ch999 Privacy Policy — How We Protect Your Data

01 Who We Are

ch999 is Pakistan's premier VIP online casino and sports betting platform, accessible at ch999.asia. The platform is operated by ch999 (referred to in this Privacy Policy as "ch999", "we", "us", or "our") under international gaming licence standards. ch999 acts as the data controller for all personal data collected through the Platform.

This Privacy Policy applies to all users of the ch999 Platform, including registered account holders, visitors browsing the site without an account, and any individuals who contact ch999 through customer support channels. By accessing or using the Platform, you confirm that you have read and understood this Privacy Policy in full.

For all privacy-related enquiries, you may contact our support team at any time via the 24/7 live chat facility available within the Platform. Our written support email address is displayed as plain text in the footer of this page.

02 Data We Collect

ch999 collects personal data that falls into the following categories, each collected only to the extent necessary for lawful platform operations:

03 How We Collect Your Data

ch999 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you actively provide when registering an account, completing the KYC process, submitting a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated Technical Collection: Technical and usage data collected automatically when you access and interact with the Platform, including through session cookies, server logs, and device fingerprinting technologies used for fraud prevention.
• Third-Party Payment Processors: Transaction reference information received from payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 gateway operators in connection with deposit and withdrawal activity.
• Identity Verification Partners: Confirmation data returned by third-party KYC verification service providers engaged by ch999 to validate identity documents submitted during account verification.
• Fraud Prevention Databases: Risk and fraud signals received from third-party fraud prevention services that ch999 uses to protect the integrity of its platform and user accounts.

04 Legal Basis for Processing

ch999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the account Terms & Conditions you agreed to at registration — including account creation, payment processing, game provisioning, and withdrawal management.
• Legal Obligation: Processing required for ch999 to comply with its legal and regulatory obligations, including KYC identity verification, anti-money laundering (AML) record-keeping, and reporting obligations under applicable gaming licence requirements.
• Legitimate Interests: Processing carried out for ch999's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics to improve platform performance.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of promotional communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 How We Use Your Data

ch999 uses the personal data we hold about you for the following specific purposes:

• Creating, verifying, and maintaining your ch999 account, including processing your KYC documentation and confirming your eligibility to use the Platform (21+ age verification).
• Processing deposits and withdrawals via your selected payment method, including JazzCash, EasyPaisa, and Pakistani bank accounts, and applying the same-method withdrawal policy for fraud prevention purposes.
• Delivering the games, sportsbook, live dealer, and slot products available on the Platform, including recording game outcomes and managing bonus and wagering requirement calculations.
• Enforcing the Platform's responsible gaming commitments, including monitoring gameplay patterns that may indicate problem gambling behaviour and applying account-level spending limits or self-exclusion measures where required.
• Detecting, investigating, and preventing fraudulent activity, bonus abuse, multi-accounting, money laundering, and any other conduct prohibited under the ch999 Terms & Conditions.
• Providing customer support via live chat and written correspondence, including maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Sending transactional communications — including deposit confirmations, withdrawal status updates, and account security alerts — which are essential service communications and are not subject to marketing opt-out.
• Sending promotional communications about ch999 bonuses, new games, and platform updates, where you have provided consent to receive such communications. You may withdraw marketing consent at any time by contacting support via live chat.
• Complying with applicable gaming licence regulatory requirements, including record-keeping, reporting, and audit obligations.

06 Data Sharing & Disclosure

ch999 does not sell or rent your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum financial data necessary with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT gateway operators to process your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: We share identity document data with contracted third-party verification partners solely for the purpose of completing your KYC process. These partners are bound by strict data processing agreements and are not permitted to use your data for any other purpose.
• Game Software Providers: We share your account identifier and session data with licensed gaming software studios whose games are available on the ch999 Platform. This is required to deliver game sessions and calculate outcomes. Personal identity data is not transmitted to game providers.
• Fraud Prevention Services: We may share technical data such as IP addresses, device identifiers, and risk signals with third-party fraud prevention databases to protect the Platform and its users from fraudulent activity.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, gaming regulators, financial intelligence units, or other competent authorities where we are legally required to do so, or where disclosure is necessary to protect ch999's legal rights or prevent imminent harm.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ch999's business operations, personal data held by ch999 may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third parties with whom ch999 shares personal data are subject to contractual data processing obligations that require them to process data securely, only for the specified purpose, and in compliance with applicable data protection standards.

07 Cookies & Tracking Technologies

ch999 uses cookies and similar lightweight tracking technologies on the Platform for the following purposes:

• Session Cookies: Essential cookies that maintain your logged-in session state as you navigate between pages on the Platform. These cookies expire when you close your browser and are strictly necessary for Platform functionality.
• Security Cookies: Cookies used to detect and prevent cross-site request forgery (CSRF) attacks and other security threats to your account session.
• Performance Cookies: Anonymised analytics cookies used to understand aggregate Platform usage patterns — such as which game categories are most visited and where technical errors occur — so that ch999 can improve the user experience. These cookies do not identify you personally.
• Preference Cookies: Cookies that remember your language preference (English or Urdu) and other display settings to provide a consistent experience across sessions.

You can control and delete cookies through your browser settings at any time. Please note that disabling session and security cookies will prevent you from logging in to your ch999 account.

08 Data Retention

ch999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Personal and account data is retained for the duration of your ch999 account and for a period of five years following permanent account closure, in compliance with gaming licence AML record-keeping requirements.
• KYC & Identity Documents: Identity verification documents are retained for a minimum of five years from the date of account closure, as required by applicable financial crime prevention regulations. In certain circumstances, extended retention may be required where an account is subject to an active legal or regulatory investigation.
• Transaction Records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations.
• Customer Support Records: Live chat transcripts and support correspondence are retained for a period of two years from the date of each interaction, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Records of your marketing consent or withdrawal thereof are retained for a period of three years from the date of the most recent consent action.
• Technical & Log Data: Server logs and technical session data are retained for a maximum of 90 days, after which they are automatically purged, unless retention is extended in connection with an active fraud or security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

09 Data Security

ch999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption: All personal and financial data is encrypted at rest using AES-256 encryption. All data transmitted between your device and ch999 servers is protected using TLS 1.3, the current industry standard for transport layer security.
• Access Controls: Access to personal data within ch999's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required for their specific role and are subject to binding confidentiality obligations.
• Multi-Factor Authentication: ch999 systems that hold personal data are protected by multi-factor authentication requirements for all staff access, in addition to strong password policies and regular access reviews.
• Infrastructure Security: ch999's Platform infrastructure is hosted in secure data centres with physical access controls, redundant power, and continuous environmental monitoring. Regular penetration testing is conducted by independent security specialists.
• Incident Response: ch999 maintains a documented data breach incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, ch999 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

While ch999 takes all reasonable steps to protect your data, no internet-based system is completely immune from risk. You are responsible for maintaining the security of your own ch999 account credentials and for immediately notifying ch999 via live chat if you believe your account has been compromised.

10 Your Data Rights

Subject to applicable law and ch999's legitimate processing purposes and legal obligations, you have the following rights in relation to the personal data ch999 holds about you:

• Right of Access: You may request a copy of all personal data ch999 holds about you. ch999 will respond to access requests within 30 days of receipt.
• Right of Rectification: You may request the correction of any inaccurate or incomplete personal data held in your ch999 account. For basic account details, corrections can be made directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected. This right is subject to ch999's legal retention obligations — data that must be retained for AML or regulatory compliance cannot be deleted on request until the applicable retention period has expired.
• Right to Restrict Processing: You may request that ch999 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is under review.
• Right to Data Portability: You may request that ch999 provide your personal data in a structured, machine-readable format where the processing is based on consent or contractual necessity and is carried out by automated means.
• Right to Object: You may object to the processing of your personal data where ch999's legal basis is legitimate interests. ch999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11 Children & Minors

The ch999 Platform is strictly intended for adults aged 21 and over. ch999 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Registration by persons under 21 is strictly prohibited under ch999's Terms & Conditions.

ch999 employs age verification procedures as part of the KYC process specifically to prevent underage access. Any account found to belong to a person under 21 will be immediately closed, all related data will be handled in accordance with applicable child data protection requirements, and any deposited funds will be returned to the originating payment method following identity confirmation.

12 International Data Transfers

As an internationally licensed gaming platform, ch999 may transfer personal data to and process it in jurisdictions outside Pakistan in connection with the following operational requirements:

• Hosting and infrastructure services provided by data centres located in the licensing jurisdiction and other secure international locations.
• KYC verification services, fraud prevention systems, and game software providers that operate from various international jurisdictions.
• Regulatory reporting obligations to ch999's licensing authority, which may be located outside Pakistan.

Where personal data is transferred internationally, ch999 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose equivalent data protection standards on the recipient. ch999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without the implementation of appropriate supplementary safeguards.

13 Third-Party Links

The ch999 Platform may contain references to third-party gaming software providers, payment processors, and other services in a purely informational context. ch999 does not include external links to third-party websites within its Platform content.

To the extent that any third-party service is accessible through the Platform (such as a payment gateway interface), that service is governed by its own separate privacy policy. ch999 accepts no responsibility or liability for the data practices of third-party services accessed in connection with Platform use. We recommend that you review the privacy policy of any third-party service provider before submitting personal data to them directly.

14 Updates to This Privacy Policy

ch999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform operations. Any changes will be published on this page with a revised Effective Date.

Where changes are material — meaning they significantly affect how ch999 processes your personal data or your rights in relation to that data — ch999 will endeavour to provide advance notice to registered users via in-platform notification or registered email address at least 7 days before the changes take effect.

Your continued use of the ch999 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Privacy Policy, you should cease using the Platform and may close your account by contacting customer support via live chat.

We recommend that you review this Privacy Policy periodically to stay informed about how ch999 protects your personal data.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ch999 holds about you, please contact our team through one of the following channels:

• Live Chat: Available 24/7 directly within your ch999 account. Our Pakistani support team typically responds within 2 minutes during peak hours and within 15 minutes at all other times.
• Written Correspondence: You may submit written privacy-related requests to our support email address, which is displayed as plain text in the footer of this page. Written requests are acknowledged within 3 business days.