sx999 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to the sx999 online gaming platform, operated at sx999.ws and any associated mobile applications or services offered under the sx999 brand. Throughout this document, "sx999", "we", "us" and "our" refer to the operating entity responsible for the platform. "You" and "your" refer to any registered player or visitor using the sx999 platform.

sx999 is the data controller for the personal information collected through this platform. That means we determine the purposes and means of processing your personal data, and we are responsible for doing so in accordance with applicable privacy laws and the commitments in this policy.

This Privacy Policy should be read alongside the sx999 Terms and Conditions and the Responsible Gaming policy. Together, these three documents form the full framework governing how sx999 operates and how it treats its players.

sx999 collects personal data in three main ways: information you provide directly during registration and account use, information generated automatically by your use of the platform, and information provided by third-party payment processors as part of transaction processing.

Information you provide directly:

• Full legal name as per your CNIC or other government-issued identification.
• Pakistani mobile phone number (used for account verification and two-factor authentication).
• Email address (used for account communications and optional marketing with consent).
• Date of birth (used to verify that you are 18 or older as required by sx999's terms).
• Province and city of residence within Pakistan.
• CNIC number — collected only during identity verification and stored in encrypted form. Not used for any purpose beyond KYC compliance.
• Payment account identifiers — your JazzCash or Easypaisa number, NayaPay or SadaPay account reference, or bank account IBAN. These are used solely to process deposits and withdrawals.
• Any documentation submitted for identity verification, such as a scanned CNIC or utility bill.

Information generated automatically by your use of sx999:

• IP address and general geographic location derived from it.
• Device type, operating system, and browser version (used for platform compatibility and security monitoring).
• Session start and end times and session duration.
• Game play history — games played, bet amounts, outcomes, session lengths. This data is required for bet settlement, responsible gaming monitoring, and dispute resolution.
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment methods used.
• Bonus claim and wagering activity history.
• Support chat and email correspondence transcripts.
• Cookies and tracking technologies as described in Section 6.

sx999 uses your personal data for the following purposes. We do not use it for any purpose not described here without first obtaining your explicit consent or updating this policy with reasonable notice.

• Account creation and management: Setting up and maintaining your sx999 player account, verifying your identity and age, enabling login and security features including two-factor authentication.
• Transaction processing: Processing your deposits from JazzCash, Easypaisa, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard, and processing withdrawal requests to your nominated payment method in PKR.
• Game and bet settlement: Recording your game play and betting activity to settle bets accurately, credit winnings, and maintain a complete transaction history accessible to you through your account dashboard.
• Responsible gaming: Monitoring gaming activity patterns to identify potential problem gambling indicators, applying deposit limits, loss limits or cooling-off periods you have set, and administering self-exclusion where requested.
• Customer support: Investigating account queries, resolving bet settlement disputes, processing withdrawal escalations, and responding to any communication you direct to sx999 support.
• Security and fraud prevention: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, use of automated betting software, multiple account creation, and other conduct prohibited under the Terms and Conditions.
• Legal and regulatory compliance: Meeting applicable anti-money-laundering (AML) and know-your-customer (KYC) obligations, responding to lawful requests from Pakistani regulatory and law enforcement authorities, and maintaining financial records as required by applicable law.
• Platform improvement: Analysing aggregate anonymised usage data (not individual player profiles) to improve platform performance, game selection, and the user experience for Pakistani players generally.
• Marketing communications (opt-in only): Sending promotional emails, SMS messages, or in-platform notifications about bonuses, VIP Club offers, and new games — but only to players who have explicitly opted in to receive marketing communications from sx999.

sx999 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract performance: Most data processing at sx999 is necessary to perform the contract represented by your registration and acceptance of the Terms and Conditions — operating your account, processing your transactions, and settling your bets.
• Legal obligation: AML compliance, KYC verification, financial record-keeping, and cooperation with lawful authority requests are required by applicable law and regulation. sx999 is legally obligated to carry out these activities regardless of individual player consent.
• Legitimate interests: Security monitoring, fraud prevention, platform technical improvement, and aggregate analytics are processed on the basis of sx999's legitimate interests in maintaining a secure and well-functioning platform, provided those interests are not overridden by your data protection rights.
• Consent: Marketing communications — promotional emails, SMS bonuses, VIP offer alerts — are processed solely on the basis of your explicit opt-in consent. You can withdraw this consent at any time without any negative effect on your ability to use the platform.

sx999 does not sell your personal data. We share it only where necessary to operate the platform or where required by law. The following categories of third parties may receive your personal data from sx999 in the circumstances described:

• Payment processors: JazzCash, Easypaisa, NayaPay, SadaPay, participating Pakistani banks (for IBFT), and Visa/Mastercard network processors receive the payment information necessary to process your deposit or withdrawal transaction. Each processor operates under its own privacy policy and security standards. sx999 provides only the data each processor requires to complete the specific transaction.
• Identity verification providers: Third-party KYC verification services may receive your identity documents and personal details for the purpose of verifying your identity during account registration or escalated verification checks. These providers are contractually bound to process your data only for verification purposes and to maintain confidentiality.
• Platform technology providers: Software and infrastructure vendors that support the operation of the sx999 platform — including cloud hosting, game content providers, and security monitoring services — may process personal data as data processors on sx999's behalf. These providers are bound by data processing agreements requiring them to process your data only under sx999's instructions.
• Legal and regulatory authorities: Pakistani law enforcement agencies, financial intelligence authorities, and any court or tribunal with lawful authority may require sx999 to disclose personal data or transaction records. sx999 will comply with such requests where legally required and will challenge requests it considers unlawful or disproportionate to the extent possible under applicable law.

sx999 uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, and improve your experience on the platform. We do not use cookies to build advertising profiles or to track you across unrelated third-party websites.

The following categories of cookies are used on the sx999 platform:

You can manage cookie preferences through your browser settings. Disabling essential and security cookies will prevent normal use of the sx999 platform. Disabling functional and analytics cookies will not affect your core ability to play games or place bets.

sx999 retains personal data only for as long as necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The general retention periods at sx999 are as follows:

• Active account data: Retained for the duration of your active account relationship with sx999 and for 5 years after account closure. This covers identity data, contact data, and gaming activity records.
• Financial transaction records: Retained for 7 years after the transaction date, in line with standard financial record-keeping requirements applicable to payment processing businesses. This includes deposit and withdrawal records, payment method details, and bonus claim history.
• KYC and identity verification documents: Retained for 5 years after account closure or the date of the last transaction, whichever is later. Required for AML compliance purposes.
• Support communications: Chat logs and email correspondence are retained for 3 years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and device data: IP address logs and device fingerprint data are retained on a 12-month rolling basis.
• Marketing consent records: Records of your consent to (or withdrawal from) marketing communications are retained indefinitely as evidence of consent management compliance.

When a data retention period expires, the relevant data is securely deleted or anonymised so that it can no longer be attributed to an individual player. sx999 does not retain personal data indefinitely as a precaution — retention periods are determined by genuine operational and legal necessity.

sx999 implements a layered approach to data security. No single measure is treated as sufficient — the platform combines technical controls, procedural safeguards, and ongoing monitoring to maintain the security of player data.

• Transport encryption: All communication between your device and sx999 servers is encrypted using TLS 1.2 or TLS 1.3. The sx999 website enforces HTTPS across all pages — no unencrypted HTTP connections are accepted for authenticated sessions.
• Storage encryption: Sensitive personal data stored in sx999 databases — including identity information and payment references — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player data within sx999's internal systems is restricted on a need-to-know basis. Staff members can access only the data categories required for their specific role. All internal access is logged and audited.
• Two-factor authentication: sx999 offers two-factor authentication (2FA) for all player accounts using your registered Pakistani mobile number. Enabling 2FA significantly reduces the risk of unauthorised account access and is strongly recommended for all sx999 players.
• Security monitoring: The platform is monitored continuously for unusual activity patterns that may indicate a security incident, attempted intrusion, or account takeover attempt. Suspicious activity triggers automated alerts for immediate review.
• Incident response: In the event of a data security incident that affects player data, sx999 has an incident response procedure in place. Affected players will be notified as required by applicable law and through the contact details on their account.

As a registered player at sx999, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at support@sx999.ws with your account mobile number and a description of your request. We will respond within 30 days.

The sx999 platform is intended exclusively for adults aged 18 and over. sx999 does not knowingly collect personal data from anyone under the age of 18. The age verification steps during registration — including CNIC verification — are specifically designed to prevent underage registration.

If sx999 becomes aware that an account has been registered by a person under 18, the account will be immediately closed, all associated funds forfeited in accordance with the Terms and Conditions, and all personal data associated with the account deleted as promptly as possible, subject to any legal obligations regarding retention of AML-related records.

If you are a parent or guardian and believe that your child may have registered an account on sx999 using false age information, please contact us immediately at support@sx999.ws. We will investigate and take appropriate action promptly.

The sx999 platform may from time to time contain references to or links to third-party services — for example, the payment provider apps for JazzCash, Easypaisa, NayaPay, or SadaPay. These links are provided for your convenience to complete transactions. Once you follow a link to a third-party site or application, sx999's Privacy Policy no longer applies. You are subject to the privacy policy of that third-party provider.

sx999 does not control the privacy practices of third-party payment processors or any other external services. We recommend reviewing the privacy policy of any third-party service you use in connection with your sx999 account. sx999 is not responsible for the privacy practices of third parties, even where they have been recommended or facilitated through the sx999 platform.

sx999 reviews this Privacy Policy periodically and updates it when necessary to reflect changes to the platform, new payment methods, updated regulatory requirements, changes to our data processing practices, or other relevant developments.

When material changes are made to this policy, sx999 will notify registered players by email to their registered address, or through a prominent notice on the platform. The date of the most recent update is displayed at the top of this page. The current version is always the version published at sx999.ws/privacy-policy.

Your continued use of the sx999 platform after a policy update constitutes your acceptance of the revised policy. If you do not accept a revised policy, you should stop using the platform and contact support to close your account and request withdrawal of your remaining balance.

If you have a question about this Privacy Policy, wish to exercise one of your data rights described in Section 9, want to report a suspected privacy or security issue, or want to withdraw consent to marketing communications, please contact the sx999 privacy team through the following channels:

• Email: support@sx999.ws — include "Privacy" in the subject line and your registered mobile number in the message body so we can locate your account quickly.
• Live Chat: Available 24/7 from within your sx999 account. For data rights requests, live chat can initiate the process — for formal written requests, email is preferred to create a clear record.

sx999 will acknowledge data rights requests within 5 business days and provide a full response within 30 days. If your request is complex or involves a large volume of data, we may extend the response time by a further 30 days — we will notify you of any extension within the initial 30-day period.

If you are not satisfied with how sx999 has handled a privacy concern, you have the right to make a complaint to the relevant data protection authority in Pakistan. sx999 would always prefer to resolve privacy concerns directly and encourages players to contact us first.