ne999 Privacy Policy — How We Handle Your Personal Data

1. Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "ne999," "we," "us," "our" — the operator of the ne999 online gaming platform at ne999.biz, holding an international online gaming licence.
• "Player," "you," "your" — any individual who visits, registers on, or uses any feature of the ne999 platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, including name, date of birth, mobile number, email address, payment details, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. ne999 is the Data Controller in respect of all Personal Data collected through the Platform.
• "Third-Party Processor" — an external service provider engaged by ne999 to process Personal Data on ne999's behalf and under ne999's written instruction, subject to binding data processing agreements.
• "Consent" — freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a defined purpose.
• "KYC" — Know Your Customer: the identity and age verification process applicable to all ne999 Players.

2. Data Controller Identity

ne999, the operator of ne999.biz, acts as the Data Controller in respect of all Personal Data collected through the Platform and its associated communications channels. ne999 determines what Personal Data is collected, the purposes for which it is processed, and the security measures applied to protect it.

ne999 operates under an international online gaming licence and is subject to the data protection and privacy obligations prescribed by the regulatory framework governing that licence. For all data-related enquiries, including requests to exercise your rights under Section 10 of this Policy, please contact the ne999 Data Protection team via the support channels listed in Section 16.

3. Categories of Personal Data We Collect

ne999 collects the following categories of Personal Data from Players and prospective Players:

ne999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs required for KYC), or health data, except where voluntarily disclosed by a Player in the context of a responsible gaming request (e.g., a self-exclusion request citing a gambling problem). Such disclosures are handled with the highest level of confidentiality.

4. How We Collect Personal Data

ne999 collects Personal Data through the following channels:

4.1 Directly From You

• When you complete the ne999 registration form and provide your name, date of birth, email, and mobile number;
• When you submit identity documents for KYC verification (CNIC, Passport, proof of address);
• When you make a deposit or initiate a withdrawal through any supported payment channel including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, or USDT TRC20;
• When you contact ne999 support via live chat, email, or any other communication channel;
• When you submit feedback, complete a survey, or participate in a ne999 promotion or competition;
• When you set responsible gaming limits, request a cooling-off period, or apply for self-exclusion.

4.2 Automatically During Platform Use

• Technical Data (IP address, device identifiers, browser type) collected automatically when you access ne999.biz, whether or not you are logged into your Account;
• Gaming and betting activity data generated as you play games, place bets, or use platform features;
• Cookie and tracking technology data collected in accordance with Section 7 of this Policy.

4.3 From Third Parties

• Identity and age verification data returned by our KYC service providers following submission of your identity documents;
• Fraud prevention and AML screening results from third-party risk assessment services;
• Technical and analytics data from approved analytics providers operating under data processing agreements with ne999.

5. Purposes and Legal Basis for Processing

ne999 processes your Personal Data only where a lawful basis for that processing exists. The purposes for which ne999 processes Personal Data, together with the applicable legal basis in each case, are set out below:

• Account registration and management — Processing is necessary for the performance of the contract between you and ne999 (i.e., the Terms and Conditions you accept upon registration).
• Identity and age verification (KYC) — Processing is necessary for compliance with ne999's legal obligations under its international gaming licence, including mandatory age verification and anti-money laundering obligations.
• Deposit and withdrawal processing — Processing is necessary for the performance of the contract and for compliance with applicable financial regulatory requirements.
• Game and betting platform provision — Processing is necessary for the performance of the contract, enabling ne999 to provide the gaming and betting services you have registered to access.
• Fraud detection and prevention — Processing is necessary for the purposes of the legitimate interests pursued by ne999 in protecting the platform and its players from fraudulent activity, money laundering, and Terms violations.
• Customer support — Processing is necessary for the performance of the contract and for ne999's legitimate interests in resolving player queries efficiently.
• Responsible gaming monitoring — Processing is necessary for compliance with ne999's regulatory obligations relating to player protection and responsible gambling standards.
• Marketing communications — Processing is based on your freely given consent, where you have opted in to receive promotional communications from ne999. You may withdraw this consent at any time.
• Platform analytics and improvement — Processing is based on ne999's legitimate interests in understanding how the platform is used and improving the quality of service provided to Players.
• Legal compliance and regulatory reporting — Processing is necessary for compliance with applicable legal obligations, including responses to regulatory enquiries and court orders.

6. Sharing Personal Data with Third Parties

ne999 does not sell, rent, or trade your Personal Data with any third party for commercial purposes. We share Personal Data with third parties only in the following limited circumstances:

6.1 Service Providers and Data Processors

ne999 engages third-party service providers to perform specific functions in connection with the Platform, including:

• KYC and identity verification providers — to verify your identity and age using the documents you submit;
• Payment processing partners — including JazzCash, EasyPaisa, and banking infrastructure providers, to process your deposits and withdrawals securely;
• Fraud prevention and AML screening services — to assess transaction risk and screen for suspicious activity;
• Customer support platform providers — to power ne999's 24/7 live chat support function;
• Analytics providers — to provide ne999 with aggregated and anonymised usage data for platform improvement purposes;
• Game software providers — such as Pragmatic Play, NetEnt, and other certified providers, to deliver game content and maintain game integrity records.

All third-party processors engaged by ne999 are subject to binding data processing agreements requiring them to process your Personal Data only on ne999's instructions, maintain appropriate security standards, and prohibiting any use of your data for their own commercial purposes.

6.2 Regulatory and Legal Disclosure

ne999 may disclose your Personal Data to governmental authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or the conditions of ne999's gaming licence. Such disclosures are made only to the extent required and ne999 will, where legally permissible, notify affected Players of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring involving ne999, your Personal Data may be transferred to the acquiring entity as part of that transaction. In such circumstances, ne999 will provide advance notice and ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Policy.

7. Cookies and Tracking Technologies

ne999 uses cookies and similar tracking technologies on ne999.biz to maintain platform functionality, improve user experience, and support fraud prevention and analytics. A cookie is a small text file placed on your device by a website when you visit it. The following categories of cookies are used by ne999:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, remembering your language preference, and enabling secure transactions. These cookies cannot be disabled without impacting Platform functionality.
• Functional Cookies: Enable ne999 to remember your preferences and personalise your experience, such as preferred game categories, display settings, and responsible gaming limit configurations.
• Analytics Cookies: Used to collect aggregated and anonymised data about how Players use the Platform — page visits, session duration, navigation paths — to help ne999 understand usage patterns and improve the service. ne999 uses privacy-conscious analytics solutions and does not share granular individual-level analytics data with third parties.
• Fraud Prevention Cookies: Used by ne999's risk management and fraud detection systems to identify anomalous behaviour patterns that may indicate account compromise, automated bot activity, or other fraudulent conduct.

You may control cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the ne999 Platform, including login functionality. ne999 does not use tracking cookies for third-party advertising purposes.

8. Data Security

ne999 implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption of all data transmitted between your device and ne999.biz;
• One-way cryptographic hashing of account passwords, ensuring that even ne999 personnel cannot access your password in plain text;
• Restricted data access controls, limiting access to your Personal Data to ne999 personnel and authorised processors who require it to perform their defined functions;
• PCI-DSS compliant payment processing, ensuring that payment card and wallet credentials are handled exclusively by accredited payment processors with no full payment credentials stored directly by ne999;
• Regular security assessments of Platform infrastructure, including penetration testing and vulnerability scanning;
• Incident response procedures for detecting, containing, and reporting data security incidents in accordance with applicable regulatory requirements.

9. Data Retention

ne999 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by our international gaming licence and applicable regulatory obligations. Specific retention periods are determined by the nature of the data and the purpose of processing:

• Account and identity data is retained for a minimum of five (5) years following Account closure, as required by anti-money laundering regulations applicable under ne999's gaming licence;
• Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years from the date of the transaction, in compliance with AML and gaming regulatory record-keeping requirements;
• Customer support records (live chat transcripts, email correspondence) are retained for three (3) years from the date of the interaction, unless they relate to an ongoing dispute or regulatory matter;
• Marketing communication records (consent logs, opt-out records) are retained for three (3) years from the date of the last interaction;
• Technical log data (access logs, security event records) is retained for twelve (12) months from collection, subject to extension where required for an ongoing security investigation.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be used to identify any individual. Where anonymised data is retained for statistical or analytical purposes, it is no longer considered Personal Data and is not subject to this Policy.

10. Your Data Protection Rights

Subject to applicable law and any limitations arising from ne999's regulatory obligations, you have the following rights in respect of your Personal Data held by ne999:

To exercise any of the above rights, please contact the ne999 Data Protection team via 24/7 live chat or by email at [email protected]. ne999 will respond to all valid data rights requests within 30 calendar days. Where a request is complex or numerous, ne999 may extend this period by a further 60 days, with prior notification. ne999 reserves the right to verify your identity before processing any data rights request.

11. International Data Transfers

ne999 operates as an international platform and may process or transfer your Personal Data to countries outside your country of residence, including the jurisdiction in which ne999's gaming licence is held and countries where our third-party service providers are established. Such transfers may include countries that do not have data protection laws equivalent to those applicable in your jurisdiction.

Where ne999 transfers Personal Data internationally, it implements appropriate safeguards to ensure an adequate level of protection, including:

• Contractual data processing agreements with standard data protection clauses incorporated into all third-party processor contracts;
• Technical security measures (encryption, access controls) applied consistently regardless of the jurisdiction in which data is processed;
• Restriction of international data transfers to jurisdictions where ne999 has assessed the data protection framework to be adequate for the purposes of the transfer.

By registering an Account and using the ne999 Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Pakistan for the purposes described in this Privacy Policy.

12. Children's and Minors' Privacy

The ne999 Platform is strictly intended for individuals aged 21 years and above. ne999 does not knowingly collect Personal Data from individuals under the age of 21. All registration attempts on ne999 are subject to mandatory KYC age verification using a valid CNIC or Passport to enforce this requirement.

If ne999 becomes aware that Personal Data has been collected from an individual who is under the age of 21 — whether due to the submission of fraudulent identity documents or any other means — ne999 will immediately suspend the associated Account, delete the personal data collected in the course of that registration (subject to any regulatory data retention obligations), and return any deposited funds.

13. Marketing Communications

ne999 may send you marketing communications about Platform promotions, new game releases, PSL cricket betting offers, bonus credits, and other ne999 services where you have provided your consent to receive such communications at the time of registration or subsequently through your Account preferences.

Marketing communications from ne999 are sent via email and SMS to your registered contact details. ne999 does not engage in unsolicited marketing. You may withdraw your consent to receive marketing communications from ne999 at any time by:

• Clicking the "unsubscribe" link included in any ne999 marketing email;
• Updating your communication preferences in your ne999 Account settings;
• Contacting ne999 support and requesting removal from marketing communications.

Withdrawal of consent for marketing communications does not affect your ability to use the ne999 Platform, nor does it affect the processing of your Personal Data for other lawful purposes. Please allow up to five (5) business days for opt-out requests to take effect across all communication channels.

14. Third-Party Platform Links

ne999.biz may contain links to game software provider websites, payment service provider information pages, or other third-party platforms, included for informational purposes. ne999 does not control the privacy practices of any third-party website and accepts no responsibility for the content, privacy policies, or data handling practices of any such third-party sites.

When you navigate away from ne999.biz to a third-party platform, the privacy policy of that third-party platform governs the processing of any Personal Data you provide to or that is collected by that platform. ne999 recommends that you review the privacy policies of any third-party platform you visit before providing any Personal Data to that platform.

15. Updates to This Privacy Policy

ne999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulation, or changes in ne999's operational structure. Material changes to this Policy will be communicated to registered Players by:

• Email notification to your registered email address;
• In-platform notification displayed on your next login to ne999;
• Publication of the updated Policy on this page with a revised effective date prominently displayed at the top.

Your continued use of the ne999 Platform following publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept any amendments to this Policy, you must cease use of the Platform and may request Account closure via ne999 support. It is your responsibility to check this page periodically for updates to ne999's privacy practices.

16. Contact — Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or ne999's processing of your Personal Data — including requests to exercise your data rights under Section 10 — please contact the ne999 Data Protection team through the following channels:

• 24/7 Live Chat: Available directly on ne999.biz — the fastest route for all data-related enquiries;
• Email: [email protected] (displayed as plain text — not a clickable link);
• Response Time: ne999 aims to acknowledge all data protection enquiries within 2 business days and to provide a substantive response within 30 calendar days.

If you are not satisfied with ne999's response to a data protection enquiry, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction applicable to your situation. ne999's support team can provide further guidance on this process upon request.