sp999 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how sp999 ("we", "us", "our", "the Company") collects, processes, stores and protects personal information belonging to users ("you", "your") of the sp999 online gaming platform, accessible at sp999.ws and all associated mobile interfaces ("the Platform").

sp999 is committed to handling your personal data with transparency, integrity and security. We operate the Platform for Pakistani players across Karachi, Lahore, Islamabad, Faisalabad and all major cities, and we understand that your trust in us depends not just on the quality of our gaming products but on how responsibly we manage the information you share with us.

This Policy applies to all personal data collected through the sp999 Platform — whether you are a registered account holder, a visitor browsing the site, or a person who has contacted our support team. Please read it carefully. If you do not agree with any part of this Policy, you should not use the sp999 Platform.

This Policy should be read alongside the sp999 Terms & Conditions and the sp999 Responsible Gaming Policy, both of which are incorporated by reference.

02 Information We Collect

sp999 collects personal data in the following categories, depending on how you interact with the Platform:

sp999 does not knowingly collect personal data from individuals under the age of 21. Our Platform is strictly for adults. If we become aware that data from an under-age individual has been collected, it will be deleted immediately and the associated account closed.

03 How We Use Your Data

sp999 uses your personal data only for clearly defined, legitimate purposes. The table below sets out each purpose alongside the type of data used:

• Account creation and management: We use your identity and contact data to create your sp999 account, authenticate your login sessions, and keep your account details current.
• Age and identity verification: We are required to verify that every sp999 player is at least 21 years old. We use identity data and document scans to fulfil this obligation.
• Payment processing: We use your financial data to process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Raast, and to execute withdrawal requests to your registered payment account.
• Provision of gaming services: We use your gaming activity data to deliver cricket betting, live casino, slots and other Platform features, and to settle bets and calculate balances accurately.
• Customer support: We use your contact and communications data to respond to your enquiries, resolve disputes and process formal complaints.
• Responsible gaming compliance: We monitor gaming activity data to identify potentially problematic gambling patterns and to administer self-exclusion, deposit limits and cool-off periods you have set.
• Anti-fraud and anti-money laundering: We use technical, financial and gaming activity data to detect and prevent fraud, collusion, multi-accounting and money laundering in compliance with applicable AML standards.
• Marketing and promotions: Where you have given consent, we use your contact data to send you information about sp999 bonuses, promotions and new features. You may withdraw consent at any time.
• Platform improvement and analytics: We use anonymised and aggregated usage and technical data to understand how Pakistani players interact with the Platform and to improve its performance, layout and features.
• Legal and regulatory compliance: We use your data as required to comply with applicable laws, respond to regulatory requests and fulfil our obligations under our international gaming licence.

04 Legal Basis for Processing

sp999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and manage your account, process payments and provide gaming services — i.e., to fulfil the contract between you and sp999.
• Legal obligation: Processing required to comply with age verification mandates, anti-money laundering regulations, and reporting obligations under our international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection and internal analytics, where those interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications. You may withdraw your consent at any time by updating your account notification preferences or by contacting sp999 support.

05 Sharing Your Information

sp999 does not sell your personal data. We do not share your data with third parties for their own marketing purposes. Your information may be shared only in the following limited and controlled circumstances:

• Payment processors: We share the minimum financial data necessary with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and Raast to process your deposits and withdrawals. These providers handle your data under their own privacy and security frameworks.
• Gaming content providers: Live casino and slot game providers may receive a session token and technical data sufficient to deliver their games within the sp999 Platform. They do not receive your full identity or financial data.
• Identity verification services: We use regulated third-party KYC (Know Your Customer) services to validate CNIC or passport documents submitted during account verification. These providers are bound by confidentiality obligations.
• Regulatory and law enforcement authorities: sp999 is required by law and under the terms of our international gaming licence to report certain activities — including suspected money laundering or fraud — to relevant authorities. We will comply with lawful requests for data disclosure.
• Professional advisors: Our legal, audit and compliance advisors may access your data to the minimum extent necessary for them to provide professional services to sp999. All such advisors are bound by confidentiality obligations.
• Business successors: In the event of a merger, acquisition or sale of all or part of the sp999 business, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

In all cases where your data is shared with a third party, sp999 takes reasonable steps to ensure that appropriate data protection measures are in place.

06 Cookies & Tracking Technologies

sp999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns and support security functions. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies, security tokens and load-balancing identifiers. They cannot be disabled without rendering core Platform features inoperable.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method and display options. These persist between sessions so you do not need to reconfigure your settings each time you log in.
• Analytics cookies: Used to collect anonymised data about how users navigate the Platform — pages visited, time on site, and interaction patterns. This data is used in aggregate to improve Platform design and performance.
• Marketing cookies: Used only where you have given consent, to measure the effectiveness of promotional campaigns and tailor bonus offers to your gaming preferences.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the sp999 Platform but may affect your experience. Strictly necessary cookies cannot be disabled.

07 Data Retention

sp999 retains your personal data only for as long as is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements. The following retention periods apply:

After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

08 Data Security

sp999 implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration or destruction. Our security measures include:

• Encryption in transit: All data transmitted between your device and the sp999 Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption strength.
• Encryption at rest: Sensitive data stored on sp999 servers — including identity documents, financial account details and password hashes — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within sp999's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo regular data protection training.
• Two-factor authentication: sp999 supports and encourages two-factor authentication for all player accounts to reduce the risk of unauthorised access in the event of credential compromise.
• Intrusion detection and monitoring: sp999's infrastructure is continuously monitored for suspicious activity, attempted breaches and anomalous access patterns.
• Penetration testing: sp999 commissions regular independent security assessments of its Platform infrastructure to identify and remediate vulnerabilities proactively.

In the event of a data breach that poses a material risk to your rights and interests, sp999 will notify affected users within a reasonable timeframe and take all appropriate remedial action.

09 Your Rights Over Your Data

As an sp999 user, you hold a number of rights with respect to the personal data we hold about you. sp999 is committed to honouring these rights promptly and without unnecessary friction. Your rights include:

• Right of access: You may request a copy of all personal data sp999 holds about you. We will provide this within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly in your account settings.
• Right to erasure: You may request that sp999 delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that sp999 restrict processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that sp999 provide your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the sp999 support team via live chat or email. We may need to verify your identity before processing your request. We will respond within 30 days and will not charge a fee for reasonable requests.

10 Children & Minors

The sp999 Platform is strictly intended for adults aged 21 and above. sp999 does not knowingly collect, process or store personal data belonging to individuals under the age of 21. Our age verification process is specifically designed to prevent underage individuals from accessing real-money gaming features.

If you are a parent or guardian and have reason to believe that a person under your care has created an sp999 account or accessed the Platform, please contact our support team immediately. We will investigate and act on all such reports without delay.

sp999 also recommends that parents and guardians in Pakistan use device-level parental control tools and content filtering solutions to prevent minors from accessing online gaming platforms.

11 International Data Transfers

sp999 operates under an international gaming licence and may use service providers — including KYC verification partners, gaming software vendors and cloud infrastructure providers — that are based outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than Pakistan.

Wherever your data is transferred internationally, sp999 takes appropriate steps to ensure that the transfer is subject to adequate data protection safeguards, including:

• Contractual data protection clauses equivalent to internationally recognised standards;
• Transfers to service providers operating in jurisdictions with recognised adequacy determinations; or
• Binding corporate rules or equivalent frameworks where applicable.

sp999 does not transfer your financial data — including JazzCash, EasyPaisa or bank account details — to any jurisdiction where adequate protections cannot be confirmed. Payment processing for PKR transactions is handled by providers operating within Pakistan's regulated financial system.

12 Changes to This Privacy Policy

sp999 reserves the right to update or modify this Privacy Policy at any time. When we make material changes to how we collect, use or share your personal data, we will notify registered users by email or via an in-platform notification before the changes take effect.

Minor updates — such as clarifications of existing language, corrections to typographical errors or non-material structural changes — may be made without advance notice. The "Last updated" date at the top of this page always reflects when the most recent version was published.

Your continued use of the sp999 Platform after the effective date of any revised Policy constitutes your acceptance of the updated version. If you do not agree with any changes, you should cease using the Platform and contact us to request account closure.

13 Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how sp999 has handled your personal information, please contact us through the following channel:

sp999 takes all privacy complaints seriously and will investigate each one thoroughly. If you are not satisfied with our response, you may refer your complaint to the relevant supervisory authority under the jurisdiction of our international gaming licence.

For further information on your data rights or responsible gaming protections, please visit the sp999 Responsible Gaming page or review the sp999 Terms & Conditions.