Privacy Policy — How we9999 Handles Your Personal Data

This Privacy Policy describes how we9999 ("the Platform", "we", "us", or "our") collects, processes, stores, and protects personal information belonging to registered players and visitors to the we9999 platform at we9999.best.

We9999 operates as an online gaming and sports betting platform serving players in Pakistan. Because we handle financial transactions and gaming activity on behalf of real people, data privacy is not a checkbox exercise for us — it is a core operational responsibility. The information in this policy is written to be understood by Pakistani players, not lawyers. We have tried to keep the language direct and practical.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy. Together these three documents cover the full scope of your relationship with we9999.

We9999 collects only the data that is genuinely necessary to provide our services and comply with applicable requirements. Below is a complete breakdown of the categories of data we collect and the specific items within each category.

Every use of your data by we9999 has a defined purpose. We do not process your data for purposes beyond those listed below without informing you first and, where required, obtaining your consent:

• Account creation and management — Your mobile number and name are used to create and maintain your we9999 account, authenticate your logins, and communicate account-related information.
• Processing deposits and withdrawals — Your payment details are used to process transactions in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment gateways.
• Identity verification — When a withdrawal or account activity triggers a verification requirement, we may request CNIC documentation to confirm your identity. This data is used only for verification and is not retained beyond the period required.
• Fraud and duplicate account detection — Technical data including device fingerprints, IP addresses, and payment method analysis is used to identify duplicate accounts and fraudulent activity, protecting both we9999 and legitimate players.
• Responsible gaming — Gaming activity data is monitored to identify patterns that may indicate problem gambling behaviour. This data is used to provide proactive support and to enforce self-imposed limits and exclusions.
• Customer support — Communications data is retained to provide context for ongoing support cases and to ensure consistency in service quality.
• Platform improvement — Aggregated, anonymised technical and gaming activity data is used to improve platform performance, game loading times, and user interface design. This analysis does not identify individual players.
• Promotional communications — If you have opted in to marketing, your contact details and gaming activity data are used to send relevant promotions. You can opt out at any time through your account settings or by contacting support@we9999.best.

We9999 processes your personal data under the following legal bases:

• Contract performance — Processing necessary to fulfil the we9999 Terms and Conditions you accepted at registration: running your account, processing deposits and withdrawals, and providing access to games.
• Legitimate interests — Processing for fraud detection, duplicate account identification, security monitoring, and platform improvement where our legitimate business interests are not overridden by your privacy rights.
• Legal obligation — Processing required to comply with applicable financial, anti-money laundering, or regulatory obligations including identity verification above defined thresholds.
• Consent — Processing for marketing communications, where you have specifically opted in. You may withdraw this consent at any time without affecting the lawfulness of processing before withdrawal.

We9999 does not sell, rent, or trade your personal data. We share your data with third parties only in the following specific circumstances:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive the minimum data required to process your deposit or withdrawal (typically your account number and transaction amount). These providers operate under their own privacy policies and data security standards.
• Identity verification providers — Where CNIC verification is required, your identity data is shared with a licensed verification service for the duration of the verification process only.
• Game providers — Third-party game studios whose games are hosted on we9999 receive anonymised session data for technical integration purposes. Individual player identity data is not shared with game providers.
• Legal and regulatory authorities — We9999 may disclose your data to law enforcement or regulatory bodies where required by applicable Pakistani law or a valid legal order. We will inform you of such disclosures where legally permitted to do so.
• IT and infrastructure providers — Cloud hosting, database, and security service providers who process data on we9999's behalf under strict data processing agreements that prohibit any independent use of your data.

We9999 takes a specific approach to payment data that goes beyond general privacy commitments:

• Full Easypaisa and JazzCash account numbers are never stored on we9999's servers. Only a masked version (showing the last 4 digits) is retained for display purposes in your transaction history.
• Card payments on we9999 are processed through a PCI-DSS compliant payment gateway. We9999 does not receive or store full card numbers or CVV codes at any stage.
• IBFT bank account numbers are stored in masked form and are only accessible to the we9999 payments team under strict access controls for the purpose of processing withdrawal requests.
• All payment data is transmitted over encrypted connections. We9999 does not transmit payment data via email or any unencrypted channel.
• We9999 support staff cannot view full payment account numbers. If a support agent needs to verify a payment method, they use the masked version only.

We9999 uses cookies and similar browser-based technologies on the platform. Here is exactly what we use and why:

• Session cookies (essential) — These maintain your login state while you are active on we9999. Without session cookies the platform cannot recognise you as logged in. They expire when you close your browser and cannot be disabled without breaking the platform.
• Security cookies (essential) — Used to detect fraud, identify unusual login patterns, and protect your account from unauthorised access. These are non-negotiable for platform security.
• Preference cookies (functional) — Remember your settings such as language preference and notification opt-in status. Disabling these means the platform resets to defaults each visit.
• Analytics cookies (optional) — Aggregated, anonymised data on how players navigate the platform is used to improve page layouts and game loading performance. No individual player is identified in this analysis. You may opt out of analytics cookies through your browser settings.

We9999 does not use third-party advertising cookies or share cookie data with advertising networks. The platform does not serve behavioural advertising based on your gaming activity.

We9999 retains different categories of data for different periods based on operational necessity and applicable legal requirements:

• Account and identity data — Retained for the duration of your active account plus 5 years after account closure, as required for financial record-keeping and to handle any late-arising disputes.
• Transaction records — Deposit and withdrawal records are retained for 7 years in line with standard financial record retention practices.
• Gaming activity data — Session and wagering data is retained for 3 years after your last active session to support responsible gaming monitoring and dispute resolution.
• Support communications — Chat and email records are retained for 2 years to provide context for ongoing support relationships and quality monitoring.
• Identity verification documents — CNIC copies or other identity documents are deleted within 30 days of successful verification completion, unless retained as part of an active fraud investigation.
• Marketing preferences — Opt-in and opt-out records are retained for the duration of your account to ensure we honour your communication preferences accurately.

As a player on we9999, you have the following rights in relation to your personal data. All requests should be directed to support@we9999.best and will receive a response within 10 business days:

We9999 is strictly a platform for adults aged 18 and above. We do not knowingly collect, process, or store personal data belonging to persons under 18.

If we discover — through age verification, document review, or any other means — that an account has been registered by a person under 18, we immediately close the account, delete all associated personal data (subject to any fraud investigation requirements), and return any remaining balance to the payment method used for deposit.

We9999 operates a layered data security architecture designed to protect player data at every stage of its lifecycle. The following measures are in place:

• TLS encryption in transit — All data exchanged between your browser or device and we9999's servers is encrypted using current TLS standards, preventing interception during transmission.
• Encryption at rest — Personal data and financial records stored in we9999's databases are encrypted at rest, meaning raw data is not accessible even in the event of unauthorised database access.
• Access controls — Employee access to player data is role-limited. Support staff can see account status and transaction summaries but cannot access masked payment credentials, full identity documents, or communication records from other cases without specific authorisation.
• OTP authentication — All we9999 player accounts require OTP verification for login. This means that even if your password is compromised, account access requires physical possession of your registered mobile number.
• Security monitoring — We9999's infrastructure is monitored for unusual access patterns, potential breaches, and anomalous activity on a continuous basis. Detected incidents trigger an immediate response process.
• Regular security review — We9999 conducts periodic security assessments of its data handling processes and infrastructure to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. We9999 takes commercially reasonable steps to protect your data, but cannot guarantee absolute security. If you discover a potential security issue affecting your we9999 account, report it immediately to support@we9999.best.

We9999 may update this Privacy Policy from time to time. The effective date shown at the top of the page reflects when the current version took effect.

Material changes — Changes that significantly affect how we use your data, what we collect, or your rights will be communicated by email or via a notice on the platform at least 14 days before they take effect. You will have the opportunity to review the changes and, if you disagree, close your account before they apply.

Minor changes — Corrections to typographical errors, clarifications that do not alter the substance of the policy, or updates to reflect minor operational changes may be made immediately without advance notice.

Continued use of we9999 after the effective date of any policy update constitutes your acceptance of the revised terms. Previous versions of this policy are available on request from support@we9999.best.

Any question, request, or complaint about how we9999 handles your personal data should be directed to our support team. We take privacy queries seriously and treat them with the same priority as financial or technical support requests.

If you are not satisfied with we9999's response to a privacy request, you may escalate by emailing support@we9999.best with the subject line "Privacy Complaint Escalation". A senior team member will review your complaint independently within 5 business days of the escalation.