kr999 Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by kr999 ("kr999", "we", "us", "our") and applies to all Pakistan players who access, register with, or use the kr999 online gaming platform available at kr999.games and any associated mobile interface or subdomains.

kr999 is committed to protecting the personal information of every Pakistan player who uses our platform. This Policy explains in clear terms what personal data we collect, the lawful basis on which we process it, how and with whom it is shared, how long we keep it, and the rights Pakistan players hold over their own information.

By registering a kr999 account or using the kr999 platform, Pakistan players confirm that they have read and understood this Policy. This Policy should be read in conjunction with the kr999 Terms & Conditions, which govern the broader contractual relationship between kr999 and its Pakistan players.

2. Data We Collect

kr999 collects personal data from Pakistan players in the following categories:

kr999 does not collect sensitive personal data such as medical records, religious beliefs, political opinions, or biometric data beyond what is strictly required for identity verification under applicable KYC regulations.

3. How Data Is Collected

kr999 collects personal data from Pakistan players through the following primary channels:

• Direct input during registration: Name, date of birth, email address, Pakistan mobile number, and chosen username are provided by Pakistan players when creating a kr999 account.
• KYC verification submissions: Identity documents including CNIC scans and selfies are submitted by Pakistan players as part of the account verification process prior to withdrawal processing.
• Payment transactions: Financial data including Easypaisa wallet references, JazzCash account references, and bank transfer details are captured automatically when deposits and withdrawals are processed in PKR.
• Platform usage: Technical and gaming data including IP addresses, device identifiers, session records, and gaming activity logs are collected automatically as Pakistan players use the kr999 platform.
• Cookie and tracking technologies: kr999 uses cookies and similar technologies on the kr999.games website to collect browsing and session data. Full details are provided in Section 10 of this Policy.
• Customer support interactions: When Pakistan players contact kr999 support via live chat or email, the content of those communications is recorded and stored.
• Third-party data: kr999 may receive data from fraud prevention providers, identity verification services, and payment processors to supplement the information provided directly by Pakistan players where this is necessary for security or compliance purposes.

4. Legal Basis for Processing

kr999 processes the personal data of Pakistan players on the following legal bases, applied on a purpose-by-purpose basis:

• Contract performance: Processing necessary to operate Pakistan players' kr999 accounts, process PKR deposits and withdrawals, and deliver the gaming services described in the kr999 Terms & Conditions.
• Legal obligation: Processing required to comply with anti-money laundering regulations, KYC requirements, age verification obligations, and financial record-keeping requirements under applicable law.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improvement of the kr999 platform — where these interests are not overridden by the privacy interests of Pakistan players.
• Consent: Processing for marketing communications, including promotional emails and SMS about kr999 bonuses, Eid promotions, and HBL Pakistan Super League offers — where Pakistan players have provided explicit consent. Consent can be withdrawn at any time.

5. How We Use Your Data

kr999 uses the personal data of Pakistan players for the following specific purposes:

• Creating, managing, and securing kr999 accounts for Pakistan players.
• Processing PKR deposits via Easypaisa, JazzCash, and bank transfer, and returning PKR withdrawals to verified Pakistan player accounts.
• Verifying the identity and age of Pakistan players as required by applicable KYC and age compliance regulations.
• Detecting and preventing fraud, account takeover, money laundering, and bonus abuse on the kr999 platform.
• Monitoring gaming behaviour to identify signs of problem gambling and providing responsible gaming interventions to Pakistan players where appropriate.
• Providing customer support to Pakistan players via live chat and email, including resolving account queries, payment disputes, and technical issues.
• Sending Pakistan players transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming reminders.
• Sending marketing communications to Pakistan players who have consented to receive them, including promotions related to Eid bonuses, kr999 game launches, and Pakistan sporting events.
• Improving the kr999 platform by analysing aggregated, anonymised usage data to identify performance issues and enhance the Pakistan player experience.
• Complying with applicable legal obligations, responding to lawful requests from regulatory authorities, and defending kr999's legal position in any dispute.

6. Data Sharing

kr999 does not sell the personal data of Pakistan players to any third party under any circumstances. kr999 shares personal data only in the following limited situations:

• Payment processors: Financial data is shared with Easypaisa, JazzCash, and banking partners exclusively to process deposit and withdrawal transactions in PKR. These providers are contractually bound to handle this data securely and solely for payment processing purposes.
• Identity verification providers: Identity document data is shared with KYC verification service providers who assist kr999 in confirming Pakistan player identities and ages. These providers operate under strict data processing agreements.
• Game providers: Necessary session and account data is shared with kr999's certified game providers to enable Pakistan players to access games within the kr999 lobby. Game providers cannot use this data for their own commercial purposes.
• Fraud and security providers: Technical data including IP addresses and device identifiers is shared with fraud prevention platforms to protect kr999 Pakistan players from account takeover and payment fraud.
• Regulatory and legal authorities: kr999 may disclose personal data to regulatory bodies, law enforcement agencies, or courts when legally required to do so or when disclosure is necessary to defend kr999's legal rights.
• Group companies: kr999 may share data within its corporate group for internal compliance, audit, or group-level reporting purposes, subject to the same data protection standards described in this Policy.

7. International Data Transfers

The operation of a global gaming platform means that some of the personal data of Pakistan players may be processed in countries outside Pakistan. Where such transfers occur, kr999 ensures that appropriate safeguards are in place to protect the data in accordance with standards equivalent to those described in this Policy.

Safeguards used by kr999 for international data transfers include contractual clauses that bind the receiving party to data protection standards, and selection of processors located in jurisdictions with adequate data protection frameworks. Pakistan players may request information about the specific safeguards in place for any transfer by contacting kr999 support.

8. Data Retention

kr999 retains the personal data of Pakistan players for the periods set out below, after which data is securely deleted or anonymised:

• Active account data: Retained for the full duration of the kr999 account relationship with a Pakistan player.
• Financial transaction records: Retained for seven (7) years following the date of each transaction, in accordance with financial regulation requirements.
• KYC and identity verification documents: Retained for five (5) years following the closure of a kr999 account.
• Gaming session and betting records: Retained for five (5) years for dispute resolution and responsible gaming audit purposes.
• Customer support communications: Retained for two (2) years following the closure of each support interaction.
• Marketing consent records: Retained for as long as a Pakistan player holds a kr999 account, or until consent is withdrawn, whichever comes first.
• Technical logs (IP, device, session): Retained for ninety (90) days on a rolling basis for security monitoring purposes, then deleted unless required for an active investigation.

9. Security Measures

kr999 implements the following technical and organisational security measures to protect the personal data of Pakistan players against unauthorised access, loss, destruction, or disclosure:

• TLS 1.3 encryption for all data transmitted between Pakistan players and the kr999 platform.
• AES-256 encryption for all personal data stored on kr999 servers.
• Multi-factor authentication requirements for administrative access to systems holding Pakistan player data.
• 24/7 automated monitoring for unusual access patterns, brute-force attempts, and suspected account takeover activity.
• Regular third-party penetration testing of the kr999 platform infrastructure.
• Role-based access controls ensuring that kr999 staff can access personal data only to the extent required for their specific job function.
• Mandatory annual data protection training for all kr999 staff with access to Pakistan player data.

While kr999 takes all reasonable precautions to protect Pakistan player data, no internet-based platform can guarantee absolute security. Pakistan players are also responsible for keeping their own kr999 login credentials secure and enabling two-factor authentication where available.

10. Cookies & Tracking Technologies

kr999 uses cookies and similar tracking technologies on the kr999.games platform. Cookies are small data files stored on a Pakistan player's device that help kr999 remember preferences, maintain login sessions, and understand how Pakistan players use the platform.

The categories of cookies used by kr999 are:

• Strictly necessary cookies: Required for core platform functionality including maintaining login sessions and processing PKR transactions. These cannot be disabled without impairing platform function.
• Performance cookies: Used to collect anonymised information about how Pakistan players navigate the kr999 platform, helping us identify and fix performance issues.
• Functionality cookies: Remember Pakistan player preferences such as language and display settings to improve the kr999 experience across sessions.
• Analytics cookies: Provide kr999 with aggregated, anonymised data about platform usage patterns to guide product development decisions.

Pakistan players can manage cookie preferences through their browser settings. Blocking all cookies may affect the functionality of certain kr999 features including the login session and game loading. kr999 does not use third-party advertising cookies or behavioural tracking technologies that serve ads on external platforms.

11. Your Rights

Pakistan players whose personal data is held by kr999 have the following rights, which can be exercised at any time by contacting kr999 support:

• Right of access: Request a copy of all personal data that kr999 holds about you, along with information about how it is being used and shared.
• Right to rectification: Request correction of any inaccurate or incomplete personal data held by kr999 about your kr999 account.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements that may override this right in some circumstances.
• Right to restriction: Request that kr999 restrict the processing of your data to storage only while a dispute about the accuracy or lawfulness of processing is being resolved.
• Right to data portability: Request a machine-readable copy of the personal data you have provided to kr999, for transfer to another service provider.
• Right to object: Object to the processing of your personal data where kr999 is relying on legitimate interests as the legal basis, including objection to direct marketing communications.
• Right to withdraw consent: Withdraw any consent you have previously given to kr999 for marketing communications at any time, without affecting the lawfulness of processing that occurred before withdrawal.

All data subject rights requests will be acknowledged within five (5) business days and fulfilled within thirty (30) calendar days of receipt. Where requests are complex or numerous, kr999 may extend this period by a further thirty days with written explanation. kr999 will not charge a fee for the exercise of these rights unless requests are manifestly unfounded or excessive.

12. Minors & 18+ Policy

kr999 is strictly an 18+ platform. kr999 does not knowingly collect or process personal data from individuals under the age of 18. Where kr999 discovers or has reason to believe that personal data belonging to a minor has been collected — whether through misrepresentation during registration or any other means — kr999 will immediately suspend the relevant account, delete the personal data collected from that individual, and return any deposited funds in full.

Parents and guardians in Pakistan who believe that a minor may have registered a kr999 account should contact kr999 support immediately. kr999 will prioritise these reports and resolve them without delay.

13. Marketing Communications

kr999 sends marketing communications to Pakistan players only where explicit consent has been provided during registration or subsequently through account settings. Marketing communications from kr999 may include information about new games in the kr999 lobby, seasonal promotions such as Eid bonuses, HBL Pakistan Super League deposit match offers, kr999 Jackpot Slots jackpot alerts, and reload bonus announcements.

Pakistan players can opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email from kr999.
• Updating communication preferences in the kr999 account settings dashboard.
• Contacting kr999 support via live chat or at [email protected] to request removal from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, and security alerts, which are sent regardless of marketing preference as they are necessary for account management purposes.

14. Changes to This Privacy Policy

kr999 may update this Privacy Policy from time to time to reflect changes in data protection regulations, platform features, or internal data handling practices. When material changes are made, kr999 will notify Pakistan players via email and/or a prominent notice on the kr999 platform at least seven (7) days before the updated Policy takes effect.

The effective date and version number at the top of this document will always reflect the most current version. Pakistan players who continue to use kr999 following the effective date of a revised Policy are deemed to have accepted the updated terms. The current Policy is always available at kr999.games/privacy-policy.

15. Contact & Complaints

For any questions about this Privacy Policy, requests to exercise data subject rights, or concerns about how kr999 handles the personal data of Pakistan players, please contact the kr999 privacy team:

Pakistan players who are not satisfied with kr999's response to a privacy complaint have the right to escalate the matter to the relevant data protection supervisory authority or to seek independent legal advice. kr999 encourages Pakistan players to contact us directly in the first instance, as we are committed to resolving privacy concerns promptly and fairly.

kr999 aims to respond to all privacy enquiries and data subject requests within five (5) business days. Formal data subject rights requests — such as access, deletion, and portability requests — will be fulfilled within thirty (30) calendar days in accordance with the timelines set out in Section 11 of this Policy.