kd999 Privacy Policy

1 Who We Are

kd999 (referred to as "kd999", "we", "us", or "our" throughout this Privacy Policy) operates the online casino and sports betting platform accessible at kd999.bio. kd999 is the data controller responsible for the personal information collected through this platform.

This Privacy Policy applies to all visitors, registered users, and former users of the kd999 platform, including those accessing kd999 via web browser, mobile browser, or any kd999 application. It governs all personal data collected, stored, processed, and transmitted in connection with the kd999 service, regardless of your location — though it is specifically designed with Pakistani users in mind, given that Pakistan is kd999's primary target market.

If you have questions about who controls your data or how to exercise your rights, you may contact our Data Protection team at: [email protected] (plain text — not a clickable link).

2 Data We Collect

kd999 collects personal data in the following categories. The specific data collected from any individual user depends on the services they use and the verification stage their account is at.

3 How We Collect Your Data

kd999 collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating a kd999 account, completing identity verification, making deposits or withdrawals, contacting customer support, or submitting a complaint.
• Automated technical collection: When you access the kd999 platform, our servers automatically record technical data including your IP address, device identifiers, browser information, and session activity logs. This collection is essential for platform security and fraud prevention.
• Cookies and similar technologies: kd999 uses cookies, local storage, and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage patterns. See Section 6 for full details.
• Third-party verification providers: Where required for Know Your Customer (KYC) compliance, kd999 may receive identity verification results from accredited third-party identity verification services. These services verify the authenticity of documents such as your CNIC against official databases.
• Payment processors: kd999 receives transaction confirmation data (amounts, timestamps, status codes) from payment processors handling JazzCash, EasyPaisa, bank transfers, and card transactions. Full financial credentials are never passed to or stored by kd999 directly.
• Anti-fraud and AML partners: kd999 may receive risk assessment signals from anti-fraud and anti-money-laundering screening services to protect the integrity of the platform and comply with regulatory obligations.

4 Purposes & Legal Basis for Processing

kd999 processes your personal data only where a valid legal basis exists. The table below sets out our key processing activities, their purposes, and the legal basis for each:

5 Sharing Your Data

kd999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with payment service providers (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and card processors) strictly to facilitate deposits and withdrawals. These providers are contractually bound to process your data only for this purpose.
• KYC and identity verification providers: Identity documents and personal details are shared with accredited KYC verification partners solely for the purpose of verifying your identity and confirming that you meet the 21+ age requirement.
• AML and fraud screening services: Certain account and transaction data may be screened against watchlists and risk databases maintained by anti-money-laundering compliance service providers. This is a legal obligation under applicable financial crime regulations.
• Regulatory and law enforcement authorities: kd999 will disclose personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction. This includes cooperation with Pakistan's Financial Monitoring Unit (FMU) and equivalent international authorities where applicable.
• Technology and infrastructure providers: kd999 uses third-party cloud infrastructure, database, and analytics services to operate the platform. These providers act as data processors under strict contractual data processing agreements and have no right to use your data for their own purposes.
• Business transfers: In the event that kd999 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.

All third parties with whom kd999 shares personal data are required to implement appropriate technical and organisational security measures consistent with applicable data protection standards.

6 Cookies & Tracking Technologies

kd999 uses cookies and similar technologies to make the platform function correctly, keep you logged in, remember your preferences, and understand how players interact with the site. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the kd999 platform to operate. They manage your authenticated session, maintain cart/deposit state, and prevent cross-site request forgery. These cookies cannot be disabled without breaking the platform.
• Functional cookies: These remember your preferences such as language, display settings, and last-used payment method, so you do not have to re-enter them each session.
• Analytics cookies: kd999 uses anonymised analytics to understand aggregate usage patterns — which games are most popular, where users encounter friction, and how to improve the overall experience. Individual user behaviour is not tracked for commercial profiling.
• Security cookies: These cookies assist in fraud detection and account protection by fingerprinting suspicious access patterns and flagging anomalous login attempts.

On your first visit to kd999, you will be presented with a cookie consent banner. You may accept all cookies, accept only strictly necessary cookies, or manage your preferences in detail. You can update your cookie preferences at any time through your browser settings or the kd999 cookie preference centre in your account settings.

7 Data Retention

kd999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention guidelines apply:

• Active account data: Retained for the lifetime of your account plus a post-closure period as required by regulatory obligations.
• Identity verification documents (CNIC, passport): Retained for a minimum of 5 years following account closure, in accordance with anti-money-laundering regulatory requirements applicable to gaming operators.
• Transaction records: Retained for a minimum of 5 years following each transaction, consistent with financial record-keeping obligations.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing preference records: Retained until you withdraw consent or for 2 years from your last engagement, whichever is sooner.
• Technical/log data: Generally retained for 90 days for security analysis purposes, after which it is automatically purged or anonymised.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be linked to any individual. Where anonymisation is applied, the resulting aggregate data may be retained indefinitely for statistical purposes.

8 Your Rights

As a kd999 user, you hold the following rights with respect to your personal data. You may exercise any of these rights by contacting kd999 at [email protected] with "Data Rights Request" in the subject line. kd999 will respond to all valid requests within 30 days.

9 Security Measures

kd999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption at rest: All personal and financial data stored in kd999 databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a scheduled basis.
• Encryption in transit: All data transmitted between your device and kd999 servers is protected by TLS 1.3. kd999 enforces HTTPS across the entire platform and uses HTTP Strict Transport Security (HSTS) to prevent downgrade attacks.
• Access controls: Access to personal data within kd999's internal systems is restricted to employees and contractors with a legitimate operational need. Access is granted on a least-privilege basis and is reviewed regularly. All internal access is logged and audited.
• Two-factor authentication (2FA): kd999 offers 2FA for user accounts and mandates it for all internal staff accounts with access to personal data systems.
• Penetration testing: kd999 conducts regular third-party penetration tests and vulnerability assessments of its platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• Incident response: kd999 maintains a documented data breach incident response plan. In the event of a confirmed breach affecting personal data, affected users will be notified promptly in accordance with applicable notification obligations.

While kd999 takes every reasonable precaution, no internet-connected system can be guaranteed 100% secure. You are also responsible for maintaining the security of your own kd999 account credentials. Never share your password with anyone, and use a strong, unique password for your kd999 account.

10 Children & Minors

The kd999 platform is strictly for individuals aged 21 years and above. kd999 does not knowingly collect personal data from any person under the age of 21, and absolutely does not collect data from children under the age of 18 under any circumstances.

If kd999 discovers or has reasonable grounds to believe that personal data has been submitted by a person under the age of 21, the following actions will be taken immediately:

• The account associated with the underage registration will be permanently suspended.
• All personal data associated with the underage account will be securely deleted to the extent permitted by legal obligations.
• Any funds deposited by the underage user may be returned minus any bonuses or winnings, subject to investigation and applicable policy.
• The incident will be documented and, where legally required, reported to relevant authorities.

11 Third-Party Services & External Links

The kd999 platform may contain references to or integrations with third-party services including payment processors, game providers, and customer support tools. This Privacy Policy applies solely to personal data processed by kd999 directly. It does not cover the privacy practices of any third-party service providers.

Where kd999 engages third-party data processors, we require them to:

• Process personal data only on kd999's documented instructions.
• Implement appropriate technical and organisational security measures.
• Not engage sub-processors without kd999's prior written consent.
• Assist kd999 in responding to data subject rights requests.
• Delete or return all personal data upon termination of their engagement with kd999.

kd999 bears no responsibility for the privacy practices of third-party service providers beyond the contractual safeguards described above. We encourage you to review the privacy policies of any third-party services you interact with in connection with your kd999 account, particularly your chosen payment provider such as JazzCash or EasyPaisa.

12 Changes to This Privacy Policy

kd999 reserves the right to update this Privacy Policy at any time. When material changes are made, kd999 will provide reasonable advance notice through one or more of the following channels:

• A prominent notice displayed on the kd999 website for a minimum of 14 days prior to the change taking effect.
• An email notification to the address registered to your kd999 account.
• An in-platform notification within the kd999 account dashboard.

The "Effective Date" at the top of this Privacy Policy will be updated each time a new version of the policy is published. Your continued use of the kd999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of the platform and may request account closure by contacting [email protected].

Minor changes such as typographical corrections, formatting improvements, or clarifications that do not alter the substance of the policy may be made without prior notice. All previous versions of this Privacy Policy are archived and available upon request.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or kd999's handling of your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Response time: kd999 aims to respond to all privacy-related enquiries within 5 business days, and to all formal data subject rights requests within 30 calendar days.

If you are not satisfied with kd999's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. kd999 will cooperate fully with any such regulatory investigation.