G999 Privacy Policy — How We Protect Your Data on Pakistan's Top Gaming Platform

01Introduction

This Privacy Policy explains how G999 — operating at g999.world — collects, uses, stores, protects and in limited circumstances shares your personal information when you use our platform, games and services. It applies to all G999 players and visitors based in Pakistan, and to anyone else who accesses our platform regardless of location.

Privacy matters. When you register a G999 account, you trust us with personal details that include your mobile number, payment information and gaming activity. That trust is something we take seriously. This policy is written in plain language because we want you to actually understand what G999 does with your data — not bury it in legal jargon that nobody reads properly.

This Privacy Policy should be read alongside our Terms and Conditions, which govern your overall use of the G999 platform. Together these two documents set out the full framework of your relationship with G999.

02Who We Are

G999 is an online gaming platform operated at g999.world, serving players primarily in Pakistan. G999 is the data controller responsible for the personal information of all registered players and platform visitors. As data controller, G999 determines the purposes for which your personal data is processed and the means by which it is processed.

For any questions about this Privacy Policy or about how G999 handles your personal data, you can contact the G999 data team at support@g999.world. Please include "Privacy Query" in your subject line to ensure your message is routed to the correct team promptly.

G999's platform is designed and operated specifically for the Pakistani market. Our data practices reflect the requirements of this market — including the use of Pakistani mobile numbers as account identifiers, PKR-denominated transaction records, and CNIC-based identity verification where applicable under our KYC obligations.

03Data We Collect

G999 collects personal data on a minimum-necessary basis. The following table sets out the categories of data G999 collects and why each category is needed.

G999 does not collect sensitive personal data such as biometric data, religious or political beliefs, or health information. Payment card data for Visa/Mastercard transactions is handled by a PCI-DSS compliant payment processor — G999 does not store full card numbers on our own servers.

04How We Collect Your Data

4.1 Data You Give Us Directly

The majority of personal data G999 holds is information you provide directly. This includes the mobile number and password you enter during registration, the identity documents you submit for KYC verification, the payment account details you use to make PKR deposits and withdrawals, and any information you provide when contacting the G999 support team.

4.2 Data Generated by Your Use of G999

G999 automatically generates and records data when you use the platform. Your game history — every hand of Andar Bahar, every Ludo round, every poker session — is logged server-side for dispute resolution and responsible gaming monitoring. Your session times, login timestamps and navigation patterns within the platform are recorded for security and platform performance purposes.

4.3 Technical Data Collected Automatically

When you access G999 through a browser, standard technical information is automatically collected including your IP address, device type, operating system version and browser type. This data is used for fraud detection, security monitoring and platform compatibility testing. G999 does not use this data to build individual behavioural profiles for commercial purposes.

05Why We Use Your Data

G999 uses your personal data for the following specific purposes — and only for these purposes:

• Account Management: Creating your G999 account, authenticating your login, maintaining your PKR balance and processing account-related requests.
• Payment Processing: Handling PKR deposits through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard; processing withdrawals back to your registered payment method; maintaining transaction records.
• Age and Identity Verification: Confirming that all G999 players are 18 years of age or above, and verifying identity where required by our operating and KYC obligations.
• Game Dispute Resolution: Maintaining server-side game logs so that any disputed outcome can be reviewed factually and resolved accurately.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour and to apply deposit limits, cooling-off periods and self-exclusion where requested or required.
• Fraud Prevention and Security: Detecting and preventing cheating, money laundering, multi-accounting and other prohibited activities on G999's platform.
• Customer Support: Using your account history and communication records to resolve support queries, complaints and payment disputes efficiently.
• Platform Improvement: Using aggregated, anonymised technical and usage data to improve G999's platform performance, mobile compatibility and game offering.
• Marketing (Opted-In Only): Sending promotional communications about G999 offers, tournaments and new game launches — only to players who have explicitly opted in to receive them.

06Legal Basis for Processing

G999 processes your personal data on one of the following legal bases depending on the specific purpose:

• Contractual Necessity: Processing required to fulfil the G999 player agreement — including account management, payment processing and game operation. Without this processing, G999 cannot provide its services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements — including age verification, KYC identity checks, transaction record-keeping and anti-money-laundering obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform performance improvement and dispute resolution — where these interests do not override your privacy rights.
• Consent: Marketing communications sent only where you have given explicit, informed consent and which you can withdraw at any time.

07Data Sharing

G999 does not sell, rent or trade your personal data. We share your data only in the following limited, specific circumstances:

7.1 Payment Processors

When you make a PKR deposit or withdrawal, the transaction information necessary to process the payment is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT partner bank or Visa/Mastercard processor. These providers act as independent data controllers for their own processes and are bound by their own privacy policies and regulatory obligations.

7.2 Identity Verification Partners

For KYC verification, G999 may use a third-party identity verification service to confirm CNIC details and age. These partners process identity data solely for verification purposes, under strict data processing agreements with G999, and do not retain your data beyond what is necessary for the verification process.

7.3 Technology and Infrastructure Providers

G999 uses trusted third-party providers for server infrastructure, platform hosting and technical support. These providers may process personal data in the course of providing their services but do so only under G999's instruction and on a confidential basis.

7.4 Legal and Regulatory Disclosure

G999 may disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law or a valid legal order. G999 will notify affected players of such disclosure where legally permitted to do so.

08Cookies & Tracking Technologies

G999 uses cookies and similar browser-based technologies to make our platform work properly and to improve your experience. Here is what we use and why:

• Essential Cookies: These are necessary for the G999 platform to function. They maintain your login session, remember your language preferences and ensure secure navigation between sections. Without these cookies, G999 cannot operate properly.
• Security Cookies: Used by G999's fraud detection systems to identify unusual access patterns and prevent account takeovers. These cookies do not track your behaviour outside G999.
• Performance Cookies: Aggregated, anonymised data about how players navigate G999 helps us identify slow-loading sections, mobile compatibility issues and usability problems. No personal identification is possible from this data.
• Preference Cookies: G999 uses these to remember your settings — such as game preferences and notification settings — between sessions.

G999 does not use third-party advertising tracking cookies or participate in cross-site tracking networks. The cookies G999 sets are limited to those necessary for our own platform operation and improvement.

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will prevent G999 from functioning correctly — in particular, you will not be able to maintain a login session without session cookies enabled.

09Data Security

G999 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction.

9.1 Technical Measures

• All data in transit is protected by TLS 1.3 encryption — the same standard used by major global banks.
• Personal data stored on G999 servers is encrypted at rest using AES-256 encryption.
• Passwords are stored as salted hashes — G999 cannot read your password and will never ask for it.
• Two-factor authentication via SMS OTP is available and strongly recommended for all G999 accounts.
• G999 conducts regular security audits and penetration testing of our platform infrastructure.

9.2 Organisational Measures

• Access to G999 player data is restricted on a strict need-to-know basis — only staff whose role requires access to specific data categories can access it.
• All G999 staff with access to personal data are trained in data protection obligations and are bound by confidentiality agreements.
• G999 maintains an incident response plan for potential data breaches, including notification procedures for affected players.

10Data Retention

G999 retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal and regulatory obligations.

When data reaches the end of its retention period, G999 securely deletes or anonymises it. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

11Your Rights as a G999 Player

As a G999 player, you have the following rights regarding your personal data. G999 is committed to honouring these rights promptly and without unnecessary barriers.

• Right of Access

  You can request a copy of all personal data G999 holds about you. G999 will provide this within 14 working days of your request. There is no charge for a first access request in any 12-month period.
• Right to Rectification

  If any personal data G999 holds about you is inaccurate or incomplete, you have the right to have it corrected. Contact support with the correct information and G999 will update your records promptly.
• Right to Erasure

  You can request deletion of your G999 account and associated personal data. G999 will erase data that is no longer necessary for legal or operational purposes. Some data — such as transaction records — must be retained by law even after account closure.
• Right to Restrict Processing

  In certain circumstances you can ask G999 to restrict how your data is processed — for example, while a complaint about data accuracy is being resolved. Restricted data will not be actively processed but will be retained.
• Right to Data Portability

  Where G999 processes your data based on consent or contract, you have the right to receive your data in a structured, machine-readable format so you can transfer it to another service. G999 will provide this in CSV or JSON format on request.
• Right to Object

  You have the right to object to G999 processing your data based on legitimate interests — including for platform security monitoring. G999 will consider your objection and either stop the processing or explain why the legitimate interest overrides your objection.

To exercise any of these rights, contact G999 support at support@g999.world with the subject line "Data Rights Request". G999 will acknowledge your request within 48 hours and complete it within 14 working days. G999 may need to verify your identity before processing any data rights request.

12Children's Privacy

G999 is strictly for users aged 18 and above. G999 does not knowingly collect, process or store personal data of individuals under the age of 18. If G999 discovers or has reason to believe that an account belongs to a person under 18, the account will be closed immediately and any personal data deleted, subject to the limited legal record-keeping requirements that apply regardless of account closure reason.

If you are a parent or guardian and believe your child has created a G999 account, please contact us immediately at support@g999.world with the registered mobile number. G999 will investigate and close the account promptly, deleting all associated personal data to the maximum extent permitted by law.

13Marketing Communications

G999 sends promotional communications — including bonus offers, tournament announcements and new game alerts — only to players who have explicitly opted in to receive them during registration or through their account settings.

13.1 How We Send Marketing Messages

G999 sends marketing communications via SMS to your registered Pakistani mobile number and, where provided, via WhatsApp and in-platform notifications. G999 does not send unsolicited emails or cold-call players under any circumstances.

13.2 Withdrawing Marketing Consent

You can withdraw your marketing consent at any time by updating your preferences in your G999 account settings, by replying STOP to any G999 SMS, or by contacting support at support@g999.world. Once consent is withdrawn, G999 will stop sending marketing communications within 24 hours. Withdrawing marketing consent does not affect your ability to use the G999 platform or receive essential service communications about your account.

14Changes to This Privacy Policy

G999 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we explain our processes. When material changes are made — changes that affect how your data is used or your rights — G999 will notify all registered players at their registered mobile number at least 7 days before the changes take effect.

Minor updates — such as clarifications of existing practices, corrected contact details or editorial improvements — may be made without prior notice. The "Last Updated" date at the top of this page is always current and will tell you immediately if the policy has changed since your last visit.

Continued use of G999 after the effective date of any Privacy Policy update constitutes your acceptance of the revised policy. If you do not accept the updated policy, you should stop using G999 and request account closure.

15Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or G999's handling of your personal data, please get in touch. G999 is committed to addressing privacy concerns promptly and transparently.

G999 will acknowledge all privacy-related contacts within 48 hours and will aim to provide a complete response within 14 working days. For data rights requests — access, erasure, portability — please include your registered G999 mobile number in your contact so we can verify your identity before processing the request.