Privacy Policy

o999 ("we", "us" or "our") operates the online gaming information and entertainment platform accessible at https://o999.cam (the "Platform"). We are committed to protecting the privacy and personal data of all users who access or interact with our Platform ("you" or "User").

This Privacy Policy ("Policy") explains what personal data we collect about you, how and why we collect it, how we use and protect it, with whom we may share it, how long we retain it, and what rights you have in relation to your data. This Policy applies to all Users of the Platform, including users located in Pakistan — across cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and users in other jurisdictions.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should cease using the Platform. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

o999 collects personal data in the following categories, depending on how you interact with the Platform:

3.1 Registration & Account Data

When you create an Account on o999, we collect information you provide directly, including:

• Full legal name;
• Date of birth (for age verification purposes);
• Email address;
• Username and password (stored in encrypted form);
• Residential address (where required for KYC);
• Government-issued identification document details (where required for KYC verification).

3.2 Financial & Transaction Data

When you make deposits or withdrawals through the Platform, we collect data necessary to process those transactions, including payment method identifiers (e.g., masked card numbers, mobile wallet identifiers such as those associated with Easypaisa or JazzCash accounts, or bank account details). Full payment credentials are handled by our payment service providers and are not stored by o999. All payment references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided as familiar local context only; these providers do not endorse gambling or confirm operator support.

3.3 Technical & Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geographic location;
• Browser type and version;
• Operating system and device type;
• Pages visited, links clicked and session duration;
• Referring URLs and search terms used to reach the Platform;
• Cookie identifiers and similar tracking data (see Section 7).

3.4 Communications Data

If you contact our support team via Live Chat, email or any other channel, we retain records of those communications, including the content of your messages, to provide assistance and improve our services.

3.5 Data You Choose to Provide

You may provide additional data voluntarily — for example, when completing surveys, submitting feedback or participating in promotional activities. This data is collected and processed only to the extent necessary for the relevant purpose.

o999 uses the personal data we collect for the following purposes:

We will not use your personal data for any purpose not described in this Policy without first obtaining your explicit consent, except where we are required to do so by applicable law or a court order.

Where applicable data protection law requires us to identify a legal basis for processing personal data, o999 relies on the following grounds:

• Contractual necessity: Processing required to perform the contract between you and o999 — for example, account creation, transaction processing and KYC verification.
• Legal obligation: Processing required to comply with applicable law — for example, anti-money laundering obligations, age verification requirements and regulatory reporting.
• Legitimate interests: Processing necessary for o999's legitimate business interests — for example, fraud prevention, platform security, analytics and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, for sending promotional communications or placing non-essential cookies — you may withdraw that consent at any time without prejudice to any processing already carried out on that basis.

o999 does not sell, rent or trade your personal data to third parties for their independent commercial purposes. We may, however, share your personal data with the following categories of recipients in the circumstances described:

6.1 Service Providers & Data Processors

We engage trusted third-party service providers to assist in operating the Platform. These may include payment processors (including those facilitating transactions via mobile wallets and bank transfers familiar to Pakistani users such as Easypaisa, JazzCash and Raast — referenced as payment infrastructure only), KYC and identity verification providers, cloud hosting providers, analytics services and customer support tools. All such processors are bound by contractual data processing agreements and may only process your data in accordance with our documented instructions.

6.2 Legal & Regulatory Authorities

We may disclose personal data to competent authorities — including law enforcement, regulatory bodies or courts — where we are required to do so by applicable law, court order or regulatory direction, or where we reasonably believe disclosure is necessary to prevent fraud, money laundering or other unlawful conduct.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of o999's business or assets, personal data held by o999 may be transferred to the relevant successor entity. We will notify affected Users of any such transfer and the applicable privacy terms of the successor entity.

6.4 With Your Consent

In all other cases, we will share your personal data with third parties only with your prior explicit and informed consent.

o999 uses cookies and similar tracking technologies — including web beacons, pixel tags and local storage — to operate, improve and personalise the Platform experience. Cookies are small data files placed on your device when you visit a website.

The following categories of cookies may be used on the Platform:

You can manage cookie preferences through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality and user experience of the Platform. For more detailed information, please refer to your browser's help documentation.

o999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting or contractual obligations. The specific retention period for each category of personal data is determined by reference to the relevant purpose and any applicable minimum retention requirements.

General retention guidelines applied by o999 include:

• Account and registration data: Retained for the duration of your Account and for a period of up to five (5) years following Account closure, to comply with AML, KYC and regulatory record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction, in accordance with standard financial record-keeping requirements.
• Communications and support records: Retained for up to three (3) years from the date of the communication, unless a longer period is required for dispute resolution or regulatory purposes.
• Technical and device data: Typically retained for up to twelve (12) months, unless required for ongoing fraud investigations or security incidents.
• Cookie and analytics data: Retention periods are set by the relevant cookie category, typically ranging from session-only to a maximum of twenty-four (24) months for analytics cookies.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed or anonymised so that it can no longer be attributed to any identifiable individual.

o999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction or accidental loss. These measures include, but are not limited to:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data — including passwords and payment identifiers — at rest using appropriate cryptographic standards;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, vulnerability scanning and penetration testing;
• Logging and monitoring of access to systems containing personal data;
• Staff training on data protection obligations and incident response procedures.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data security incident affecting your personal data, we will notify you and, where applicable, the relevant supervisory authority, in accordance with applicable legal requirements.

o999 operates globally and may transfer your personal data to countries outside the jurisdiction in which you are located, including countries where data protection laws may differ from those in your home country. Such transfers may occur, for example, when data is processed by third-party service providers or cloud infrastructure providers located in other jurisdictions.

Where personal data is transferred internationally, o999 takes reasonable steps to ensure that adequate safeguards are in place to protect your data in accordance with this Policy and applicable data protection standards. These safeguards may include contractual protections in the form of standard data processing agreements, data transfer agreements or equivalent mechanisms recognised under applicable law.

By using the Platform, Users in Pakistan and other jurisdictions acknowledge that their personal data may be processed in countries outside their own. If you have questions about the safeguards applied to any particular international transfer, please contact us at [email protected].

Subject to applicable law and certain exceptions, you may have the following rights in relation to your personal data held by o999. These rights may vary depending on your jurisdiction; Pakistani users should seek independent legal advice regarding their specific rights under local law.

To exercise any of the above rights, please submit a written request to [email protected]. We will respond to all verified requests within a reasonable timeframe — typically within thirty (30) days — and will not charge a fee for reasonable requests. We may need to verify your identity before processing your request.

The Platform is strictly intended for adults aged 18 or older — or the higher minimum age required by the relevant operator or license jurisdiction. o999 does not knowingly collect, use or store personal data from individuals under the applicable minimum age.

If we become aware that personal data has been collected from a minor without verified parental consent, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on the Platform or provided personal data to us, please contact us immediately at [email protected].

Parents and guardians in Pakistan and other jurisdictions are encouraged to use available parental control tools to restrict minors' access to online gambling and related content platforms.

The Platform may contain references to third-party services, payment providers or content sources. o999 does not control the privacy practices of these third parties and is not responsible for their data handling. This Policy applies solely to data collected and processed by o999 through the Platform. We encourage you to review the privacy policies of any third-party services you access independently.

Payment providers referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — have their own privacy policies and data practices, which are entirely independent of this Policy. References to these providers are made as familiar local payment context only and do not constitute an endorsement, partnership or data-sharing arrangement unless specifically stated.

o999 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our data practices or the functionality of the Platform. Where changes are material, we will provide reasonable notice to Users through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the Platform following the posting of any revised Privacy Policy constitutes your acknowledgement and acceptance of the updated terms. If you do not agree with the amended Policy, you should cease using the Platform and, if applicable, close your Account.

We recommend reviewing this Policy periodically to stay informed of how o999 handles your personal data. If you have concerns about any change to this Policy, please contact us before continuing to use the Platform.

If you have any questions, concerns or requests relating to this Privacy Policy or the way o999 processes your personal data, please contact our Data Privacy team using the details below. All communications should be in writing. o999 does not provide telephone support; please use email or Live Chat.

For data subject rights requests — including access, erasure, rectification or portability requests — please include your registered email address and a clear description of your request in your communication to allow us to verify your identity and respond promptly.

For responsible gambling support, including requests for self-exclusion or account closure, please also refer to our dedicated Responsible Gambling page.