- 1. Introduction & Scope
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing & Disclosure
- 8. Cookies & Tracking
- 9. Data Retention
- 10. International Transfers
- 11. Your Data Rights
- 12. Children & Minors
- 13. Security Measures
- 14. Policy Amendments
- 15. Contact & Complaints
This Privacy Policy applies to all personal data collected by uk999 in connection with your use of the uk999 website at uk999.today and all associated services. It should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly. By registering an account with uk999 or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
Introduction & Scope
This Privacy Policy describes the personal data processing practices of uk999 ("the Platform", "we", "us", "our") in relation to individuals who register an account with uk999 ("Players", "you", "your"), individuals who visit the uk999 website without registering, and individuals who interact with uk999 customer support. It sets out the categories of personal data collected, the purposes for which personal data is processed, the legal bases upon which processing rests, the parties to whom personal data may be disclosed, and the rights available to data subjects in relation to their personal information.
This policy applies to personal data collected through all channels operated by uk999, including the uk999 website, mobile-optimised platform, customer support communications, and payment processing interfaces. It does not govern the privacy practices of third-party game providers, payment service providers, or other external platforms that may be accessible through links or integrations on the uk999 platform — those parties operate under their own privacy policies.
uk999 is committed to processing personal data lawfully, fairly, and transparently, and to ensuring that all personal data held is accurate, kept secure, and retained only for as long as is necessary for the purposes for which it was collected or as required by applicable law or regulatory obligation.
Data Controller
For the purposes of applicable data protection legislation, uk999 acts as the Data Controller in respect of personal data collected from Players and website visitors in connection with the uk999 platform and services. As Data Controller, uk999 determines the purposes for which and the means by which personal data is processed.
Where uk999 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or customer support platform providers — those third parties act as Data Processors and are bound by data processing agreements that require them to process personal data only in accordance with uk999's documented instructions and in compliance with applicable data protection standards.
Players may contact uk999's data protection contact at any time via email at [email protected] with queries, concerns, or requests relating to the processing of their personal data.
Personal Data We Collect
uk999 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance obligations:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or government ID number, gender | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number, residential address | Account registration; support contact |
| Financial Data | Payment method details (JazzCash/EasyPaisa account identifiers, bank account references), transaction history, deposit and withdrawal records | Payment processing; KYC verification |
| Verification Documents | Copies of CNIC or other government-issued photo ID; proof of address documents; payment method verification screenshots | KYC verification |
| Gameplay Data | Game session history, bet amounts and outcomes, wagering patterns, bonus usage, sports betting selections | Platform use; responsible gaming monitoring |
| Technical Data | IP address, device type and identifiers, browser type and version, operating system, session timestamps | Platform access; security and fraud monitoring |
| Communications Data | Records of support communications including live chat transcripts and email correspondence | Customer support interactions |
| Preferences Data | Responsible gaming tool settings, notification preferences, language and display preferences | Account settings; responsible gaming tool use |
uk999 does not collect sensitive special-category personal data — such as data concerning racial or ethnic origin, political opinions, religious beliefs, health conditions, or biometric data — except where strictly necessary for age verification or identity verification purposes in compliance with anti-money-laundering obligations, in which case such data is handled with enhanced security controls and is retained only for the minimum period required by applicable law.
How We Collect Your Data
uk999 collects personal data through the following primary mechanisms:
- Direct Provision: Data you provide directly by completing the uk999 account registration form, submitting identity or payment verification documents, completing responsible gaming tool configurations, or contacting uk999 customer support.
- Automated Collection: Technical data collected automatically when you access the uk999 platform, including IP address, device identifiers, browser characteristics, and session activity logs, collected through cookies, server logs, and similar technologies.
- Transaction Records: Financial and gameplay data generated automatically as a result of your transactions and gameplay activity on the uk999 platform.
- Third-Party Verification Services: Identity and age verification data obtained from third-party KYC service providers engaged by uk999 to verify the identity of Players in compliance with anti-money-laundering and responsible gaming obligations.
- Payment Service Providers: Transaction confirmation data and payment status information received from payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and cryptocurrency processing partners.
How We Use Your Personal Data
uk999 uses personal data collected from Players for the following purposes:
- Account Management: Creating, maintaining, and managing your uk999 account, including authenticating your identity at login and processing account-related requests.
- Service Delivery: Providing access to casino games, sports betting markets, live dealer services, promotions, and all other features of the uk999 platform.
- Payment Processing: Processing deposits and withdrawals through your chosen payment method, verifying payment method ownership, and maintaining accurate transaction records.
- KYC & AML Compliance: Verifying your identity and age to comply with Know Your Customer and anti-money-laundering obligations under uk999's applicable licensing framework.
- Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour; administering responsible gaming tools including deposit limits, session timers, and self-exclusion; and contacting Players where responsible gaming concerns are identified.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited conduct as defined in the uk999 Terms & Conditions.
- Customer Support: Responding to account queries, payment questions, technical support requests, complaints, and responsible gaming assistance requests.
- Legal & Regulatory Compliance: Fulfilling legal obligations, responding to regulatory inquiries, and cooperating with law enforcement authorities where required by applicable law.
- Platform Improvement: Analysing aggregated, anonymised usage patterns to improve the functionality, game selection, payment options, and overall user experience of the uk999 platform.
Legal Basis for Processing
uk999 processes personal data on the following legal bases, as applicable to each processing activity:
- Contract Performance: Processing necessary to perform the contract established by the uk999 Terms & Conditions, including account management, service delivery, and payment processing.
- Legal Obligation: Processing required to comply with legal and regulatory obligations, including KYC verification, anti-money-laundering record-keeping, and cooperation with regulatory authorities.
- Legitimate Interests: Processing conducted on the basis of uk999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental data protection rights.
- Consent: Processing based on your specific, informed, and freely given consent, where consent is the appropriate legal basis — for example, in relation to certain marketing communications. You may withdraw consent at any time by contacting uk999 support, without affecting the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Third-Party Disclosure
uk999 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. Personal data may be shared with the following categories of third parties, solely for the purposes described in this policy:
- Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and cryptocurrency processing partners — for the purpose of processing deposits and withdrawals and verifying payment method ownership.
- Identity Verification Providers: Third-party KYC and age verification service providers engaged to verify identity documents and confirm player eligibility in accordance with licensing requirements.
- Game Providers: Third-party casino game studios and sports data providers whose games and data feeds are integrated into the uk999 platform — limited to data necessary for game delivery and bet settlement.
- Customer Support Platforms: Third-party live chat and helpdesk software providers engaged to deliver customer support services on behalf of uk999.
- Legal & Regulatory Authorities: Regulatory bodies, law enforcement agencies, and courts of competent jurisdiction where disclosure is required by applicable law, court order, or regulatory instruction.
- Anti-Fraud Networks: Industry anti-fraud and anti-money-laundering networks operated under licensing framework requirements, for the purpose of detecting and preventing financial crime.
All third-party service providers who process personal data on uk999's behalf are required to enter into written data processing agreements that contractually restrict their use of personal data to uk999's documented instructions and that require them to maintain appropriate technical and organisational security measures protecting the personal data processed on uk999's behalf.
Cookies & Tracking Technologies
uk999 uses cookies and similar tracking technologies on the uk999 website to support platform functionality, measure performance, and maintain session security. Cookies are small data files placed on your device when you visit the uk999 website. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the operation of the uk999 platform — including session authentication, login state maintenance, and security features. These cookies cannot be disabled without rendering the platform non-functional.
- Functional Cookies: Used to remember your preferences and personalisation settings — such as language preferences, responsible gaming tool configurations, and display settings — to provide a consistent experience across sessions.
- Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the uk999 platform — including pages visited, session durations, and navigation patterns — to help uk999 improve platform performance and user experience. No personally identifiable information is included in analytics data.
- Security Cookies: Used for fraud prevention, bot detection, and platform security purposes — including detecting suspicious access patterns and unusual session activity.
You may configure your browser settings to block or delete cookies. Note that blocking strictly necessary cookies will prevent access to key platform features including account login. For analytics and functional cookies, you may opt out through your browser settings or by contacting uk999 support.
Data Retention
uk999 retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or licensing obligations. The following general retention principles apply:
- Active Account Data: Personal data associated with an active uk999 account is retained for the duration of the account relationship and is updated by you as necessary to keep it current and accurate.
- Post-Closure Account Data: Following account closure, uk999 retains identity data, transaction records, and KYC documentation for a minimum period of five years, in compliance with anti-money-laundering record-keeping requirements under the applicable licensing framework.
- Communications Data: Customer support communications are retained for a minimum of two years from the date of the communication, to support the investigation of subsequent queries, complaints, or disputes.
- Technical & Log Data: Server logs and technical access data are retained for a period of up to 12 months, after which they are anonymised or deleted.
- Self-Exclusion Records: Records of self-exclusion requests are retained indefinitely to prevent circumvention of exclusion through re-registration.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to backup or archival system constraints, uk999 ensures that such data is isolated from active processing until it can be securely deleted.
International Data Transfers
uk999 operates under international gaming authority licensing, which involves the use of technology infrastructure and service providers that may be located in jurisdictions outside Pakistan. Personal data processed by uk999 may therefore be transferred to, stored in, or processed in countries other than Pakistan in connection with the delivery of uk999 services.
Where personal data is transferred internationally, uk999 ensures that such transfers are made only to recipients in jurisdictions that provide an adequate level of data protection, or under appropriate safeguards — such as contractual data transfer mechanisms — that ensure the protection of personal data to a standard equivalent to that applied within uk999's licensing jurisdiction.
uk999 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without appropriate contractual safeguards in place. Players who have questions about international data transfers may contact uk999 support for further information about the safeguards applicable to their personal data.
Your Data Rights
Depending on applicable data protection law, you may hold the following rights in relation to your personal data held by uk999. uk999 will respond to all valid data rights requests within a reasonable timeframe and in any event within the timeframe required by applicable law:
Right of Access
Request a copy of the personal data uk999 holds about you, together with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held on your uk999 account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention obligations.
Right to Restriction
Request that uk999 restricts the processing of your personal data in defined circumstances pending resolution of a dispute or objection.
Right to Portability
Request your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
Object to processing of your personal data carried out on the basis of uk999's legitimate interests, including objection to direct marketing.
To exercise any of the above rights, please contact uk999 support at [email protected] with a description of your request. uk999 may require you to verify your identity before processing a data rights request, to prevent unauthorised disclosure of personal data to third parties. uk999 will not charge a fee for processing standard data rights requests.
The right to erasure is not absolute. uk999 may be required to retain certain personal data notwithstanding an erasure request, where retention is necessary to comply with a legal obligation — for example, anti-money-laundering record-keeping requirements that mandate retention of identity and transaction records for a minimum of five years following account closure. uk999 will inform you of any such limitation when responding to your erasure request.
Children & Minors
The uk999 platform is strictly intended for adults aged 21 years and above. uk999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the uk999 account registration process, and additional identity verification is required at the point of withdrawal.
If uk999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through account registration, bypass of age verification controls, or any other means — uk999 will immediately suspend the relevant account, delete all personal data associated with that account to the extent legally permissible, and ensure that no financial transactions conducted through the account are honoured.
If you have reason to believe that a minor has created or is using a uk999 account, please contact uk999 support immediately. uk999 treats reports of underage gambling with the utmost urgency and will investigate all such reports as a priority.
Security Measures
uk999 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
- Encryption in Transit: All data transmitted between your device and the uk999 platform is protected by TLS (Transport Layer Security) encryption, preventing interception during transmission.
- Encryption at Rest: Sensitive personal data stored on uk999 systems — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms.
- Access Controls: Access to personal data within uk999's internal systems is restricted on a strict need-to-know basis. All internal access is authenticated and logged, with regular access reviews conducted.
- Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their uk999 accounts to provide an additional layer of protection against unauthorised access.
- Fraud & Anomaly Detection: uk999 operates continuous automated monitoring systems designed to detect unusual account activity, suspicious transaction patterns, and potential security incidents in real time.
- Incident Response: uk999 maintains a documented security incident response procedure. In the event of a data breach that poses a risk to the rights and freedoms of Players, uk999 will notify affected individuals and relevant authorities in accordance with applicable legal requirements.
Notwithstanding the above measures, no method of data transmission over the internet or electronic storage is completely secure. While uk999 applies commercially reasonable security standards, uk999 cannot guarantee the absolute security of personal data transmitted to or from the platform.
Amendments to This Policy
uk999 reserves the right to amend, update, or replace this Privacy Policy at any time. Where changes to this policy are material — meaning they substantively affect the rights of Players or the manner in which personal data is processed — uk999 will provide advance notice of the proposed changes through one or more of the following channels: email notification to the address registered on your account; a notice displayed upon login to your uk999 account; or publication on the uk999 website with a revised effective date clearly stated.
Non-material amendments — such as typographical corrections, clarifications of existing provisions, or updates required to reflect changes in applicable law — may be made without advance notice. The revised policy will be effective from the date of publication.
uk999 recommends that Players review this Privacy Policy periodically to remain informed of any changes. Your continued use of the uk999 platform following publication of any amendment constitutes your acknowledgement of the updated policy. The "Last Updated" date at the top of this document will be revised whenever changes are made.
Contact & Complaints
If you have any questions, concerns, or complaints regarding the content of this Privacy Policy or uk999's personal data processing practices, please contact uk999 using the following details. uk999 is committed to addressing all data protection queries promptly and in good faith.
- Data Protection Contact: [email protected] — marked "Privacy Query" in the subject line for prioritisation.
- Live Chat: Available within your uk999 account after login — 24 hours a day, 7 days a week.
- Response Commitment: uk999 aims to acknowledge all privacy-related queries within 48 hours and to provide a substantive response within 14 days. Complex requests — such as access requests involving large volumes of data — may take up to 30 days, in which case uk999 will notify you of the extended timeline.
If you are not satisfied with uk999's response to a data protection complaint, you may have the right to escalate your complaint to the relevant data protection authority or regulatory body under the framework applicable to uk999's licensing jurisdiction. uk999 will cooperate fully with any regulatory investigation arising from a data protection complaint submitted by a Player.
This Privacy Policy should be read alongside the uk999 Terms & Conditions and the uk999 Responsible Gaming Policy, both of which contain provisions relevant to the handling of your personal data and account information.