f999 Privacy Policy – How We Protect Your Data in Pakistan

When you use f999, we collect several categories of personal information. We only collect what is necessary — nothing more. Below is an honest breakdown of the data categories f999 may hold about you as a registered player in Pakistan.

We do not collect sensitive personal data beyond what is necessary for identity verification and regulatory compliance. We do not record audio or video of our players. We do not access your device's camera, microphone or photo library.

f999 collects information through several distinct channels. Understanding where data originates helps you make informed choices about your interaction with the platform.

f999 uses your personal data for specific, legitimate purposes. We do not use data for anything beyond what is set out here. For each purpose, there is a defined legal basis — either a contractual necessity, a legal obligation or a legitimate operational interest:

• Operating your account: To create and maintain your f999 account, process deposits and withdrawals in PKR, credit winnings and apply VIP tier benefits. This is a contractual necessity — we cannot provide the service without it.
• Identity verification and anti-fraud: To confirm you are who you say you are, verify your age (18+), prevent duplicate accounts and detect suspicious activity. This is both a legal obligation and a security necessity for all players on f999.
• Anti-money laundering (AML) compliance: To monitor transactions for unusual patterns and meet applicable compliance obligations. Transaction records are maintained for this purpose as required by law.
• Customer support: To resolve queries, investigate complaints and communicate with you about your account. Support chat and email records are maintained to ensure continuity of service.
• Platform improvement: Anonymised and aggregated usage data helps f999 improve game performance, fix bugs and make better product decisions. This data cannot identify you individually.
• Responsible gaming: To monitor for signs of problem gambling behaviour and to action self-exclusion, deposit limit and cooling-off requests. This processing is in your direct interest as a player.
• Marketing communications (opt-in only): If you have opted in, to send you information about promotions, new games and f999 offers via your preferred channel. You can opt out at any time — see Section 11.

f999 does not sell your personal data to anyone. We do not share your information with advertising networks, data brokers or unrelated third-party businesses. The only parties who may receive your data are those directly involved in operating the f999 platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive only the information necessary to process your specific transaction. They are bound by their own privacy obligations and cannot use your data for other purposes.
• Identity verification providers: Our KYC partner receives copies of your identity documents to verify your CNIC details. This is a one-time process per account and the provider operates under strict data processing agreements with f999.
• Game technology providers: Third-party game developers whose titles are hosted on f999 may receive anonymised gameplay data necessary to operate RNG systems and resolve disputes. They do not receive your identity or financial information.
• Regulatory and legal authorities: f999 may share data with relevant authorities where legally required — for example, in response to a formal law enforcement request or a court order. We will not volunteer data beyond what is legally required.
• Internal service providers: Cloud storage, customer support software and analytics platforms used by f999 are subject to strict data processing agreements. These providers act only on f999's instructions and cannot use your data independently.

Security is one of the areas where f999 invests heavily and does not cut corners. The measures we have in place are designed to protect your data against unauthorised access, accidental loss, disclosure and destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the f999 platform. Every page, every login, every transaction.
• Encrypted data storage — personal data held in f999's databases is encrypted at rest, meaning it is unreadable without the appropriate decryption credentials even if someone gained physical access to the storage.
• Access controls — only f999 staff who need specific data to perform their job have access to it. Customer support agents, for example, can see your account balance and transaction history but cannot see your full CNIC number.
• Two-factor authentication is available for all f999 accounts and is mandatory for staff accessing backend systems.
• Regular security audits — f999's systems are independently tested for vulnerabilities on a quarterly basis. Any identified issues are addressed before they can be exploited.
• Incident response plan — in the event of a data breach, f999 has a documented response plan including containment, notification and remediation procedures. Affected players would be notified promptly.

No digital system can guarantee 100% security, but f999's architecture and procedures represent best practice for a platform of our scale. We have maintained a clean security record since launch.

f999 does not keep your data for longer than necessary. Different categories of data have different retention periods based on their purpose and any applicable legal obligations:

• Account and identity data: Retained for the duration of your active account plus five years after closure. This retention is required to meet anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for seven years from the date of each transaction. This is a standard financial records retention requirement.
• Gaming records (bet history, session data): Retained for five years. Used for dispute resolution, responsible gaming monitoring and regulatory compliance.
• Support communications: Retained for three years from the date of the interaction. Earlier deletion is available on request where there is no ongoing compliance reason to retain.
• Marketing preferences and consent records: Retained for as long as your account is active or until you withdraw consent, whichever is earlier.
• Technical logs (IP addresses, session data): Retained for 12 months on a rolling basis.

When data reaches the end of its retention period, it is deleted or anonymised in a way that means it can no longer be linked to you personally. Anonymised aggregate data — for example, total PKR wagered across all slots in a month — may be retained indefinitely as it carries no personal identifying information.

f999 uses cookies and similar technologies to make the platform work correctly, remember your preferences and understand how players use the site. Here is a plain-language breakdown of what we use:

To manage or disable non-essential cookies, adjust the privacy settings in your browser. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent f999 from functioning correctly — you will not be able to log in or place bets without them.

As a player on f999, you have specific rights over your personal data. These are not theoretical — you can exercise them at any time by contacting our support team and we will respond within a reasonable timeframe.

To exercise any of these rights, contact our support team through live chat or email at support@f999-khelo.com. We will verify your identity before processing the request to ensure your data is not disclosed to the wrong person. There is no charge for exercising these rights.

Financial data is among the most sensitive information f999 holds about you, and we treat it accordingly. Here is specifically how we handle payment and KYC data:

• Payment method details are passed directly to the relevant payment processor (Easypaisa, JazzCash, NayaPay, SadaPay, your bank). f999 stores only a masked reference — for example, the last four digits of a card or the registered Easypaisa mobile number — for your records and dispute resolution purposes.
• CNIC documents submitted for KYC are processed by our identity verification partner and then stored in encrypted form. The physical document image is retained only for the regulatory retention period and access is restricted to compliance staff with a specific need.
• Transaction history in PKR is maintained in your f999 account and accessible to you at any time from your account dashboard. This full history is available for download on request.
• AML monitoring involves automated flagging of unusual transaction patterns. Where a flag is generated, a compliance team member reviews the account manually. This process does not involve any automated decision-making that negatively affects you without human oversight.

f999 is committed to making the KYC process as simple and uninvasive as possible. For the large majority of players, KYC is completed once and never needs to be revisited unless your personal details change. Our team aims to complete standard KYC reviews within 24 hours of receiving your documents.

f999 is an adult gaming platform and is not directed at, designed for or intended for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18.

If our age verification systems identify that an account holder may be under 18, the account is suspended immediately, all funds are held and the matter is investigated. If confirmed, the account is permanently closed, any funds are returned to the original payment source and the data is handled in accordance with applicable child data protection standards.

If you are a parent or guardian and you believe your child may have created an account on f999 or accessed the platform using your payment details, please contact us immediately at support@f999-khelo.com. We will take action the same day, at no cost to you and without any unnecessary questions. The safety of young people is not an area where f999 compromises.

f999 may send you promotional communications about bonuses, new games, VIP Club rewards and platform updates. These are only sent where you have actively opted in during registration or afterwards through your account settings.

Marketing communications are sent via SMS to your registered Pakistani mobile number and by email where provided. The frequency is kept reasonable — typically no more than a few messages per week during active promotional periods.

f999 does not share your contact details with third parties for their own marketing purposes. Any promotional communication you receive that claims to be from f999 but originates from an unrecognised number or address should be treated as suspicious — please report it to our support team.

f999 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or our data handling practices. When significant changes are made, we will notify registered players by in-app notification or email at least seven days before the new policy takes effect.

The "Last Updated" date at the top of this page shows when the most recent revision was made. We encourage you to check this page periodically. Your continued use of f999 after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

Minor clarifications or corrections that do not change the substantive meaning of any section may be made without notice. If you are uncertain whether a change affects you materially, contact our support team and we will explain the relevant update clearly.

If you have any questions about this Privacy Policy, want to exercise one of your data rights, or have a concern about how f999 has handled your personal information, please get in touch. Our team treats privacy queries with the same urgency as any other account issue.

• Live Chat: Available within your logged-in f999 account, 24 hours a day, 7 days a week. Most privacy queries are answered within minutes.
• Email: support@f999-khelo.com — use the subject line "Privacy Request" for faster routing. We aim to respond within 4 hours and to complete data requests within 30 days.
• VIP Platinum and Diamond members: Contact your dedicated account manager directly for data requests — they will handle it personally.

When submitting a data access or erasure request, please include your registered Pakistani mobile number and a brief description of what you are requesting. We will verify your identity before proceeding to ensure your data is protected throughout the process.