Privacy Policy — sx999

1 Introduction

This Privacy Policy ("Policy") is issued by sx999 ("Platform", "we", "us", "our") and applies to all users ("User", "you") who access or use the sx999 website located at sx999.cam, its subdomains, mobile interfaces and any associated services, features or content offered therein.

sx999 is an online casino and sports betting information platform designed for Pakistani players, delivering English-language content covering cricket betting, live casino, slots, bonus guidance and responsible gambling information for users across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

We are committed to handling your personal data with transparency, integrity and care. This Policy describes the categories of personal data we collect, the purposes for which it is processed, the legal bases for that processing, how long data is retained, and the rights available to you in respect of your personal information.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, you should discontinue use of the Platform. This Policy should be read in conjunction with our Terms & Conditions.

2 Definitions

The following terms carry the meanings assigned below throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, payment details and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure or deletion.
• "Data Controller" refers to sx999, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" refers to any third party engaged by sx999 to process personal data on its behalf under written instructions and appropriate data-processing agreements.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data, which may be withdrawn at any time.
• "Cookies" refers to small text files stored on your device by websites you visit, used to enable functionality, track sessions and gather analytical data.
• "KYC" means Know Your Customer — the identity and address verification procedures required before certain account actions, particularly withdrawals, can be completed.
• "User" means any individual who accesses, browses, registers on or interacts with the sx999 Platform in any capacity.
• "Third Party" means any entity other than you and sx999 that may have access to personal data under the terms of this Policy.

3 Data We Collect

sx999 collects personal data in the categories set out below. We collect only what is reasonably necessary for the purposes described in this Policy.

3.1 Registration and Account Data

When you create an account, we collect:

• Full legal name
• Date of birth (for age verification purposes)
• Email address
• Residential address (city, country — e.g., Karachi, Lahore, Islamabad)
• Username and password (stored in hashed form)
• Preferred currency (e.g., PKR)
• Communication preferences

3.2 Identity Verification (KYC) Data

For the purposes of identity and age verification, we may collect:

• Copies of government-issued identification (e.g., National Identity Card / CNIC, passport, driving licence)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method ownership where required
• Selfie or live verification image (where required by the operator's verification system)

3.3 Transaction and Payment Data

We collect data relating to your financial transactions on the Platform, including:

• Deposit and withdrawal amounts and dates
• Payment method type (e.g., bank transfer, crypto wallet type — not full card or account numbers)
• Transaction reference numbers
• Balance history and wagering activity

3.4 Usage and Technical Data

When you access the Platform, we automatically collect certain technical data:

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session duration and pages visited
• Referring website and exit pages
• Game and betting activity logs
• Error and crash reports

3.5 Communications Data

When you contact our support team — by email or live chat — we collect and retain a record of the communication, including the content of your messages, timestamps and any information you voluntarily provide during the interaction.

3.6 Responsible Gambling Data

Where you use responsible gambling tools — including deposit limits, session limits, loss limits or self-exclusion — we collect and retain records of those settings and any changes made to them, to ensure compliance with your stated preferences.

4 How We Collect Data

sx999 collects personal data through the following methods:

Collection Method	Examples
Direct submission	Registration forms, KYC document uploads, support enquiries, preference settings
Automated collection	Cookies, server logs, analytics scripts, session tracking, device fingerprinting
Third-party sources	Identity verification providers, fraud detection services, payment processors
Platform activity	Betting logs, game session records, transaction history, limit configuration

5 Legal Basis for Processing

Where data protection law requires a legal basis for processing personal data, sx999 relies on one or more of the following:

• Contract performance: Processing necessary to provide the services you have requested, including account management, payment processing and KYC verification.
• Legal obligation: Processing required to comply with applicable regulatory and legal requirements, including anti-money-laundering (AML), counter-terrorism financing (CTF) obligations and responsible gambling mandates.
• Legitimate interests: Processing necessary for fraud prevention, platform security, improving service quality and abuse detection, where those interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

sx999 uses personal data collected from users for the following purposes:

6.1 Account Management

To create, maintain and manage your user account, including authentication, account security, preference settings and communication with you about your account.

6.2 Service Delivery

To provide the gambling services, sports betting markets, casino games, bonus offers and other features available on the Platform. This includes processing deposits, calculating winnings, applying bonus terms and facilitating withdrawals.

6.3 Identity Verification and Compliance

To complete KYC verification, verify your age (18+ or applicable higher minimum), meet AML and CTF obligations, and comply with any other regulatory requirements applicable to the operator's licence jurisdiction. Failure to complete verification may result in withdrawal suspension.

6.4 Responsible Gambling

To enforce deposit limits, session limits, loss limits, cooling-off periods and self-exclusion settings as configured by you. We retain records of these settings to ensure your preferences are consistently applied and to protect vulnerable users.

6.5 Fraud Prevention and Platform Security

To detect, investigate and prevent fraudulent activity, multiple account registrations, bonus abuse, money laundering, and other prohibited conduct as described in the Terms & Conditions.

6.6 Customer Support

To respond to your support enquiries, resolve disputes, and improve the quality of our support service based on interaction records.

6.7 Platform Analytics and Improvement

To analyse Platform usage patterns, identify technical issues, optimise performance and improve the overall user experience across all devices and connection speeds relevant to Pakistani users.

6.8 Marketing Communications

Where you have provided consent, to send you promotional content including bonus offers, new game announcements and platform updates. You may withdraw marketing consent at any time by contacting support or using any unsubscribe mechanism provided.

7 Data Sharing & Disclosure

sx999 does not sell personal data to third parties. We may share personal data in the limited circumstances described below:

7.1 Service Providers and Data Processors

We engage third-party service providers to assist in delivering the Platform's services, including payment processors, identity verification providers, fraud detection services, cloud infrastructure providers and analytics platforms. These providers process data strictly on our instructions and under written data-processing agreements that impose confidentiality and security obligations.

7.2 Legal and Regulatory Disclosure

We may disclose personal data where required to do so by law, court order, regulatory authority or government request — including in connection with AML and CTF obligations, licensing requirements and any lawful authority requests made in relevant jurisdictions. sx999 does not represent that Pakistani authorities have requested or accessed any such data; this provision applies to any jurisdiction with applicable legal authority.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets or other corporate transaction involving sx999 or its operator, personal data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections.

7.4 Protection of Rights

We may share data where we reasonably believe it is necessary to protect the rights, property or safety of sx999, its users, or the public — including to prevent fraud, abuse or criminal activity on or through the Platform.

8 Cookies & Tracking Technologies

sx999 uses cookies and similar tracking technologies to operate the Platform, maintain your session, gather analytical data and personalise your experience. The categories of cookies used are set out below.

Cookie Type	Purpose	Retention
Strictly Necessary	Session management, login authentication, security tokens. Cannot be disabled without preventing core functionality.	Session / short-term
Functional	Remembering language preferences, responsible gambling settings and UI preferences.	Up to 12 months
Analytical	Platform usage analytics to understand how users navigate the site and identify performance issues. Data is aggregated or pseudonymised where possible.	Up to 24 months
Marketing	Where consent is given, cookies used to identify returning users and measure the effectiveness of promotional campaigns. No third-party ad-network targeting.	Up to 12 months

You may control or disable non-essential cookies through your browser settings or any cookie preference interface provided on the Platform. Please note that disabling certain cookies may impair Platform functionality. Most browsers also provide the ability to delete cookies already stored on your device.

9 Data Retention

sx999 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to comply with legal obligations, and to resolve disputes or enforce agreements. Specific retention periods are determined by the nature of the data and applicable regulatory requirements.

• Active account data: Retained for the duration of the account's active status and a defined period thereafter, as required by the operator's licence obligations.
• KYC and identity documents: Retained for the minimum period required by AML and regulatory obligations applicable in the operator's licence jurisdiction, typically five (5) years following account closure.
• Transaction records: Retained for at least five (5) years, or longer where required by applicable financial law, to support AML compliance, audit trails and dispute resolution.
• Responsible gambling records: Retained for the duration of any active self-exclusion period plus an additional period as required by applicable licensing rules, to prevent circumvention of exclusion orders.
• Marketing data: Retained until you withdraw consent or for a reasonable period of inactivity, whichever is earlier.
• Support communications: Retained for up to three (3) years following the resolution of the enquiry, to support quality management and dispute resolution.

When personal data is no longer required and no legal obligation mandates its retention, it will be securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

10 Data Security

sx999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration or destruction. Measures in place include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest, including stored credentials and KYC documents.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Two-factor authentication options for user accounts to reduce the risk of unauthorised access.
• Secure disposal procedures for data and physical storage media containing personal information.

Notwithstanding the above, no electronic transmission or storage system is entirely risk-free. Users are responsible for maintaining the security of their own account credentials and should notify support immediately if they suspect unauthorised account access.

11 User Rights

Subject to applicable law and the operator's licence obligations, users of the sx999 Platform have the following rights in relation to their personal data. Requests may be submitted via the support email set out in Section 15.

sx999 will respond to data rights requests within a reasonable timeframe as required by applicable law, typically within 30 days of receipt of a valid request. We may require identity verification before processing a rights request to prevent unauthorised access to another individual's data.

If you believe your data rights have not been respected, you have the right to raise a complaint with the relevant supervisory authority in your jurisdiction.

12 Children's Privacy

The sx999 Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator or applicable licence jurisdiction. We do not knowingly collect, process or retain personal data from individuals under the applicable minimum age.

If we become aware that personal data has been collected from an individual below the minimum age — whether through registration, activity, or any other means — that account will be immediately suspended, all associated data will be deleted, and any balances or bonuses will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe a minor has created an account or submitted personal data through this Platform, please contact our support team immediately using the details provided in Section 15. We will investigate and act promptly.

13 Third-Party Links & Services

The sx999 Platform may reference or interact with third-party services, game providers, payment processors and identity verification systems. These third parties operate under their own privacy policies, over which sx999 has no control. This Privacy Policy applies solely to data collected and processed by sx999 directly.

Where the Platform references third-party payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah as familiar contextual references, any interaction with those providers in connection with payment processing is subject to the relevant provider's own data privacy practices. sx999 is not responsible for the privacy practices of these third parties and users should review the relevant provider's privacy documentation independently.

14 Policy Amendments

sx999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or operational requirements. Material changes will be communicated to registered users via the Platform or by email where reasonably practicable.

The "Last Reviewed" date at the top of this document indicates when the most recent revision was made effective. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. Users who do not agree with a revised Policy should discontinue use of the Platform and may request account closure and data deletion as described in Section 11.

We encourage all users to review this Policy periodically to remain informed about how their personal data is handled.

15 Contact Us

For any questions, concerns or requests relating to this Privacy Policy — including the exercise of your data rights under Section 11 — please contact the sx999 Data Privacy team using the details below.