dr999 Privacy Policy

This Privacy Policy ("Policy") describes how dr999 ("we", "us", or "our") collects, processes, stores, and protects personal data about individuals ("you" or "the Player") who access or use the dr999 platform, including all services available at dr999.bet and any associated mobile applications or digital properties operated by dr999.

This Policy applies to all users of the Platform regardless of location, including players based in Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan, as well as internationally located users accessing the Platform through permitted channels.

By registering an account, making a deposit, placing a bet, or otherwise using the dr999 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please do not use the Platform and contact us to arrange account closure.

For the purposes of applicable data protection law, dr999 is the data controller responsible for your personal information. As data controller, dr999 determines the purposes and means by which your personal data is processed.

dr999 operates under an international gaming licence and is subject to both the data protection requirements of that licensing jurisdiction and the applicable data privacy expectations of the markets it serves, including Pakistan.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to our designated Data Protection contact at [email protected]. We aim to acknowledge all privacy-related correspondence within 48 hours and resolve it within 30 calendar days.

dr999 collects the following categories of personal data from and about you:

dr999 collects your personal data through the following channels:

• Direct provision: Information you enter during account registration, KYC document uploads, deposit and withdrawal forms, live chat, email correspondence, and any surveys or feedback forms you complete.
• Automated collection: Technical and usage data collected automatically when you visit the Platform via cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookie practices.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud-scoring data from fraud prevention agencies; payment confirmation data from JazzCash, EasyPaisa, and our banking partners; geolocation data from IP intelligence providers used to enforce restricted territory controls.
• Publicly available sources: Where necessary for AML compliance, we may reference publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

dr999 uses your personal data for the following purposes:

• Account management: Creating and maintaining your dr999 account, verifying your identity, processing your login sessions, and managing your account preferences.
• Service delivery: Enabling you to place bets, play casino games, claim bonuses, make deposits, and request withdrawals across all dr999 product verticals including cricket betting, PSL wagering, live casino, and slot games.
• KYC & AML compliance: Fulfilling our legal obligations to verify your identity and monitor transactions for suspicious activity in accordance with applicable anti-money laundering and counter-terrorism financing law.
• Responsible gaming: Monitoring your gaming patterns for signs of problem gambling behaviour; enforcing deposit limits, loss limits, session limits, and self-exclusion instructions you have set; and proactively reaching out where we identify potential harm.
• Customer support: Responding to your enquiries, complaints, and technical support requests; maintaining records of communications for quality assurance and dispute resolution purposes.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, unauthorised access, and other security threats.
• Marketing communications: Sending you promotional offers, bonus alerts, and platform updates via email or on-platform notifications where you have not opted out. You may withdraw consent for marketing at any time via your account settings or by contacting support.
• Platform analytics and improvement: Analysing usage patterns to improve the functionality, performance, and user experience of the dr999 Platform.
• Legal and regulatory compliance: Meeting our obligations to regulatory authorities, responding to lawful requests from law enforcement, and defending or pursuing legal claims.

dr999 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including operating your account, processing payments, and delivering gaming services.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, AML transaction monitoring, and record-keeping obligations imposed by our gaming licence.
• Legitimate interests: Processing carried out for dr999's legitimate business interests, including fraud prevention, platform security, improving our services, and direct marketing to existing customers, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent (for example, for certain marketing communications or optional cookie categories), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

dr999 does not sell your personal data. We may share your data with the following categories of third parties strictly on a need-to-know basis:

• KYC and identity verification providers: Third-party services used to verify your identity and cross-reference government-issued documents including your CNIC or passport.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT gateway providers to process deposits and withdrawals. These providers receive only the data necessary to execute your transaction.
• Game content providers: Third-party game studios and live casino operators whose games are integrated on the Platform. These providers may receive your Player ID and session data to deliver game content and calculate results.
• Fraud prevention and AML screening services: Agencies that assist dr999 in identifying suspicious activity and meeting our regulatory obligations.
• IT and hosting infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under strict data processing agreements.
• Regulatory authorities and law enforcement: Where dr999 is required by law, court order, or gaming regulatory direction to disclose player data to competent authorities.
• Professional advisors: Lawyers, auditors, and accountants who require access to data in the course of providing professional services to dr999, subject to binding confidentiality obligations.

dr999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for a minimum of five years after the date of account closure, in compliance with AML record-keeping requirements imposed by our gaming licence. In some cases, regulatory requirements may mandate retention for up to seven years.
• Financial transaction records: Retained for a minimum of five years after the date of the transaction for AML and audit purposes.
• Gaming and bet history: Retained for five years following account closure, or for the duration required to resolve any outstanding dispute, whichever is longer.
• Customer support communications: Retained for three years from the date of the communication, or until any associated dispute is fully resolved.
• Marketing preference data: Retained until you withdraw your consent to marketing or close your account, whichever occurs first.
• Technical and usage logs: Typically retained for 12 months from collection, unless retention is required for an active security investigation.

Upon expiry of the applicable retention period, dr999 will securely delete or irreversibly anonymise your personal data. Anonymised, aggregated data that can no longer identify you as an individual may be retained indefinitely for analytical purposes.

dr999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and the dr999 Platform is encrypted using TLS 1.2 or higher (SSL). Our website enforces HTTPS across all pages.
• Encryption at rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest using industry-standard encryption protocols.
• Password hashing: Account passwords are stored as one-way cryptographic hashes. dr999 staff cannot retrieve your plain-text password under any circumstances.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. dr999 staff are granted the minimum level of access necessary to perform their role, and all access is logged and audited.
• Two-factor authentication: Available to all players as an additional layer of account security. dr999 strongly recommends enabling 2FA on your account.
• Regular security testing: dr999's technical infrastructure is subject to regular vulnerability assessments and penetration testing conducted by qualified security professionals.

Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely immune from risk. dr999 cannot guarantee the absolute security of your data, but we are committed to maintaining industry-leading security practices and responding promptly to any security incidents.

dr999 uses cookies and similar tracking technologies (including web beacons and local storage objects) to operate and improve the Platform. When you first visit dr999.bet, you will be presented with a cookie consent notice through which you can manage your preferences for non-essential cookie categories.

The following categories of cookies are used on the dr999 Platform:

• Strictly necessary cookies: Essential for the Platform to function. They enable core features such as session management, login state, and security token validation. These cookies cannot be disabled without impairing the Platform's functionality.
• Functional cookies: Remember your preferences such as language settings, notification choices, and responsible gaming limits to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how users interact with the Platform, including pages visited and time spent, to help dr999 improve Platform performance and content.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You may manage or withdraw your consent to non-essential cookies at any time by accessing the cookie settings panel on the dr999 website. Please note that disabling certain cookie categories may affect your experience on the Platform.

Subject to applicable law and any overriding legal obligations on dr999 (such as AML record-keeping requirements), you hold the following rights in relation to your personal data:

To exercise any of the above rights, please send a written request to [email protected], clearly identifying yourself and specifying the right you wish to exercise. dr999 may need to verify your identity before processing your request. We will respond within 30 calendar days. Where a request is complex or we receive multiple requests simultaneously, we may extend this period by a further 30 days, of which you will be notified.

As an internationally operated platform, dr999 may transfer your personal data to countries outside Pakistan in the course of providing its services. Such transfers may occur when data is processed by our cloud hosting infrastructure, KYC verification providers, or game content suppliers who are based in other jurisdictions.

Where personal data is transferred internationally, dr999 takes appropriate steps to ensure that your data receives adequate protection, including by relying on:

• Standard contractual clauses or equivalent contractual protections in agreements with data recipients;
• Data processing agreements that incorporate binding data protection obligations on the recipient;
• Transfers to jurisdictions that provide an adequate level of data protection in the assessment of our licensing authority.

If you would like further information about the safeguards applied to international transfers of your personal data, please contact us at [email protected].

The dr999 Platform is strictly intended for adults aged 21 years and above. dr999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Access to our gaming services by under-age individuals is strictly prohibited.

During registration, dr999 collects your date of birth and is entitled to request documentary proof of age at any time. Where dr999 discovers or reasonably suspects that a registered account is held by an individual under the age of 21, it will:

• Immediately suspend the account pending investigation;
• Delete all personal data associated with the account to the extent not required for legal compliance purposes;
• Return any real-money deposits to the verified payment source;
• Permanently close the account.

dr999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made to this Policy, dr999 will notify registered players via the email address associated with their account and/or via a prominent notice displayed on the Platform prior to the change taking effect.

The "Last Reviewed" date at the top of this Policy indicates when it was most recently updated. We encourage you to review this Policy periodically so that you remain informed about how dr999 handles your personal data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or complaints about this Privacy Policy or about how dr999 handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related concerns promptly and transparently.

• Email: [email protected]
• Live Chat: Available 24/7 via the dr999 Platform
• Response time: Acknowledgement within 48 hours; resolution within 30 calendar days

If you are not satisfied with dr999's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority in your jurisdiction. dr999 will cooperate fully with any such regulatory process.