899u44 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 899u44 ("we", "us", "our", or "899u44"), the operator of the online casino and sports betting platform at 899u44.net, collects, uses, stores, and protects the personal data of individuals who register for or use the Platform ("you", "your", "user").

This Policy is intended to meet the transparency and disclosure requirements of applicable data protection frameworks, including principles aligned with the General Data Protection Regulation (GDPR). While Pakistan has its own evolving data protection legislative environment, 899u44 applies GDPR-aligned data handling standards as a baseline commitment to our users across all markets.

This Policy applies to all personal data collected through:

• The 899u44 website at 899u44.net and any associated subdomains;
• Mobile-optimised versions of the Platform;
• Customer support communications via live chat, email, or any other channel;
• Payment processing interactions with our integrated payment partners;
• Identity verification processes undertaken during KYC.

Please read this Policy carefully and in conjunction with our Terms & Conditions. If you do not agree with the practices described in this Policy, please do not register for or use the 899u44 Platform.

2 Data Controller

For the purposes of this Privacy Policy, 899u44 acts as the data controller in respect of personal data collected from users of the Platform. As data controller, 899u44 determines the purposes for which and the means by which personal data is processed.

Where 899u44 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, and cloud hosting services — those parties act as data processors under contractual obligations that require them to process data only on 899u44's instructions and in accordance with appropriate data protection standards.

For all data protection enquiries, access requests, or complaints, please refer to the contact details in Section 15 of this Policy.

3 Data We Collect

899u44 collects personal data in three primary ways: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party verification and payment partners.

3.1 — Data You Provide Directly

3.2 — Data Collected Automatically

When you access the 899u44 Platform, our systems automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Session timestamps, login and logout records;
• Pages visited, games played, and betting activity logs;
• Cookie identifiers and session tokens (see Section 9).

3.3 — Data Received from Third Parties

We may receive supplementary identity and fraud-risk data from our KYC verification partners and payment processors, used solely for the purposes of account verification and anti-money laundering compliance. 899u44 does not purchase marketing data lists or acquire personal data from data brokers.

4 How We Use Your Data

899u44 uses your personal data only for specific, legitimate purposes. The table below maps each data category to its primary purpose and the legal basis on which we rely:

• Account creation and management: To register your account, authenticate your identity at login, and maintain your account profile throughout your relationship with 899u44;
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT, and Cash Deposit channels in PKR;
• KYC and AML compliance: To verify your identity and age (21+ requirement), satisfy anti-money laundering obligations, and detect and prevent fraudulent account activity;
• Service delivery: To provide access to casino games, PSL and cricket betting markets, slot games, and all other Platform features;
• Responsible gaming: To enforce deposit limits, loss limits, cooling-off periods, and self-exclusion requests that you have set or that we are obligated to apply;
• Customer support: To respond to queries, resolve disputes, and maintain a record of your interactions with our support team;
• Security and fraud prevention: To monitor for suspicious activity, investigate potential Terms of Service violations, and protect the integrity of the Platform;
• Marketing communications: To send you promotional offers, bonus notifications, and PSL event alerts — but only where you have opted in to receive such communications (see Section 11);
• Legal and regulatory compliance: To meet our obligations under applicable gaming regulations, financial crime legislation, and any lawful requests from competent authorities.

5 Legal Basis for Processing

Where GDPR-aligned standards apply, 899u44 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to provide the services you have contracted for when creating your 899u44 account — including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, age verification requirements, and responses to lawful regulatory requests;
• Legitimate interests: Processing for fraud prevention, platform security, and improvement of our services where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, certain non-essential cookies, and any other processing activity where consent is specifically solicited. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6 Sharing Your Personal Data

899u44 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT processing partners receive only the payment-related data necessary to complete your transaction. These partners are bound by their own regulatory requirements and data protection obligations;
• KYC and identity verification providers: Our contracted identity verification partner receives your CNIC data and associated documents solely for the purpose of completing age and identity checks as required by our operating licence;
• Cloud infrastructure providers: 899u44 uses enterprise-grade cloud hosting services. Server infrastructure providers process data as data processors under strict contractual terms and do not have access to personally identifiable data in unencrypted form;
• Fraud prevention services: Anonymised or pseudonymised device fingerprinting and risk-scoring data may be shared with fraud prevention platforms to detect and prevent multi-account abuse and payment fraud;
• Legal and regulatory authorities: Where required by applicable law or a lawful order from a competent authority (such as a financial intelligence unit, gaming regulator, or court), 899u44 may be legally obligated to disclose specific personal data. We will seek to notify affected users where permitted by law before complying with such requests;
• Business succession: In the event of a merger, acquisition, or transfer of material assets, user data may be transferred to a successor entity, subject to the same privacy protections described in this Policy. Users will be notified of any such transfer in advance.

7 Data Retention

899u44 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, regulatory, accounting, or reporting requirements.

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in order to satisfy anti-money laundering record-keeping obligations;
• KYC documentation: Identity documents and verification records are retained for a minimum of five (5) years following the end of the customer relationship, as required by applicable financial crime legislation;
• Transaction records: Full betting history, deposit records, and withdrawal records are retained for a minimum of five (5) years for regulatory compliance and dispute resolution purposes;
• Support communications: Customer support transcripts are retained for two (2) years from the date of each interaction;
• Marketing data: Where you have opted in to marketing communications, your contact details for marketing purposes are retained until you withdraw consent or unsubscribe. Withdrawal of marketing consent does not affect the retention of data held for other purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8 Security Measures

899u44 implements a comprehensive, layered security framework to protect your personal data against unauthorised access, loss, destruction, or alteration. Our technical and organisational security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and 899u44 servers;
• AES-256 encryption at rest for all stored personal data, including identity documents and financial records;
• Segregated player fund accounts — your deposited balance is held in accounts separate from 899u44's operational capital;
• Role-based access controls (RBAC) ensuring staff access only the data necessary for their specific function;
• Multi-factor authentication (MFA) on all internal administrative systems;
• Regular penetration testing and security audits conducted by independent third-party security firms;
• Automated anomaly detection systems that flag unusual access patterns, login attempts from new devices, and abnormal transaction behaviour;
• Incident response procedures — in the event of a data breach that poses a risk to your rights and freedoms, 899u44 will notify affected users without undue delay and, where required, notify the relevant supervisory authority.

9 Cookies & Tracking Technologies

899u44 uses cookies and similar tracking technologies on the Platform to provide essential functionality, improve performance, and (where you have consented) deliver personalised content and targeted communications.

Types of cookies used:

• Strictly necessary cookies: Required for core Platform functions including login session management, game state preservation, and security token validation. These cookies cannot be disabled without impairing Platform functionality;
• Performance and analytics cookies: Used to collect anonymised data on how users navigate the Platform, which games are most popular, and where technical errors occur. This information is used solely to improve Platform performance;
• Functional cookies: Remember your preferences such as preferred language, recently played games, and responsible gaming settings;
• Marketing and retargeting cookies: Used only where you have provided explicit consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns.

You may manage your cookie preferences via your browser settings at any time. Disabling cookies beyond strictly necessary types may affect the functionality of some Platform features. Your consent preferences for non-essential cookies can also be updated via the cookie consent manager accessible from the Platform footer.

10 Your Data Protection Rights

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data that 899u44 holds about you:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how we use it. We will respond to access requests within 30 days;
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated. You can update most profile information directly via Account Settings;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping);
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances, for example while a data accuracy dispute is being resolved;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond within 30 days of receiving a valid request. We may request proof of identity before processing certain requests.

11 Marketing Communications

899u44 may send you promotional communications by SMS, email, or push notification where you have explicitly opted in to receive such communications during registration or subsequently via Account Settings.

Marketing communications from 899u44 may include: welcome bonus information, reload bonus offers, PSL season promotions, cricket betting market alerts, new game launch announcements, and VIP programme updates.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email we send;
• Updating your communication preferences in Account Settings;
• Contacting our support team via live chat and requesting removal from all marketing lists.

Please note that opting out of marketing communications will not affect transactional communications, which include deposit confirmation messages, withdrawal processing notifications, security alerts, and critical account notifications. These are sent regardless of marketing preferences as they are necessary for account security and service delivery.

12 Minors & Age Policy

899u44 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adult users aged 21 and above. CNIC-based age verification is mandatory for all new registrations and must be completed before any withdrawal is processed.

Where we become aware that personal data has been collected from a person under 21 — whether through KYC verification, parental notification, or our own internal checks — we will immediately suspend the relevant account, void any bets placed and any bonus claims, and securely delete or return all personal data associated with that account as soon as legally permissible.

If you believe a person under 21 in your household has registered or is using a 899u44 account, please contact our support team immediately via live chat. We take underage gambling prevention extremely seriously and will act on credible reports without delay.

13 International Data Transfers

In order to provide the 899u44 Platform, your personal data may be transferred to and processed in countries outside Pakistan. This may occur where our cloud infrastructure providers, KYC verification partners, or payment processors operate servers or processing facilities in other jurisdictions.

Where such transfers occur, 899u44 takes all reasonable steps to ensure that your personal data receives an equivalent level of protection to that provided under Pakistani law and GDPR-aligned standards, including through the use of:

• Standard contractual clauses between 899u44 and its data processors that impose GDPR-equivalent obligations;
• Data processing agreements that restrict the use of transferred data to the specific purposes authorised by 899u44;
• Technical controls including end-to-end encryption that protect data in transit regardless of the jurisdiction through which it passes.

14 Changes to This Policy

899u44 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. Where changes are material — meaning they significantly affect your rights or how we process your data — we will notify you by email at least seven (7) days before the updated Policy takes effect.

Minor updates, such as formatting corrections or clarifications that do not alter the substantive meaning of any provision, may be published without advance notice. The "Last Updated" date at the top of this Policy will always reflect when the most recent version was published.

Your continued use of the 899u44 Platform after any updated Policy takes effect constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of any changes.

15 Contact & Data Protection Officer

For any privacy-related queries, data subject access requests, or formal complaints regarding 899u44's data processing practices, please use the following contact channels:

• General Privacy Queries & Support: [email protected]
• Data Protection Officer (DPO): [email protected]
• Live Chat: Available 24/7 via the chat icon on any page of the Platform — fastest response for general queries.

When submitting a data subject request, please include your full registered name, registered email address, and a clear description of the specific right you wish to exercise or the concern you wish to raise. We may request proof of identity before processing the request. We commit to responding to all data subject requests within 30 calendar days of receipt.