don999 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy is published by don999 ("don999", "we", "us", "our"), the operator of the online betting and gaming platform available at don999.biz. For the purposes of data protection, don999 acts as the data controller in respect of all personal information provided by or collected from members and visitors to our platform.

Our designated contact point for all data privacy queries and requests is our customer support team, reachable at support@don999.biz. We aim to acknowledge all privacy-related queries within two working days and to provide a substantive response within ten working days.

This Privacy Policy applies to all personal data collected through the don999 website at don999.biz, any associated mobile applications, and any communications between you and don999 through email, live chat, or telephone support. By using don999 and providing your personal information, you acknowledge that you have read and understood how your data is handled as described in this policy.

don999 collects two broad categories of personal data: information you provide to us directly, and information we collect automatically when you use the platform. We collect only what is necessary for the stated purposes and do not collect data speculatively or without a clear operational or legal reason.

don999 collects your personal data through several distinct channels, all of which are described transparently here:

• Registration: When you sign up for a don999 account, you provide identity and contact data directly through our registration form.
• KYC Verification: To process your first withdrawal, don999 asks you to upload identity documents. This data is submitted through our secure verification portal.
• Deposits and Withdrawals: Every PKR transaction you make on don999 generates financial and transaction data that is recorded in your account history.
• Betting and Gaming: Every bet you place and every game session you participate in on don999 generates activity data that is recorded for account management, dispute resolution, and responsible gaming monitoring purposes.
• Customer Support: When you contact don999 support by live chat, email, or phone, the content of that communication is recorded for quality assurance and dispute resolution purposes.
• Automated Technologies: When you browse don999.biz, our systems automatically collect technical data about your device, browser, and session using cookies and similar technologies. See Section 7 for full details.
• Third Parties: In limited circumstances, don999 may receive data about you from fraud prevention services or identity verification providers as part of our compliance obligations.

Every piece of personal data that don999 collects is used for a specific, defined purpose. We do not use your data in ways that would be incompatible with the purpose for which it was originally collected. The primary purposes for which don999 uses personal data are as follows:

• Account creation and management: To set up, verify, and maintain your don999 account, including enabling login, account settings changes, and account closure.
• Identity verification (KYC): To verify your identity before processing withdrawals and to comply with anti-money laundering (AML) obligations. This is both a legal requirement and a protection for your own account security.
• Payment processing: To process PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, and to process withdrawals to your verified payment method.
• Betting and gaming services: To accept and settle bets, record your betting history, calculate and pay winnings, and administer tournaments and promotions.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, duplicate accounts, and other prohibited conduct as defined in our Terms and Conditions.
• Responsible gaming monitoring: To monitor betting patterns that may indicate problem gambling behaviour, to enforce deposit and loss limits set by you, and to administer self-exclusion requests.
• Customer support: To respond to your queries, investigate complaints, and resolve disputes fairly.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how members use don999 and to improve product features, performance, and user experience.
• Marketing communications: To send you promotional offers, enhanced odds alerts, and platform news — but only where you have provided explicit consent to receive such communications.

don999 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing that is necessary to perform the contract between you and don999 — including account management, bet settlement, and payment processing — is carried out on this basis.
• Legal obligation: Processing required to comply with anti-money laundering laws, identity verification requirements, and other applicable regulatory obligations is carried out on this basis. don999 cannot waive these requirements regardless of a member's preferences.
• Legitimate interests: Processing carried out to prevent fraud, improve platform security, and conduct internal analytics is justified by the legitimate interests of don999 and its members, provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications, optional cookies beyond strictly necessary, and any processing that falls outside the above categories is carried out only with your explicit, freely given consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

don999 does not sell, rent, or share your personal data with third parties for their own commercial use. This is an absolute commitment. Data is shared with third parties only in the following limited and necessary circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners for IBFT, and Visa/Mastercard acquiring banks receive the financial data strictly necessary to process your PKR transactions. These providers are contractually bound to use your data only for payment processing.
• Identity verification providers: Our KYC service providers receive the identity documents you submit during verification in order to perform the verification check. Documents are processed and then deleted by the provider in accordance with their own data retention policies, which don999 reviews as part of vendor due diligence.
• Fraud prevention services: Aggregated or pseudonymised transaction data may be shared with fraud intelligence services to identify patterns of suspicious activity. Individual member data shared in this context is handled under strict confidentiality obligations.
• IT infrastructure and hosting providers: don999's platform operates on secure cloud infrastructure. Our hosting providers have access to server infrastructure but not to member data in a readable form due to encryption at rest.
• Legal and regulatory authorities: don999 will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by a valid legal process or court order. We will not make such disclosures voluntarily beyond what is legally required.

don999.biz uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and collect analytics data that helps us improve the service. A cookie is a small text file stored on your device by your browser when you visit a website.

Types of cookies used on don999.biz:

• Strictly necessary cookies: These are required for the platform to function. They maintain your login session, remember items in your bet slip, and process transactions. They cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as language, odds format, and notification settings — so you do not have to reconfigure them on each visit to don999.
• Analytics cookies: These collect anonymised data about how visitors navigate don999 — which pages are visited, how long sessions last, and which features are used most. This data is used to improve the platform and is never used to identify individual members.
• Marketing cookies: These are only used on don999 where you have explicitly consented. They allow us to show you relevant don999 promotions based on your platform activity. They are not used to serve third-party advertising.

You can manage your cookie preferences at any time through your browser settings or the don999 cookie preference centre in your account settings. Disabling functional or analytics cookies will not prevent you from using the core don999 platform.

don999 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated regularly as part of our ongoing security programme.

• 256-bit SSL/TLS encryption protects all data in transit between your browser or app and don999 servers.
• Encryption at rest is applied to sensitive data stored in don999 databases, including identity documents and payment information.
• Access controls ensure that only don999 staff with a legitimate operational need can access member personal data. Access is role-based and logged.
• Two-factor authentication is available for all member accounts and is mandatory for don999 staff accounts with access to personal data.
• Regular penetration testing by independent security specialists is conducted at least annually on the don999 platform.
• Automated anomaly detection monitors for unusual access patterns that may indicate a data security incident, triggering immediate review by our security team.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data security incident affecting your personal information, don999 will notify affected members promptly and will take all reasonable steps to contain and remediate the incident.

don999 does not retain personal data for longer than is necessary for the purposes for which it was collected. The following general retention periods apply:

• Account data: Retained for the duration of your active don999 membership, and for a period of up to 7 years thereafter to comply with financial record-keeping and anti-money laundering obligations.
• KYC / identity documents: Retained for the duration of the account and a mandatory compliance period of 5 years after account closure, as required under applicable AML regulations.
• Transaction records: All PKR deposit, withdrawal, and betting transaction records are retained for 7 years to satisfy financial compliance requirements.
• Support communications: Customer support interactions are retained for up to 3 years after the matter is resolved, to allow for dispute resolution and quality review.
• Marketing consent records: Records of your marketing preferences and consent history are retained for as long as your account is active and for 2 years thereafter.
• Analytics data: Anonymised platform analytics data may be retained indefinitely as it cannot be used to identify any individual member.

At the end of the applicable retention period, personal data is securely deleted or anonymised by don999 such that it can no longer be associated with you as an individual.

You have a number of rights in respect of the personal data that don999 holds about you. These rights can be exercised at any time by contacting us at support@don999.biz with the subject line "Privacy Rights Request". We will respond to all verified requests within ten working days.

don999 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes an age declaration requirement, and we conduct identity verification checks that will identify and reject underage registrations.

If don999 discovers that personal data has been collected from an individual under 18 — for example, through a misrepresentation of age at registration — that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the verified payment source.

If you are a parent or guardian and you believe your child may have registered on don999, please contact us immediately at support@don999.biz and we will investigate and take appropriate action as a matter of priority.

don999 reviews this Privacy Policy at least once per year and updates it whenever there is a material change to how we collect, use, or share personal data. The date of the most recent review is shown at the top of this page.

When we make material changes to this Privacy Policy, we will notify registered don999 members by email to the address on file and/or by displaying a prominent notice on the platform for a minimum of 30 days after the change takes effect. Continued use of don999 after the effective date of any update constitutes acceptance of the revised policy.

We encourage you to check this page periodically for the latest version of the don999 Privacy Policy, even in the absence of a direct notification.

If you have any questions, concerns, or requests related to this Privacy Policy or the way don999 handles your personal data, please contact us through the following channel:

Email: support@don999.biz — please use the subject line "Privacy Query" or "Privacy Rights Request" so that your message is directed to the appropriate team.

We aim to acknowledge all privacy queries within two working days and to provide a full response within ten working days. For complex requests — such as Subject Access Requests involving large volumes of data — we may extend this period by a further ten working days and will notify you if this is the case.