Privacy Policy – How st999 Collects, Uses & Protects Your Data

1. Introduction

This Privacy Policy is issued by st999 ("st999", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to users ("you", "player") of the st999 online gaming and sports betting platform accessible at st999.asia.

st999 takes the privacy of its players seriously. This policy has been prepared to give you a clear, honest account of our data practices. If you have questions after reading it, our support team is available 24/7 via live chat at st999.asia. We would rather you ask than be uncertain about how your data is handled.

By registering an account at st999, depositing funds, placing bets, or otherwise using the st999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which are incorporated by reference.

2. Data Controller

For the purposes of this Privacy Policy, st999 is the data controller responsible for personal data collected through the st999 platform. As data controller, st999 determines the purposes and means of processing your personal data. Questions, requests, or complaints relating to data protection should be directed to st999's support team. Contact details are provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you register an account at st999, we collect the information you provide, which includes: full legal name; date of birth; Pakistani CNIC (Computerised National Identity Card) number; residential address; email address; Pakistani mobile number (03xx format). This information is required to create your account, verify your identity, and comply with our regulatory obligations.

3.2 Financial and Payment Data

To process deposits and withdrawals in Pakistani Rupees (PKR), st999 collects payment-related data including: JazzCash wallet number or Easypaisa account number; Pakistani bank account details including HBL, UBL, Meezan Bank, Bank Alfalah, or other supported institutions; transaction history including deposit amounts, withdrawal requests, and payment method identifiers. Full payment card or bank account numbers are not stored by st999 beyond the minimum required for transaction processing.

3.3 Gaming Activity Data

st999 records all gaming activity conducted through your account, including: bet placement records specifying game type, amount, outcome, and timestamp; sports betting selections including cricket markets, PSL bets, football, UFC, and all other markets; casino game session data including duration, game title, and results; bonus activation and wagering activity.

3.4 Technical and Device Data

When you access the st999 platform, we automatically collect certain technical data, including: IP address; device type, model, and operating system; browser type and version; session timestamps and duration; pages viewed and navigation paths within the platform; referring URL.

3.5 Communications Data

If you contact st999 customer support or engage with our communication channels, we retain records of those communications including chat transcripts, email correspondence, and support ticket history.

3.6 KYC Verification Documents

To complete identity verification, st999 may collect copies of identity documents including a scanned or photographed CNIC, proof of address documents, and selfie photographs for facial verification purposes. These documents are stored securely and used exclusively for KYC compliance purposes.

4. How We Collect Your Data

st999 collects personal data through the following means:

• Directly from you — information you provide during registration, KYC submission, deposit/withdrawal requests, customer support interactions, and promotional form completions;
• Automatically — technical data collected when you access or use the st999 platform, via cookies, web beacons, server logs, and similar tracking technologies;
• Third-party verification providers — identity verification services used to confirm KYC documents, cross-referenced against public records where applicable;
• Payment processors — transaction data received from JazzCash, Easypaisa, and banking partners in the course of processing PKR transactions.

5. Purposes of Processing

st999 processes your personal data for the following specific purposes:

1. Account creation and management — establishing and maintaining your st999 player account, authenticating your identity at login, and managing account settings;
2. Identity verification (KYC) — verifying that you meet the eligibility requirements to use st999, including age verification (18+) and identity confirmation;
3. Payment processing — processing deposits and withdrawals in PKR via JazzCash, Easypaisa, and supported Pakistani banking channels;
4. Fraud prevention and security — detecting, investigating, and preventing fraudulent transactions, money laundering, and other prohibited activities;
5. Regulatory compliance — meeting obligations under applicable gaming regulations and financial reporting requirements;
6. Customer support — responding to your queries, resolving disputes, and improving support quality;
7. Responsible gaming — monitoring for patterns indicative of problem gambling behaviour, enforcing self-exclusion requests, and administering deposit and session limits;
8. Service improvement — analysing platform usage data in anonymised or aggregated form to improve the st999 product experience;
9. Marketing communications — sending you promotional offers, bonus notifications, and platform updates, where you have not opted out.

6. Legal Basis for Processing

st999 processes your personal data on the following legal bases, consistent with applicable data protection frameworks:

• Contractual necessity — processing required to perform our contract with you as a registered player, including account management, gaming service delivery, and payment processing;
• Legal obligation — processing required to comply with regulatory requirements including KYC, anti-money laundering (AML), and responsible gaming obligations;
• Legitimate interests — processing for fraud prevention, security monitoring, and service improvement, where these interests are not overridden by your fundamental rights;
• Consent — processing for marketing communications, where your consent has been obtained and can be withdrawn at any time.

7. Data Sharing and Disclosure

st999 does not sell, rent, or trade personal data to unaffiliated third parties for their own marketing purposes. st999 may share your personal data with the following categories of recipients, strictly as necessary:

• Payment processors and financial institutions — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, solely for transaction processing;
• Identity verification providers — third-party KYC service providers used to authenticate identity documents and meet regulatory verification requirements;
• Game and platform technology providers — licensed game providers and platform technology partners who operate components of the st999 service under data processing agreements;
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory authority directive;
• Group companies — affiliated entities within the st999 corporate group, where data sharing is necessary for centralised functions such as compliance, finance, or IT security;
• Fraud prevention networks — industry fraud prevention databases used to identify and block fraudulent account activity across the online gaming sector.

Any third parties with whom st999 shares personal data are required to process that data in accordance with applicable data protection standards and are prohibited from using it for purposes beyond those specified by st999.

8. International Data Transfers

st999 may process and store personal data on servers located outside of Pakistan. Where personal data is transferred internationally, st999 applies appropriate safeguards consistent with applicable data protection requirements, including standard contractual clauses, data processing agreements with adequate protections, or transfers to jurisdictions that provide adequate levels of data protection.

By using the st999 platform, Pakistani players acknowledge and consent to the possibility that their personal data may be processed in jurisdictions outside Pakistan, subject to the protections described in this Policy.

9. Cookies and Tracking Technologies

st999 uses cookies and similar tracking technologies on the st999.asia platform for the following purposes:

• Strictly necessary cookies — essential for the platform to function, including maintaining your login session, preserving account preferences, and enabling secure authentication;
• Performance and analytics cookies — used to understand how players use the st999 platform, identify performance issues, and improve the user experience, using data in aggregated or anonymised form;
• Functionality cookies — used to remember your preferences such as language, display settings, and previously viewed game categories;
• Targeting and advertising cookies — used, with your consent, to display relevant st999 promotions and to measure the effectiveness of marketing activities.

You may control cookie settings through your browser settings. Disabling certain cookies may affect the functionality of the st999 platform — for example, disabling strictly necessary cookies will prevent you from maintaining a logged-in session.

10. Data Retention

st999 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following:

• Active account data is retained for the duration of your account's active status and for a minimum period thereafter as required by applicable regulatory obligations;
• KYC documentation and identity verification records are retained for the period required by applicable anti-money laundering regulations following account closure;
• Transaction and gaming activity records are retained for the period required by applicable financial and gaming regulatory record-keeping obligations;
• Customer support communications are retained for a period sufficient to resolve any related disputes and comply with any statutory limitation periods.

When personal data is no longer required to be retained, st999 will securely delete it or, where deletion is not immediately practicable, anonymise it such that it can no longer be associated with any individual player.

11. Your Data Rights

Subject to applicable law, st999 players have the following rights in relation to their personal data:

To exercise any of these rights, contact st999 customer support via live chat. st999 will respond to verified requests within a reasonable timeframe consistent with applicable requirements. st999 may require identity verification before processing a data rights request.

12. Children's Privacy

The st999 platform is strictly for individuals aged 18 and over. st999 does not knowingly collect personal data from anyone under the age of 18. If st999 discovers that personal data has been collected from a minor, the account will be immediately closed and the data will be deleted. If you believe a minor has registered at st999, please contact support immediately.

st999 applies age verification at registration via CNIC validation as a primary safeguard against underage access. Parents and guardians in Pakistan concerned about minor access to online gaming platforms are encouraged to use parental control software on shared family devices.

13. Security Measures

st999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration, including:

• SSL/TLS encryption for all data in transit between your browser and st999 servers;
• Encryption of sensitive data at rest, including payment information and KYC documentation;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security testing and vulnerability assessments of the st999 platform;
• Two-factor authentication options for player accounts;
• Monitoring systems for detecting and responding to data security incidents.

Whilst st999 takes all reasonable measures to protect your personal data, no data transmission over the internet or data storage system is guaranteed to be 100% secure. Players are encouraged to use strong unique passwords, enable two-factor authentication, and follow the account security guidance in our FAQ.

14. Changes to This Privacy Policy

st999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, st999 will notify registered players by email or through a prominent notice on the st999.asia platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects when it was most recently revised. Your continued use of the st999 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or st999's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 at st999.asia — the fastest way to reach st999 support;
• Email: [email protected] (plain text — not a clickable link);

st999 aims to respond to all data-related enquiries and formal rights requests within a reasonable timeframe. For identity verification requests, please have your registered CNIC number and account email address available to help us locate your account and respond efficiently.