Data Protection & Privacy
This Privacy Policy explains how ur999 collects, uses, stores, shares, and protects the personal information of players who access our online casino and sports betting platform. ur999 is committed to handling your data responsibly and transparently, in full compliance with the data protection requirements of our international gaming license. Please read this Policy carefully alongside our Terms & Conditions and Responsible Gaming Policy.
DATA PROTECTION
Your privacy is a core ur999 commitment
Our Privacy Principles
ur999's approach to your personal data is guided by six foundational principles. These principles govern every decision we make about how player information is collected, processed, and stored.
ur999 collects personal data only for specific, explicitly stated purposes — operating your account, processing payments, complying with licensing KYC requirements, and delivering responsible gaming tools. We do not collect data speculatively for undefined future uses.
ur999 requests only the minimum personal information necessary to deliver our services and meet licensing obligations. We do not ask for data we do not need. Standard KYC requires CNIC and mobile number — not more than is proportionate to the service being provided.
All personal data processed by ur999 is protected by 256-bit SSL encryption in transit and strong encryption at rest. Access to player data within our systems is restricted on a strict need-to-know basis with audit logging of all internal data access events.
ur999 tells you what data we hold, why we hold it, who we share it with, and how long we keep it. This Privacy Policy is written in plain, accessible English specifically for Pakistani players — not hidden in legal jargon designed to obscure our practices.
ur999 respects your right to access, correct, and — where legally and contractually permissible — request deletion of your personal data. Data subject rights requests are processed within 30 days. Your data is yours, and we treat it that way.
ur999 retains personal data only for as long as necessary to fulfill the purpose for which it was collected or to meet legal and regulatory retention requirements imposed by our international gaming license. Data no longer required is securely deleted or anonymised.
Contents
Section 1
ur999 is an online gaming platform operating at https://ur999.bid, offering casino games, sports betting, live dealer tables, and related services primarily to players located in Pakistan. ur999 operates under an international gaming license that imposes binding data protection and player privacy obligations on our operations.
For the purposes of this Privacy Policy, ur999 acts as the data controller in respect of the personal information collected from players and visitors to the ur999 platform. As data controller, ur999 is responsible for determining the purposes and means by which your personal data is processed.
In certain contexts — specifically where game content is delivered by third-party certified game providers integrated into the ur999 platform — those providers may act as independent data controllers or as data processors under agreement with ur999. This Policy addresses ur999's own data processing activities; third-party game providers operate under their own privacy policies where they act as independent controllers.
Section 2
This Privacy Policy applies to all personal data collected and processed by ur999 in connection with:
This Policy should be read together with ur999's Terms & Conditions and Responsible Gaming Policy, all of which are accessible via links in the footer of every page on the ur999 platform.
Pakistani Players: ur999 primarily serves players located in Pakistan. This Policy is written with Pakistani players in mind. ur999 complies with the data protection requirements imposed by its international gaming license, which set the baseline standards governing how we handle your personal information.
Section 3
ur999 collects the following categories of personal data from players, depending on the nature of your interaction with the platform:
3.1 Identity & Contact Data
3.2 Financial Data
3.3 Gaming Activity Data
3.4 Technical & Device Data
3.5 Communication Data
Section 4
ur999 collects personal data through the following channels and mechanisms:
4.1 Direct Collection
The majority of personal data ur999 holds about you is data you provide directly — during the registration process, when completing KYC verification, when making a deposit or withdrawal request, or when contacting our support team. ur999 does not infer or obtain personal data from public registries or third-party data brokers.
4.2 Automated Collection
When you access the ur999 platform, certain technical data is collected automatically by our servers and through cookies placed on your device. This includes your IP address, browser type, operating system, pages visited, and session duration. This data is used for security monitoring, fraud detection, and platform performance optimisation.
4.3 Payment Provider Data
When you transact through JazzCash, EasyPaisa, or other integrated payment channels, ur999 receives confirmation data from those providers — typically a transaction reference, amount, and wallet identifier. ur999 does not store your full mobile banking credentials; authentication with payment providers occurs directly on their own secure platforms.
4.4 KYC Verification Partners
In some cases, ur999 may engage regulated KYC verification service providers to assist with identity document checking. These providers process identity document images solely for verification purposes under written data processing agreements with ur999 and are prohibited from retaining or reusing data for any other purpose.
Section 5
ur999 processes your personal data on the following legal bases, depending on the specific processing activity:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and identity verification | Contract performance; Legal obligation (KYC/AML) |
| Processing deposits and withdrawals | Contract performance |
| Game session delivery and bet settlement | Contract performance |
| Fraud detection and security monitoring | Legitimate interests; Legal obligation |
| Anti-money laundering compliance and reporting | Legal obligation |
| Responsible gaming monitoring and intervention | Legal obligation (licensing requirement); Vital interests |
| Customer support communications | Contract performance; Legitimate interests |
| Promotional communications (where opted in) | Consent |
| Platform analytics and performance improvement | Legitimate interests |
| Retention of records for licensing compliance | Legal obligation |
Section 6
ur999 uses the personal data we collect for the following purposes:
Section 7
ur999 does not sell your personal data to third parties. We share personal data only in the following controlled circumstances:
7.1 Payment Service Providers
ur999 shares necessary transaction data with integrated payment service providers — including JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank — solely to process your deposit and withdrawal requests. These providers act as independent data controllers subject to their own privacy policies and regulatory obligations under Pakistani banking law.
7.2 Game Software Providers
ur999 integrates casino games from certified third-party game providers. These providers may receive technical session data necessary to deliver the game experience — such as a session token and stake amount. They do not receive your full personal profile or payment details. All game providers integrated into ur999 operate under written data processing agreements.
7.3 KYC and Compliance Partners
ur999 may share identity documents with regulated KYC verification service providers solely for the purpose of verifying your identity in fulfilment of our licensing KYC obligations. These providers process data under strict contractual restrictions limiting reuse or onward transfer.
7.4 Legal and Regulatory Disclosure
ur999 may disclose personal data to regulators, law enforcement authorities, or courts where required to do so by applicable law, by order of a court of competent jurisdiction, or by the requirements of our international gaming license. Such disclosures will be limited to the information strictly required by the relevant legal obligation.
No Sale of Data: ur999 does not sell, rent, or trade your personal information to third-party advertisers, data brokers, marketing agencies, or any other unaffiliated parties for commercial purposes. Data sharing is limited to what is operationally necessary to provide our services and meet legal obligations.
Section 8
The ur999 platform uses cookies and similar tracking technologies to support core functionality and improve the player experience. Cookies are small text files placed on your device when you visit a website.
8.1 Essential Cookies
Certain cookies are strictly necessary for the ur999 platform to function. These include session management cookies that keep you logged in during your gaming session, security cookies that support login authentication and OTP verification, and load-balancing cookies that direct your requests to the appropriate server. Essential cookies cannot be disabled without impairing platform functionality.
8.2 Analytics Cookies
ur999 uses analytics cookies to understand how players navigate the platform — which pages are visited most frequently, where players encounter difficulties, and how performance varies across different device types and Pakistani network connections. Analytics data is processed in aggregated, anonymised form. Where individual-level analytics processing occurs, this is conducted on a legitimate interests basis.
8.3 Preference Cookies
Preference cookies allow the ur999 platform to remember your settings — such as preferred display language, responsible gaming limit configurations, and game lobby sort preferences — so you do not need to reset them on each visit.
8.4 Managing Cookies
You may configure your browser to refuse non-essential cookies or to alert you before cookies are placed. However, disabling essential cookies will impair or prevent your ability to use the ur999 platform, including account login. Most mobile browsers used by Pakistani players include accessible cookie management settings in their privacy or security menus.
Section 9
ur999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:
No Absolute Guarantee: While ur999 employs industry-standard security measures, no online platform can guarantee absolute security against all possible threats. ur999 strongly recommends that players use unique, strong passwords for their Account and enable two-factor authentication. Do not share your login credentials or OTP codes with anyone, including individuals claiming to represent ur999's support team.
Section 10
ur999 retains personal data for the periods set out below, reflecting the purposes for which the data was collected and the retention periods mandated by our licensing authority and applicable law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data (name, mobile, DOB) | Duration of account + 5 years post-closure | Licensing obligation; AML compliance |
| KYC documents (CNIC, proof of address) | Duration of account + 5 years post-closure | Legal obligation (AML/KYC) |
| Financial transaction records | 7 years from transaction date | Legal obligation; Licensing requirement |
| Betting and gaming activity logs | Duration of account + 5 years post-closure | Licensing obligation; Dispute resolution |
| Customer support communications | 3 years from last contact | Legitimate interests; Dispute resolution |
| Self-exclusion and responsible gaming records | Indefinite (permanent self-exclusion records retained permanently) | Legal obligation; Player protection |
| Technical and device logs | 12 months | Legitimate interests (security) |
| Marketing consent records | 3 years from consent or last opt-in, whichever is later | Legal obligation (consent management) |
At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes as it no longer constitutes personal data.
Section 11
ur999 respects your rights in relation to your personal data. The following rights are available to you subject to the conditions and limitations described below:
Right of Access
Request a copy of all personal data ur999 holds about you, along with information on how it is used and with whom it is shared.
Right of Rectification
Request correction of any inaccurate or incomplete personal data ur999 holds about you. CNIC data corrections require supporting documentation.
Right of Erasure
Request deletion of your personal data where retention is no longer necessary. Note: data subject to mandatory legal retention periods cannot be deleted until those periods expire.
Right to Restrict Processing
Request that ur999 restrict processing of your data — for example, while a dispute about the accuracy of your data is being resolved.
Right to Data Portability
Receive a structured, machine-readable copy of personal data you provided to ur999 and which we process on a contractual or consent basis.
Right to Object
Object to processing of your personal data based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon request.
To exercise any of the above rights, please contact ur999's support team. ur999 will respond to all verified data rights requests within 30 days. We may request proof of identity before actioning a data rights request to ensure the security of account data. There is no charge for exercising your data rights in ordinary circumstances.
Section 12
The ur999 platform is strictly restricted to individuals aged 21 and above. ur999 does not knowingly collect personal data from anyone under 21 years of age. Registration constitutes a declaration by the applicant that they are 21 or older, and CNIC-based age verification is conducted as part of the standard KYC process.
If ur999 determines — through KYC verification, parental notification, or any other means — that personal data has been collected from a person under 21, ur999 will immediately close the associated Account, void any bets placed, and securely delete the collected personal data, with any deposited funds returned to the payment method of origin where technically possible.
Parents and guardians who believe a minor may have registered on the ur999 platform are urged to contact ur999's support team immediately. ur999 treats all such notifications as urgent and will act promptly to investigate and resolve the matter.
Section 13
ur999 may send you promotional communications — including bonus offers, free spin notifications, PSL cricket betting promotions, and platform news — via SMS to your registered Pakistani mobile number and by email where provided. All marketing communications from ur999 are sent on an opt-in basis.
You may opt out of receiving marketing communications from ur999 at any time by: updating your communication preferences in your Account settings dashboard; replying STOP to any SMS communication from ur999; or contacting ur999's support team directly to request removal from marketing lists.
Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as necessary components of the account service and cannot be disabled.
No Third-Party Marketing: ur999 does not share your contact details — including your Pakistani mobile number — with third-party marketers or advertisers. All promotional communications you receive will be from ur999 directly, using the registered sender identifiers communicated to you at the time of opt-in.
Section 14
The ur999 platform does not contain links to third-party websites for general browsing or commercial purposes. All navigation within the ur999 platform directs players to pages within the ur999 domain. Where third-party game providers deliver game content within the ur999 platform environment, those providers' data practices are governed by their own privacy policies and their data processing agreements with ur999.
ur999 accepts no responsibility for the privacy practices of any third-party service not directly operated by ur999. Players who access third-party services by typing external addresses into their browser do so entirely outside the scope of this Privacy Policy.
Section 15
ur999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or licensing requirements, or changes in the services we offer. Material changes to this Policy — particularly those that affect how ur999 uses your personal data or that reduce your privacy rights — will be communicated to registered players via SMS to their registered mobile number at least 14 days before the amended Policy takes effect.
The current version of this Privacy Policy, including its effective date and version number, is always available on this page at https://ur999.bid/privacy-policy. Continued use of the ur999 platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you may close your Account by contacting ur999's support team.
Section 16
For all privacy-related enquiries — including data rights requests, questions about how ur999 uses your personal data, or concerns about this Privacy Policy — please contact ur999's support team using the details below:
Your Data Is Safe With Us
ur999 protects your personal data with 256-bit encryption and strict privacy standards built into every part of our platform. PSL cricket betting, live casino, and 500+ slots — available to verified Pakistani players aged 21 and above.