pv999 Privacy Policy

1 Who We Are — The Data Controller

pv999 operates the online gaming platform accessible at pv999.asia, including all associated subdomains and mobile interfaces. For the purposes of data protection law, pv999 is the Data Controller in respect of personal data collected from players and users of the pv999 Platform.

As Data Controller, pv999 determines the purposes for which and the means by which personal data is processed. pv999 is responsible for ensuring that personal data is handled lawfully, fairly, and transparently in accordance with applicable data protection legislation and the requirements of its international gaming licence.

For all data protection enquiries, correction requests, deletion requests, or complaints relating to how pv999 handles your personal data, please contact the pv999 Data Protection team via the contact details provided in Section 14 of this Policy.

This Privacy Policy applies to all personal data collected by pv999 in connection with the registration and operation of pv999 Accounts, use of the pv999 Platform (including cricket betting, live casino, slots, and table games), processing of deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and Cash Counter, and all interactions with pv999 customer support.

2 Personal Data We Collect

pv999 collects the following categories of personal data. The specific data points collected within each category depend on how you interact with the Platform and the verification stage your Account has reached.

pv999 does not collect biometric data beyond what is required for liveness verification during KYC, and does not collect or store payment card numbers — all payment processing is handled directly by our integrated payment providers.

3 How We Collect Personal Data

pv999 collects personal data through the following channels:

3.1 Direct Collection

Data you provide directly to pv999 when: completing the account registration form; submitting KYC verification documents; making a deposit or requesting a withdrawal; contacting pv999 customer support via live chat or email; completing responsible gaming assessment questionnaires; or participating in pv999 promotions and surveys.

3.2 Automated Technical Collection

Data collected automatically when you access the pv999 Platform, including your IP address, device identifiers, browser information, session duration, page interaction data, and geolocation data derived from your IP address. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.

3.3 Third-Party Sources

pv999 may receive data about you from third parties in the following contexts:

• Identity verification providers: Confirmation of CNIC validity and name matching from government-linked identity databases;
• Payment processors: Transaction confirmation, fraud screening results, and chargeback notifications from JazzCash, EasyPaisa, and banking partners;
• Fraud and AML screening services: Risk scores and watchlist screening results from compliance intelligence providers;
• Self-exclusion registers: Confirmation of active self-exclusion status where applicable through industry-sharing arrangements.

4 Purposes of Processing & Legal Basis

pv999 processes your personal data only where there is a lawful basis to do so. The following table sets out the primary purposes for which pv999 processes personal data and the corresponding legal basis for each purpose.

Where pv999 relies on legitimate interest as the legal basis for processing, we have assessed that our legitimate interest does not override your fundamental rights and freedoms in the specific context of each processing activity. You may request further information about these assessments by contacting the Data Protection team.

5 Data Sharing & Disclosure

pv999 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

5.1 Payment Processors

Transaction data including your JazzCash or EasyPaisa account number, transaction amount, and transaction reference is shared with our payment processing partners (JazzCash, Easypaisa, Raast / 1LINK, HBL, UBL, Meezan Bank) strictly for the purpose of processing deposits and withdrawals. These partners process data as independent data controllers under their own privacy policies.

5.2 Identity Verification Providers

During KYC verification, identity data including your name, date of birth, and CNIC number is shared with our approved identity verification service provider for the purpose of confirming your identity and age. Verification providers are contractually bound to use this data only for the requested verification service.

5.3 Fraud Prevention and AML Compliance Services

Where required to fulfil our AML compliance obligations or to investigate suspected fraudulent activity, relevant Account and transaction data may be shared with fraud prevention intelligence services and AML screening databases. Access to information from these services is subject to strict contractual data processing agreements.

5.4 Regulatory and Law Enforcement Authorities

pv999 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. pv999 will not disclose data beyond what is legally required in such circumstances.

5.5 Group Companies and Service Providers

pv999 may share data with affiliated group companies and with third-party service providers engaged to deliver specific platform functions — including cloud hosting providers, customer support software providers, and analytics platforms. All such service providers are bound by data processing agreements that prohibit them from using pv999 player data for any purpose other than the contracted service.

6 International Data Transfers

6.1 pv999 operates internationally and some of the third parties with whom we share data — including cloud infrastructure providers and identity verification services — may process data in jurisdictions outside Pakistan. Where personal data is transferred internationally, pv999 ensures appropriate safeguards are in place in accordance with applicable data protection requirements.

6.2 Appropriate safeguards for international transfers include: standard contractual clauses approved by relevant data protection authorities; transfers to jurisdictions with an adequate level of data protection as assessed under applicable frameworks; and binding corporate rules where applicable within the pv999 group.

6.3 You may request details of the specific safeguards in place for any international data transfer affecting your personal data by contacting the pv999 Data Protection team at the address provided in Section 14.

7 Data Retention

7.1 pv999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the requirements of our licensing authority and applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the Account and for a minimum of 5 years following Account closure, in accordance with AML regulatory retention requirements;
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements;
• Customer support communications: Retained for 3 years from the date of the interaction, except where a formal dispute is open, in which case records are retained until the dispute is fully resolved plus 12 months;
• Technical and session data: Retained for up to 13 months from collection for analytics and security purposes, after which it is anonymised or deleted;
• KYC verification documents: Retained for the duration of the Account and for 5 years following Account closure.

7.2 When the applicable retention period expires and no legal hold obligation requires continued retention, pv999 will securely delete or anonymise the relevant personal data. Anonymised data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8 Cookies & Tracking Technologies

8.1 The pv999 Platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Remember your preferences such as game display settings, notification preferences, and language selection. Disabling these does not prevent Platform use but may affect your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the Platform — which pages are visited most, where sessions begin and end, and which features are used most frequently. This data informs Platform improvements.
• Security Cookies: Used to detect and prevent fraudulent account access, identify unusual login patterns, and support device fingerprinting for security purposes.

8.2 You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent you from logging into your pv999 Account. pv999 does not use third-party advertising cookies or retargeting pixels on the Platform.

9 Security Measures

9.1 pv999 implements a multi-layered technical and organisational security programme to protect personal data against unauthorised access, disclosure, alteration, and destruction. Security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the pv999 Platform;
• Encryption of sensitive data at rest within pv999 databases, including identity documents and financial records;
• OTP-based two-factor authentication available to all Account Holders;
• Role-based access controls limiting pv999 staff access to personal data on a strict need-to-know basis;
• Regular independent security audits and penetration testing of Platform infrastructure;
• Real-time intrusion detection and automated alerting systems;
• Staff data protection training covering handling of personal data and incident response procedures.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pv999 will notify affected players without undue delay in accordance with applicable notification requirements.

9.3 While pv999 takes all reasonable steps to protect your data, no system of transmission or storage is completely secure. pv999 does not guarantee absolute security and cannot be held liable for breaches resulting from attacks beyond the reasonable scope of our security measures.

10 Your Data Rights

As a pv999 Account Holder and data subject, you hold the following rights with respect to your personal data. These rights may be subject to limitations where data processing is required to fulfil legal obligations that override individual rights:

• Right of Access: You may request a copy of the personal data pv999 holds about you, together with information about how it is used and shared;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by pv999;
• Right to Erasure: You may request deletion of your personal data where continued processing is no longer necessary — subject to pv999's legal obligation to retain certain data for the periods specified in Section 7;
• Right to Restriction: You may request that pv999 restrict processing of your personal data in certain circumstances, such as while an accuracy dispute is under investigation;
• Right to Data Portability: Where processing is based on your consent or a contract with you, you may request that pv999 provide your personal data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interest at any time — pv999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe pv999 has processed your data unlawfully.

To exercise any of these rights, please contact the pv999 Data Protection team as described in Section 14. pv999 will respond to rights requests within 30 days and will not charge a fee for handling reasonable requests.

11 Children's Privacy

11.1 pv999 enforces a minimum age of 21 for all account registration and Platform use. Age verification is conducted during registration and at KYC stage. If pv999 becomes aware that it has collected personal data from a person under the age of 21, that data will be deleted immediately and the associated Account permanently closed.

11.2 If you believe that pv999 may have inadvertently collected data from a person under 21, please notify the pv999 Data Protection team immediately at the contact details in Section 14, and we will investigate and take appropriate action without delay.

12 Third-Party Links & Services

12.1 The pv999 Platform does not contain links to third-party websites for advertising or promotional purposes. Any links to third-party content that appear on the Platform — such as links to game software provider information — are solely for Player information purposes.

12.2 This Privacy Policy applies only to the pv999 Platform and pv999's own data processing activities. pv999 is not responsible for the privacy practices of any third-party service provider operating under their own privacy policies, including payment processors such as JazzCash and EasyPaisa. Players should review the relevant privacy policies of those services directly.

13 Amendments to This Privacy Policy

13.1 pv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, Platform functionality, or data processing practices. Material amendments will be communicated to Account Holders via notification on the pv999 Platform and/or SMS to the registered mobile number at least 7 days prior to the amendment taking effect.

13.2 The current version of this Privacy Policy, together with the version date and version number, is always accessible at pv999.asia/privacy-policy. The date of the most recent revision is stated at the top of this document. Continued use of the pv999 Platform following notification of any amendment constitutes acceptance of the updated Policy.

13.3 If you do not accept a material amendment to this Policy, you may request voluntary Account closure in accordance with the Account Termination provisions in the pv999 Terms & Conditions, available at /terms-conditions.

14 Contact & Complaints

For all data protection enquiries, rights requests, or complaints about how pv999 handles your personal data, please contact the pv999 Data Protection team through the following channels:

• Live Chat: Available 24/7 on the pv999 Platform — please state "Data Protection Request" at the start of your message to ensure correct routing;
• Email: [email protected] — please use the subject line "Privacy Request – [Your Registered Mobile Number]";
• Response Time: pv999 will acknowledge all data protection requests within 5 business days and will provide a substantive response within 30 days. Complex requests may require up to 60 days; you will be informed if an extension is necessary.

If you are not satisfied with pv999's handling of your data protection complaint after raising it directly with us, you have the right to escalate your complaint to the relevant data protection supervisory authority applicable under pv999's licensing jurisdiction.