Privacy Policy

1 Introduction

This Privacy Policy ("Policy") sets out how KD999 ("the Platform", "we", "us", "our") collects, processes, stores, shares and protects personal data belonging to players, prospective players and visitors ("you", "your") who access or use the KD999 website at kd999.cam and all associated services.

KD999 is committed to handling personal data responsibly and in accordance with applicable international data protection standards. By registering an Account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy prevails.

This Policy was last updated in January 2026. We reserve the right to amend it at any time in accordance with Section 14 below.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Account" means the registered player account created on the KD999 Platform.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, KD999.
• "Data Subject" means the identified or identifiable natural person whose personal data is being processed — in this context, you.
• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, email address, date of birth, IP address, payment information and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer and deletion.
• "Processor" means a third-party entity that processes Personal Data on behalf of KD999, such as payment processors or KYC verification providers.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity documents and financial account details submitted during KYC.
• "Cookies" means small text files placed on your device by the Platform to enable certain functionality and to collect usage information.
• "PKR" means Pakistani Rupee — the currency in which Account balances are displayed on the Platform.

3 Data We Collect

KD999 collects Personal Data across several categories depending on how you interact with the Platform. The table below summarises the principal categories of data collected:

We collect only the Personal Data that is necessary for the stated purposes. You are not obligated to provide all requested data, but failure to provide certain mandatory information (such as KYC documents) may prevent you from accessing specific platform features, including withdrawals.

4 How We Collect Data

KD999 collects Personal Data through several channels:

4.1 Directly From You

The majority of Personal Data we hold is provided directly by you when you: register an Account; complete KYC verification; make a deposit or request a withdrawal; contact our support team; or respond to a promotional offer. This includes any information submitted through forms, email correspondence or live chat on the Platform.

4.2 Automatically From Your Device

When you visit or use the Platform, certain technical data is collected automatically through cookies, server logs and similar technologies. This includes your IP address, browser type, device identifiers, operating system version and pages accessed, as well as timestamps and session duration. This data is collected regardless of whether you are logged in to an Account.

4.3 From Third-Party Service Providers

KD999 may receive Personal Data from authorised third-party processors engaged to assist with KYC verification, fraud screening and payment processing. For example, where a payment is initiated via a method familiar to Pakistani users — such as a bank transfer through HBL, UBL, Meezan Bank or Bank Alfalah, or a mobile wallet transaction via Easypaisa, JazzCash or Raast — the relevant processor may return transaction confirmation data to KD999. This data is used solely for the purpose of crediting or debiting your Account and for AML compliance. These payment providers are referenced for contextual identification only; they do not endorse KD999 or support gambling transactions as a policy position.

4.4 From Publicly Available Sources

KD999 may supplement Account data with information from publicly available sources, such as sanctions screening databases and fraud prevention registries, where this is necessary to meet legal obligations or to protect the Platform's integrity.

5 Data Processing & Legal Basis

KD999 processes Personal Data only where a valid legal basis exists under applicable data protection law. The principal legal bases on which we rely are set out below:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including managing your Account, processing deposits and withdrawals and providing gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements and sanctions screening.
• Legitimate Interests: Processing carried out in pursuit of KD999's legitimate business interests — such as fraud prevention, platform security, responsible gambling monitoring and service improvement — where these interests are not overridden by your rights and interests.
• Consent: Where you have given explicit consent to a specific processing activity, such as receiving marketing communications by email. You may withdraw your consent at any time by contacting our support team or updating your Account preferences, without affecting the lawfulness of processing carried out before withdrawal.

Where processing is based on consent, we will make the consent request clear and separate from other terms. We will not make access to core Platform features conditional on consent to optional processing activities such as marketing.

6 How We Use Your Data

KD999 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining and securing your Account, including login authentication and password recovery.
• Age & Identity Verification: Confirming that you meet the minimum age requirement of 18 years (or the higher minimum required by the operator or licence jurisdiction) and that you are who you claim to be.
• Payment Processing: Facilitating deposits, processing withdrawal requests and maintaining transaction records denominated in PKR.
• Fraud Prevention & AML Compliance: Monitoring transactions and Account activity to detect and prevent fraudulent behaviour, money laundering and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Analysing wagering patterns to identify signs of problem gambling and to enable or enforce responsible gambling tools such as deposit limits, loss limits and self-exclusion.
• Customer Support: Responding to queries, investigating complaints, and maintaining a record of communications for quality assurance and dispute resolution.
• Platform Improvement: Analysing usage data in aggregate to understand how players interact with the Platform, improve existing features and develop new ones.
• Marketing Communications: Sending promotional offers, bonus notifications and news about upcoming cricket, PSL, T20 and other sports markets — where you have given consent to receive such communications.
• Legal Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.

We do not use Personal Data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have expressly consented.

7 Data Sharing & Disclosure

KD999 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We may share your data only in the circumstances described below:

7.1 Service Providers and Processors

We engage carefully selected third-party processors to provide services on our behalf, including KYC and identity verification providers, payment gateway operators, fraud detection services, cloud hosting providers and customer support software vendors. These processors are contractually bound to handle your data only as instructed by KD999 and to maintain appropriate security standards.

7.2 Regulatory and Law Enforcement Authorities

We may disclose Personal Data to governmental, regulatory or law enforcement authorities where we are legally required to do so, where we receive a lawful request or court order, or where disclosure is necessary to prevent serious harm or criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of KD999's business, your Personal Data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.

7.4 Fraud Prevention and AML Networks

We may share data with industry fraud prevention and AML screening services where this is necessary to protect the Platform and its users from financial crime. Information shared in this context may be retained by those services and used by other participating organisations to assess risk.

7.5 With Your Consent

Where you provide explicit consent for us to share your data with a specific third party for a specific purpose — for example, to enter a third-party promotional competition — we will do so only in accordance with that consent. You may withdraw your consent at any time.

8 Data Retention

KD999 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, to meet legal and regulatory obligations, and to resolve any disputes that may arise. The principal retention periods applicable to each data category are as follows:

Where data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification. Anonymised aggregate data may be retained indefinitely for analytical purposes.

9 Cookies & Tracking Technologies

KD999 uses cookies, web beacons, pixel tags and similar tracking technologies to deliver and improve the Platform. These technologies serve the following functions:

9.1 Essential Cookies

These cookies are strictly necessary to enable core Platform functionality, including session management, login persistence and security features such as CSRF protection. The Platform cannot function correctly without them. No consent is required for essential cookies.

9.2 Performance and Analytics Cookies

These cookies collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last and where errors occur. This data helps us improve the Platform. These cookies are activated only where consent has been given.

9.3 Functional Cookies

These cookies remember your preferences — such as your chosen language, PKR currency display settings and notification preferences — so that you do not have to re-enter them on each visit. These cookies are activated only where consent has been given.

9.4 Managing Cookies

You can manage, restrict or delete cookies at any time through your browser settings. Instructions for the most common browsers are available via their respective help documentation. Please note that disabling essential cookies will impair or prevent your use of the Platform. Disabling performance or functional cookies will not prevent you from using the Platform but may affect your experience.

KD999 does not use third-party advertising cookies or cross-site tracking technologies for the purpose of delivering targeted advertising on external networks.

10 Data Security

KD999 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including stored identity documents and financial records.
• Hashing of passwords using a robust one-way algorithm — KD999 staff cannot view your password in plain text.
• Role-based access controls limiting internal access to Personal Data on a strict need-to-know basis.
• Regular security audits, penetration testing and vulnerability assessments of Platform infrastructure.
• Mandatory security awareness training for all staff who handle Personal Data.
• Incident response procedures to detect, contain and report data breaches in a timely manner.

While we take all reasonable steps to protect your Personal Data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your Account.

11 Your Rights

Subject to applicable law and certain limited exceptions, you hold the following rights in relation to your Personal Data held by KD999:

To exercise any of these rights, contact our support team at [email protected] with a clear description of your request and proof of your identity. We will respond within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 60 days with prior notice.

Where requests are manifestly unfounded or repetitive, KD999 reserves the right to charge a reasonable administrative fee or to decline the request, with written explanation provided.

12 Minors & Age Verification

The KD999 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator or licence jurisdiction, whichever applies. We do not knowingly collect Personal Data from individuals under this age threshold.

Age verification is a mandatory step in the KYC process. Where we discover or have reasonable grounds to suspect that a person under the applicable minimum age has registered an Account, we will:

• Immediately suspend the Account pending investigation.
• Refund any deposits made, less any amounts wagered (to the extent required by applicable rules).
• Permanently close the Account.
• Delete all Personal Data associated with the underage Account to the extent permitted by legal obligations.
• Report the matter to appropriate authorities where required by law.

If you believe a minor has accessed or registered on the Platform, please contact us immediately at [email protected] so that we can take prompt action.

13 International Data Transfers

KD999 operates as an international platform and your Personal Data may be transferred to, stored in, or processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

Where such transfers occur, KD999 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks. By using the Platform, you acknowledge and consent to the international transfer of your Personal Data in accordance with this Policy.

Users based in Pakistan should be aware that data transferred outside Pakistan may not be protected by Pakistani law. KD999 does not represent that Pakistani data protection legislation applies to international transfers made in connection with your Account.

14 Policy Amendments

KD999 reserves the right to update or amend this Privacy Policy at any time. The updated Policy will be published on this page with a revised "Last Updated" date. Where changes are material — for example, a change to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — we will provide advance notice via email to your registered address or via an in-Platform notification where possible.

Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and request Account closure before the updated Policy takes effect.

We encourage you to review this Policy periodically to stay informed about how we protect your data.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your Personal Data, please contact the KD999 data support team using the details below. All correspondence should be submitted in English. Urdu is available as a support-language option for players who prefer it.

For responsible gambling concerns, self-exclusion requests or Account closure, please visit our Responsible Gambling page or raise a request with our support team directly — these requests are treated as a priority.