ve999 Privacy Policy — How We Protect Your Personal Data

ve999 Gaming Limited is the data controller responsible for the personal information of players who register and use the ve999 online gaming platform at ve999.org. We take our responsibilities under applicable international data protection law extremely seriously, and this Privacy Policy is designed to give you full, clear visibility over how your personal data is handled at every stage of your relationship with ve999.

This Privacy Policy applies to all personal data collected through the ve999 website at ve999.org, any ve999 mobile applications or progressive web apps, our customer support communications (including emails, live chat, and social messaging), and our marketing and promotional communications where you have consented to receive them.

Pakistan does not yet have a fully enacted, standalone data protection law equivalent to the EU's GDPR; however, ve999 voluntarily applies internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, and individual rights — to all personal data we process, regardless of where the data subject is located. We believe Pakistani players deserve the same standard of data protection as players in any other jurisdiction.

ve999 collects the following categories of personal data, depending on how you interact with our platform:

ve999 does not collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (other than where required for identity verification under applicable licensing conditions), or health data — except where you voluntarily disclose health information in the context of a responsible gaming self-exclusion request, in which case it is used solely to process that request.

ve999 collects personal data through the following mechanisms:

• Direct collection: Data you provide when completing the ve999 registration form, submitting KYC documents, making deposit or withdrawal requests, updating your account profile, contacting support, or subscribing to ve999 promotions.
• Automated technical collection: Data collected automatically when you access ve999.org or the ve999 mobile interface — including your IP address, device identifiers, browser type, session duration, pages visited, game events, and click-stream data. This collection uses server logs, cookies, and similar tracking technologies.
• Third-party sources: Data received from identity verification providers (for KYC purposes), payment processors (JazzCash, EasyPaisa, banks, card networks), fraud detection services, and, where applicable, publicly available sources used for AML screening.
• Responsible gaming tools: Data generated when you set deposit limits, loss limits, session time restrictions, or initiate self-exclusion requests via your ve999 account settings.

ve999 uses your personal data only for the purposes set out below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected, without first obtaining your consent or establishing a separate lawful basis for doing so.

• Account creation and management: To create and maintain your ve999 player account, verify your identity, process your ve999 Login, and manage your account settings and preferences.
• KYC and AML compliance: To verify your identity and age (21+ requirement), screen your details against applicable sanctions lists and AML watchlists, and fulfil our obligations under international gaming licensing requirements.
• Payment processing: To process deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and card networks; to process withdrawal requests; and to maintain accurate financial records.
• Platform operation and gaming: To deliver cricket betting, slot games, live casino, dice, Big Hammer, and all other ve999 gaming products; to record bet and game outcomes; to calculate and credit winnings; and to manage bonuses and promotions.
• Customer support: To respond to your support queries, complaints, and dispute submissions; to record communications for quality assurance purposes; and to follow up on unresolved issues.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, collusion, money laundering, and other prohibited conduct on the ve999 platform.
• Responsible gaming: To monitor gaming behaviour for indicators of problem gambling; to administer deposit limits, loss limits, and self-exclusion tools; and to intervene proactively where ve999's responsible gaming team identifies a player at risk.
• Marketing and promotions: To send you promotional emails, SMS notifications, and in-platform messages about ve999 bonuses, new games, and special offers — but only where you have consented to receive such communications, or where ve999 has a legitimate interest in contacting you about similar products you have used.
• Legal compliance: To comply with applicable legal and regulatory obligations, including responding to court orders, regulatory enquiries, and law enforcement requests.
• Platform improvement: To analyse usage patterns, test new features, and improve the ve999 user experience through anonymised and aggregated data analysis.

ve999 processes your personal data on one or more of the following lawful bases, in accordance with internationally recognised data protection principles:

1. Contractual necessity: Processing required to perform our contract with you — i.e., to provide the ve999 gaming platform, process payments, credit winnings, and operate your account as described in our Terms & Conditions.
2. Legal obligation: Processing required to comply with applicable gaming licensing regulations, AML / KYC legal requirements, tax reporting obligations, and lawful requests from regulatory or law enforcement authorities.
3. Legitimate interests: Processing for purposes where ve999 has a genuine legitimate interest that is not overridden by your rights and interests — including fraud prevention, platform security, responsible gaming monitoring, and direct marketing to existing customers about similar ve999 products (subject to your right to opt out).
4. Consent: Processing based on your freely given, informed, specific consent — primarily for sending marketing communications to prospective or new customers, and for the use of non-essential cookies on ve999.org. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

ve999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, Visa, Mastercard — to process deposits and withdrawals. Each payment processor operates under its own privacy policy and applicable financial regulation.
• KYC and identity verification providers: Third-party identity verification services used to confirm your age and identity as part of ve999's KYC process. These providers process identity documents under strict contractual confidentiality obligations.
• Fraud and AML screening providers: Third-party fraud detection and AML screening services used to identify suspicious activity, screen players against sanctions lists, and protect the platform from financial crime.
• Game content providers: Licensed casino game studios and sports data providers whose software and content is integrated into the ve999 platform. These providers may receive anonymised gaming session data necessary to operate their games.
• Customer support tools: Third-party customer support software providers used to manage support tickets, live chat, and email communications on behalf of ve999.
• Regulatory and law enforcement authorities: Where ve999 is legally required to disclose personal data in response to a court order, regulatory demand, or lawful law enforcement request.
• ve999 group companies: Personal data may be shared within the ve999 corporate group for internal administrative, compliance, and operational purposes, subject to the same data protection standards described in this Privacy Policy.

All third-party service providers who process personal data on behalf of ve999 are contractually required to implement appropriate technical and organisational security measures and to process data only for the specific purposes authorised by ve999.

ve999 uses cookies and similar technologies (including local storage, session storage, and pixel tags) on ve999.org to improve platform performance, personalise your experience, detect fraud, and (with your consent) deliver targeted marketing. The categories of cookies we use are as follows:

You can manage your cookie preferences at any time through the cookie consent manager accessible in the footer of ve999.org. Please note that disabling strictly necessary cookies may affect your ability to access certain ve999 platform features, including the ve999 Login function.

ve999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. Our standard retention periods are as follows:

• Active player accounts: Personal data is retained throughout the period your ve999 account remains active and for a period following account closure, as described below.
• Account closure — general: Upon voluntary account closure, ve999 retains your personal data (excluding financial and transaction records) for a period of 2 years from the date of closure, after which non-essential data is deleted or anonymised.
• Financial and transaction records: Deposit records, withdrawal records, bet history, and associated financial data are retained for a minimum of 5 years from the date of the transaction, in compliance with applicable AML record-keeping obligations.
• KYC and identity verification documents: Identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of submission or the date of account closure, whichever is later.
• Support communications: Customer support correspondence is retained for 3 years from the date of the last communication in the relevant support thread.
• Self-exclusion records: Records of permanent self-exclusion requests are retained indefinitely to prevent inadvertent re-registration, in accordance with responsible gaming best practice.
• Marketing data: Marketing preference records and opt-out logs are retained for 3 years from the date of the last interaction, to demonstrate compliance with marketing consent obligations.

When personal data is no longer required, ve999 securely destroys it using industry-standard data deletion methods. Anonymised and aggregated data that can no longer identify any individual may be retained indefinitely for platform analytics and improvement purposes.

ve999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport layer encryption: All data transmitted between your device and ve999.org is protected by 256-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when accessing ve999.
• At-rest encryption: Personal data stored in ve999's databases is encrypted at rest using AES-256 standard encryption.
• Access controls: Access to personal data systems is restricted to ve999 staff and contractors who require it for their specific job functions. All access is logged and subject to regular review.
• Multi-factor authentication: Internal ve999 systems that hold personal data require multi-factor authentication for all staff access.
• Regular security testing: ve999 conducts regular penetration testing, vulnerability assessments, and security audits on all systems that process personal data.
• Incident response: ve999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ve999 will notify affected players without undue delay and in accordance with applicable legal requirements.
• Staff training: All ve999 staff who handle personal data receive regular data protection and security awareness training.

ve999 recognises and respects your rights over your personal data. The following rights are available to all ve999 players, regardless of jurisdiction, in line with internationally recognised data protection principles:

• Right of access: You have the right to request a copy of the personal data ve999 holds about you, along with information about how it is used and with whom it is shared. We will respond to access requests within 30 days.
• Right to rectification: If the personal data ve999 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right to erasure ("right to be forgotten"): You may request that ve999 delete your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations. Note that data subject to mandatory AML/KYC retention periods cannot be deleted before those periods expire.
• Right to restrict processing: You may request that ve999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, pending verification.
• Right to data portability: You have the right to receive a structured, machine-readable copy of the personal data you have provided to ve999, for the purpose of transferring it to another service provider.
• Right to object: You have the right to object to ve999's processing of your personal data based on legitimate interests — including objecting to direct marketing communications. You can opt out of marketing at any time via the unsubscribe link in any ve999 marketing email or by contacting [email protected].
• Rights related to automated decision-making: Where ve999 uses automated processes (such as fraud scoring or responsible gaming monitoring) that produce decisions affecting your account, you have the right to request human review of that decision.

To exercise any of the above rights, please contact ve999's Data Protection team at [email protected] with the subject line "Data Rights Request" and your registered account email address. We will acknowledge your request within 5 business days and respond substantively within 30 days, or notify you of any necessary extension.

ve999 is strictly an adult gaming platform. Our minimum age requirement is 21 years. The ve999 platform is not directed at, and must not be used by, anyone under the age of 21.

ve999 does not knowingly collect, use, or retain personal data belonging to individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will:

1. Immediately suspend the associated account pending investigation.
2. Delete all personal data associated with the account from our active systems.
3. Return any deposited funds (less any chargeback or processing costs) to the original payment source.
4. Void any winnings generated during the period of underage use.

Parents and guardians who believe their child may have accessed ve999 should contact us immediately at [email protected]. We recommend that parents use device-level parental control software to prevent minors from accessing online gaming platforms, and that computers and mobile devices used by minors are kept separate from those used for adult online activities.

ve999 Gaming Limited operates internationally, and your personal data may be transferred to, stored in, or processed in countries outside of Pakistan. These countries may have data protection laws that differ from those in Pakistan. Where such transfers occur, ve999 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection for the relevant data categories.
• Use of contractual data transfer agreements that require the recipient to implement data protection standards consistent with this Privacy Policy.
• Transfers to third-party processors (such as payment processors and KYC providers) who are subject to their own regulatory data protection obligations in their home jurisdictions.

If you would like further information about the specific safeguards in place for international data transfers involving your personal data, please contact [email protected].

The ve999 platform may contain links to third-party websites or integrate third-party services (such as payment gateways, game studio portals, or identity verification interfaces). This Privacy Policy applies only to data processed by ve999 directly. When you click through to a third-party website or interface, that third party's own privacy policy governs the processing of your data in their environment.

ve999 is not responsible for the privacy practices of third-party websites or services linked to or from ve999.org. We encourage you to review the privacy policies of any third-party services you use in connection with your ve999 account — including those of JazzCash, EasyPaisa, and your bank — before submitting personal information to those services.

ve999 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the services we offer. The "Effective Date" at the top of this policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — ve999 will notify you by:

• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a prominent notice on the ve999 homepage and on the Privacy Policy page.
• Showing an in-account notification upon your next ve999 Login.

Your continued use of the ve999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using ve999 and contact [email protected] to request account closure before the changes take effect.

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data ve999 holds about you, or your data protection rights, please contact our Data Protection team using the details below. All privacy-related enquiries are handled confidentially.

For responsible gaming concerns, self-exclusion requests, or account security issues, please also contact [email protected], clearly stating the nature of your request in your subject line to ensure it reaches the right team quickly.