dk999 Privacy Policy —
Your Data, Protected

This Privacy Policy (the "Policy") is published by dk999 (hereinafter "dk999", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at dk999.lol. This Policy describes how dk999 collects, uses, discloses, stores, and protects the personal information of individuals who access, register for, or use the dk999 platform and its associated services.

This Policy applies to all users of dk999 services, including registered account holders, players who have begun but not completed the registration process, and visitors browsing the dk999 website without a registered account. By accessing or using the dk999 platform, you acknowledge that you have read and understood this Policy. If you do not agree to the practices described herein, you should discontinue use of the dk999 platform.

This Policy should be read in conjunction with the dk999 Terms & Conditions, which are incorporated by reference and govern the overall relationship between dk999 and its players. Where there is a conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

For the purposes of applicable data protection laws, dk999 acts as the data controller with respect to the personal information of registered players and platform users. As data controller, dk999 is responsible for determining the purposes and means of processing your personal data in connection with the provision of our online casino, sportsbook, and related gaming services.

dk999 operates under international gaming licensing standards. Our primary communication channel for privacy-related enquiries, data subject access requests, and data correction or deletion requests is:

All privacy-related correspondence directed to this address will be handled by the dk999 data management team and responded to within the timeframes specified in Section 10 of this Policy.

dk999 collects the following categories of personal data from players and platform users. Not all categories are collected from all users — the data collected depends on how you interact with the dk999 platform and the services you use.

dk999 collects personal data through the following means:

• Direct Submission: Information you provide when registering a dk999 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile. This is the primary source of identity, contact, and financial data held by dk999.
• Platform Interaction: Data generated automatically as you use the dk999 platform — including your betting activity, game session data, login records, and navigation behaviour within the site. This data is recorded by dk999's platform systems in real time.
• Cookies and Tracking Technologies: Technical data collected via cookies, web beacons, and similar technologies as described in Section 11 of this Policy. This includes your IP address, device identifiers, browser type, and session information.
• Payment Providers: Confirmation data from payment processors including JazzCash, EasyPaisa, and Pakistani banks, which provide transaction reference numbers and confirmation of cleared funds necessary for processing your deposits and withdrawals.
• Identity Verification Services: Where dk999 uses third-party identity verification or fraud detection services to assist with KYC compliance, these services may return confirmation of your identity details — but do not provide us with information beyond what you have already submitted.

dk999 processes your personal data for the following specific purposes. Each purpose is supported by a legitimate legal basis as described in Section 6.

• Account Registration and Management: Creating and maintaining your dk999 player account, verifying your eligibility, authenticating your login sessions, and managing your account settings and preferences.
• Identity Verification (KYC): Confirming your identity, age (21+ compliance), and the authenticity of documents submitted — a mandatory requirement under the gaming licensing standards applicable to dk999 and anti-money laundering (AML) regulatory frameworks.
• Payment Processing: Processing your PKR deposits via JazzCash, EasyPaisa, and bank transfers; processing withdrawal requests back to your verified payment method; and maintaining transaction records for accounting and regulatory compliance purposes.
• Providing Gaming Services: Running the dk999 casino, sportsbook, and live dealer platform; recording betting and gaming activity; settling bets and game outcomes; managing bonuses and promotions; and maintaining the integrity of cricket, PSL, and other sports markets.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct. Monitoring login patterns, transaction behaviour, and betting patterns for anomalies indicative of fraud or regulatory non-compliance.
• Responsible Gaming: Monitoring gaming activity for patterns associated with problem gambling; applying player-set deposit, loss, and session limits; processing self-exclusion requests; and conducting responsible gaming outreach to players identified as potentially at risk.
• Customer Support: Responding to your enquiries, resolving disputes, providing technical assistance, and improving the quality of dk999 customer service based on support interaction data.
• Marketing Communications: Sending promotional emails and SMS notifications about dk999 bonuses, PSL season offers, new game launches, and other platform news — but only to players who have provided explicit consent and have not subsequently withdrawn it.
• Legal and Regulatory Compliance: Meeting dk999's obligations under applicable gaming licensing conditions, AML and counter-terrorism financing regulations, tax reporting requirements, and any lawful instructions from regulatory or law enforcement authorities.

dk999 processes personal data only where a legitimate legal basis exists. The primary legal bases on which dk999 relies are:

• Contractual Necessity: Processing required to perform the contract between dk999 and you — the Terms & Conditions you accept upon registration. This covers account management, payment processing, gaming service provision, and the core operational activities of the dk999 platform.
• Legal Obligation: Processing required to comply with applicable law, including KYC and AML obligations under gaming licensing conditions, tax reporting requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing necessary for dk999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of services offered — provided these interests are not overridden by your privacy rights.
• Consent: Where you have explicitly opted in to receive marketing communications from dk999. Consent-based processing is limited to promotional communications and is entirely optional — withdrawing your consent does not affect your ability to use the dk999 platform.

dk999 does not sell your personal data to third parties for commercial purposes. However, in the ordinary course of operating the dk999 platform, certain categories of personal data may be shared with the following third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT processing partners receive the transaction data necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and are subject to Pakistani financial regulations.
• Identity Verification Providers: Third-party KYC and fraud detection services that assist dk999 in verifying the identity and age of registered players. These services receive only the specific identity data required to complete the verification and are contractually prohibited from using it for any other purpose.
• Game Software Providers: Providers of casino games and sportsbook software (such as Pragmatic Play, NetEnt, and equivalent sports data providers) receive session and bet data necessary to deliver their games and settle outcomes. Game providers do not receive your identity or financial data.
• IT and Hosting Services: Third-party cloud hosting, security, and infrastructure providers that store and process dk999 platform data on behalf of dk999 under strict data processing agreements. These providers act as data processors and may not use your data independently.
• Regulatory and Law Enforcement Authorities: Where dk999 is required by law, court order, or regulatory instruction to disclose player data — including under AML reporting obligations — such disclosure will be made. dk999 will notify you of such a disclosure where legally permitted to do so.

dk999 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active dk999 account is retained for the full duration of the account and for a minimum period of five (5) years following account closure, in compliance with AML record-keeping requirements under international gaming licensing standards.
• KYC and Identity Documents: CNIC copies, selfie photographs, and related identity verification documents are retained for a minimum of five (5) years following the closure of the associated dk999 account, consistent with regulatory obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of five (5) years following each transaction, as required by AML and financial record-keeping regulations applicable to gaming operators.
• Customer Support Records: Support communications and dispute correspondence are retained for three (3) years following the resolution of the relevant matter, to facilitate the investigation of any subsequent related disputes.
• Marketing Data: Records of marketing consent and opt-out preferences are retained for the full duration of your dk999 account plus three (3) years, to demonstrate compliance with consent requirements and to honour withdrawal of consent.
• Technical and Log Data: System logs, IP address records, and session data are retained for up to twelve (12) months from the date of collection for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. The deletion process uses industry-standard secure erasure methods to prevent recovery.

dk999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data transmitted between your device and the dk999 platform is encrypted using TLS (Transport Layer Security) with 256-bit encryption. This ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data — including CNIC details, financial account numbers, and password hashes — is encrypted at rest in dk999's database systems using AES-256 encryption or equivalent standards.
• Access Controls: Access to personal data within dk999 is restricted on a strict need-to-know basis. Only employees and systems with a legitimate operational requirement are authorised to access specific categories of player data, and all such access is logged and audited.
• Password Security: Account passwords are never stored in plain text at dk999. All passwords are processed through industry-standard cryptographic hashing algorithms with salting before storage, ensuring that even in the event of a data security incident, actual passwords remain protected.
• Two-Factor Authentication: dk999 supports and encourages two-factor authentication (2FA) via SMS OTP for all player accounts, adding an additional layer of identity verification beyond password entry.
• Security Monitoring: dk999 operates continuous security monitoring of its platform infrastructure, including intrusion detection systems, anomaly detection on login and transaction patterns, and regular third-party security audits.

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), you have the following rights with respect to the personal data that dk999 holds about you:

• Right of Access: You may request a copy of all personal data held by dk999 about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Some corrections can be made directly in your dk999 account settings; others (such as CNIC corrections) require a support request with supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that this right is subject to dk999's legal obligations to retain certain data under AML and gaming licensing regulations, which may override deletion requests for specific data categories during applicable retention periods.
• Right to Restriction of Processing: You may request that dk999 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on your consent or on contract and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests grounds. dk999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. You can unsubscribe from dk999 marketing emails via the unsubscribe link in any email, or by contacting [email protected].

To exercise any of these rights, contact dk999 at [email protected] with the subject line "Privacy Request — [Your Username]" and a clear description of the right you wish to exercise. We will verify your identity before processing any data access, correction, or deletion request.

The dk999 website at dk999.lol uses cookies and similar tracking technologies to improve the functionality, security, and user experience of the platform. A cookie is a small text file placed on your device by a website to enable certain features and functions.

dk999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the dk999 platform to function. These cookies enable core features such as secure login session management, account authentication, and the dk999 sports betting and casino interfaces. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Collect anonymised data about how players use the dk999 platform — which pages are visited most frequently, session duration, navigation paths. This data helps dk999 identify usability improvements and optimise the platform experience for Pakistani users. No personally identifiable information is collected by these cookies.
• Functionality Cookies: Remember your preferences on the dk999 platform — such as your preferred language, display settings, and whether you have previously dismissed platform notifications. These cookies improve your experience across sessions.
• Security Cookies: Support dk999's fraud detection and platform security systems by maintaining session integrity and detecting unusual patterns that may indicate account compromise or bot activity.

You can control non-essential cookies through your browser settings. Most modern browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using the dk999 platform. Please refer to your browser's help documentation for instructions on managing cookie preferences.

The dk999 platform is strictly for adults aged 21 and above. dk999 does not knowingly collect, process, or store personal data relating to individuals under 21 years of age. Our KYC identity verification process — which requires submission of a valid Pakistani CNIC confirming date of birth — is designed to prevent underage individuals from completing full account registration and accessing real-money gaming services.

In the event that dk999 becomes aware that personal data has been collected from an individual under the age of 21, we will take the following immediate steps: suspend the relevant account pending investigation; notify the account holder of the age verification issue; permanently close the account if underage status is confirmed; and securely delete all personal data associated with the account, subject to any mandatory legal retention obligations.

The dk999 platform serves Pakistani players, and the majority of data processing activities are conducted in relation to services provided to individuals in Pakistan. However, as a platform operating under international gaming licensing standards with global technology partners, some personal data may be processed or stored on servers located outside of Pakistan.

Where personal data is transferred internationally — for example, to cloud hosting providers or game software providers operating outside Pakistan — dk999 ensures that such transfers are made subject to appropriate safeguards. These safeguards may include: data processing agreements incorporating standard contractual clauses; transfers to countries or organisations that maintain recognised equivalent data protection standards; and technical measures that ensure equivalent protection regardless of geographic location.

The specific countries and regions to which data may be transferred include those where dk999's hosting infrastructure and licensed game providers maintain their operations. All such transfers are conducted under the data sharing and processing frameworks described in Section 7 of this Policy, with contractual protections ensuring your data is treated consistently with the standards described herein.

dk999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services offered on the dk999 platform. The date of the most recent revision is indicated at the top of this document.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — dk999 will provide advance notice of the changes by sending an email to your registered address at least 14 days before the changes take effect. The updated Policy will also be published prominently on the dk999 platform with the effective date clearly displayed.

Non-material changes (such as clarifications, corrections to typographical errors, or updates to contact details) will take effect immediately upon publication. Your continued use of the dk999 platform following the effective date of any policy changes constitutes your acknowledgement of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data that dk999 holds about you, please contact the dk999 data privacy team using the details below. We are committed to responding to all privacy-related communications promptly and transparently.

When contacting dk999 about a privacy matter, please include your registered username, the email address associated with your dk999 account, a clear description of your request or concern, and — for data access, correction, or deletion requests — a means of verifying your identity (such as confirmation of your registered mobile number).