gt999 Privacy Policy

§1 Who We Are

gt999 (referred to in this Privacy Policy as "gt999", "we", "us", or "the Company") is the operator of the online gaming platform available at gt999.site. gt999 operates under an international gaming license and provides cricket betting, live casino, slot games, and sports betting services to registered players, including players based across Pakistan — from Karachi and Lahore to Faisalabad, Islamabad, and beyond.

For the purposes of applicable data protection law, gt999 is the data controller in respect of personal data collected through the Platform. This means we determine why and how your personal data is processed, and we are accountable for that processing.

This Privacy Policy applies to all personal data collected, processed, and stored by gt999 in connection with your use of the Platform, whether you access it from a desktop browser, mobile device, or any other channel.

§2 Scope of This Policy

This Privacy Policy governs the collection and use of personal data by gt999 through:

• The gt999 website at gt999.site and all pages hosted on that domain.
• The account registration, login, and management process.
• All gaming products accessible through the Platform, including cricket betting, live casino tables, slot games, and Dragon Tiger.
• The gt999 Loyalty Program and all associated promotional communications.
• Deposit and withdrawal transactions processed through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer.
• Customer support interactions conducted via email at [email protected].

This Policy should be read in conjunction with gt999's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to the management of your account and personal data.

§3 Personal Data We Collect

gt999 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are as follows:

We do not collect sensitive personal data (such as biometric data, religious beliefs, or health information) unless specifically required for regulatory compliance in exceptional circumstances, in which case we will seek your explicit consent.

§4 How We Collect Your Data

gt999 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, or contact our support team, you provide personal data directly to us.
• Automatically during your use of the Platform: Technical data such as IP addresses, device identifiers, browser type, and session data are collected automatically through standard web technologies as you navigate the gt999 Platform.
• From third-party payment providers: When you complete a transaction via JazzCash, EasyPaisa, or a bank transfer, your payment provider may share transaction confirmation data with us necessary for crediting your account.
• From identity verification services: In connection with our KYC obligations, gt999 may use licensed third-party identity verification providers to validate the authenticity of documents you submit. These providers operate under strict data processing agreements with gt999.
• Via cookies and similar tracking technologies: As described in Section 7 of this Policy.

§5 Purpose & Legal Basis for Processing

gt999 processes your personal data for specific, lawful purposes. The table below sets out each key processing purpose and the legal basis on which we rely:

§6 Sharing Your Personal Data

gt999 does not sell, rent, or share your personal data with third parties for their own marketing purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Licensed KYC service providers who verify your identity documents under binding data processing agreements.
• Game software providers: Third-party game studios whose software powers games in the gt999 lobby may receive anonymised gameplay data for quality assurance and RNG audit purposes.
• Regulatory authorities: gt999 is required to disclose player data to its licensing authority and, where legally mandated, to relevant law enforcement or government agencies upon receipt of a valid legal request.
• Group companies: Where applicable, data may be shared with affiliated entities within the gt999 corporate group, subject to equivalent data protection standards.
• Professional advisers: Lawyers, auditors, and insurers operating under confidentiality obligations where necessary for legal or financial compliance purposes.

All third parties with whom gt999 shares personal data are bound by contractual data processing agreements that require them to maintain appropriate security measures and to process data only for the specified, authorised purposes.

§7 Cookies & Tracking Technologies

gt999 uses cookies and similar tracking technologies on the Platform to ensure that it functions correctly, to remember your login session, to analyse usage patterns, and to maintain security. The types of cookies deployed on the gt999 Platform are categorised as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your gt999 account. These cannot be disabled without breaking the Platform's core functionality.
• Functional cookies: Remember your preferences such as language settings, Loyalty Program tier display, and responsible gaming limit configurations.
• Analytical cookies: Used to understand aggregate user behaviour on the Platform — for example, which pages are visited most frequently and where players encounter difficulty. This data is processed in anonymised or pseudonymised form.
• Security cookies: Support gt999's fraud detection and session integrity systems by identifying unusual access patterns across login sessions.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your ability to use some features of the gt999 Platform, including account login and game loading.

§8 Data Security

gt999 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all data transmission between your device and the gt999 servers.
• Encrypted storage of all personal and financial data at rest, with access strictly limited to authorised personnel on a need-to-know basis.
• Cryptographic hashing of all account passwords — gt999 does not store passwords in readable form under any circumstances.
• Two-factor authentication (2FA) available to all Players as an additional account security layer.
• Automated session monitoring that detects and flags unusual login activity such as access from a new device or an unrecognised location.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Employee access controls and mandatory data protection training for all staff who handle personal data.

§9 Data Retention Periods

gt999 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to our obligations under applicable law and our international gaming license. The following retention schedules apply:

• Account and identity data: Retained for the duration of your active gt999 account, and for a minimum of five (5) years following account closure, in accordance with our gaming license anti-money laundering obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in line with financial record-keeping requirements.
• Gameplay and betting records: Retained for three (3) years from the date of the relevant game or betting activity.
• Customer support communications: Retained for two (2) years from the date of the final communication in each support thread.
• Marketing preferences: Retained for the duration of your account, or until you withdraw consent, whichever is sooner.
• Technical / session data: Retained for ninety (90) days for security monitoring purposes.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised dataset is no longer considered personal data and may be retained for statistical analysis without time restriction.

§10 Your Data Rights

As a gt999 player, you hold the following rights in respect of your personal data. All rights requests should be submitted to [email protected] and will be responded to within thirty (30) calendar days of receipt.

§11 Children's Privacy — 21+ Policy

The gt999 Platform is strictly restricted to individuals aged 21 years and above. gt999 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. If gt999 discovers or is notified that personal data belonging to a person under the age of 21 has been collected, that data will be deleted immediately and the associated account will be permanently closed.

Where gt999 has reasonable grounds to suspect that a registered player is under the age of 21, the account will be suspended pending satisfactory age verification. Any winnings generated by an underage account will be voided in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered a gt999 account, please contact us immediately at [email protected] so that we may take appropriate action.

§12 Payment Data & Financial Information

gt999 processes financial data in connection with PKR deposits and withdrawals made through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer. The following data protection principles apply specifically to your financial information:

• Full payment credentials (e.g., complete bank account numbers, full JazzCash wallet credentials) are not stored on the gt999 Platform. Only the minimum transaction reference data necessary to confirm payment completion and credit your account is retained.
• All payment data is transmitted over encrypted channels. gt999 does not process card or banking credentials through unencrypted connections under any circumstances.
• Transaction records are retained for a minimum of five years in compliance with anti-money laundering regulations applicable to our international gaming license.
• Withdrawal requests are subject to source of funds verification where required by our compliance obligations. This may involve requesting supporting documentation from the Player.

§13 Marketing Communications

gt999 may, with your explicit consent, send you marketing communications relating to new games, promotions, Loyalty Program rewards, bonus offers, and cricket betting market updates. These communications may be delivered by SMS to your registered Pakistani mobile number or by email to your registered address.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the Account Settings section of the Platform.
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Opt-out requests will be processed within forty-eight (48) hours of receipt. Please note that withdrawal of consent to marketing communications does not affect your receipt of transactional and account-related communications, which are sent on the basis of contract performance rather than consent and cannot be opted out of while your account remains active.

§14 International Data Transfers

gt999 operates under an international gaming license and may process or store certain categories of personal data on servers or with service providers located outside Pakistan. Where such international transfers occur, gt999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

Appropriate safeguards employed by gt999 for international data transfers include contractual data transfer agreements incorporating standard contractual clauses, binding data processing agreements with all international sub-processors, and technical security measures that apply regardless of where data is stored.

You may contact us at [email protected] to request further information about the specific international transfer mechanisms applicable to the processing of your personal data.

§15 Changes to This Privacy Policy

gt999 reviews and, where necessary, updates this Privacy Policy on a regular basis to reflect changes in our data processing practices, platform functionality, or applicable regulatory requirements. The current effective version of this Privacy Policy is always the version published on this page.

Where changes to this Privacy Policy are material — meaning they affect your rights, the categories of data we collect, or the purposes for which we process your data — gt999 will notify you by email to your registered address or via a prominent notice on the Platform prior to the changes taking effect. Non-material clarifications or corrections may be published without prior individual notification.

This Privacy Policy was last reviewed and updated on 1 January 2026. Previous versions are archived and available upon written request submitted to [email protected].

§16 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how gt999 handles your personal data, please contact our Data Protection team using the details below:

• Email: [email protected]
• Subject line for data rights requests: "Privacy Request — [Your Username]"
• Response time: Within 30 calendar days for formal data rights requests; within 5 business days for general privacy queries.
• Support hours: 24 hours per day, 7 days per week.

If you are dissatisfied with gt999's handling of your personal data or with our response to a data rights request, you have the right to escalate your complaint to the data protection authority in your jurisdiction or to the supervisory authority applicable under our gaming license framework.