wa999 Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how wa999 ("wa999", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who visit, register on, or otherwise interact with the wa999 website at wa999.biz and all associated services, features, and content (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of wa999, whether you are a registered account holder, a visitor browsing the site without an account, or a former customer whose data we are obligated to retain for regulatory purposes.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform and incorporate this Policy by reference. By accessing or using wa999, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

2.1 Data Controller. For the purposes of this Privacy Policy, wa999 acts as the data controller in respect of personal data collected through the Platform. As data controller, wa999 determines the purposes and means by which your personal data is processed.

2.2 Licensing. wa999 operates under an international gaming licence. Our data processing activities are conducted in accordance with the requirements of that licence, which includes obligations relating to Know Your Customer (KYC) verification, Anti-Money Laundering (AML) monitoring, and the protection of player data.

2.3 Contact. Questions, requests, and complaints relating to this Privacy Policy should be directed to our support team. Contact details are provided in Section 16 of this Policy.

3. Data We Collect

wa999 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or passport;
• Date of birth (used for age verification — 21+ requirement);
• National Identity Card (CNIC) number;
• Gender (where provided during registration);
• Nationality and country of residence.

3.2 Contact Data

• Email address;
• Pakistani mobile phone number (used for OTP verification and account communications);
• Residential address (required for KYC completion).

3.3 Financial & Payment Data

• JazzCash and EasyPaisa account identifiers;
• HBL, UBL, Meezan Bank, SadaPay, or Raast account details provided for withdrawal processing;
• USDT TRC20 wallet address (where applicable);
• Deposit and withdrawal transaction history;
• Account balance history.

3.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, login history, and session duration;
• Pages visited, features used, and navigation patterns within the Platform;
• Betting and gaming activity logs, including bet amounts, odds accepted, games played, and outcomes.

3.5 KYC & Verification Documents

• Copies of government-issued photo identification (CNIC, passport, driving licence);
• Proof of address documents (utility bills, bank statements);
• Proof of payment method ownership documents (where required);
• Source of funds documentation (for large deposits or regulatory flags).

3.6 Communications Data

• Records of live chat conversations with wa999 support;
• Email correspondence with wa999;
• Records of responsible gaming tool activations and self-exclusion requests.

4. How We Collect Your Data

wa999 collects personal data through the following means:

• Direct Registration: Data you provide when creating your wa999 account, completing your profile, or submitting KYC documents;
• Platform Activity: Data automatically generated when you use the Platform, including betting activity, game sessions, and navigation behaviour;
• Payment Transactions: Data received from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast) when you make deposits or request withdrawals;
• Cookies and Tracking Technologies: Data collected automatically via cookies, web beacons, and similar technologies as described in Section 7;
• Support Interactions: Data generated through live chat conversations, email correspondence, or complaint submissions;
• Third-Party Verification Services: Data received from identity verification and fraud prevention service providers used as part of our KYC process.

5. How We Use Your Data

wa999 uses the personal data we collect for the following purposes:

6. Legal Bases for Processing

wa999 processes your personal data only where we have a valid legal basis for doing so. The legal bases we rely upon are:

• Contract Performance: Processing necessary to deliver the services you have signed up for — including account management, betting services, and payment processing — falls under this basis. Without this processing, we cannot operate your wa999 account.
• Legal Obligation: Certain processing activities are mandated by the requirements of our international gaming licence, including KYC verification, AML transaction monitoring, and the retention of records for regulatory audit purposes. We have no discretion to decline this processing.
• Legitimate Interests: wa999 processes certain data on the basis of legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics. We only rely on this basis where our interests are not overridden by your privacy rights.
• Consent: Where we send you direct marketing communications by email or SMS, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time by updating your communication preferences within your wa999 account dashboard or by contacting support.

7. Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. wa999 uses cookies and similar technologies (such as web beacons and local storage) to operate the Platform, remember your preferences, analyse usage, and deliver relevant content.

7.2 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for core Platform functionality including login sessions, security tokens, and shopping basket state. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language settings, default bet sizes, and preferred payment method to personalise your wa999 experience.
• Analytics Cookies: Help wa999 understand how users navigate the Platform so we can improve performance, fix issues, and optimise the user experience. Data collected is aggregated and does not identify you personally.
• Marketing Cookies: Used only where you have provided consent, these cookies help us deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

7.3 Cookie Control. You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality. A cookie preference centre is available on your first visit to wa999.biz.

8. Sharing Your Data

wa999 does not sell your personal data. We share your data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors to facilitate deposits and withdrawals. These parties act as independent data processors and handle your data in accordance with their own privacy policies and applicable payment regulations.
• KYC & Identity Verification Providers: We share identity documents with regulated third-party verification services to complete our KYC obligations. These providers are contractually bound to process data solely for verification purposes and to maintain appropriate security standards.
• Game Providers: Third-party game providers whose titles appear on the wa999 Platform may receive certain anonymised or pseudonymised session data necessary to deliver their games. Full identity data is not passed to game providers.
• Regulatory Authorities: wa999 is obligated to report certain activities to our licensing authority and, where required by applicable law, to law enforcement agencies. Such disclosures are made only where legally required and to the minimum extent necessary.
• Fraud Prevention Networks: We may share limited data with industry fraud prevention and AML databases to detect and prevent financial crime. Participation in these networks is a condition of our gaming licence.
• Professional Advisors: We may share data with our legal advisors, auditors, or insurers where necessary for the conduct of professional services. All such parties are bound by confidentiality obligations.

All third parties with whom wa999 shares personal data are required, by contract, to implement appropriate technical and organisational security measures and to process data only for the specified purposes disclosed in this Policy.

9. International Data Transfers

9.1 Cross-Border Processing. As wa999 operates under an international gaming licence and uses global service providers for payment processing, KYC verification, and game delivery, your personal data may be transferred to and processed in countries outside Pakistan.

9.2 Transfer Safeguards. Where personal data is transferred internationally, wa999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards may include standard contractual clauses, adequacy decisions, or equivalent contractual protections agreed with the receiving party.

9.3 Enquiries. If you would like more information about the specific safeguards applied to international transfers of your personal data, please contact wa999 support using the details in Section 16.

10. Data Retention

10.1 Retention Periods. wa999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with standard AML record-keeping requirements imposed by our licensing authority.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of 5 years from the date of the transaction.
• Support Communications: Live chat and email records are retained for 2 years from the date of the communication, or longer if the subject matter relates to an unresolved dispute or regulatory inquiry.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account relationship plus 3 years, to evidence compliance with consent requirements.
• Technical Logs: Server and access logs are retained for up to 12 months for security and fraud prevention purposes.

10.2 Deletion. On expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where data has been anonymised rather than deleted, it may be retained indefinitely for aggregate analytical purposes.

11. Your Rights

Subject to applicable law, you hold the following rights in respect of the personal data wa999 holds about you. To exercise any of these rights, please contact our support team using the details provided in Section 16.

wa999 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

12. Children & Minors

12.1 Strict 21+ Policy. The wa999 Platform is strictly intended for adults aged 21 years and above. wa999 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is a mandatory step in the wa999 registration and KYC process.

12.2 Underage Registration. If wa999 becomes aware that an account has been registered by a person under the age of 21, that account will be suspended immediately. Any deposits made by an underage user will be refunded to the originating payment method. All personal data associated with the underage account will be deleted, except to the extent that retention is required for fraud prevention or regulatory reporting purposes.

12.3 Parental Controls. wa999 strongly encourages parents and guardians to use available parental control tools to prevent minors from accessing online gambling platforms. If you believe your child has accessed wa999, please contact our support team immediately.

13. Data Security

13.1 Technical Measures. wa999 implements a comprehensive set of technical security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields (including CNIC numbers and payment identifiers) at rest;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Intrusion detection and real-time security monitoring of all Platform infrastructure;
• Segregated database environments ensuring that player financial data is isolated from general Platform data.

13.2 Organisational Measures. Access to personal data within wa999 is restricted on a strict need-to-know basis. Staff with access to personal data receive regular training on data protection obligations. Data access is logged and audited.

13.3 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, wa999 will notify the relevant regulatory authority and affected users in accordance with applicable notification obligations. Breach notifications will be issued without undue delay.

13.4 Your Role in Security. While wa999 takes extensive measures to protect your data, the security of your account also depends on the strength of your password and your own device security. We strongly recommend using a unique, strong password for your wa999 account and enabling two-factor authentication.

14. Third-Party Links

The wa999 Platform may contain references to third-party content providers, including game providers and payment processors. While wa999 selects third-party partners carefully, this Privacy Policy applies only to data processed by wa999 directly. Third-party services operate under their own privacy policies, which wa999 has no control over.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of wa999. wa999 accepts no responsibility for the data practices of third-party operators.

15. Changes to This Privacy Policy

15.1 Right to Amend. wa999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

15.2 Material Changes. Where changes to this Policy are material — meaning they significantly affect how we use your data or the rights available to you — wa999 will provide at least 14 days' advance notice by email to your registered address or through a prominent notice on the Platform before the revised Policy takes effect.

15.3 Continued Use. Your continued use of the wa999 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact support to initiate account closure.

16. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a complaint about how wa999 has handled your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 inside your wa999 account dashboard — the fastest way to reach our support team for privacy-related queries.
• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" to ensure your query is routed correctly. Allow up to 2 business days for an initial response.

When submitting a privacy-related request, please include your full registered name, your wa999 username, and a clear description of your request or complaint. This will help us locate your account records and respond efficiently.

Complaints. If you are not satisfied with wa999's response to a privacy complaint, you may escalate the matter to the data protection supervisory authority or dispute resolution body designated by our licensing jurisdiction. wa999 will cooperate fully with any such regulatory inquiry.