sp999 Privacy Policy

1. Who We Are (Data Controller)

For the purposes of this Privacy Policy, the data controller is sp999, the operator of the online gaming and sports betting platform accessible at sp999.vip ("the Platform"). When we refer to "sp999", "we", "us", or "our" in this document, we mean the entity responsible for processing your personal data in connection with your use of the Platform and its services.

sp999 is committed to handling the personal information of Pakistani players and all other users with the highest standards of care, transparency, and legal compliance. For all data-related inquiries, including subject access requests, correction requests, and complaints, please contact us at [email protected].

2. Personal Data We Collect

sp999 collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your Pakistani CNIC or passport.
• Date of birth (for mandatory age verification — sp999 services are 18+ only).
• Email address and Pakistani mobile phone number.
• Residential address (required for KYC verification at withdrawal stage).
• Government-issued identification document numbers (CNIC, Passport) — collected during KYC and stored in encrypted form.

2.2 Financial Data

• JazzCash account number and Easypaisa account details (collected for deposit and withdrawal processing).
• Bank account details for HBL, UBL, Meezan Bank, and Bank Alfalah where bank transfer is selected.
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers — all denominated in PKR.
• Partial card details (last four digits only) where Visa/Mastercard deposits are processed; full card numbers are never stored by sp999.

2.3 Technical & Usage Data

• IP address and approximate geographic location at time of login and registration.
• Device type, operating system, browser version, and screen resolution.
• Session duration, pages visited, bet placement logs, game launch records, and feature interaction data.
• Login timestamps and records of failed login attempts.

2.4 Communications Data

• Records of all communications between you and sp999 support staff, including live chat transcripts, emails, and support ticket content.
• Survey responses and feedback forms completed voluntarily.

3. How We Collect Your Data

sp999 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit or withdrawal request, or contacting support.
• Automated collection: Technical and usage data collected automatically when you access or interact with sp999.vip, including via cookies and server-side logging.
• Third-party payment providers: Transaction confirmation data received from JazzCash, Easypaisa, and banking partners when processing your deposits and withdrawals.
• Identity verification services: KYC confirmation data returned by third-party document verification providers used to confirm identity and age.

4. Why We Use Your Data

sp999 uses the personal data it collects for the following purposes:

• To create and manage your sp999 account and maintain your PKR balance.
• To verify your age and identity in compliance with responsible gaming obligations — all users must be 18 or older.
• To process deposits via JazzCash, Easypaisa, and other supported payment methods, and to process withdrawal requests to verified Pakistani bank accounts and mobile wallets.
• To detect, investigate, and prevent fraudulent activity, money laundering, and prohibited conduct as described in the sp999 Terms & Conditions.
• To personalise your sp999 experience and deliver relevant promotional offers and bonus notifications, where you have not opted out of marketing communications.
• To provide customer support and resolve disputes, complaints, and account inquiries.
• To comply with applicable legal obligations, regulatory requirements, and lawful requests from competent authorities.
• To analyse aggregated, anonymised platform usage data for product improvement, performance monitoring, and responsible gaming research.

5. Legal Basis for Processing

sp999 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to create and operate your sp999 account, process payments, and deliver the services you have registered for.
• Legal obligation: Processing required to comply with KYC, anti-money-laundering (AML), and responsible gaming regulations applicable to the sp999 platform.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregated analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional marketing communications and non-essential cookies, where your consent has been explicitly obtained and can be withdrawn at any time.

6. Data Sharing & Disclosure

sp999 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. sp999 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and other payment service providers — solely to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify your CNIC or passport for age and identity compliance purposes.
• Game content providers: Casino game suppliers such as Evolution Gaming, Pragmatic Play, PG Soft, Jili, and Habanero — who receive pseudonymous session and game data to power their games on the sp999 platform.
• Fraud detection and security services: Third-party providers that assist sp999 in identifying suspicious account activity, fraudulent transactions, and platform abuse.
• Legal and regulatory authorities: Government bodies, law enforcement agencies, financial intelligence units, and regulatory authorities where sp999 is legally required to disclose information.
• Professional advisors: Legal counsel, auditors, and compliance consultants operating under professional confidentiality obligations.

7. International Data Transfers

sp999 may transfer your personal data to third-party service providers located outside Pakistan, including game content providers, KYC verification services, and cloud hosting infrastructure. Where such transfers occur, sp999 implements appropriate safeguards to ensure your data receives a level of protection equivalent to that applicable in your home jurisdiction. These safeguards may include standard contractual clauses, data processing agreements, and provider-level certifications. By registering an sp999 account, you acknowledge that your data may be processed in jurisdictions outside Pakistan.

8. Data Retention

sp999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including ongoing regulatory and legal compliance obligations. Specific retention principles applied by sp999 include:

• Active account data is retained for the full duration of your account's existence on the sp999 platform.
• Following account closure, core identity and transaction records are retained for a minimum of five (5) years to satisfy anti-money-laundering record-keeping requirements.
• KYC documents are retained for the period required under applicable regulatory frameworks and deleted securely thereafter.
• Communication records (support tickets, live chat logs) are retained for three (3) years from the date of the interaction.
• Technical and usage logs are retained for a rolling twelve (12) month period, after which they are anonymised or deleted.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities.

9. Cookies & Tracking Technologies

sp999.vip uses cookies and similar tracking technologies to operate the platform and deliver a consistent user experience. The categories of cookies sp999 uses are:

• Strictly necessary cookies: Required for the platform to function — including session authentication, login state management, and security tokens. These cannot be disabled.
• Performance cookies: Collect anonymised data on how users interact with sp999.vip — page load times, error rates, and navigation patterns — used to improve platform stability and speed.
• Functional cookies: Remember your preferences such as preferred language, time zone, and last-used deposit method to personalise your sp999 experience across sessions.
• Marketing cookies: Used to deliver relevant promotional content to sp999 users who have opted in to marketing communications. These require your explicit consent and can be withdrawn via your account settings or browser preferences.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the sp999 platform.

10. Your Data Rights

As a user of sp999, you have the following rights in relation to your personal data, subject to applicable legal limitations:

• Right of access: Request a copy of all personal data sp999 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data held in your sp999 account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the original purpose, subject to legal retention obligations.
• Right to restrict processing: Request that sp999 limit how it uses your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to data portability: Request that sp999 provide your data in a structured, machine-readable format where processing is based on your consent or contractual necessity.
• Right to object: Object to processing based on sp999's legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where sp999 processes your data based on consent (such as marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact sp999 at [email protected]. sp999 will respond to all data rights requests within 30 days of receipt. Identity verification may be required before processing certain requests.

11. Security Measures

sp999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Full SSL/TLS encryption for all data transmitted between your device and sp999.vip.
• Encryption at rest for sensitive data fields including identity document numbers, financial credentials, and passwords (passwords are hashed and never stored in plaintext).
• Two-factor authentication (2FA) available to all sp999 account holders and strongly recommended.
• Access controls restricting sp999 employee access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments conducted on the sp999 platform infrastructure.
• Incident response procedures to detect, contain, and notify affected users in the event of a data security breach.

While sp999 takes all reasonable precautions, no internet-based platform can guarantee absolute security. Users are encouraged to enable 2FA on their sp999 account and to maintain strong, unique passwords.

12. Children's Privacy

sp999 services are strictly for adults aged 18 and over. sp999 does not knowingly collect personal data from individuals under the age of 18. If sp999 discovers that a user under the age of 18 has registered an account, that account will be immediately suspended, all associated data will be deleted, and the matter may be escalated to relevant authorities. If you believe a minor has accessed sp999 using falsified age information, please contact us immediately at [email protected].

13. Third-Party Links

The sp999 platform does not contain links to external third-party websites for commercial or advertising purposes. All navigation links on sp999.vip point exclusively to internal sp999 pages. Where game content providers render content within the sp999 platform interface, those providers' own privacy policies govern data processing within their embedded environments. sp999 is not responsible for the privacy practices of third-party game content providers operating within their own software environments.

14. Changes to This Privacy Policy

sp999 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services offered on the platform. When material changes are made, sp999 will notify registered users via email to their registered address and/or via a prominent banner on sp999.vip prior to the changes taking effect. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of sp999 following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the revised policy, you should cease using the platform and request account closure before the effective date.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or sp999's handling of your personal data, please contact our data protection team:

Email: [email protected]

Please mark your email with the subject line "Privacy Request — [Your Account Username]" to ensure it is routed to the data protection team. sp999 will acknowledge all privacy-related communications within 48 hours and respond in full within 30 calendar days.

sp999 does not operate a telephone privacy line. All data rights requests must be submitted in writing via email to the address above, accompanied by sufficient information to verify your identity before your request can be processed.