Privacy Policy — en999

01 Introduction

en999 ("we", "us", "our", "Platform") operates the online gaming platform at https://en999.cam. As part of providing our services — which include sports betting, live casino, slot games and related entertainment — we process personal data belonging to registered users and, in limited circumstances, visitors.

This Privacy Policy describes our data processing practices, the categories of personal data we handle, the purposes for which we use that data, the rights you have over your data, and the measures we take to keep it secure. It is intended to be read alongside our Terms & Conditions and Responsible Gambling Policy.

en999 is committed to complying with applicable data protection legislation in the jurisdiction(s) in which it operates. This Policy is drafted in clear, accessible English to ensure our users — many of whom are based across Pakistan, including cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — can understand how their data is handled without needing legal expertise.

If you have any questions about this Policy, please contact us at the address set out in Section 16 before using the Platform.

02 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means en999, being the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of en999 under a written data processing agreement.
• "User" / "Player" means any individual who has created a registered account on the Platform.
• "KYC Data" means identity verification documents and related personal information collected as part of the Know Your Customer compliance process.
• "Cookies" means small data files placed on your device by the Platform for operational, analytical or security purposes.
• "Sensitive Data" means special categories of Personal Data that warrant heightened protection, such as financial account information, government-issued identification numbers, and responsible gambling self-assessment data.

03 Categories of Personal Data We Collect

The table below summarises the categories of Personal Data we collect, with examples of the specific data elements within each category.

We do not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless directly relevant to a responsible gambling self-assessment submitted voluntarily by you.

04 How We Collect Your Personal Data

en999 collects your Personal Data through the following channels:

4.1 Directly From You

You provide Personal Data directly when you: register an account; submit KYC documents; make a deposit or withdrawal request; complete responsible gambling self-assessment tools; contact our support team; or participate in any promotion.

4.2 Automatically Through Platform Use

Technical Data and Gaming Activity Data are collected automatically when you access and use the Platform. This includes IP addresses, session logs, device identifiers, game events and navigation patterns. This data is collected using server logs, cookies and similar tracking technologies (see Section 11).

4.3 From Third Parties

We may receive Personal Data from the following third-party sources:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit
• Payment processors who confirm transaction status (we do not receive full payment account credentials from processors)
• Fraud prevention and AML screening services
• Game studios and technology partners, in respect of gaming session data generated within their platforms

05 Purposes of Processing

en999 processes your Personal Data for the following defined purposes only:

1. Account creation and management — to register your account, authenticate your identity, and manage your account settings and preferences.
2. Service delivery — to provide sports betting, live casino, slots and related gaming services in accordance with our Terms & Conditions.
3. Financial processing — to process deposits and withdrawals in PKR and other accepted currencies, including cryptocurrency, and to maintain accurate transaction records.
4. KYC and AML compliance — to verify your identity and age, and to monitor transactions for Anti-Money Laundering purposes as required by applicable compliance frameworks.
5. Responsible gambling — to implement and record the responsible gambling controls you activate, including deposit limits, loss limits, session timers and self-exclusion, and to monitor gaming patterns where relevant to player welfare.
6. Customer support — to respond to your enquiries, process complaints and provide assistance via live chat and email.
7. Security and fraud prevention — to detect, investigate and prevent fraudulent transactions, account compromise, bonus abuse and other prohibited conduct.
8. Platform improvement — to analyse aggregated, anonymised usage data to improve platform performance, user experience and game offering.
9. Legal and regulatory compliance — to comply with applicable laws, respond to lawful requests from authorities, and maintain records required by our operating licence.
10. Communications — to send you transactional and service-related communications (e.g., deposit confirmation, withdrawal processed, account security alerts). We will only send promotional communications where you have consented and in accordance with applicable requirements.

06 Legal Bases for Processing

Where applicable data protection law requires a legal basis for each processing activity, en999 relies on the following:

• Contractual necessity: Processing required to perform our contract with you — account management, gaming services, financial transactions and support.
• Legal obligation: Processing required to comply with KYC, AML, responsible gambling and record-keeping obligations under applicable law and our operating licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics and improving our services, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

en999 does not sell your Personal Data. We share your data only in the following circumstances and with appropriate safeguards in place:

7.1 Service Providers (Data Processors)

We engage third-party service providers who process Personal Data on our behalf under written data processing agreements. These include KYC and identity verification providers, payment processors, cloud infrastructure providers, customer support software vendors, and fraud/AML screening services. These parties may not use your data for their own purposes.

7.2 Game Studios and Technology Partners

When you access a game provided by a third-party studio, limited technical and gaming session data is shared with that studio for the purpose of game delivery and fair play validation. Such sharing is governed by contractual obligations.

7.3 Legal and Regulatory Disclosure

We may disclose Personal Data to law enforcement agencies, regulatory bodies, licensing authorities or courts where we are required to do so by law, court order or other binding legal process. We will notify you of such disclosures where we are legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition or sale of all or part of the en999 business, Personal Data may be transferred to the successor entity. You will be notified of any material change in the data controller in such circumstances.

08 International Data Transfers

As an online platform, en999 may process and store Personal Data on servers located outside Pakistan. Where Personal Data is transferred to countries that do not have data protection laws equivalent to those of the jurisdiction in which we are licensed, we take steps to ensure that appropriate safeguards are in place.

Such safeguards may include contractual clauses that bind the receiving party to data protection standards consistent with this Policy, or reliance on the receiving country's participation in a recognised adequacy framework where applicable.

By using the Platform, you acknowledge that your Personal Data may be transferred, processed and stored in jurisdictions outside Pakistan, where data protection laws may differ from those applicable in your location.

09 Data Retention

en999 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention guidelines apply:

Upon expiry of the relevant retention period, Personal Data is securely deleted or irreversibly anonymised. Where data is anonymised, it is no longer Personal Data and may be retained for analytical purposes without restriction.

10 Your Data Protection Rights

Subject to applicable law and certain exemptions, you have the following rights in relation to your Personal Data held by en999:

• Right of access: You may request a copy of the Personal Data we hold about you, together with information about how and why it is processed.
• Right of rectification: You may request correction of inaccurate or incomplete Personal Data. Account holders can update basic information directly via account settings; other corrections should be requested in writing.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected and where no legal retention obligation applies.
• Right to restriction: You may request that processing of your Personal Data be restricted in certain circumstances, such as where you contest the accuracy of the data or object to processing pending review.
• Right to data portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, or to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Please note that certain rights may be limited or overridden by legal obligations, particularly in the context of KYC, AML and responsible gambling record-keeping requirements. Where we are unable to fulfil a request in full, we will explain the reasons in our response.

11 Cookies & Similar Technologies

en999 uses cookies and similar browser-based technologies to operate the Platform effectively. The categories of cookies we use are as follows:

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your session, remember your authentication state, and prevent cross-site request forgery. These cookies cannot be disabled without disrupting core Platform functionality.

11.2 Functional / Preference Cookies

These cookies remember your settings and preferences — such as language, layout and display options — to provide a consistent experience across visits. They are not used to track you across third-party sites.

11.3 Analytical Cookies

We may use first-party or privacy-preserving analytical tools to understand how users navigate the Platform, which pages perform well, and where technical issues occur. This data is aggregated and anonymised wherever possible. We do not use invasive third-party analytics platforms that profile individual users across multiple websites.

11.4 Security Cookies

Certain cookies are placed for fraud prevention and account security purposes, such as detecting unusual login patterns or session hijacking attempts.

11.5 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies entirely. Note that blocking strictly necessary cookies will impair your ability to use the Platform. Blocking analytical cookies will not affect your gameplay experience.

We do not serve third-party advertising cookies or allow advertising networks to place trackers on our Platform.

12 Responsible Gambling & Sensitive Data

Data relating to your responsible gambling settings — including deposit limits, loss limits, self-exclusion status, cooling-off periods and session time configurations — is treated with heightened care and is classified as sensitive within our internal data handling framework.

Responsible gambling data is processed for the sole purposes of: (a) enforcing the restrictions you have requested; (b) complying with our responsible gambling obligations under applicable licensing requirements; and (c) conducting player welfare assessments where platform usage patterns indicate potential harm.

Self-exclusion data is retained for the full duration of the exclusion period and for a defined period afterwards to prevent re-registration during the active exclusion window. We do not delete self-exclusion records at a user's request if the exclusion period has not yet expired, as doing so could cause harm to the player.

13 Security Measures

en999 implements a range of technical and organisational measures to protect your Personal Data against unauthorised access, loss, destruction or disclosure. These measures include but are not limited to:

• TLS/SSL encryption for all data in transit between your device and our servers
• Encryption at rest for stored Personal Data, including KYC documents and financial records
• Role-based access controls ensuring that staff access only the data necessary for their specific function
• Multi-factor authentication requirements for administrative access to data systems
• Regular security reviews, penetration testing and vulnerability assessments
• Incident response procedures for the detection, containment and reporting of personal data breaches

No security system is entirely infallible. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, en999 will notify the relevant supervisory authority and, where required, affected users within the timeframes required by applicable law.

You contribute to your own account security by choosing a strong password, enabling two-factor authentication, keeping your credentials confidential, and reporting suspected unauthorised access to us promptly. en999 is not responsible for breaches arising from your failure to maintain reasonable credential security.

14 Children's Privacy

The en999 Platform is strictly for adults. Users must be at least 18 years of age — or the higher minimum required by the operator/license jurisdiction — to register an account. We do not knowingly collect Personal Data from individuals under the minimum age requirement.

Age verification is a mandatory part of the KYC process. Where we discover that an account has been registered by a minor, we will immediately close the account, return any funds net of losses generated, delete the associated Personal Data to the extent permitted by applicable legal obligations, and report the matter where required.

If you believe a minor has accessed or registered on the Platform, please contact us immediately at [email protected].

15 Amendments to This Policy

en999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce new categories of data collection, new purposes for processing, or changes to your rights — we will provide reasonable advance notice by posting a prominent notice on the Platform and, where practicable, by email to your registered address.

The "Last Updated" date at the top of this page will be revised whenever the Policy is amended. We encourage you to review this Policy periodically. Continued use of the Platform following publication of a revised Policy constitutes your acknowledgment of the updated terms.

If you disagree with any amendment to this Policy, you should cease using the Platform and may request account closure. Any outstanding funds in your account will be returned subject to KYC clearance and applicable withdrawal conditions.

16 Contact Us — Data Privacy Enquiries

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact us using the following details:

For exercising formal data rights (access, rectification, erasure, portability, objection), please refer to the process described in Section 10. Written requests receive the most consistent and auditable handling.

Our support team is available via live chat within the Platform at all hours and can assist with general privacy questions and direct your enquiry to the appropriate team member where necessary.