Privacy Policy — dh999

This Privacy Policy ("Policy") is issued by dh999 ("Platform", "we", "us", "our"), the operator of the website accessible at dh999.cam. This Policy governs how dh999 collects, uses, stores, discloses and protects personal data submitted by or generated through Users ("you", "your") of the platform.

dh999 is an online casino and sports betting information platform providing English-language content primarily for players in Pakistan. We are committed to handling personal data responsibly, transparently and in compliance with applicable data protection obligations.

By accessing and using the dh999 platform — whether browsing informational content, creating an account, making a deposit or engaging with any interactive feature — you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data": Any information that identifies or can reasonably be used to identify a living individual, either directly (such as name, CNIC number, email address) or indirectly (such as IP address, device identifier or usage patterns in combination with other data).
• "Processing": Any operation performed on personal data, including but not limited to collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure and destruction.
• "Data Controller": The entity that determines the purposes and means of processing personal data — in this case, dh999.
• "Data Processor": A third party that processes personal data on behalf of dh999, under contractual instruction, such as a KYC verification provider or payment processing intermediary.
• "User": Any individual who accesses or uses the dh999 platform, whether as a registered account holder or anonymous visitor.
• "KYC": Know Your Customer — the identity and age verification procedure applied to registered accounts, typically involving submission of a CNIC or passport and potentially additional documentation.
• "Cookies": Small text files placed on a User's device by the dh999 platform or approved third-party services, used for session management, analytics and functional purposes.
• "Consent": A freely given, specific, informed and unambiguous indication by the User of their agreement to the processing of their personal data for a stated purpose.

dh999 collects personal data across several categories depending on how you interact with the platform. The following table sets out the types of data collected and their context:

dh999 processes personal data only for legitimate, clearly defined operational purposes. The following sets out the primary purposes for which your data is used:

Registration data is used to create, maintain and manage your dh999 account. This includes processing login authentication, applying account preferences, maintaining transaction history and managing your responsible gambling settings.

Identity documents and registration data are processed to verify your identity and age in compliance with KYC obligations. This process is required before certain account features — including the processing of withdrawals — are made available. KYC verification may be conducted using approved third-party identity verification providers who act as data processors under contractual data processing agreements.

Financial data, behavioural data and technical data are analysed to detect and prevent fraudulent activity, including account duplication, bonus abuse, unauthorised access and potential money laundering. This processing is necessary for compliance with applicable legal and regulatory obligations.

Communications data — including the content of support emails and in-platform messages — is processed to respond to your enquiries, resolve account issues, handle complaints and provide responsible gambling assistance.

Technical and behavioural data may be processed in aggregate, anonymised form to understand how users interact with the dh999 platform, identify technical issues, improve page performance and enhance the overall user experience. This analysis does not result in any individual profiling for marketing purposes.

Behavioural data — including deposit frequency, wager size, session duration and loss patterns — may be monitored to identify indicators of problematic gambling behaviour. Where such indicators are present, the platform may trigger responsible gambling interventions such as automated notifications, limit prompts or account reviews, consistent with our responsible gambling obligations.

dh999 relies on the following legal bases for processing personal data, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the User Agreement — including account creation, KYC verification, deposit and withdrawal processing, and support provision.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering legislation, age verification obligations and regulatory reporting duties.
• Legitimate Interests: Processing conducted to serve dh999's legitimate business interests — including fraud prevention, platform security, technical diagnostics and service improvement — where those interests do not override the fundamental rights of Users.
• Consent: Where processing is not covered by the above bases, dh999 will seek your explicit consent before proceeding. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

dh999 does not sell, rent or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared in the following limited and controlled circumstances:

• KYC and Identity Verification Providers: Third-party identity verification services engaged under data processing agreements to perform KYC checks on behalf of dh999. These providers are contractually restricted from using your data for any purpose beyond the verification mandate.
• Payment Processing Intermediaries: Financial institutions and payment processors involved in facilitating deposits and withdrawals, including bank transfer partners and mobile wallet integrations. Payment-provider names referenced on the platform (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) are contextual references only — sharing with any such provider occurs only where operationally required and subject to applicable data protection terms.
• Regulatory and Legal Authorities: Where required by applicable law, court order, regulatory directive or legitimate law enforcement request, dh999 may disclose personal data to competent authorities. Such disclosures will be limited to what is strictly required by the relevant legal obligation.
• Technology and Infrastructure Providers: Hosting, database, content delivery and cybersecurity providers who process data on dh999's behalf under binding data processing agreements with appropriate security and confidentiality obligations.
• Fraud and AML Screening Services: Third-party services used to screen transactions and account behaviour for indicators of financial crime, acting as data processors under contractual instruction.

dh999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account's operation and for a defined period following account closure, consistent with applicable AML record-keeping obligations.
• KYC and Identity Documents: Identity documents submitted for KYC verification are retained for the period required by the platform's licensing conditions and applicable anti-money laundering regulations. Retention periods typically range from five to seven years following account closure, depending on jurisdiction.
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for audit, compliance and dispute resolution purposes for a minimum of five years from the date of each transaction.
• Communications Data: Support communications and correspondence are retained for the period necessary to resolve the matter in question, plus a reasonable period thereafter to address any subsequent related queries or disputes.
• Technical and Analytical Data: Aggregated, anonymised technical and analytical data may be retained indefinitely as it no longer constitutes personal data once anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of your personal data subject to the conditions described in Section 10 (Your Rights) and subject to any overriding legal retention obligations.

dh999 uses cookies and similar tracking technologies to support the operation, security and improvement of the platform. The following categories of cookies may be in use:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your account preferences, language settings and responsible gambling tool configurations between sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Users navigate the platform — including pages visited, session duration and device type — to support platform improvement. These cookies do not individually identify you.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity and other security threats to the platform.

dh999 does not deploy advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings, although disabling certain categories of cookies may affect the functionality of your account. For most modern browsers, instructions for managing cookies are available in the browser's Help section.

dh999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include, but are not limited to:

• HTTPS encryption for all data transmitted between Users and the dh999 platform.
• Hashed storage of account passwords — plaintext passwords are never stored.
• Access controls limiting personal data access to authorised personnel only, on a need-to-know basis.
• Regular security assessments of platform infrastructure and third-party integrations.
• Secure document handling protocols for KYC submissions, accessible only through the platform's HTTPS verification portal.

As a User of the dh999 platform, you have the following rights with respect to your personal data. You may exercise any of these rights by contacting dh999 via the email address provided in Section 14. dh999 will respond to valid requests within a reasonable timeframe:

The dh999 platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator/license jurisdiction. dh999 does not knowingly collect, process or retain personal data from individuals under the age of 18.

If dh999 becomes aware that personal data has been collected from a minor — whether through misrepresentation of age at registration or any other means — the associated account will be immediately suspended and the personal data in question will be securely deleted as soon as practicable, subject to any mandatory legal retention requirements.

Parents or guardians who believe that a minor may have provided personal data to dh999 are encouraged to contact the platform's support team immediately using the contact details in Section 14, so that appropriate action can be taken without delay.

In the course of providing the dh999 platform and its associated services, personal data may be transferred to, stored in, or processed in countries outside Pakistan. This may occur where dh999's infrastructure partners, KYC verification providers or payment processing intermediaries are headquartered or operate servers in other jurisdictions.

Where international data transfers occur, dh999 takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and confidentiality of the personal data transferred, consistent with the standards applied within the platform itself. These safeguards may include contractual data protection clauses between dh999 and its data processors.

Users in Pakistan should be aware that data protection frameworks vary internationally and that the legal protections available in the destination jurisdiction may differ from those applicable in Pakistan. By using the dh999 platform, you consent to the transfer of your personal data to the extent necessary for the provision of the services described in this Policy.

dh999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform features. The most current version of this Policy will always be accessible at dh999.cam/privacy-policy. The "Last Updated" date at the top of this page indicates the date of the most recent revision.

Where amendments are material in nature — meaning they significantly alter how we use your personal data or reduce the rights available to you — dh999 will provide notice of such changes via email to registered Users where reasonably practicable, or through a prominent notification posted on the platform homepage.

Your continued use of the dh999 platform following the publication of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with any amendment, you must discontinue your use of the platform and may request account closure in accordance with the procedure described in our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by dh999, please contact our data team using the details below. All privacy-related communications should be submitted in English for efficient processing.

dh999 aims to acknowledge all privacy-related enquiries promptly and to resolve valid data rights requests within a reasonable period from receipt of a properly verified request. For complex requests — such as comprehensive data access requests or erasure requests involving multiple data categories — additional time may be required and Users will be notified accordingly.