wv999 Privacy Policy

This Privacy Policy ("Policy") is published by wv999 and governs the collection, processing, storage, and disclosure of personal data relating to all individuals who access or use the wv999 online gaming platform at wv999.org, including registered Players, prospective Players who browse without registering, and individuals who contact wv999 through any support channel.

This Policy should be read alongside the wv999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and those documents on a data protection matter, this Privacy Policy shall prevail.

By accessing wv999.org, completing the registration process, or interacting with any wv999 service, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the wv999 platform.

This Policy applies in full to all Pakistani players accessing wv999 from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Peshawar, and all other locations throughout Pakistan, as well as to players accessing from any other permitted jurisdiction.

For the purposes of applicable data protection legislation, wv999 acts as the Data Controller in respect of the personal data of its Players. As Data Controller, wv999 determines the purposes for which personal data is collected and the manner in which it is processed.

Certain data processing activities — including payment processing by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — are carried out by third-party Data Processors acting under written agreements with wv999 that impose data protection obligations consistent with this Policy. In such cases, the third-party processor acts under wv999's instructions and may not use Player data for their own independent purposes.

The designated Data Protection contact at wv999 can be reached through the support channels listed in Section 16 of this Policy.

wv999 collects personal data across several categories. The table below provides a comprehensive overview of the data types collected, their purpose, and their retention basis:

wv999 collects personal data through the following sources:

• Direct Provision by You: Data you enter during account registration, KYC verification document uploads, deposit and withdrawal form completion, live chat and email support interactions, and the submission of responsible gaming tool requests.
• Automated Technical Collection: Data collected automatically when you browse wv999.org or use the platform, including your IP address, device identifiers, session behaviour, and page interaction data via server logs and cookies. Refer to Section 8 for full details on cookies.
• Payment Processing Partners: Transaction confirmation data, payment reference numbers, and fraud risk scores returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with deposit and withdrawal transactions initiated by you.
• Identity Verification Services: Confirmation of identity document validity and age verification status returned by wv999's KYC processing partners in connection with CNIC verification.
• Responsible Gaming Databases: Where applicable and permitted, wv999 may check self-exclusion registries to honour cross-platform exclusion requests made by Players.

wv999 processes personal data strictly for the following defined purposes. No personal data is processed for any purpose not listed here without prior notification and, where required, fresh consent:

• Account Creation and Management: Processing your registration, maintaining your wv999 Account, enabling wv999 Login access, and updating your account details as requested.
• Age and Identity Verification (KYC): Confirming that all wv999 Account holders are 21 years of age or older and verifying their identity to prevent fraud and protect against unauthorised account creation.
• Payment Processing: Facilitating PKR deposits via JazzCash, EasyPaisa, and bank transfers, processing withdrawal requests to verified payment methods, and maintaining accurate financial records.
• Platform Security and Fraud Prevention: Detecting and preventing fraudulent account activity, money laundering, bonus abuse, multi-accounting, and unauthorised access attempts.
• Regulatory and Legal Compliance: Meeting obligations under applicable anti-money laundering regulations, responding to lawful requests from regulatory authorities or law enforcement, and maintaining records required for audit purposes.
• Customer Support: Responding to queries, investigating complaints, resolving disputes regarding gaming outcomes or financial transactions, and maintaining records of support interactions.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour, administering deposit limits, cooling-off periods, and self-exclusion requests, and providing proactive welfare interventions where appropriate.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, content, and user experience of the wv999 platform for Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Players who have provided explicit consent to receive marketing communications. Players may withdraw this consent at any time through their Account settings or by contacting support.

Where applicable data protection law requires wv999 to identify a legal basis for each category of personal data processing, the following bases apply:

• Contractual Necessity: Processing your identity, contact, financial, and gaming activity data is necessary to provide you with the wv999 gaming services you have contracted for and to manage your Account.
• Legal Obligation: Processing your identity data for KYC age verification and anti-money laundering checks is required by applicable regulatory obligations that wv999 is subject to as a gaming operator.
• Legitimate Interests: Processing your technical data for fraud detection and platform security serves wv999's legitimate interest in protecting its platform and all its Players from harm, and does not override your fundamental privacy rights.
• Consent: Processing your contact data for direct marketing communications is based on your explicit, freely given, and informed consent, which you may withdraw at any time without affecting any other aspect of your wv999 Account.

wv999 does not sell, rent, or transfer personal data to third parties for their own independent marketing or commercial purposes. Personal data is shared with third parties only in the following defined and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum personal data necessary to process your deposit and withdrawal transactions. These partners are bound by their own data protection obligations and financial services regulations.
• KYC and Identity Verification Partners: Third-party identity verification services receive CNIC-related data solely for the purpose of age and identity confirmation during the KYC process, acting as Data Processors under wv999's instruction.
• Game Providers: Where technically necessary to facilitate game delivery, session data such as your anonymised Player ID and bet amounts may be shared with licensed third-party game providers. These providers may not use this data to identify you independently.
• IT and Hosting Infrastructure: Encrypted personal data is processed by wv999's cloud hosting and database management partners under strict data processing agreements. These partners have no right to access or use your data independently of wv999's instructions.
• Legal and Regulatory Authorities: wv999 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, valid legal process, or to protect against fraud, money laundering, or serious harm.
• Business Transfers: In the event of a merger, acquisition, or sale of wv999 assets, Player personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. Registered Players will be notified of any such transfer in advance.

wv999 uses cookies and similar tracking technologies on wv999.org to enable essential platform functionality, improve user experience, and support security monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the wv999 Login session to function, for security token validation, and for maintaining your authenticated session while you are logged in. These cannot be disabled without preventing you from using the platform.
• Functional Cookies: Remember your language preferences, game display settings, and responsible gaming configurations between sessions. Disabling these cookies may affect your experience but will not prevent basic platform access.
• Analytics Cookies: Collect anonymised and aggregated data about page load times, device types, and navigation patterns to help wv999 identify and fix performance issues. This data is not linked back to individual Player identities.
• Security Cookies: Used to detect unusual login patterns, potential account takeover attempts, and IP-based anomalies that may indicate fraudulent access to your wv999 Account.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent access to account-authenticated features of the wv999 platform. wv999 does not use third-party advertising cookies or social media tracking pixels on its platform pages.

wv999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in any case for no longer than required by applicable legal and regulatory obligations. The following retention periods apply as standard:

• Active Account Data: Retained for the full duration of your wv999 Account, including during any self-exclusion or cooling-off period.
• Financial Transaction Records: Retained for a minimum of 5 years following each transaction to meet anti-money laundering record-keeping requirements.
• KYC Identity Documents: Retained for a minimum of 5 years following account closure, or longer where required by applicable regulatory obligations.
• Gaming Activity Logs: Retained for 3 years following the last recorded gameplay session, for dispute resolution and responsible gaming audit purposes.
• Customer Support Records: Live chat transcripts and email records retained for 2 years following the closure of the relevant support interaction.
• Marketing Consent Records: Retained for 3 years following withdrawal of consent, as evidence of the consent management history.

Following expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual Player.

wv999 employs a layered approach to data security designed to protect Pakistani players' personal and financial information against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• TLS/SSL Encryption in Transit: All data transmitted between your device and wv999.org is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), preventing interception of your login credentials, financial data, or account information in transit.
• Encryption at Rest: Sensitive personal data fields — including CNIC numbers, financial account references, and passwords (which are stored as salted cryptographic hashes, never in plain text) — are encrypted within wv999's database infrastructure.
• Access Controls: Personal data is accessible internally only to wv999 staff whose job role requires access. All internal access is logged, subject to role-based permissions, and reviewed periodically.
• Two-Factor Authentication: OTP-based authentication is available for wv999 Login to protect your account against credential theft even if your password is compromised.
• Security Monitoring: wv999's technical infrastructure is subject to continuous automated monitoring for anomalous access patterns, potential intrusion attempts, and data exfiltration indicators.
• Vendor Security Assessments: Third-party Data Processors are assessed for compliance with minimum security standards before being engaged by wv999, and are subject to contractual security obligations throughout the engagement.

wv999 respects the privacy rights of Pakistani players and all other users of the platform. Subject to applicable law and the requirements of wv999's regulatory and legal obligations, you hold the following rights in relation to your personal data:

The wv999 platform is strictly prohibited to individuals under 21 years of age. wv999 does not knowingly collect personal data from any person under 21. The mandatory CNIC-based KYC verification process is specifically designed to prevent minors from registering accounts.

If wv999 becomes aware that personal data has been collected from an individual subsequently determined to be under 21 years of age, that data will be deleted and the associated Account will be permanently closed. Parents or guardians who believe a minor has registered a wv999 Account should contact the support team immediately via the channels in Section 16 so that prompt action can be taken.

The wv999 platform may contain links to pages of third-party game providers or payment gateways during the deposit and withdrawal process. These third-party services operate under their own separate privacy policies, which wv999 does not control and is not responsible for.

Once you navigate to a third-party service — for example, a JazzCash payment confirmation screen — that service's own privacy policy governs the handling of any data you enter or that is transmitted within their interface. wv999 recommends that Pakistani players review the privacy policies of all third-party services they interact with, including their payment app provider, before entering personal or financial information.

wv999's hosting and technical infrastructure may involve the processing or storage of personal data in server locations outside Pakistan. Where personal data is transferred internationally, wv999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Policy.

Such safeguards may include the use of standard contractual clauses, data processing agreements with equivalent data protection obligations, or reliance on adequacy determinations where applicable. Details of specific international transfer mechanisms in place can be requested through the Data Protection contact in Section 16.

wv999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, legal obligations, or platform functionality. Material changes — those that significantly affect Player rights or the purposes for which data is used — will be communicated to registered Players via their registered mobile number or email address, and will be accompanied by a minimum 14-day notice period before taking effect.

Non-material amendments, such as clarifications to existing provisions or updates to contact details, will take effect upon publication on this page with an updated "Last Updated" date. The most current version of this Privacy Policy is always accessible at wv999.org/privacy-policy. Continued use of the wv999 platform following the effective date of any amendment constitutes acceptance of the revised Policy.

For any questions, data subject rights requests, or privacy-related complaints concerning the handling of your personal data by wv999, please contact us through the following channels:

• 24/7 Live Chat: Available on the wv999 platform — request to speak with the Data Protection team for privacy-specific queries
• Email: support@wv999.org — mark the subject line "Privacy / Data Request" for prioritised routing
• Response Time: Privacy and data rights requests acknowledged within 48 hours and fully resolved within 30 calendar days
• Languages: Privacy queries handled in both English and Urdu

wv999 is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with the resolution provided, you may have the right to escalate your complaint to the relevant data protection authority in the jurisdiction governing your relationship with wv999. Details of the applicable supervisory authority can be provided upon request.