i999 is committed to protecting the personal data of every player who uses our platform. This Privacy Policy explains in plain terms exactly what data i999 collects, why we collect it, how we use and protect it, and what rights you have as a player in Pakistan over your own information.
These six commitments summarise i999's approach to your personal data. The full legal text governing each commitment is set out in the detailed policy sections below.
i999 collects only the personal data that is genuinely necessary to operate your account, verify your identity, process PKR transactions, and comply with our international licensing obligations. We do not collect data speculatively or beyond what our operations legitimately require.
All personal data held by i999 is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Our servers operate under strict access control policies. Only authorised personnel with a legitimate operational need can access player account data.
i999 does not sell, rent, or commercially exploit the personal data of any player to any third party for their own marketing or commercial purposes. Your data is not a product. It is shared with service providers only where necessary to deliver the i999 platform to you.
You have the right to access, correct, delete, restrict processing of, and obtain a portable copy of your personal data held by i999. These are not decorative rights — i999 provides a clear process for exercising each of them, and responds to verified requests within 30 days.
i999 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by our licensing obligations and applicable law. When data is no longer required, it is securely deleted or anonymised according to documented data lifecycle procedures.
Privacy queries from Pakistani players can be submitted in English or Urdu via i999 live chat. Our support team is equipped to explain any aspect of this Privacy Policy in plain language and to assist you with exercising your data rights without bureaucratic obstruction.
Notice to Pakistani Players: This Privacy Policy applies to all personal data collected by i999 in connection with the provision of the i999 online casino and sports betting platform at i999.lol. By registering for or using an i999 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.
For the purposes of this Privacy Policy, i999 ("i999", "we", "us", "our") refers to the operator of the i999 online gaming platform accessible at i999.lol. i999 operates under an international online gaming license and is the data controller responsible for the personal data of players who use the i999 platform.
As data controller, i999 determines the purposes for which and the means by which personal data is processed. i999 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection principles.
For all privacy-related inquiries, data subject rights requests, and formal complaints, please contact i999's Privacy Team. Contact details are provided in Section 15 of this Policy. i999 aims to respond to all privacy inquiries within 5 business days and to formal data subject rights requests within 30 calendar days.
i999 collects personal data from players through several channels, including the account registration process, ongoing platform use, KYC verification submissions, payment transactions, customer support interactions, and technical data generated automatically through your use of the i999 website and platform. The categories of personal data i999 collects are set out in the table below.
| Data Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, CNIC number, date of birth, nationality, gender | Registration form; KYC submission |
| Contact Data | Email address, Pakistani mobile number, city/province of residence | Registration form; account updates |
| Financial Data | JazzCash / EasyPaisa account number, bank account details (HBL, UBL, Meezan), transaction history, deposit and withdrawal amounts in PKR | Payment processing; KYC verification |
| Gaming Data | Game history, bet amounts and outcomes, sports markets wagered on, session durations, bonus utilisation, responsible gaming tool settings | Automatically generated during platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referring URL, pages visited, time on site | Automatically collected via server logs and cookies |
| Communications Data | Live chat transcripts, email correspondence, support ticket content, call recordings (where applicable) | Support interactions initiated by player or i999 |
| Verification Documents | CNIC photographs (front and back), proof of payment method ownership, selfie verification images where required | KYC submission portal |
i999 does not collect biometric data, health data, religious beliefs, or any other special category data beyond what is strictly required for age and identity verification purposes under our licensing obligations. CNIC-derived data is used solely for KYC compliance and is not processed for any other commercial purpose.
i999 processes personal data for the following specific and documented purposes. We do not use personal data for purposes that are incompatible with the purposes stated below without first notifying you and, where required, obtaining your consent.
i999 processes personal data only where a valid legal basis exists for doing so. The following legal bases apply to i999's data processing activities:
Processing that is necessary to perform the contract between you and i999 — specifically our Terms & Conditions — is carried out on the basis of contractual necessity. This includes account creation and management, payment processing, game delivery, KYC verification, and customer support. Without this processing, i999 cannot provide the platform services to you.
Certain processing activities are required by law or by i999's international gaming license obligations. These include anti-money laundering checks, record-keeping of financial transactions, age verification, responsible gaming monitoring and intervention, and disclosure to regulatory or law enforcement authorities where legally required.
i999 processes certain data on the basis of legitimate interests — where i999 has a genuine and proportionate reason to process data that does not override your fundamental privacy rights. This includes fraud detection and prevention, platform security monitoring, and the analysis of aggregated usage data to improve the platform. i999 has conducted and documented legitimate interests assessments for processing activities relying on this basis.
Where processing is based on consent — principally the sending of direct marketing communications — i999 will only process data where you have provided a clear, informed, and freely given consent. You may withdraw consent at any time by contacting i999 support or by updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
i999 does not sell, rent, or otherwise commercially transfer your personal data to any third party for that party's own purposes. However, i999 shares personal data with third parties in the following limited circumstances, each of which is necessary to deliver the i999 platform or to comply with legal obligations:
i999 engages third-party service providers who process personal data on i999's behalf and under i999's documented instructions. These include: payment processors (JazzCash, EasyPaisa, banking partners); KYC and identity verification technology providers; game software providers (whose games are hosted in the i999 environment); cloud infrastructure providers; customer support software providers; and fraud detection technology providers. All service providers are bound by data processing agreements that restrict their use of player data to the specific services they provide to i999.
i999 may disclose personal data to governmental authorities, regulators, courts, or law enforcement agencies where required to do so by law, court order, or regulatory direction, or where i999 reasonably believes that such disclosure is necessary to comply with a legal obligation, protect i999's legal rights, or prevent or detect criminal activity including fraud and money laundering.
In the event of a merger, acquisition, restructuring, or sale of all or part of i999's business, personal data may be transferred to the relevant counterparty as part of that transaction. Where such a transfer occurs, i999 will notify affected players via their registered email address in advance of any material change to how their data is processed.
i999 requires all third parties who receive personal data to maintain standards of data security and confidentiality equivalent to those applied by i999 itself. No third party recipient is permitted to use i999 player data for their own marketing or commercial purposes.
i999 uses cookies and similar tracking technologies on the i999.lol website and platform. Cookies are small text files placed on your device that enable i999 to recognise your browser, maintain your session, and gather information about how you use the platform.
You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in to your i999 account and using the platform. Instructions for managing cookies are available in your browser's help documentation. By continuing to use i999 without adjusting your cookie settings, you consent to i999's use of cookies as described in this section.
i999 implements a comprehensive set of technical and organisational security measures to protect the personal data of our players against unauthorised access, disclosure, alteration, or destruction. These measures include:
Despite these measures, no online platform can guarantee absolute security against all possible threats. Players are advised to use strong, unique passwords for their i999 accounts and to enable two-factor authentication where available. If you suspect that your i999 account has been compromised, contact i999 support immediately via live chat.
i999 retains personal data for the periods set out in the table below. When the applicable retention period expires, data is securely deleted or anonymised in accordance with i999's data lifecycle procedures. Retention periods reflect the purposes for which data was collected and any mandatory retention obligations under our gaming license and applicable law.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years following closure | Legal obligation (AML / gaming license) |
| Financial Transaction Records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| KYC / Verification Documents | 5 years following account closure | Legal obligation (AML compliance) |
| Gaming & Betting History | 5 years from last account activity | Legal obligation (gaming license); legitimate interests |
| Customer Support Records | 3 years from interaction date | Legitimate interests (quality assurance; dispute resolution) |
| Technical & Log Data | 12 months from collection | Legitimate interests (security; fraud detection) |
| Marketing Consent Records | 5 years from consent or withdrawal of consent | Legal obligation (demonstrating consent) |
i999 operates internationally and, as a result, personal data collected from Pakistani players may be stored and processed in countries other than Pakistan. Where personal data is transferred internationally, i999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required under our gaming license jurisdiction's data protection framework.
These safeguards include: contractual data transfer agreements with recipient entities incorporating standard data protection clauses; restricting transfers to countries that maintain an adequate level of data protection as assessed by recognised international standards; and conducting transfer impact assessments where required.
By using the i999 platform and accepting this Privacy Policy, you consent to the international transfer of your personal data as described in this section, subject to the safeguards outlined above.
As a player on i999, you have the following rights in relation to your personal data. These rights are genuine and i999 is committed to facilitating their exercise. To submit a data rights request, contact i999 support via live chat or email as described in Section 15.
You have the right to request a copy of the personal data that i999 holds about you, along with information about how it is used and with whom it is shared. i999 will provide this information within 30 days of receiving a verified request, in a clear and understandable format.
If any personal data i999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You can update most account data directly in your i999 account settings. For changes to identity data on record, contact i999 support with supporting documentation.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing is unlawful. Note that i999 may be required to retain certain data for mandatory periods under our gaming license and anti-money laundering obligations, even following an erasure request.
You have the right to request that i999 restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing on the basis of legitimate interests pending verification of those interests.
Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted directly to another data controller where technically feasible.
You have the right to object to processing based on i999's legitimate interests, including direct marketing. Where you object to direct marketing, i999 will cease processing your data for that purpose immediately. Where you object to other legitimate interests processing, i999 will cease unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, please contact i999 via the live chat support or by emailing [email protected] (copy the address manually — it is provided as plain text and is not a clickable link). i999 will acknowledge your request within 5 business days and respond in full within 30 calendar days. We may request proof of identity before processing a rights request to ensure your data is disclosed only to you.
The i999 platform is strictly intended for adults aged 21 years and above. i999 does not knowingly collect personal data from any individual under the age of 21. The registration process requires confirmation of age, and i999 conducts CNIC-based age verification on withdrawal requests and where other indicators of potential underage access are identified.
If i999 becomes aware that personal data has been collected from an individual who is under 21 years of age, that individual's account will be immediately suspended, all personal data associated with the account will be deleted to the extent not required by law, and any funds deposited will be returned net of any withdrawals already made, with winnings forfeited.
Parents or guardians who believe their child may have accessed i999 should contact i999 support immediately via live chat. i999 takes reports of underage access seriously and will investigate and act on all verified reports without delay.
i999 may send you marketing communications — including information about promotions, bonuses, new games, and platform updates — where you have provided your consent to receive such communications during account registration or through a subsequent opt-in. Marketing communications from i999 may be delivered by email, SMS to your registered Pakistani mobile number, or via on-platform notifications.
You may withdraw your consent to receive marketing communications from i999 at any time by: (a) updating your communication preferences in your i999 account settings; (b) clicking the unsubscribe link included in any i999 marketing email; or (c) contacting i999 support via live chat and requesting removal from marketing communications. Withdrawal of marketing consent will be processed within 5 business days. Note that withdrawal of marketing consent does not affect i999's ability to send you service-related communications necessary for account administration.
Separately from marketing communications, i999 will send you service communications that are necessary for account management. These include: account registration confirmation; KYC verification requests; deposit and withdrawal confirmations; security alerts; responsible gaming notifications; and updates to Terms & Conditions or this Privacy Policy. Service communications cannot be opted out of while you hold an active i999 account.
The i999 platform integrates with third-party services — including payment processors, game providers, and technical infrastructure providers — to deliver a complete gaming experience to Pakistani players. While i999 takes care in selecting and contracting with these third parties, this Privacy Policy applies only to data processing activities carried out by i999 as data controller. The following points apply to third-party services integrated with i999:
i999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, changes in applicable law or regulation, or changes in our operational practices. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.
Where changes to this Privacy Policy are material — such as changes to the categories of data collected, the purposes for which data is used, or the rights available to players — i999 will notify registered players via email to their registered address at least 14 days before the revised Policy takes effect. For minor clarificatory changes that do not affect your rights or our obligations, i999 may update the Policy without advance notice, and the revised Policy will take effect upon publication at i999.lol/privacy-policy.
Your continued use of the i999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law. If you do not accept the revised Policy, you must discontinue use of i999 and may request account closure as described in our Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by i999, please contact i999's Privacy Team using one of the following methods:
If you are not satisfied with i999's response to a privacy inquiry or data rights request, you have the right to escalate the matter to i999's senior compliance team by marking your email or live chat request as a "Formal Privacy Complaint". i999 will acknowledge formal complaints within 48 hours and provide a full written response within 28 calendar days.
If you remain dissatisfied following i999's internal complaint resolution process, you may have the right to lodge a complaint with a relevant data protection supervisory authority in your jurisdiction. i999 will cooperate fully with any such supervisory authority investigation.
i999's 24/7 live chat support is the most effective way to get a prompt response to privacy questions. For data subject rights requests that require formal processing — access requests, erasure requests, portability requests — email is preferred as it provides a written record for both parties. i999 commits to acknowledging all formal rights requests within 5 business days and resolving them in full within 30 calendar days.
With bank-grade security, transparent data practices, and a 24/7 Urdu-speaking support team, i999 is the online casino Pakistani players can trust — not just with their PKR, but with their personal information too.
21+ only. Please gamble responsibly and within your personal means.