NS999 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy ("Policy") describes how NS999 ("we", "our", "us", "NS999") collects, uses, stores, shares, and protects personal data relating to players ("you", "your") who register accounts and use the NS999 platform at ns999.ws, including all products and services available thereon.

NS999 is committed to respecting and protecting the privacy of every Pakistani player who uses the platform. We collect only the data genuinely necessary to provide, secure, and improve NS999 services. We do not sell your personal data to third parties for advertising or marketing purposes — that is a firm commitment, not just a policy line.

By registering an NS999 account, placing a bet, making a PKR deposit or withdrawal, or otherwise using the NS999 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described. This Policy should be read alongside the NS999 Terms and Conditions and Responsible Gaming Policy.

For any privacy-related questions or requests, you can reach NS999 at any time via support@ns999.ws. Our support team operates 24 hours a day, 7 days a week on Pakistan Standard Time.

NS999 collects personal data in the following categories. We only collect data that is necessary for a specific, legitimate purpose — we do not collect data speculatively or without a genuine need.

NS999 does not collect biometric data, sensitive health information, or any category of personal data that is not listed above. If NS999 needs to collect additional data for a new purpose, this Policy will be updated and players notified accordingly.

NS999 collects personal data through the following channels:

• Direct provision by you: When you register an NS999 account, you provide your name, date of birth, mobile number, and email address. When you make a deposit or withdrawal you provide payment method details. When you contact NS999 support you provide communication data.
• Automated collection: NS999 automatically collects technical data — IP address, device identifiers, browser information — whenever you access the platform. This happens through standard web server logs and, where applicable, cookies and similar tracking technologies.
• Payment processors: When you make a PKR deposit or withdrawal, NS999's payment processing partners (such as Easypaisa, JazzCash, or banking IBFT networks) share limited transaction confirmation data with NS999 to allow the deposit or withdrawal to be credited and recorded correctly.
• Verification services: Where NS999 is required to verify your identity — for age verification or anti-money laundering compliance — we may use third-party identity verification services that cross-reference the information you provide against publicly available or licensed databases.
• Fraud prevention systems: NS999 uses automated systems that analyse account and transaction patterns. These systems generate internal risk scores which inform NS999's fraud and compliance review processes.

NS999 does not purchase personal data from data brokers or third-party list providers. Data collection at NS999 is limited to what you directly provide, what the platform naturally generates through your use of it, and what payment and verification partners share as part of specific transaction or compliance processes.

NS999 uses your personal data for specific, legitimate purposes. We do not use your data for any purpose that you would not reasonably expect. The main purposes for which NS999 processes personal data are:

• Account management: To create, maintain, and secure your NS999 account, including processing your login, managing your balance, and recording your transaction and bet history.
• PKR transaction processing: To process deposits and withdrawals in Pakistani Rupees through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card networks, and to maintain accurate financial records.
• Identity and age verification: To confirm that you are who you say you are and that you meet the minimum age requirement of 18 years to use NS999.
• Anti-money laundering and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct in relation to NS999 accounts and transactions.
• Customer support: To respond to your queries, resolve disputes, process complaints, and settle any betting or payment issues you raise with the NS999 support team.
• Responsible gaming: To administer deposit limits, self-exclusion requests, session reminders, and other responsible gaming tools you activate on your NS999 account.
• Platform security and integrity: To detect account takeover attempts, unusual betting patterns, bot activity, and other technical or behavioural threats to the security of NS999 and its players.
• Legal and regulatory compliance: To fulfil NS999's legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records required under applicable financial regulations.
• Service improvement: To analyse aggregate usage patterns and improve NS999 products — for example, improving the performance of the mobile interface on Pakistani 4G networks or expanding cricket market coverage based on observed player interest.

NS999 does not use your personal data to build profiles for sale to advertisers, insurance companies, credit providers, or any other commercial third parties.

NS999 processes your personal data on the following legal grounds:

• Contractual necessity: Much of the data NS999 processes — your identity, contact details, financial transaction data — is necessary to perform the contract between you and NS999. Without this data, NS999 cannot provide you with an account, process your PKR deposits, or settle your bets.
• Legal obligation: NS999 is required by applicable regulations to collect and retain certain data for anti-money laundering compliance, age verification, and tax record purposes. This processing is not optional for either NS999 or the player.
• Legitimate interests: NS999 processes certain data — such as technical data for fraud detection and platform security — on the basis of legitimate interests, where those interests do not override your privacy rights.
• Consent: Where NS999 relies on your consent to process data — for example, where you opt in to receiving promotional communications — you have the right to withdraw that consent at any time without affecting data already processed.

NS999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. This is an absolute commitment. Your data is not a product we monetise.

NS999 may share limited personal data with the following categories of third parties, strictly for the purposes described:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners (IBFT), and Visa/Mastercard processing networks receive the transaction data necessary to process your specific deposit or withdrawal. They do not receive your full NS999 account history.
• Identity verification providers: Where NS999 uses a third-party service to verify your age or identity, that service receives only the specific data required for verification (name, date of birth, CNIC number) and is contractually prohibited from using that data for any other purpose.
• Fraud prevention and security services: NS999 uses specialist third-party fraud detection platforms that receive anonymised or pseudonymised behavioural and technical data to identify patterns indicative of fraud, account takeover, or bot activity.
• Legal and regulatory authorities: NS999 may be required to disclose data to regulators, law enforcement agencies, courts, or other government bodies under applicable law. NS999 will always verify the legal basis of such requests and challenge requests that appear disproportionate or unlawful.
• Technology infrastructure providers: NS999 uses cloud hosting, database, and security services from reputable technology providers. These providers process data solely on NS999's instructions and under strict data processing agreements.

All NS999 deposits and withdrawals are processed in Pakistani Rupees. The financial data NS999 collects in relation to your transactions includes: the amount of each transaction, the date and time, the payment method type, and a reference number. NS999 does not store full Easypaisa wallet credentials, JazzCash PINs, or complete bank account numbers — only the reference identifiers required to match your payment to your NS999 account.

For card payments, NS999 displays only the last four digits of the card number in your account. Full card numbers are handled by our Payment Card Industry Data Security Standard (PCI-DSS) compliant payment processing partner and are never accessible to NS999 staff.

NS999 retains PKR transaction records for the period required by applicable financial record-keeping regulations. This retention is legally required and cannot be shortened even at the player's request. However, once the retention period expires, transaction records are securely deleted.

All financial data in transit between your device and NS999 is protected by 256-bit SSL encryption. Financial data at rest in NS999's systems is encrypted using industry-standard encryption protocols.

NS999 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data:

• 256-bit SSL/TLS encryption: All data transmitted between your device and NS999 — account credentials, transaction data, bet placement — is encrypted using 256-bit SSL/TLS. This is the same encryption standard used by major Pakistani banks.
• Encrypted data storage: Sensitive personal data stored within NS999 systems is encrypted at rest. Plain-text storage of passwords, payment credentials, or identity documents is not permitted under NS999's internal data handling policies.
• Two-factor authentication: NS999 offers and encourages two-factor authentication for all accounts. Where 2FA is enabled, a one-time code sent to your registered Pakistani mobile number is required to complete login from an unrecognised device.
• Withdrawal PIN: NS999 accounts can be protected by a separate withdrawal PIN, providing an additional layer of authorisation required before any PKR withdrawal can be processed.
• Access controls: NS999 staff access to player data is strictly controlled on a need-to-know basis. Customer support agents can see the account data they need to resolve support queries, but do not have access to sensitive financial credentials or full payment data.
• Security monitoring: NS999 operates 24/7 automated monitoring for suspicious login attempts, unusual transaction patterns, and potential data breach indicators. The security team investigates alerts promptly.
• Penetration testing: NS999 undergoes periodic security testing by independent professionals to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no system is completely immune to security risks. If NS999 becomes aware of a data breach that is likely to result in significant harm to affected players, NS999 will notify those players promptly and take immediate steps to contain the breach and prevent further harm.

NS999 does not keep your personal data for longer than is necessary for the purpose it was collected, or for longer than required by applicable law or regulation. Below is a general guide to NS999's main retention periods:

• Account and identity data: Retained for the duration of your NS999 account and for a period of up to 7 years after permanent account closure, to comply with applicable financial and anti-money laundering record-keeping requirements.
• Transaction records (PKR deposits and withdrawals): Retained for up to 7 years after the transaction date. This retention is required under applicable financial regulations and cannot be shortened on request.
• Bet and game session history: Retained for the duration of account activity and up to 5 years after account closure for dispute resolution and responsible gaming review purposes.
• Support communications: Customer support transcripts and email correspondence are retained for up to 3 years after the conversation closes, to enable NS999 to reference prior interactions in future disputes or follow-up queries.
• Technical and log data: IP address logs, device access records, and security monitoring data are retained for up to 12 months, unless a specific security investigation requires extended retention.
• Marketing consent records: If you have opted in to receive NS999 promotional communications, a record of that consent is retained until you withdraw it or for 5 years, whichever is shorter.

When retention periods expire, NS999 securely destroys or anonymises the relevant data so that it can no longer be linked back to you as an individual.

NS999 uses cookies and similar technologies to make the platform function correctly, to keep you logged in securely, and to understand how players use the site so we can improve it. Here is a plain explanation of what we use and why:

• Essential cookies: These are necessary for NS999 to function. They maintain your login session, remember your language preferences, and manage your bet slip state. Without these cookies, NS999 would not work properly. You cannot opt out of essential cookies while using the platform.
• Security cookies: NS999 uses cookies to detect and prevent fraud, identify suspicious login attempts, and verify that requests are coming from a legitimate NS999 session rather than a cross-site attack.
• Analytics cookies: NS999 uses anonymised analytics to understand how players navigate the platform — which pages are visited most, where players encounter problems, and how long sessions typically last. This data is aggregate and anonymised; it is not linked back to individual player profiles.
• Preference cookies: These remember your display preferences on NS999 — such as your preferred betting format or notification settings — so you don't have to reset them every time you log in.

NS999 does not use third-party advertising cookies or retargeting pixels that track your behaviour across other websites. The cookies placed by NS999 are limited to what is necessary for the platform to function securely and improve the player experience.

Most modern mobile browsers on Pakistani devices allow you to block or delete cookies through the browser settings. Please note that blocking essential cookies will prevent NS999 from functioning correctly and you may not be able to log in or place bets.

As an NS999 player, you have the following rights in relation to your personal data. NS999 will respond to all valid data rights requests within a reasonable timeframe, and in any case within 30 days of receiving a complete request.

NS999 is strictly for players aged 18 and over. NS999 does not knowingly collect personal data from individuals under 18 years of age. The NS999 registration process includes age declaration and verification steps specifically designed to prevent under-18 access.

If NS999 identifies or is notified that an account has been created by a person under 18, that account will be immediately closed, all pending transactions cancelled, and any deposited funds returned. NS999 does not retain personal data from underage users beyond what is required to document the closure and refund for compliance purposes.

If you believe a minor has accessed or attempted to access NS999, please contact support@ns999.ws immediately. NS999 takes these reports seriously and investigates all such notifications promptly.

NS999 may update this Privacy Policy from time to time to reflect changes in our data practices, new product features, updates to applicable law, or improvements in how we explain our approach to players. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

When NS999 makes material changes to this Privacy Policy — changes that significantly affect how your data is collected, used, or shared — we will notify you through one or more of the following channels before the changes take effect:

• A notification displayed on the NS999 platform when you next log in.
• An email to the address registered to your NS999 account.
• An updated "Last Updated" date prominently displayed on this page.

Minor clarifications — fixing a typographical error, making a sentence clearer without changing its substance — may be made without specific notification. Continued use of NS999 after notification of material changes constitutes acceptance of the updated Privacy Policy. If you do not agree with changes to this Policy, you should close your account before the changes take effect.

For any question, concern, or request related to this Privacy Policy or to your personal data held by NS999, please contact our support team. All privacy requests are handled with priority and confidence.