VK 999 Privacy Policy

1Who We Are and How This Policy Applies

This Privacy Policy applies to vk999.life and all associated services operated under the VK 999 brand (referred to throughout as "VK 999", "we", "us", or "the platform"). VK 999 is the data controller for personal data collected through this platform, meaning we determine the purposes and means by which your data is processed.

This policy applies to all players who have registered an account on vk 999, all visitors who browse vk999.life without registering, and all persons who contact vk 999 support by any channel. By registering an account or continuing to use the vk 999 platform, you confirm that you have read and understood this Privacy Policy.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy. Together these documents form the complete agreement between you and vk 999 regarding your account and personal data.

2Personal Data We Collect

VK 999 collects personal data in three ways: information you provide directly when registering or using your account, information generated automatically when you use the platform, and information we receive from third parties such as payment processors and identity verification services.

Information You Provide Directly

• Registration data: Full legal name (as on your CNIC), date of birth, mobile number, email address, and chosen password.
• Identity verification documents: A copy of your CNIC (front and back) when required for account verification or large withdrawal processing.
• Payment information: The mobile wallet account number, bank account number, or card type associated with your deposits and withdrawals. Full card or account numbers are processed by our payment partners and are never stored on vk 999 servers.
• Support communications: Any messages, emails, chat logs, or documents you share when contacting vk 999 support.
• Responsible gaming information: Deposit limits, self-exclusion requests, and session preferences you set in your account settings.

Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network provider.
• Usage data: Pages visited on vk999.life, games played, bets placed, session duration, login and logout times, and navigation patterns.
• Transaction history: All deposits, withdrawals, game stakes, wins, and losses associated with your account — maintained as a permanent record for regulatory and dispute resolution purposes.
• Cookies and similar technologies: Session identifiers, preference storage, and analytics data as described in Section 8 of this policy.

Information from Third Parties

• Payment processors: Confirmation of transaction status, transaction reference numbers, and fraud signals from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT systems, and Visa/Mastercard networks.
• Identity verification services: Confirmation of CNIC validity and identity match where third-party verification services are used.
• Fraud prevention services: Risk scores and flagging information from fraud detection systems to protect the integrity of the platform.

3How VK 999 Uses Your Personal Data

VK 999 uses your personal data for the following specific purposes. We do not use data for any purpose not listed here without first obtaining your explicit consent.

4Legal Basis for Processing Your Data

Every processing activity carried out by vk 999 rests on at least one of the following legal bases:

• Contract performance: Processing your registration data, transaction records, and account activity is necessary to provide you with the gaming services described in the Terms and Conditions you accepted at registration.
• Legal obligation: Retaining transaction records, identity documents, and account histories to comply with anti-money laundering obligations and to respond to lawful requests from competent authorities.
• Legitimate interests: Fraud prevention, platform security, anti-collusion monitoring in poker, and aggregated analytics for platform improvement — in all cases balanced against your privacy interests.
• Consent: Sending marketing communications by email and SMS, and placing non-essential cookies on your device. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

5Who VK 999 Shares Your Data With

VK 999 does not sell personal data. We share personal data only with the categories of recipients listed below and only to the extent necessary for the stated purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT systems, and Visa/Mastercard processing networks receive the minimum data necessary to process your transaction. These parties are bound by their own data protection obligations and do not use your data for any other purpose.
• Identity verification providers: Where third-party CNIC verification services are used, your identity document data is transmitted securely to the verification provider. The result (pass/fail) is returned to vk 999; the full document is not retained by the provider beyond the verification transaction.
• Fraud prevention services: Anonymised or pseudonymised account and transaction signals may be shared with fraud detection systems to identify patterns of financial crime across the wider industry.
• Legal and regulatory authorities: VK 999 will disclose personal data to government agencies, law enforcement, or courts when required to do so by applicable law or valid legal process. We will notify you of such disclosure where permitted by law to do so.
• IT infrastructure and hosting providers: Technical service providers who host and maintain the vk 999 platform infrastructure. All such providers operate under strict data processing agreements and may not use your data independently.
• Professional advisors: Legal counsel, auditors, and compliance consultants who may need access to account data under confidentiality obligations in specific circumstances.

6How Long We Keep Your Data

VK 999 retains personal data for as long as necessary to fulfil the purposes set out in this policy, subject to any longer retention periods required by law.

• Active account data: Retained for the full duration of your account on vk 999, plus a post-closure retention period of 5 years for transaction records and identity documents to comply with anti-money laundering obligations.
• Identity verification documents: Retained for 5 years after account closure or the last transaction, whichever is later.
• Transaction records (deposits, withdrawals, game history): Retained for 5 years after the transaction date.
• Support communications: Retained for 2 years from the date of the last communication in a support thread.
• Marketing consent records: Retained for the duration of your account and for 1 year after you withdraw consent, as evidence of the prior consent basis.
• Website analytics data (aggregated/anonymised): Retained indefinitely in anonymised form — individual-level analytics data is retained for 13 months.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. If you request deletion of your data, we will delete all data that is not subject to a mandatory legal retention period and notify you of any data we are legally required to keep.

7Security Measures in Place at VK 999

VK 999 takes data security seriously. The following technical and organisational measures are in place to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted between your device and vk 999 servers.
• Encrypted data storage — personal data fields including identity information are encrypted at rest on our servers using industry-standard encryption.
• Role-based access controls — staff access to personal data is strictly limited to those whose job requires it, with all access logged and audited.
• Two-factor authentication available to all players and required for all administrative staff accessing player data systems.
• Regular security audits — vk 999 systems are subject to periodic security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures — in the event of a data security incident, vk 999 will assess the impact, take immediate containment measures, and notify affected players without undue delay where the incident is likely to result in risk to their rights.

No system is completely immune to security risks. While vk 999 takes all reasonable precautions, players can protect themselves further by enabling two-factor authentication, using a strong unique password for their vk 999 account, and not sharing login credentials with anyone.

8Cookies and Tracking Technologies

VK 999 uses cookies and similar technologies on vk999.life. A cookie is a small text file placed on your device by a website when you visit it. The table below explains the categories of cookies vk 999 uses.

VK 999 does not use third-party advertising cookies or allow advertising networks to set cookies on vk999.life. You can manage browser cookie preferences through your browser settings. Blocking essential cookies will prevent the vk 999 platform from functioning correctly.

9Your Data Rights

As a player on vk 999, you have the following rights with respect to your personal data. To exercise any of these rights, contact support@vk999.life with the subject line "Data Rights Request" and your account ID. All requests are acknowledged within 72 hours and resolved within 30 calendar days.

10Children's Privacy

VK 999 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. Every registration on vk 999 requires the player to confirm they are 18 or older, and identity verification is used to enforce this requirement.

If vk 999 becomes aware that an account has been created by or on behalf of a person under 18, that account will be suspended immediately, all data associated with it will be deleted in line with applicable law, and any deposited funds will be returned to the payment method used for deposit.

If you are a parent or guardian who believes your child may have registered on vk 999, please contact us immediately at support@vk999.life with your child's name and email address and we will investigate and act within 24 hours.

11International Data Transfers

Some of the third-party service providers used by vk 999 — such as payment processors, fraud detection systems, and hosting infrastructure providers — may process data in jurisdictions outside Pakistan. Where data is transferred internationally, vk 999 ensures that appropriate safeguards are in place, which may include:

• Contractual data processing agreements that require the recipient to apply data protection standards equivalent to those described in this policy.
• Use of service providers that hold recognised security certifications such as PCI-DSS (for payment processing) and ISO 27001 (for information security management).

VK 999 does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first putting appropriate contractual safeguards in place.

12Third-Party Services and Links

The vk 999 platform does not contain links to external websites. Any reference to payment services (Easypaisa, JazzCash, NayaPay, SadaPay) in account management pages relates to transaction processing only and does not imply any data sharing beyond what is described in Section 5 of this policy.

VK 999 is not responsible for the privacy practices of payment processors, mobile wallet providers, or banks involved in your deposit and withdrawal transactions. Each of these providers has their own privacy policy governing how they handle your data within their own systems. Amounts and transaction references shared with these providers are limited to what is strictly necessary to process your specific transaction.

13Changes to This Privacy Policy

VK 999 may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we offer. The "Last Updated" date at the top of this page will always reflect when the current version took effect.

Where changes are material — such as a change in the types of data we collect, the purposes for which we use it, or the categories of third parties we share it with — we will notify registered players by email to their registered address at least 7 days before the change takes effect.

Minor updates such as clarifications of existing practices or corrections to typographical errors may be made without advance notice. Your continued use of vk 999 after the effective date of any update constitutes acceptance of the revised policy.

14How to Contact VK 999 About Privacy

For any question, concern, or request related to this Privacy Policy or how vk 999 handles your personal data, contact us through the following channels:

• Privacy and Data Rights Email: support@vk999.life — use subject line "Privacy Query" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 within the vk 999 platform. Log in and click the support chat icon. Live chat agents can answer general privacy questions and escalate data rights requests to the appropriate team.
• Response Commitment: All privacy queries receive an acknowledgement within 72 hours. Data rights requests are fully resolved within 30 calendar days. Complex requests requiring legal review may take up to 60 days in exceptional circumstances — we will notify you within the initial 30-day window if this applies.