u999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by u999 ("u999", "we", "us", "our") and applies to all personal data collected through the u999 online gaming platform accessible at https://u999.lol, including all associated services, features, mobile interfaces, and support channels (collectively, the "Platform").

u999 is committed to handling your personal data with the utmost care, transparency, and in full compliance with applicable data protection laws and the standards required under our international gaming licence. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of u999.

2. Data Controller

For the purposes of applicable data protection legislation, u999 acts as the data controller in respect of the personal data of registered players and website visitors. As data controller, u999 is responsible for determining the purposes and means by which your personal data is processed.

All data-related enquiries, access requests, and complaints should be directed to the u999 Data Protection team via the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

u999 collects personal data from you in a number of ways, including directly when you register an account, make a deposit or withdrawal, contact our support team, or use the Platform. We also collect certain data automatically through your use of the Platform. The categories of personal data we collect are as follows:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, CNIC number, nationality	Account registration, KYC verification
Contact Data	Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad)	Account registration, support interactions
Financial Data	JazzCash / EasyPaisa account reference, bank name (HBL, UBL, Meezan), transaction history in PKR	Deposit and withdrawal processing
Technical Data	IP address, browser type, device identifiers, operating system, session timestamps	Automatic collection via Platform
Usage Data	Games played, bet amounts, wagering history, login frequency, session duration	Automatic collection via Platform
Verification Data	Copies of identity documents, proof of address, source-of-funds documentation	KYC / AML compliance process
Communications Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions

u999 does not intentionally collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless it is volunteered by you in the context of a responsible gaming interaction (for example, when requesting self-exclusion on grounds of a gambling-related health concern). Such data is treated with the highest level of protection.

4. How We Use Your Personal Data

u999 uses the personal data we collect for the following purposes:

• Account Administration: Creating and managing your u999 player account, verifying your identity, and processing your registration;
• Transaction Processing: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK;
• Regulatory Compliance: Meeting our obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and the conditions of our international gaming licence;
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, enforcing self-exclusion requests, and complying with responsible gaming obligations;
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance;
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience;
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about u999 — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time via your account settings;
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorised account access, and abuse of our Platform or bonus system.

5. Legal Basis for Processing

u999 relies on the following legal bases for processing your personal data, depending on the specific purpose:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e. to operate your u999 account, process bets, and handle transactions;
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and the conditions of our gaming licence;
• Legitimate Interests: Processing that serves u999's legitimate business interests, such as fraud prevention, Platform security, and aggregated analytics — provided these interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing for direct marketing purposes, and the placement of non-essential cookies, where your prior consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

u999 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other payment service providers involved in processing your transactions;
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist u999 in verifying player identities and screening against sanctions lists;
• Game Content Providers: Licensed game studios and software providers whose titles are hosted on the u999 Platform may receive limited technical data necessary to deliver their games;
• Regulatory Authorities: Where required by law or by the terms of our gaming licence, u999 may be obligated to disclose player data to relevant regulatory or law enforcement authorities;
• Professional Advisors: Legal, financial, and technical advisors engaged by u999 on a confidential basis where disclosure is necessary for the provision of their services;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of u999's business, player data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

7. International Data Transfers

Given that u999 operates as an internationally licensed gaming platform, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, u999 takes steps to ensure that appropriate safeguards are in place to protect your data in a manner consistent with this Policy and applicable data protection standards.

Such safeguards may include standard contractual clauses approved by relevant data protection authorities, binding corporate rules, or reliance on jurisdictions that are recognised as providing an adequate level of data protection. Details of the safeguards applied to any specific cross-border transfer are available upon request.

8. Data Retention

u999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your account relationship with u999 and for a minimum of five (5) years following account closure, in line with AML regulatory requirements;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction;
• KYC and Verification Documents: Retained for a minimum of five (5) years following the end of the customer relationship or the completion of the transaction to which the verification relates;
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, unless a longer period is required for the resolution of an ongoing dispute;
• Marketing Consent Records: Retained for as long as necessary to demonstrate that valid consent was obtained and for a reasonable period thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9. Cookies and Tracking Technologies

u999 uses cookies and similar technologies (including local storage, session tokens, and analytics pixels) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled;
• Functional Cookies: Used to remember your preferences, such as your selected language or display settings, to provide a more personalised experience;
• Analytics Cookies: Used to collect aggregated data about how players interact with the Platform, enabling u999 to identify areas for improvement. These cookies do not identify you personally;
• Marketing Cookies: Used — with your consent — to deliver relevant promotional content based on your interactions with the Platform. You may opt out of marketing cookies at any time.

You can manage your cookie preferences through your browser settings or, where available, through the cookie consent manager accessible on the Platform. Please note that disabling functional or analytics cookies may affect the quality of your experience on u999.

10. Your Data Protection Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by u999:

• Right of Access: You have the right to request a copy of the personal data u999 holds about you, together with information about how it is being used;
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data u999 holds about you;
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any legal retention obligations that may apply;
• Right to Restriction: You have the right to request that u999 restricts the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its processing;
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You have the right to object to the processing of your personal data where u999 relies on legitimate interests as its legal basis, and where you believe your fundamental rights and freedoms override those interests;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact u999 via the live chat facility in your account dashboard or by email at [email protected]. u999 will respond to all verified data rights requests within thirty (30) days of receipt.

11. Security Measures

u999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the u999 Platform;
• AES-256 encryption for personal and financial data stored at rest;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and independent security audits of Platform infrastructure;
• Multi-factor authentication requirements for all administrative access to systems holding personal data;
• Formal incident response procedures for the identification, containment, and reporting of security breaches.

Whilst u999 takes every reasonable precaution to protect your data, no method of internet transmission or electronic storage is entirely secure. u999 cannot guarantee the absolute security of data in transit over public networks and accepts no liability for interception or unauthorised access that occurs despite reasonable security measures being in place.

12. Children's Privacy

The u999 Platform is strictly intended for individuals who are 21 years of age or older. u999 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered an account with u999 or submitted personal data to us, please contact our support team immediately so that appropriate action can be taken.

13. Changes to This Privacy Policy

u999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where material changes are made, u999 will notify registered players via their registered contact details prior to the changes taking effect.

The effective date at the top of this Policy reflects the date of the most recent update. Your continued use of the u999 Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically so that you remain informed of how u999 handles your personal data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which u999 handles your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 directly from your u999 account dashboard — the fastest way to reach us;
• Email: [email protected] — please include "Privacy Request" in the subject line of your message.

Our dedicated data protection team will acknowledge all privacy-related enquiries within five (5) business days and aims to resolve all requests within thirty (30) calendar days of receipt.