This Privacy Policy is published by No 999, the operator of the online gaming and sports betting platform accessible at no999.bet ("No 999," "we," "us," "our"). No 999 is the data controller for all personal data collected through your use of the platform and any associated communications channels including email and live chat support.
This Policy applies to all visitors to no999.bet, all registered account holders, all players who have placed a bet or participated in any game on No 999, and all individuals who have contacted No 999 customer support regardless of whether they hold an account. If you are visiting the site to browse without registering, this Policy still applies to the limited data collected through your browser session.
This Privacy Policy should be read alongside the No 999 Terms and Conditions, which govern your use of the platform and form part of the overall legal framework governing your relationship with No 999.
No 999 collects personal data in three main ways: information you provide directly when using the platform, data generated automatically by your device and browser when you visit, and information received from payment processors or identity verification services when you make a transaction.
No 999 does not collect your full debit or credit card number. Card payment processing is handled by third-party payment processors who are PCI-DSS compliant. No 999 receives only a transaction reference and payment status confirmation — never your raw card data.
No 999 collects personal data only for specific, legitimate purposes. We do not collect data speculatively or for purposes unrelated to operating the platform and serving our players. Below are the specific reasons we process your information.
- Account creation and operation: To create and manage your No 999 account, verify your identity, authenticate your logins, and keep your account secure
- Payment processing: To process deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments — and to verify that payment methods belong to you
- Anti-fraud and anti-money-laundering (AML): To detect and prevent fraudulent activity, identify suspicious transaction patterns, and comply with our legal obligations under applicable financial crime prevention requirements
- Responsible gaming compliance: To monitor player activity for signs of problematic gambling behaviour, to apply voluntary limits you have set, and to enforce self-exclusion where activated
- Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes
- Legal compliance: To comply with age verification obligations, identity verification requirements, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities
- Platform improvement: To analyse aggregated usage patterns — not linked to your individual identity — to improve game performance, navigation, and the overall player experience on No 999
- Bonus and promotion administration: To track eligibility for bonuses, verify that promotion conditions are met fairly, and detect bonus abuse as described in the Terms and Conditions
No 999 processes your personal data on one or more of the following legal grounds depending on the specific processing activity:
- Contractual necessity: Processing your identity, contact, financial, and gaming data is necessary to fulfil the contract between you and No 999 — i.e., to operate your account, process your bets, and pay your winnings. Without this data No 999 cannot provide its services to you
- Legal obligation: Certain data processing — particularly identity verification, age verification, and AML-related transaction monitoring — is required by applicable law and regulation. No 999 cannot waive these requirements regardless of player preference
- Legitimate interests: No 999 processes certain technical and usage data on the basis of our legitimate interest in operating a secure, fair, and commercially viable platform. This includes fraud prevention, platform security monitoring, and aggregate analytics. We only rely on this basis where our interests do not override your privacy rights
- Consent: Where processing is based on consent — for example, optional marketing communications — you may withdraw that consent at any time without affecting the legality of processing carried out before withdrawal
No 999 does not sell your personal data to any third party for their own marketing or commercial purposes. Full stop. Your information is only shared with third parties where it is strictly necessary for operating the platform, complying with legal obligations, or responding to verified lawful requests.
The following categories of third parties may access your personal data in limited, defined circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners, and card payment processors receive the minimum data necessary to process your specific transaction — typically your account reference and the transaction amount. They operate under their own privacy policies and applicable financial regulations
- Identity verification providers: Where No 999 engages third-party KYC (Know Your Customer) verification services to confirm your identity, those providers receive your identity documents and verification data. They are contractually bound to process this data only for verification purposes and to maintain appropriate security standards
- IT and platform service providers: Companies that provide No 999 with hosting, database management, cybersecurity, or customer support technology infrastructure. These providers act as data processors under contract with No 999 and are prohibited from using your data for any purpose beyond the specific service they provide to us
- Game content providers: Where live casino or other game content is provided by third-party studios, the minimum technical data necessary to run the game session may be shared with the game provider. This does not include financial or identity data beyond a pseudonymous player session reference
- Law enforcement and regulatory bodies: No 999 will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required by applicable law or a valid legal order. We will notify affected players of such disclosure where legally permitted to do so
No 999 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
- Encryption in transit: All data transmitted between your device and the No 999 platform is encrypted using TLS (Transport Layer Security). The padlock icon in your browser address bar confirms this encryption is active whenever you are on the No 999 site
- Encryption at rest: Sensitive personal data stored in No 999's databases — including identity documents and financial records — is stored in encrypted form. Encryption keys are managed separately from the data they protect
- Access controls: Access to personal data within No 999 is restricted to employees and contractors who genuinely need it to perform their job functions. Access is logged and reviewed on a regular basis
- Password security: Account passwords are stored as salted cryptographic hashes — No 999 employees cannot see your password. If you forget your password, it must be reset — it cannot be retrieved
- Fraud detection systems: Automated systems monitor transaction and login activity for anomalous patterns that may indicate account compromise or fraudulent use. Suspicious activity triggers alerts for human review
- Regular security review: No 999's security posture is reviewed and tested on a regular schedule to identify and address vulnerabilities before they can be exploited
Data is primarily stored on servers in secure data centre facilities. No 999 does not transfer personal data outside of secure, contracted infrastructure. Where any data processing involves a third-party provider in another country, appropriate contractual safeguards are in place to ensure your data remains protected to the same standard as if it were processed locally.
No 999 uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device by your browser when you visit a website. They serve a range of functions from keeping you logged in to helping us understand how players use different parts of the site.
Cookie Types Used by No 999
No 999 does not use third-party advertising cookies or tracking pixels that share your browsing data with advertising networks. Optional cookies can be declined at any time through your browser settings without affecting your ability to use the core No 999 platform. Declining optional cookies may result in the loss of certain convenience features such as remembered preferences.
As a player on the No 999 platform you have a set of rights in relation to your personal data. These rights are explained below. To exercise any of them, contact us at privacy@no999.bet with your account details and a description of your request. We will acknowledge your request within 24 hours and aim to respond substantively within five business days.
No 999 is an adults-only platform. The services offered on No 999 are not directed at, intended for, or available to individuals under the age of 18. No 999 does not knowingly collect personal data from anyone under 18 years of age.
Age verification is conducted at the point of registration and may be repeated at any point during the account lifecycle. Where No 999 discovers that a player under 18 has registered an account — whether through our own detection or through a report from a parent, guardian, or other third party — the account will be immediately closed and all associated data will be deleted, subject to any minimum retention period required by law for anti-fraud records.
If you are a parent or guardian and believe your child has registered on No 999 without your knowledge, please contact us immediately at support@no999.bet. We take this seriously and will act without delay.
No 999 may send you promotional communications about new games, bonus offers, tournament announcements, and platform updates. We will only send marketing messages via channels you have opted into and under the following conditions:
- You opted in to marketing communications during registration or subsequently through your account notification settings
- You have not subsequently opted out of such communications
- The communication is directly related to your use of No 999 — we do not engage in generic unsolicited mass marketing
You can opt out of marketing communications at any time by updating your notification preferences in your No 999 account settings, or by contacting support at support@no999.bet with an unsubscribe request. Opting out of marketing does not affect your ability to receive essential account communications — such as withdrawal confirmations, security alerts, or responses to support queries you have raised.
No 999 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The following retention periods apply as general guidelines:
- Active account data: Retained for the duration of your account being open plus a minimum of five years after account closure, to comply with financial record-keeping and AML obligations
- Transaction records: Financial transaction history is retained for a minimum of seven years following the date of the transaction, in line with standard financial compliance requirements
- Identity verification documents: Retained for the duration of the account plus five years following closure, or longer if required by a specific legal or regulatory obligation
- Customer support records: Support interactions are retained for three years from the date of the last communication in a given thread
- Technical logs: Server and access logs are retained for up to twelve months and then deleted or anonymised
- Marketing consent records: Records of your consent to or opt-out from marketing are retained for as long as necessary to demonstrate compliance
When personal data is no longer required and no legal retention obligation applies, No 999 deletes or anonymises it securely. Anonymised data — from which all identifying information has been permanently removed — may be retained indefinitely for aggregate analytics purposes.
No 999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.
Where a change is material — meaning it meaningfully affects how we collect, use, or protect your personal data — No 999 will notify registered players via email or an in-platform message at least seven days before the change takes effect. For minor clarifications or corrections that do not affect your rights, the Policy may be updated without individual notification, though the updated date will always be visible.
Continued use of No 999 after a revised Privacy Policy takes effect constitutes acceptance of the updated version. If you object to any change, you may close your account and request deletion of your data (subject to legal retention requirements) by contacting privacy@no999.bet before the change takes effect.
For any questions, concerns, or requests relating to your personal data and No 999's privacy practices, please use the following contact details:
General support: support@no999.bet
Response time: We acknowledge privacy requests within 24 hours and provide a substantive response within five business days.
Subject line for data requests: Use "Data Request — [Your Account Username]" to ensure prompt routing to the correct team.
If you have raised a privacy concern with No 999 and are not satisfied with our response, you have the right to seek further resolution through independent channels. No 999 will provide information about applicable escalation options in our response to any unresolved complaint.