DC999 Privacy Policy

DC999 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with dc999.biz. This Privacy Policy ("Policy") describes how DC999 collects, uses, discloses, stores, and protects personal information in connection with the operation of our online casino and sports betting platform.

This Policy applies to all registered players, prospective players, and any other individuals whose personal data DC999 processes in connection with platform use — including players accessing DC999 from Pakistan using payment methods such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

By registering for a DC999 account or otherwise providing personal data to the platform, you consent to the collection and use of your information as described in this Policy. This Policy should be read in conjunction with the DC999 Terms & Conditions, which are incorporated herein by reference.

DC999, operating the online gaming platform accessible at dc999.biz, acts as the data controller in respect of personal data collected from platform users. DC999 determines the purposes and means of processing personal data in connection with platform operations, and bears primary responsibility for the protection of that data.

DC999 operates under an international gaming license. The platform is subject to the data protection and privacy requirements imposed by our licensing authority, in addition to any applicable obligations arising under the laws of jurisdictions from which players access the platform.

For all data protection-related enquiries, requests, or complaints, DC999 maintains a dedicated point of contact reachable via the channels described in Section 14 of this Policy.

DC999 collects personal data through various means, including information you provide directly, information generated through your use of the platform, and information received from third parties as part of our verification and compliance processes. The categories of data DC999 collects are set out in the table below:

DC999 uses the personal data it collects for the following specific purposes. We process data only for purposes that are compatible with the original reason for which the data was collected:

• Account Registration & Management: Creating and maintaining your DC999 account, verifying your identity during registration, managing account settings and preferences, and communicating essential account information;
• Identity Verification & KYC Compliance: Conducting Know Your Customer checks as required under our international gaming license, verifying your age (21+), and confirming the legitimacy of your identity documents;
• Payment Processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard; verifying payment method ownership; and maintaining transaction records as required by financial compliance regulations;
• Gaming Services: Providing access to all DC999 platform features including sports betting, live casino, slots, and e-sports; maintaining game session logs; and resolving disputes about game outcomes;
• Regulatory & Anti-Money-Laundering Compliance: Meeting mandatory obligations under our gaming license including transaction monitoring, suspicious activity reporting, and regulatory record-keeping;
• Responsible Gaming: Monitoring gaming patterns to identify potential indicators of problem gambling; facilitating self-exclusion requests; enforcing deposit limits, loss limits, and session controls;
• Customer Support: Responding to your queries, complaints, and support requests via live chat and email; maintaining records of support interactions for quality and audit purposes;
• Platform Security & Fraud Prevention: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and other violations of the DC999 Terms & Conditions;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates where you have expressly opted in to receive such communications. You may opt out at any time.

DC999 processes personal data on the basis of the following legal grounds, applied on a purpose-by-purpose basis:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the DC999 Terms & Conditions — including account provision, payment processing, and gaming service delivery;
• Legal Obligation: Processing required to comply with applicable laws and our gaming license obligations — including KYC identity verification, anti-money-laundering reporting, and financial record retention;
• Legitimate Interests: Processing carried out for DC999's legitimate business interests, including platform security, fraud prevention, service improvement, and responsible gaming monitoring — provided those interests are not overridden by your fundamental privacy rights;
• Consent: Processing based on your explicit consent — primarily in relation to marketing communications and optional cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

DC999 does not sell your personal data. We share personal information only in the following circumstances, with appropriate data protection safeguards in place:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. These processors are bound by their own data protection and financial regulatory obligations;
• Game Studio Partners: Certified game providers (such as PG Soft, Pragmatic Play, Evolution Gaming, and Habanero) may receive anonymised session data necessary to support game functionality. DC999 does not share identifiable personal data with game studios beyond what is technically required;
• Identity Verification Services: Third-party KYC and age verification providers receive identity document data as part of the mandatory player verification process. These providers are contracted to handle such data in compliance with applicable data protection standards;
• Regulatory & Law Enforcement Authorities: DC999 will disclose personal data to licensing regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by law, regulation, valid legal order, or the conditions of our gaming license;
• Professional Advisors: DC999 may share data with legal, accounting, or auditing professionals bound by professional confidentiality obligations, where necessary to obtain professional advice or defend legal claims.

DC999 is an internationally licensed online gaming operator, and the personal data of Pakistani players may be processed by DC999's infrastructure and service providers located in jurisdictions outside Pakistan. Where personal data is transferred internationally, DC999 takes appropriate measures to ensure that such transfers are conducted with adequate levels of data protection.

International data transfers carried out by DC999 are protected by one or more of the following mechanisms:

• Contractual data protection clauses incorporated into agreements with international service providers;
• Transfer to jurisdictions that maintain data protection standards comparable to those required under DC999's gaming license;
• Adequacy determinations or equivalent instruments applicable to the relevant transfer destination.

If you have questions about the specific safeguards applied to international transfers of your personal data, you may contact DC999's data protection point of contact using the details in Section 14.

DC999 retains personal data for no longer than is necessary for the purposes for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account Data & KYC Documents: Retained for the duration of account activity and for a minimum of five (5) years following permanent account closure, as required under anti-money-laundering regulatory obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with financial record-keeping requirements under our gaming license;
• Gaming Activity Logs: Retained for a minimum of three (3) years following the relevant gaming session, to support dispute resolution and regulatory audit requirements;
• Support Communications: Retained for a maximum of three (3) years following resolution of the relevant query or complaint;
• Marketing Data: Retained until you withdraw your marketing consent or for a maximum of two (2) years from the date of your last interaction with a DC999 marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, DC999 will securely delete or anonymise your personal data. Anonymised data that can no longer identify you individually may be retained for statistical and platform improvement purposes without time limitation.

DC999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following:

• Transport Encryption: All data transmitted between your device and DC999's servers is encrypted using 256-bit SSL/TLS protocols. This applies to all platform interactions including dc999 login sessions, payment transactions, and live chat communications;
• Data Storage Encryption: Sensitive personal and financial data stored in DC999's databases is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to personal data systems is restricted to authorised DC999 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative access;
• Intrusion Detection & Monitoring: DC999 operates continuous network monitoring and intrusion detection systems designed to identify and respond to potential security incidents in real time;
• Password Security: DC999 does not store player passwords in plaintext. All passwords are stored using strong, salted cryptographic hashing algorithms;
• Penetration Testing: DC999's systems are subject to periodic independent security assessments and penetration testing to identify and remediate potential vulnerabilities.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely impenetrable. DC999 cannot guarantee absolute security but commits to taking all commercially reasonable steps to protect your data and to notify affected players promptly in the event of a material data security incident.

DC999 uses cookies and similar tracking technologies to enhance the functionality, performance, and security of the platform. A "cookie" is a small data file stored on your device by your web browser when you visit a website. DC999 uses the following categories of cookies:

• Essential Strictly Necessary Cookies

  Required for the DC999 platform to function correctly. These cookies maintain your dc999 login session, remember your security preferences, and enable core platform features. They cannot be disabled without impairing platform functionality. No consent is required for these cookies.

• Analytics Performance & Analytics Cookies

  Used to collect anonymised data about how players use the DC999 platform, including which pages are visited, how long sessions last, and which features are most used. This data is used solely to improve platform performance. These cookies require your consent.

• Functional Functionality Cookies

  Used to remember your preferences — such as your chosen language, your last accessed game category, or your session timer settings. These cookies enhance your experience but are not essential to core platform function. These cookies require your consent.

You may manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may impair your ability to use certain DC999 features, including dc999 login functionality.

DC999 respects your privacy rights and will respond to all valid data subject requests within a reasonable timeframe and in accordance with applicable data protection standards. The following rights are available to DC999 players:

To exercise any of the above rights, please contact DC999 using the details provided in Section 14. DC999 will acknowledge your request within 48 hours and provide a substantive response within one (1) calendar month. In complex cases, this period may be extended by a further two months with advance notice.

DC999 strictly prohibits the registration and use of the platform by individuals under the age of 21. The DC999 platform is designed and intended exclusively for adult players aged 21 and above. DC999 does not knowingly collect personal data from individuals under the age of 21.

All account registrations are subject to mandatory age verification as part of the KYC process. Where DC999 discovers or reasonably suspects that a registered account belongs to an individual under 21, the account will be immediately suspended, the player's personal data will be handled in accordance with applicable child data protection requirements, and all account balances will be forfeited in line with the DC999 Terms & Conditions.

DC999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the evolution of our platform services. The "Last Updated" date at the top of this Policy will be revised with each update.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — DC999 will notify registered players via email to the address on file and/or via a prominent notice displayed upon your next dc999 login. We encourage all players to review this Policy periodically to stay informed about how their data is being handled.

Your continued use of the DC999 platform following the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not agree with any material change, you may request account closure as described in the DC999 Terms & Conditions prior to the effective date.

If you have any questions, concerns, or requests relating to this Privacy Policy or DC999's handling of your personal data, please contact our data protection point of contact through the following channels:

• Live Chat: Available 24/7 directly on the DC999 platform — the fastest channel for most privacy-related queries;
• Email: [email protected] — for formal data subject requests, complaints, and matters requiring written correspondence. DC999 aims to acknowledge all email privacy requests within 48 hours.

All formal data subject requests should be submitted in writing via email with sufficient information to verify your identity before DC999 processes the request. This verification step is necessary to protect your data from being disclosed in response to fraudulent requests made by third parties.

If you are not satisfied with DC999's response to your privacy complaint following our internal resolution process, you may have the right to escalate the matter to the data protection supervisory authority applicable under DC999's licensing jurisdiction.