This Privacy Policy ("Policy") sets out how ad999 ("we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the services available on the ad999 platform at ad999.one. We take the privacy of every Pakistani player — from Karachi to Islamabad, from Lahore to Faisalabad — seriously and are committed to handling your personal information with transparency, security, and full respect for your rights. By creating an account or using any ad999 service, you acknowledge and consent to the data practices described in this Policy.
Our Privacy Commitments
Before reading the full legal Policy below, here is a plain-language summary of the six core commitments that guide how ad999 handles every piece of data you share with us.
Every interaction between your browser or device and the ad999 platform — login, deposit, gameplay, withdrawal, account settings — is encrypted with 256-bit SSL. The same standard used by HBL, UBL, and Pakistan's major banking institutions. Your data is never transmitted in plain text.
ad999 does not sell, rent, or commercially transfer personal data to third-party marketers, data brokers, advertising networks, or any entity whose purpose is commercial exploitation of your information. Data shared with third parties is strictly limited to what is necessary for service delivery.
ad999 collects only the personal data that is genuinely necessary for account creation, KYC compliance, payment processing, and responsible gaming obligations. We do not collect data speculatively, and we do not retain data beyond the period required for the purpose for which it was collected.
Pakistani players on ad999 have the right to access, correct, export, and in certain circumstances delete personal data held by ad999. You can exercise these rights at any time by contacting our support team — no lengthy bureaucratic process required. See Section 10 for the full list of your rights.
ad999 operates defined data retention schedules. Account data is retained for the duration of the active account relationship plus five years for regulatory compliance purposes. Data not required for compliance is deleted on a rolling basis as its purpose expires. Retention periods are detailed in Section 9 of this Policy.
In the unlikely event of a data security breach affecting your personal information, ad999 is committed to notifying affected Players within 72 hours of becoming aware of the breach — via registered email — and will clearly describe the nature of the breach, data affected, and the remedial steps being taken.
ad999 is the data controller responsible for the personal data collected and processed through the ad999 platform at ad999.one. As data controller, ad999 determines the purposes for which and the means by which your personal data is processed. All data processing activities conducted by ad999 are carried out in accordance with applicable international data protection laws and the obligations imposed by ad999's gaming licensing authority.
Where ad999 engages third-party service providers to process personal data on its behalf (for example, payment processors and KYC verification providers), those parties act as data processors and are subject to binding contractual obligations that restrict their use of your data to the specific purposes for which they have been engaged.
ad999 collects the following categories of personal data from registered and unregistered users of the Platform. The specific data collected depends on your level of engagement with ad999 — for example, unregistered visitors receive only technical and analytics data, while registered Pakistani players provide a fuller set of information for account management and compliance purposes.
| Data Category | Specific Data Points | Collected From |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number, nationality, selfie photograph for KYC | Registration & KYC submission |
| Contact Data | Pakistani mobile number, email address, correspondence address (optional) | Registration form |
| Financial Data | JazzCash / EasyPaisa account identifiers, HBL / UBL / Meezan Bank account references, transaction history, deposit & withdrawal amounts in PKR | Cashier transactions |
| Gaming Data | Game session records, bet amounts and outcomes, wagering history, bonus claims, VIP tier and points balance | Platform activity |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, login history | Automatic collection |
| Communications Data | Live chat transcripts, support email correspondence, Messenger / Viber message records where applicable | Support interactions |
| Responsible Gaming Data | Deposit limits set, loss limits set, self-exclusion records, cooling-off periods, session time alerts configured | Account settings |
| Marketing Preferences | Opt-in / opt-out status for promotional communications, preferred communication channel | Registration & account settings |
ad999 does not collect special category data (such as health data, biometric data beyond KYC face-matching, racial or ethnic origin, political opinions, or religious beliefs) and actively avoids scenarios that would require such collection.
ad999 collects personal data through the following mechanisms:
The majority of personal data processed by ad999 is provided directly by you when you: register an account on ad999; complete the KYC verification process by uploading identity documents; make a deposit or initiate a withdrawal using JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank; contact our customer support team via live chat, email, Messenger, or Viber; configure responsible gaming tools in your account settings; or respond to communications from ad999 including promotional emails or SMS notifications.
When you access or use the ad999 platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address (which may indicate your approximate geographic location), device identifiers, browser specifications, page navigation patterns, session duration, and login event timestamps. This automatic collection is necessary for platform security, fraud prevention, and technical performance optimisation.
In limited circumstances, ad999 may receive personal data about you from third-party sources including: KYC verification service providers who conduct automated identity checks against official databases; payment processors who confirm the outcome and status of PKR transactions via JazzCash, EasyPaisa, or banking channels; fraud detection services that flag accounts or transactions associated with known fraudulent activity patterns; and ad999's gaming licensing authority in connection with compliance and regulatory reporting obligations.
ad999 processes your personal data for the following defined and specific purposes:
ad999 processes personal data only where a lawful basis exists for doing so. The legal bases on which we rely are as follows:
ad999 does not sell, rent, or commercially transfer your personal data to any third party. We share personal data with third parties only in the following defined circumstances:
ad999 engages carefully vetted third-party service providers who process personal data on our behalf under strict contractual obligations. These include: KYC and identity verification platforms; payment processing partners for JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions; certified gaming software providers (including those who operate live dealer studios); fraud detection and anti-money laundering screening services; cloud infrastructure and hosting providers; and customer communication platform operators. All such providers are bound by data processing agreements that prohibit use of your data for any purpose beyond the specific service they provide to ad999.
ad999 may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies in Pakistan and internationally, and courts or tribunals, where such disclosure is required by applicable law, court order, regulatory directive, or ad999's gaming licence conditions. ad999 will, where legally permissible, notify you of such disclosures.
In the event of a merger, acquisition, restructuring, or sale of all or part of ad999's business, personal data held by ad999 may be transferred to a successor entity. In such circumstances, ad999 will provide advance notice to registered Players via email and will ensure that the successor entity is bound to respect the terms of this Privacy Policy.
ad999 operates internationally and some of the third-party service providers engaged by ad999 — particularly cloud infrastructure providers and certified gaming software suppliers — may process your personal data in jurisdictions outside Pakistan. Where such international transfers occur, ad999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to international data protection requirements. These safeguards include standard contractual clauses, binding corporate rules where applicable, and provider certification under internationally recognised security frameworks.
All payment data relating to JazzCash and EasyPaisa transactions is processed within systems governed by the respective payment provider's own regulatory framework and data protection obligations under Pakistani financial services regulation. Bank transfer data (HBL, UBL, Meezan Bank) is handled in accordance with the respective bank's own privacy and data security policies.
ad999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:
ad999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention where required by law or legitimate business need. The following retention schedules apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with you as an individual.
As an ad999 Player, you have the following rights in relation to your personal data. These rights may be subject to certain limitations under applicable law, particularly where exercising them conflicts with ad999's legal obligations or legitimate interests in fraud prevention and gaming regulation compliance.
You have the right to request a copy of the personal data ad999 holds about you, together with information about how it is being processed. ad999 will provide this within 30 days of a valid request.
You have the right to request correction of inaccurate personal data held by ad999. You can update many data fields directly within your account settings, or contact support for data that cannot be self-edited.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no overriding legal obligation requires its retention. Note that ad999's legal obligations under gaming licence and AML regulations mean full erasure is not always possible for active or recently closed accounts.
You may request that ad999 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another service provider where technically feasible.
You have the right to object to processing of your personal data where ad999 relies on legitimate interests as the legal basis. ad999 will cease processing unless compelling legitimate grounds are demonstrated that override your interests. You have an absolute right to object to processing for direct marketing purposes.
Where ad999 makes decisions affecting you based solely on automated processing — including automated KYC verification outcomes — you have the right to request human review of the decision, to express your point of view, and to contest the decision. Automated decisions are used for initial KYC screening but are always subject to human review upon request.
ad999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device that allow ad999 to recognise your browser session, maintain your login state, remember your preferences, and analyse how Pakistani players interact with the Platform.
ad999 does not use third-party advertising or retargeting cookies. You can manage or delete cookies via your browser settings. Note that disabling strictly necessary cookies will impair or prevent Platform access. For mobile users — the primary Pakistani player demographic — browser-level cookie controls are available in your device's browser settings.
ad999 may send you promotional communications about bonuses, PSL cricket season specials, new game launches, and platform promotions — but only where you have explicitly opted in to receive such communications at registration or subsequently via your account settings. We do not send unsolicited marketing messages.
Marketing communications from ad999 may be delivered via email, SMS to your registered Pakistani mobile number, or in-platform notifications. You may unsubscribe from marketing communications at any time by: updating your communication preferences in your ad999 account settings; clicking the unsubscribe link included in every marketing email; or contacting our support team with an opt-out request. Opting out of marketing has no effect on transactional communications relating to your account, such as deposit confirmations, withdrawal receipts, and security alerts.
Where ad999 discovers — through KYC verification, age estimation tools, or any other means — that personal data has been collected from a Player who is under 21 years of age, that data will be immediately deleted (except to the extent that retention is required for regulatory breach reporting), the account will be permanently closed, and any deposited funds will be returned via the original payment method following appropriate investigation.
If you are a parent or guardian and believe that someone under 21 has created an ad999 account using false age information, please contact our support team immediately at [email protected]. We take underage access extremely seriously and will act on all credible reports promptly.
ad999 processes responsible gaming data — including deposit limits you set, self-exclusion records, cooling-off periods, loss limits, and session time configurations — for the specific purpose of fulfilling its regulatory obligation to promote safer gambling and protect vulnerable Pakistani players. This data is treated with particular sensitivity and is subject to additional access restrictions beyond standard personal data.
Responsible gaming records — particularly self-exclusion records — are retained for the duration of the exclusion period plus five (5) years thereafter, even if you subsequently close your account. This extended retention is required by ad999's gaming licensing authority to prevent circumvention of self-exclusion through account re-registration. During an active self-exclusion period, ad999 will not send marketing communications to the excluded Player.
If ad999's responsible gaming monitoring systems identify gameplay patterns that may indicate problem gambling, ad999 may proactively contact the Player concerned — by email to their registered address — to provide information about available support tools and external help resources. This contact is not marketing; it is a duty of care exercised in accordance with our licensing obligations and genuine concern for player welfare.
Casino games and live dealer products available on ad999 are supplied by third-party certified game developers including (but not limited to) Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, and similar licensed providers. These providers may collect limited technical data — such as device type, session duration, and game round data — through the game software interface for purposes of game functionality, anti-cheat integrity, and RNG audit compliance. This technical data is processed by the game provider under their own privacy policy, and ad999 holds binding agreements with each provider that restrict their data use to these purposes.
ad999 does not share personally identifiable information (such as your name, CNIC details, or payment account references) with game providers. Game providers receive only anonymised or pseudonymised player identifiers necessary for game session management.
ad999 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they meaningfully affect your privacy rights or our data practices — we will notify registered Players via email to their registered address at least fourteen (14) days before the amended Policy takes effect.
All changes will be published on this page with an updated effective date. We encourage Pakistani players to review this Policy periodically to remain informed about how ad999 handles their personal information. Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgment of the updated terms.
For all privacy-related enquiries, data rights requests, or concerns regarding ad999's data practices, please contact us through any of the following channels:
If you are dissatisfied with ad999's response to a privacy complaint or data rights request, you have the right to escalate the matter to ad999's gaming licensing regulatory authority, which has jurisdiction over data protection compliance as part of its overall regulatory oversight of the Platform. Our support team will provide the appropriate escalation contact upon request.
More than half a million Pakistani players trust ad999 with their personal data. 256-bit SSL, zero data selling, full GDPR-standard rights, and bilingual support in English and Urdu — 24/7. Ready to experience it yourself?
Sign In to ad999 Read Terms & Conditions21+ Only. ad999 is committed to responsible gaming. Deposit limits, session timers, and self-exclusion are available free of charge to all registered players. Gambling involves financial risk — please play within your means.