dj999 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") is published by the operator of dj999 (hereinafter "dj999", "we", "us" or "our") and applies to all personal data collected from users ("User", "Player", "you" or "your") through the website located at https://dj999.cam, any associated mobile applications, and all related services offered under the dj999 brand.

dj999 serves adult players across Pakistan — including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — as well as other jurisdictions where access to the Platform is not prohibited by applicable law. We recognise that data privacy is a significant concern for our users and we are committed to being transparent about how your information is handled.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a natural person, directly or indirectly, including name, email address, device identifiers and financial account details.
• "Processing" — any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is the operator of dj999.
• "Data Processor" — any third party that processes personal data on behalf of the Data Controller, such as a payment processor or identity-verification service.
• "Consent" — a freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer; the identity and age-verification process carried out in accordance with the operator's licensing and compliance obligations.
• "Cookies" — small text files placed on your device by the Platform that store information about your browsing session and preferences.

03 Data Controller

The Data Controller responsible for your personal data is the operator of the dj999 platform. All data-protection enquiries, subject-access requests and complaints should be directed to the contact details provided in Section 16 of this Policy.

dj999 does not claim to be regulated by, or affiliated with, any Pakistani government authority, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial authority or any Pakistani financial institution. The operator maintains its data-processing activities in accordance with the laws of its licensing jurisdiction. Pakistani users acknowledge that local data-protection legislation — including the Personal Data Protection Bill and associated frameworks — may also apply to them.

04 Data We Collect

4.1 Identity and Contact Data

When you register an account with dj999, we collect the following categories of personal data:

• Full legal name as it appears on official identification documents;
• Date of birth (for age-verification purposes);
• Country and city of residence (e.g., Karachi, Lahore, Islamabad);
• Email address and, where provided, telephone number;
• Username and encrypted account password.

4.2 Verification and Compliance Data

To satisfy our KYC and anti-money laundering obligations, we may collect:

• Copies of government-issued photo identification (CNIC, passport or driving licence);
• Proof of address documentation (utility bill, bank statement dated within three months);
• Proof of payment method ownership (screenshot or photograph of the payment instrument used);
• Source-of-funds documentation where required for large or unusual transactions.

4.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, wagers placed and bonuses claimed through your account. We do not store full payment card numbers on our servers — card data is handled directly by our licensed payment processors. Where Pakistani payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah are involved in a transaction, we record the transaction reference and amount only. These providers are cited as familiar local context and do not endorse or support gambling operations.

4.4 Technical and Usage Data

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from it;
• Device type, operating system and browser version;
• Session timestamps, pages visited and features used;
• Referral source if you arrived via a tracked link;
• Error logs and crash reports to assist with platform maintenance.

4.5 Communications Data

If you contact our support team by live chat or email, we retain records of that correspondence, including your name, the channel used, the subject matter and any attachments you provide. These records are used to resolve your query and to improve our service quality.

4.6 Responsible Gambling Data

Where you use responsible-gambling tools — such as deposit limits, loss limits, cooling-off periods or self-exclusion — we record the settings applied and the dates on which they were activated or modified. This data is processed solely for the purpose of enforcing those protections and is not used for marketing profiling.

05 How We Collect Your Data

We collect personal data through the following channels:

• Direct submission — information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account settings;
• Automated technologies — cookies, web beacons, server logs and similar technologies that record your interaction with the Platform (see Section 10);
• Third-party verification providers — identity and age-verification services that return a verification result and, where applicable, a risk score to our systems;
• Payment processors — transaction confirmation data returned by licensed payment processors after a deposit or withdrawal is completed;
• Fraud-prevention partners — risk signals and device fingerprinting data provided by fraud-detection services engaged by the operator.

06 Purpose & Legal Basis for Processing

The table below sets out the primary purposes for which dj999 processes personal data and the legal basis relied upon for each purpose.

Where we rely on consent as our legal basis, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent does not affect processing carried out under other legal bases.

07 Data Sharing & Disclosure

7.1 Categories of Recipients

dj999 does not sell, rent or trade your personal data. We may share your data with the following categories of recipients only where strictly necessary:

• Identity and age-verification providers — to confirm your identity and age as part of our KYC process;
• Licensed payment processors — to facilitate your deposits and withdrawals in accordance with the payment method you have selected;
• Fraud-detection and AML partners — to screen transactions and account activity against risk models and watchlists;
• Cloud infrastructure and hosting providers — who store and process data on our behalf under binding data-processing agreements;
• Customer support platforms — which power our live-chat and ticketing systems and process support correspondence on our behalf;
• Regulatory and law enforcement authorities — where we are legally required to disclose data by court order, regulator instruction or applicable law.

7.2 No Third-Party Marketing

We do not share your personal data with third-party advertisers or marketing platforms for the purpose of targeting you with advertisements outside of the dj999 Platform. Any promotional communications sent by dj999 are based on data we hold directly and are only sent to Users who have opted in to receive them.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the operator's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected Users by email or prominent Platform notice as soon as reasonably practicable if such a transfer affects the processing of their personal data.

08 International Data Transfers

The operator of dj999 is based outside Pakistan and your personal data will be transferred to and processed in the jurisdiction in which the operator is established. Where personal data is transferred to countries that may not provide an equivalent level of data protection to your home jurisdiction, the operator relies on appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to protect your data during transit and storage.

By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data to the operator's jurisdiction and to any third-party processors engaged by the operator as described in this Policy.

09 Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, accounting and reporting obligations. The following general retention principles apply:

• Active account data — retained for the duration of your account and for a minimum period thereafter as required by the operator's licensing obligations;
• KYC and verification documents — retained for a minimum of five years from the date of account closure or from the date of the last transaction, whichever is later, in accordance with anti-money laundering regulations;
• Transaction records — retained for a minimum of five years from the date of the transaction;
• Support communications — retained for a minimum of three years from the date of the last interaction;
• Marketing consent records — retained for the duration of your consent and for a reasonable period thereafter as evidence of that consent.

Where data is no longer required, it is securely deleted or anonymised in accordance with our internal data-disposal procedures.

10 Cookies & Tracking Technologies

10.1 Types of Cookies Used

dj999 uses the following categories of cookies and similar technologies:

• Strictly necessary cookies — essential for the Platform to function, including session authentication, security tokens and load-balancing cookies. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, currency display and responsible-gambling limit configurations.
• Analytics cookies — collect aggregated, anonymised data about how Users interact with the Platform, enabling us to identify and fix usability issues and improve navigation.
• Fraud-prevention cookies — device fingerprinting technologies used to detect and prevent account fraud and automated access.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform. Most browsers allow you to view, delete and block cookies via the privacy or security section of the settings menu. Consult your browser's help documentation for specific instructions.

11 Your Data Rights

Subject to applicable data-protection law and certain exceptions, you have the following rights in respect of your personal data:

• Right of access — you may request a copy of the personal data we hold about you, along with information about how it is processed;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure — in certain circumstances you may request deletion of your personal data, subject to our legal retention obligations;
• Right to restriction — you may request that we restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested;
• Right to data portability — where processing is based on consent or performance of contract and is carried out by automated means, you may request a structured, machine-readable copy of your data;
• Right to object — you may object to processing based on legitimate interests at any time, and we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 16. We will respond to all verified requests within a reasonable timeframe and in any event within the period required by applicable law. We may need to verify your identity before processing your request.

12 Children's Privacy

The dj999 Platform is strictly for adults aged 18 or over — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age. If we become aware that personal data has been submitted by an underage user, we will promptly delete that data and close the associated account.

If you believe that a minor has registered an account or provided personal data to dj999, please notify us immediately at the contact address provided in Section 16 so that we can take appropriate action.

13 Security Measures

dj999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers;
• Encryption at rest for sensitive data stored in our databases;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular internal security reviews and vulnerability assessments;
• Audit logging of access to personal data records;
• Staff training on data-protection obligations and secure data handling.

While we maintain these safeguards, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact our support team immediately via live chat or by emailing [email protected].

14 Third-Party Links & Services

The Platform may from time to time reference third-party services or resources in an informational capacity. dj999 is not responsible for the privacy practices or content of any third-party website or service. This Policy applies solely to data processed by dj999 and its authorised Data Processors. We encourage you to read the privacy policies of any third-party service you interact with independently of the dj999 Platform.

15 Amendments to This Policy

dj999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data-processing activities or Platform features. Where a material change is made, we will endeavour to notify registered Users by email or by displaying a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and request account closure.

16 Contact & Complaints

If you have any questions, concerns or complaints about this Privacy Policy or about how dj999 processes your personal data, please contact us using the details below. All contact details are provided as plain text only and are not clickable links.

• Live Chat: Available 24/7 via the on-site chat widget
• Support Email: [email protected]
• Email Response Time: Within 24 hours

When submitting a data-rights request or complaint, please include your full name, account username and a clear description of your request or concern. We may ask you to provide proof of identity before processing your request to protect your data from unauthorised access.

If you are not satisfied with our response to your complaint, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in the operator's licensing jurisdiction. We will provide details of the applicable authority upon request.