m9999 Privacy Policy – How We Protect Your Personal Information

1.1   For the purposes of this Privacy Policy, "m9999", "we", "us", and "our" refers to the operator of the m9999 online casino and sports betting platform, accessible at m9999.bio. m9999 acts as the data controller in respect of the personal information collected through the platform.

1.2   As the data controller, m9999 determines the purposes and means by which personal data is processed. We are responsible for ensuring that personal data is handled in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity.

1.3   m9999 operates under an international gaming licence with associated compliance obligations covering, among other matters, the protection of player personal data, anti-money laundering procedures, and responsible gaming requirements. Our data handling practices are shaped by and consistent with these obligations.

1.4   All enquiries regarding this Privacy Policy, or regarding the personal data m9999 holds about you, should be directed to the m9999 support team via the live chat feature within the platform or by written communication to [email protected].

2.1   m9999 collects personal data through several channels: information you provide directly during registration and KYC verification; information generated automatically through your use of the platform; and information received from third-party payment providers and identity verification services. The categories of personal data we collect are described below.

Registration Data:

• Full legal name as it appears on your CNIC.
• Pakistani mobile phone number (used as your account identifier).
• Date of birth (for age verification purposes).
• City of residence (Karachi, Lahore, Islamabad, Faisalabad, or other).
• Account password (stored as a salted cryptographic hash — never in plain text).

KYC Verification Data:

• CNIC number as printed on your Computerized National Identity Card.
• Scanned or photographed copy of your CNIC (front and reverse).
• Selfie photograph (where requested to confirm liveness during KYC).
• Proof of address documentation (where additionally requested).

Transaction Data:

• JazzCash or EasyPaisa mobile wallet number associated with deposits and withdrawals.
• Bank account details where bank transfers (HBL, UBL, Meezan Bank, IBFT) are used.
• Deposit amounts, withdrawal requests, transaction timestamps, and transaction reference numbers.

Platform Usage Data:

• Games played, wagers placed, bet amounts, session duration, and game results.
• Device type, operating system, browser version, and screen resolution.
• IP address and approximate geographic location (city level).
• Login timestamps, session length, and navigation patterns within the platform.

Communications Data:

• Content of any support chat transcripts, emails, or feedback messages sent to m9999.
• Promotional communication preferences (opt-in or opt-out status for SMS notifications).

3.1   m9999 processes personal data only for legitimate purposes with a defined legal basis. The table below maps each processing purpose to the data used and the legal basis relied upon.

3.2   Account Creation and Management. We use your registration data to create and maintain your m9999 account, authenticate your login sessions, personalise your platform experience, and communicate account-related information to you. Legal basis: performance of a contract.

3.3   Identity Verification (KYC). We process your CNIC and associated documentation to verify that you are who you say you are, that you meet the minimum age requirement of 21 years, and to comply with anti-money laundering regulations applicable under our gaming licence. Legal basis: legal obligation and legitimate interests.

3.4   Payment Processing. Transaction data is processed to facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and IBFT transfer. We share the minimum necessary payment information with our payment service providers to complete transactions. Legal basis: performance of a contract.

3.5   Fraud Prevention and Security. We analyse login data, device information, IP addresses, and transaction patterns to detect and prevent unauthorised access, fraud, money laundering, and other criminal activity. Legal basis: legal obligation and legitimate interests.

3.6   Responsible Gaming Monitoring. Platform usage data — including session length, wager frequency, and loss patterns — is used by m9999's responsible gaming systems to identify players who may be showing signs of problem gambling behaviour. This monitoring is in the player's interest and is required under our licensing obligations. Legal basis: legal obligation and legitimate interests.

3.7   Customer Support. Communications data is used to resolve your support queries, investigate complaints, and improve our customer service. Support interactions may be recorded and retained for quality assurance and dispute resolution purposes. Legal basis: performance of a contract and legitimate interests.

3.8   Platform Improvement. Aggregated and anonymised usage data is analysed to understand how players navigate the m9999 platform, identify technical issues, and improve game selection, interface design, and performance. This analysis does not identify individual players. Legal basis: legitimate interests.

4.1   CNIC documentation and associated identity verification records are treated as a heightened-sensitivity category of personal data at m9999. This means they are subject to additional security controls beyond those applied to standard account data.

4.2   KYC documents are stored in an encrypted document management system with access restricted to authorised compliance and fraud prevention personnel only. KYC documents are not accessible to general customer support staff, marketing teams, or other operational functions of m9999.

4.3   KYC data will be retained for the minimum period required by applicable anti-money laundering regulations following account closure. This retention obligation exists regardless of a player's preference for deletion, as it is a regulatory requirement that m9999 is legally obligated to fulfil.

4.4   m9999 does not use your CNIC or biometric data for any purpose other than identity verification and regulatory compliance. CNIC data is never used for marketing segmentation, profiling, or shared with commercial third parties.

5.1   m9999 processes payment data solely for the purpose of facilitating deposits and withdrawals in PKR. We do not store complete bank account numbers, full JazzCash wallet credentials, or payment card details (where applicable) on m9999 servers beyond what is technically necessary for transaction processing.

5.2   Transactions involving JazzCash and EasyPaisa are processed through direct API integrations with those providers. m9999 receives transaction confirmation references and amounts; full wallet credentials remain within the respective payment provider's secure environment.

5.3   For HBL, UBL, Meezan Bank, and IBFT bank transfers, the account holder name and bank account number associated with a withdrawal request are verified against your KYC-confirmed identity before processing. Withdrawals to unverified or third-party accounts are not permitted.

5.4   m9999 maintains a complete transaction history for all deposits and withdrawals within your account. This history is accessible to you through your account dashboard at any time and is retained in accordance with our data retention policy and applicable regulatory requirements.

6.1   m9999 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device that help us deliver core platform functionality, remember your preferences, and analyse how the platform is used.

6.2   The following categories of cookies are used by m9999:

• Strictly Necessary Cookies: Essential to the operation of the platform. These cookies enable your login session, maintain your account authentication state, prevent cross-site request forgery, and deliver core security functions. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming limit reminders, and game lobby filter configurations. Disabling these will not prevent access but may reduce your experience quality.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players navigate m9999 — which game categories are visited most frequently, where technical errors occur, and how long sessions typically last. This data is used exclusively for platform improvement and does not identify individual players.
• Session Integrity Cookies: Used to detect and prevent automated login attempts, unusual navigation patterns, and bot activity that could indicate fraud or security threats.

6.3   m9999 does not use advertising or cross-site tracking cookies. We do not participate in third-party behavioural advertising networks, and your m9999 browsing activity is not shared with advertising platforms.

6.4   You may manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies will prevent you from logging in to your m9999 account.

7.1   m9999 does not sell, rent, or commercially exploit your personal data. Data sharing with third parties is limited to the following categories and purposes:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and IBFT processing infrastructure receive the transaction-specific data necessary to process deposits and withdrawals. These providers are bound by their own privacy obligations and are not authorised to use m9999 player data for any other purpose.
• Identity Verification Services: Where automated document verification technology is used as part of the KYC process, your CNIC images may be processed by a third-party verification service under strict data processing agreements with m9999.
• Game Content Providers: Game studios whose titles appear in the m9999 lobby may receive anonymised session data (e.g., game load events, session durations) for technical support purposes. These providers do not receive personally identifiable information.
• Regulatory and Law Enforcement Authorities: m9999 will disclose personal data to regulatory bodies, law enforcement agencies, or judicial authorities when required to do so by applicable law, court order, or our licensing obligations. We cannot refuse such disclosures where they are legally mandated.
• Fraud Prevention Consortia: Where we have reasonable grounds to suspect fraud or financial crime, limited data may be shared with recognised fraud prevention databases or partner platforms operating under appropriate data sharing agreements, for the purpose of protecting players and the integrity of the platform.

7.2   All third-party data processors engaged by m9999 are required to process player data only for the specific purpose for which it was shared, maintain appropriate technical and organisational security measures, and comply with applicable data protection obligations. m9999 conducts due diligence on third-party data processors before engagement.

8.1   m9999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, and for the period required to satisfy applicable regulatory and legal obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and Identity Verification Documents: Retained for a minimum of 5 years following account closure or the completion of the most recent transaction, whichever is later, as required under applicable AML regulations.
• Transaction Records: All financial transaction data is retained for a minimum of 5 years in accordance with AML and regulatory reporting obligations.
• Support Communications: Support chat transcripts and written communications are retained for 2 years from the date of the interaction for dispute resolution and quality assurance purposes.
• Platform Usage Data: Aggregated and anonymised session analytics are retained indefinitely as they do not constitute personal data. Individual session logs are retained for 12 months.
• Responsible Gaming Records: Records of responsible gaming settings, self-exclusion requests, and associated interactions are retained for 5 years following account closure to enable compliance with self-exclusion obligations.

8.2   Where a player requests deletion of their data, m9999 will delete or anonymise all data that is not subject to a mandatory retention obligation. Data subject to regulatory retention requirements cannot be deleted prior to the end of the applicable retention period regardless of a deletion request.

9.1   m9999 implements a layered technical and organisational security architecture designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit AES SSL/TLS encryption for all data in transit between player devices and m9999 servers.
• Encryption at rest for all sensitive personal data stored in m9999 databases, including KYC documents and payment details.
• Salted cryptographic hashing of all account passwords. m9999 does not store readable password versions under any circumstances.
• Role-based access controls ensuring that m9999 staff can only access the categories of player data necessary for their specific operational function.
• Multi-factor authentication requirements for all m9999 administrative systems.
• Regular penetration testing and security audits conducted by independent security specialists.
• Anomaly detection systems that monitor for unusual access patterns or data exfiltration indicators in real time.
• Secure document management systems for KYC documents with audit logging of all access events.

9.2   In the event of a data security incident that poses a risk to player personal data, m9999 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law. m9999 maintains an incident response plan that is reviewed and updated regularly.

9.3   While m9999 takes all reasonable and technically appropriate steps to secure player data, no internet-based system can guarantee absolute security against all possible threats. Players are encouraged to maintain strong, unique passwords for their m9999 accounts and to contact support immediately if they suspect unauthorised account access.

10.1   Subject to applicable law and the limitations described in this Policy, m9999 players hold the following rights in relation to their personal data. To exercise any of these rights, contact the m9999 support team with a clear description of your request and sufficient information to verify your identity.

10.2   m9999 will respond to all verifiable data rights requests within 30 days of receipt. Where a request is complex or where m9999 receives a high volume of requests simultaneously, we may extend this period by an additional 60 days, in which case we will notify you of the extension and the reason for it.

11.1   m9999 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly designed for and marketed exclusively to adults. All registration flows incorporate age verification steps, and KYC verification confirms age against CNIC documentation.

11.2   If m9999 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, return any deposited funds to the originating payment method (with winnings voided), and permanently delete all personal data associated with the underage registration from our active systems (subject only to any mandatory regulatory retention obligations).

11.3   If you believe that a minor may have accessed or registered on m9999, please contact our support team immediately at [email protected] with relevant details so that we can investigate and take prompt action.

12.1   m9999 reserves the right to update this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, technology, or platform operations.

12.2   Material amendments to this Policy will be communicated to all registered m9999 players via SMS notification to their registered mobile number at least 7 days before the amended Policy takes effect. The effective date displayed at the top of this page will be updated accordingly.

12.3   Continued use of the m9999 platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree with any amendment, you should close your account and withdraw any remaining balance before the amended Policy takes effect.

12.4   The current operative version of this Privacy Policy is always available at m9999.bio/privacy-policy. We recommend reviewing it periodically to stay informed of how m9999 handles your data.

13.1   For any questions, concerns, or requests relating to this Privacy Policy or the personal data m9999 holds about you, please contact us through one of the following channels:

• Live Chat: Available 24/7 within the m9999 platform for all registered players. This is the fastest channel for most queries.
• Email: Direct written queries to [email protected]. Please include "Privacy Query" in the subject line and provide sufficient detail to allow us to identify your account and address your specific concern.

13.2   m9999 is committed to resolving privacy concerns promptly and transparently. If you raise a concern with us and are not satisfied with our response, you retain the right to escalate the matter to the relevant regulatory authority under our international gaming licence jurisdiction.