td999 Privacy Policy

td999 is Pakistan's leading online casino and sports betting platform, accessible at td999.bio. For the purposes of this Privacy Policy, td999 acts as the data controller responsible for the personal data you provide when using the Platform. Our services are available to verified players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond.

td999 operates under an international gaming licence framework. Where our operations require engagement with third-party service providers — such as payment processors, identity verification providers, or game software suppliers — those third parties act as data processors operating under contractual obligations consistent with this Privacy Policy.

If you have any questions or concerns about how td999 handles your personal data, you may contact our data protection team at any time. Our contact details are set out in Section 13 of this Policy.

td999 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the main categories of data we collect and the specific data points within each category:

td999 collects personal data through the following channels and mechanisms:

• Direct registration: When you create a td999 Account, you provide your name, email address, mobile number, date of birth, and chosen credentials directly via the registration form.
• Identity verification (KYC): When you initiate a withdrawal or when td999's compliance systems trigger a verification requirement, you will be asked to submit identity documents and, where required, a liveness photograph.
• Payment transactions: When you make a deposit or withdrawal via JazzCash, EasyPaisa, bank transfer, or card, transaction metadata is captured and recorded against your Account.
• Platform usage: Your gaming activity, session data, and device/technical information are collected automatically as you use the td999 Platform through standard server logs and first-party analytics.
• Customer support: If you contact td999 support by email or live chat, we retain records of those communications including the contents of your messages and any attachments you send.
• Cookies and tracking technologies: td999 uses first-party cookies, localStorage, and session tokens to maintain your login state, remember your preferences, and measure Platform performance. See Section 7 for full details.

td999 uses the personal data it collects for the following purposes. Each purpose is matched to the legal basis described in Section 5:

• Creating and managing your td999 Account, including login authentication and account security.
• Processing deposits and withdrawals via your chosen payment method, including JazzCash, EasyPaisa, and bank channels.
• Verifying your identity and age (21+) in compliance with our licensing obligations and anti-money laundering (AML) requirements.
• Providing customer support, responding to your enquiries, and resolving complaints.
• Personalising your gaming experience — for example, surfacing cricket betting markets or PSL promotions relevant to your activity history.
• Sending you promotional communications about bonuses, new games, and seasonal offers — only where you have opted in to receive such communications.
• Conducting responsible gaming monitoring, including detecting patterns of play that may indicate problem gambling and proactively applying safeguards as described in our Responsible Gaming policy.
• Detecting and preventing fraud, collusion, money laundering, and other prohibited activities on the Platform.
• Improving the td999 Platform through internal analytics, A/B testing, and technical performance monitoring.
• Meeting our obligations under applicable law and responding to lawful requests from regulatory authorities.

td999 processes your personal data on the following legal grounds, depending on the specific processing activity:

Where td999 relies on your consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

td999 does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: To facilitate deposits and withdrawals, td999 shares necessary transaction data with payment service providers such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers process your data solely to execute the payment and are bound by contractual data protection obligations.
• Identity verification providers: Third-party KYC providers may process your identity documents and liveness images on td999's behalf to fulfil age and identity verification obligations. These providers are prohibited from using your data for any purpose other than verification.
• Game software suppliers: Some casino games on the td999 Platform are provided by third-party game developers. Aggregated, anonymised session data may be shared with these providers for technical support and game performance monitoring. Individually identifiable data is not shared.
• Regulatory and law enforcement authorities: td999 may disclose personal data to relevant regulatory bodies or law enforcement agencies where required to do so by law, court order, or where we believe disclosure is necessary to prevent fraud or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of td999's business, personal data held by td999 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

td999 uses cookies and similar tracking technologies on the Platform. The table below describes the types of cookies we use and their purposes:

td999 does not use third-party advertising or retargeting cookies. You can manage or disable cookies through your browser settings; however, disabling essential cookies will prevent certain core Platform features from functioning correctly, including the ability to remain logged in to your Account.

td999 retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Active accounts: Personal data associated with an active td999 Account is retained for the duration of the Account's existence plus a mandatory post-closure retention period.
• KYC and transaction records: Identity verification documents and financial transaction records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations applicable under our licensing framework.
• Support communications: Customer support correspondence is retained for a period of three (3) years from the date of the final communication in a thread.
• Marketing data: Where you have opted in to marketing communications, your marketing preferences and associated data are retained until you withdraw consent. Upon withdrawal, your data will be suppressed from marketing lists within 10 business days.
• Technical and analytics data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

As a td999 player, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us using the details in Section 13. td999 will respond to all valid requests within 30 calendar days.

• Right of access: You may request a copy of the personal data td999 holds about you, along with information about how and why it is being processed.
• Right to rectification: You may request that td999 correct any inaccurate or incomplete personal data held in your Account.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to our legal obligation to retain KYC and transaction records for the periods described in Section 8.
• Right to restrict processing: You may request that td999 restrict the processing of your personal data where you contest its accuracy, object to its use, or require it for legal claims.
• Right to data portability: Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of your personal data to transfer to another service provider.
• Right to object: You may object to td999's processing of your data where that processing is based on legitimate interests, including profiling for personalisation purposes.
• Right to withdraw consent: Where td999 processes your data on the basis of consent — such as for marketing — you may withdraw that consent at any time without penalty.

td999 takes the security of your personal data seriously and employs a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• AES-256 encryption for all personal and financial data stored on td999 servers.
• TLS 1.3 encryption for all data transmitted between your device and the td999 Platform.
• Role-based access controls ensuring that staff can only access personal data strictly necessary for their designated job functions.
• Two-factor authentication (2FA) enforced for all internal td999 administrative systems.
• Regular third-party penetration testing and vulnerability assessments of the td999 Platform infrastructure.
• Dedicated fraud monitoring systems that analyse transaction patterns and flag suspicious activity in real time.
• Staff data protection training conducted on a mandatory basis for all personnel with access to personal data.

Despite these measures, no online system can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, td999 will notify affected players without undue delay in accordance with applicable notification obligations.

We strongly recommend that players protect their own Account security by using a strong, unique password and enabling two-factor authentication via their Account settings. If you suspect that your td999 Account has been accessed without your authorisation, please contact support immediately at [email protected].

If td999 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or an error in the verification process — we will take immediate steps to suspend the associated Account, delete the personal data collected, and reverse any financial transactions processed in connection with that Account.

If you are a parent or guardian and believe that your child has registered a td999 Account, please contact us immediately at [email protected] so that we can investigate and take the appropriate action without delay.

td999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the services we offer. The date of the most recent revision is displayed prominently at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — td999 will provide advance notice to registered players via email or a prominent in-Platform notification at least 14 days before the changes take effect.

We encourage all td999 players to review this Privacy Policy periodically. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure by contacting support.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data protection concern, please contact the td999 data protection team. Our support is available 24 hours a day, seven days a week, including all Pakistan public holidays.

For concerns about responsible gaming and self-exclusion tools, please visit the td999 Responsible Gaming page, which contains detailed guidance and links to independent support resources available to Pakistani players.