Professional advisors: Lawyers, auditors, and accountants may access limited personal data under strict confidentiality obligations in connection with legal, compliance, or financial matters.

All third parties with whom pi999 shares data are required to implement appropriate technical and organisational security measures and to process data only for the specific purposes outlined above. pi999 does not permit third-party partners to use your data for their own independent marketing or commercial purposes.

pi999 uses cookies and similar tracking technologies on pi999.org to provide core platform functionality, remember your preferences, analyse site usage, and (where you have consented) deliver relevant promotional content.

The categories of cookies used by pi999 are as follows:

• Strictly necessary cookies: Essential for the operation of pi999.org. These include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as preferred language, currency display, and odds format. Disabling these cookies may affect your personalised experience but will not prevent access to the platform.
• Analytics cookies: Collect anonymised and aggregated data about how visitors interact with pi999.org, including pages visited, session duration, and device type. This data helps pi999 identify and fix issues and improve the platform experience.
• Marketing and targeting cookies: Used only where you have given explicit consent. These cookies help pi999 understand whether our promotional communications are relevant to you and allow us to limit the frequency of promotional messages.

pi999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by law or our gaming licence conditions. The following general retention periods apply:

• Active account data: Retained for the lifetime of your pi999 account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction to satisfy financial record-keeping obligations.
• KYC documents: Retained for the duration of your account relationship and for a minimum of five (5) years following account closure.
• Support communications: Live chat transcripts and email correspondence retained for up to three (3) years for dispute resolution and quality assurance purposes.
• Marketing preferences: Records of your consent or opt-out status are retained for as long as necessary to demonstrate compliance with applicable marketing regulations.
• Technical and usage logs: Server logs and anonymised analytics data retained for up to twelve (12) months for security monitoring and platform performance analysis.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes without further notice to you.

As a pi999 User, you hold the following rights in respect of your personal data. To exercise any of these rights, contact pi999 Support via live chat or by emailing [email protected]. pi999 will respond to verified requests within a reasonable timeframe and without undue delay.

• Right of access: Request a copy of the personal data pi999 holds about you, including the purposes for which it is processed and the categories of recipients with whom it has been shared.
• Right to rectification: Request correction of any inaccurate or incomplete personal data pi999 holds about you. Account profile data can often be corrected directly through your account settings.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pi999's legal and regulatory retention obligations.
• Right to restriction: Request that pi999 restricts processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to data portability: Request a copy of personal data you have provided to pi999 in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to object: Object to pi999's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pi999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2+ encryption for all data transmitted between your device and pi999.org servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial data.
• Bcrypt hashing with salting for all stored account passwords — pi999 staff cannot view your password in plain text.
• Two-factor authentication (2FA) availability for all pi999 accounts to prevent unauthorised login.
• Regular third-party penetration testing and vulnerability assessments of pi999's infrastructure.
• Role-based access controls ensuring that pi999 staff can only access personal data necessary for their specific job function.
• Continuous monitoring of systems for anomalous access patterns, intrusion attempts, and data breach indicators.
• Formal data breach response procedures, including obligations to notify affected Users and relevant authorities where a breach meets the applicable notification threshold.

While pi999 takes every reasonable precaution to secure your personal data, no method of electronic transmission or storage is 100% secure. Users are responsible for keeping their own pi999 account credentials confidential and for logging out after each session, particularly on shared devices.

pi999 strictly prohibits the use of its platform by any person under the age of 21. pi999 does not knowingly collect, use, or store personal data relating to individuals under 21 years of age.

During registration, pi999 requires all applicants to confirm that they are 21 or older. pi999's KYC verification process includes mandatory age verification against government-issued identity documents. Any account found to belong to a person under the age of 21 will be immediately suspended, all funds forfeited, and the matter referred to relevant authorities where appropriate.

pi999 encourages parents and guardians to make use of internet filtering tools and parental control software to prevent minors from accessing online gambling platforms. pi999 supports responsible use of such tools across all networks available in Pakistan.

pi999 may transfer personal data to, and store it in, jurisdictions outside of Pakistan in connection with the operation of our platform infrastructure, KYC verification services, and payment processing partners. Where such transfers occur, pi999 ensures that appropriate safeguards are in place to maintain a level of data protection consistent with this Privacy Policy.

Appropriate safeguards for international data transfers may include:

• Standard contractual clauses or equivalent data transfer mechanisms binding the recipient to data protection obligations consistent with this Policy.
• Data processing agreements with third-party service providers that include specific obligations regarding the security, confidentiality, and limited use of transferred data.
• Transfers to jurisdictions recognised as providing an adequate level of data protection by relevant data protection authorities.

If you wish to obtain further information about the specific safeguards pi999 relies on for international data transfers, please contact our Support team.

pi999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, pi999 will update the "Last Updated" date at the top of this page. Where changes are significant, pi999 will endeavour to notify active Users via email or an on-screen notification upon their next login to pi999.org.

Your continued use of the pi999 platform following the posting of an amended Privacy Policy constitutes your acknowledgement and acceptance of the revised Policy. It is your responsibility to review this Privacy Policy periodically to remain informed of how pi999 collects, uses, and protects your personal data.

If you do not agree with any amendment to this Privacy Policy, you may close your pi999 account at any time by contacting Support. Any personal data collected prior to the effective date of the amendment will continue to be handled in accordance with the Policy version in force at the time of collection, except where applicable law requires otherwise.

If you have any questions, concerns, or complaints about how pi999 handles your personal data, or if you wish to exercise any of your data subject rights described in Section 9, please contact the pi999 Support team through the following channels:

• Live Chat: Available 24/7 on pi999.org — average response time under 90 seconds.
• Email: [email protected] — responses within 2–4 hours.

pi999 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with pi999's response to your complaint, you may have the right to escalate the matter to the relevant data protection authority or gaming regulator in your jurisdiction.