At why 999, your personal information is handled with the same care we apply to your money. This Privacy Policy explains exactly what data we collect, how we use it, who we share it with, and what rights you have as a Pakistani player on our platform.
Before you read the full policy, here's a plain-language summary of the six privacy principles that why 999 applies to every Pakistani player's data.
why 999 collects the minimum personal information required to run your account and process your transactions. We don't ask for data that isn't necessary. If it doesn't serve a clear purpose for your account, we don't collect it.
why 999 does not sell, rent, or trade your personal information to marketing companies, data brokers, or any third party whose purpose is commercial gain. Full stop. Your data belongs to you, and we treat it that way.
All data transmitted between your device and why 999 is protected by 256-bit SSL/TLS encryption — the same standard used by major banks and financial institutions in Pakistan. Your login details, payment data, and personal information are encrypted in transit at all times.
The only third parties who receive your data are the payment processors needed to complete your transactions — Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners. Even then, only the minimum data required for the transaction is shared.
You have the right to access, correct, and in many cases delete your personal data held by why 999. You can request a copy of your data, ask us to stop certain uses of it, or withdraw consent at any time. This policy explains exactly how to exercise each right.
why 999 does not retain personal data indefinitely. Data is kept for the period required for legal compliance and account operation, and then deleted or anonymised. Specific retention periods for each data category are set out in this policy.
Plain-language commitment: This Privacy Policy is written to be understood by real people, not just lawyers. If any section is unclear, contact why 999 support and we will explain it in plain Urdu or English. Your right to understand how your data is used is just as important as the policy itself.
This Privacy Policy describes how why 999 ("the Platform", "we", "us") collects, uses, stores, and shares personal information about players who register and use the why999.ws platform. It applies to all interactions with why 999 — whether you access the platform from a desktop browser, a mobile browser, or any other device.
By registering an account with why 999, you acknowledge that you have read this Privacy Policy and understand how your data will be handled. This Policy is part of the overall legal framework governing your use of why 999, alongside the Terms and Conditions and the Responsible Gaming Policy.
The data controller responsible for your personal information is why 999, operating through why999.ws. If you have questions about this Policy or how your data is handled, the contact details are in Section 14.
why 999 takes the privacy of Pakistani players seriously. This Policy reflects our genuine commitment to handling your data responsibly — not just our legal obligations.
why 999 collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party payment processors during transactions.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, CNIC number, date of birth | Registration & KYC verification |
| Contact Data | Mobile number, email address (if provided) | Account registration |
| Account Data | Username, password (hashed), security settings | Account creation & management |
| Verification Documents | CNIC photograph (front and back) | KYC process before first withdrawal |
| Support Communications | Messages sent to why 999 support | When you contact support |
| Data Category | Examples | Purpose |
|---|---|---|
| Betting & Gaming History | Bets placed, games played, win/loss records | Account management, responsible gaming |
| Financial Transaction Data | Deposit amounts, withdrawal requests, dates | Payment processing, fraud prevention |
| Technical Data | IP address, device type, browser version, OS | Security, fraud detection, platform optimisation |
| Session Data | Login times, pages visited, session duration | Platform improvement, responsible gaming monitoring |
| Cookie Data | See Section 8 for full details | Platform functionality, analytics |
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or banking partners, those providers confirm transaction completion to why 999. This confirmation includes transaction reference numbers and amounts. why 999 does not receive your full wallet password, PIN, or banking credentials from these providers.
why 999 uses your personal data only for the purposes listed below. We do not use your data for any purpose that is not described in this Policy without first obtaining your consent.
We do not use your data for targeted advertising on third-party platforms, build profiles for sale to data brokers, or share your betting history with parties outside the platform unless required by law.
why 999 processes your personal data on one or more of the following legal bases:
why 999 shares your personal data only with the following categories of recipients, and only to the extent necessary:
To complete your deposits and withdrawals, why 999 shares the minimum necessary information with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, or your bank. This sharing is essential for the transaction to function. Each payment processor handles your data under its own privacy policy.
For KYC compliance, CNIC details may be verified against available databases. why 999 uses reputable, secure verification providers and does not retain third-party verification results beyond what is required for compliance purposes.
why 999 may be required by law to disclose player information to law enforcement or regulatory authorities. In such cases, disclosure is limited to exactly what is required by the legal obligation and does not go beyond it.
why 999 uses third-party technology providers for hosting, analytics, and platform operations. These providers process data only on why 999's behalf, under data processing agreements that prohibit them from using the data for their own purposes.
We will never share your data with: marketing companies, advertising networks, data brokers, social media platforms for targeting, or any party whose purpose is commercial gain from your personal information.
All financial transactions on why 999 are denominated in Pakistani Rupees (PKR). why 999 does not store your full payment credentials — mobile wallet PINs, bank account passwords, or card CVV numbers are never transmitted to or stored on why 999 servers.
What why 999 does retain in relation to payments:
This financial transaction data is retained for seven years in accordance with standard financial record-keeping requirements applicable to gaming platforms. After this period, transaction records are deleted or anonymised.
Before processing your first withdrawal, why 999 is required to verify your identity. This process — Know Your Customer (KYC) — is a standard requirement across regulated gaming platforms worldwide and is designed to prevent fraud, money laundering, and underage gambling.
The standard KYC process at why 999 requires you to submit a photograph of the front and back of your CNIC (Computerised National Identity Card). In some cases, additional documentation may be requested to verify address or source of funds.
CNIC images are stored in encrypted form on secure servers. Access is restricted to why 999 staff with a direct operational need. Documents are not shared with third parties except where required for legal compliance. CNIC images are retained for the duration of your account's active status and for up to five years following account closure, after which they are securely deleted.
If verification cannot be completed — for example, because the document is unclear or does not match registration details — why 999 will contact you for clarification before taking any action. Withdrawals remain on hold during the verification process. Accounts are not closed based on a single failed verification attempt.
why 999 uses cookies and similar tracking technologies to make the platform function correctly, maintain your session, and understand how the platform is being used in aggregate. The following types of cookies are used:
why 999 does not use advertising or tracking cookies that follow you across other websites. You can manage optional cookie preferences from the cookie settings option at the bottom of any page. Disabling optional cookies may affect some non-essential platform features.
why 999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse:
All data sent between your device and why 999 servers is encrypted using the same standard applied by major Pakistani banks and financial institutions.
Your why 999 password is stored in hashed form using modern cryptographic algorithms. Even why 999 staff cannot see your actual password — only a secure hash of it.
Access to player personal data is restricted to why 999 staff with a direct operational need. Access rights are reviewed regularly and removed when no longer necessary.
why 999's systems are monitored continuously for suspicious activity. Automated alerts are triggered by unusual login patterns, bulk data requests, and other indicators of potential compromise.
In the unlikely event of a personal data breach affecting your account, why 999 will notify affected players promptly and take immediate remediation steps.
No platform can guarantee 100% security against all possible threats. Players can reduce their own risk by using a strong, unique password for their why 999 account and not sharing login credentials with anyone.
why 999 retains personal data only for as long as it is needed for the purposes described in this Policy. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal compliance, dispute resolution |
| KYC / CNIC Documents | Duration of account + 5 years after closure | Regulatory compliance, AML requirements |
| Financial Transaction Records | 7 years from transaction date | Standard financial record-keeping |
| Betting & Gaming History | Duration of account + 3 years | Responsible gaming monitoring, disputes |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical & Session Logs | 12 months from generation | Security monitoring, fraud detection |
| Promotional Consent Records | Until consent withdrawn + 1 year | Evidence of consent |
After the applicable retention period, data is securely deleted or anonymised in a way that it can no longer be linked to you as an individual. Anonymised data may be retained for statistical and analytical purposes indefinitely.
As a player on why 999, you have the following rights regarding your personal data. These rights can be exercised by contacting why 999 support at support@why999.ws with a clear description of your request.
Request a copy of the personal data why 999 holds about you. We will provide this within 30 days of your request.
Ask why 999 to correct inaccurate personal data. You can update most contact details directly from your account settings.
Request deletion of your personal data. Note that data required for legal compliance (e.g. financial records) may be retained even after an account is closed.
Ask why 999 to restrict the processing of your data in certain circumstances — for example, while a dispute is being resolved.
Receive your personal data in a structured, machine-readable format to transfer to another provider where technically feasible.
Withdraw consent for promotional communications at any time from your account notification settings. Withdrawal does not affect data processed before withdrawal.
why 999 will respond to all data rights requests within 30 calendar days. In complex cases, this may be extended by up to 60 days with notice given to you. There is no fee for exercising your rights except in cases of clearly unfounded or excessive requests.
why 999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Registration is not permitted for minors, and age is verified during the KYC process before the first withdrawal is processed.
If why 999 becomes aware that a player under 18 has registered an account, the account will be closed immediately, all deposits will be refunded to the original payment method, and any winnings will be voided. The CNIC details from the registration attempt will be retained for the purposes of preventing re-registration.
If you believe a minor may have registered an account on why 999 using your or their personal details, contact support at support@why999.ws immediately.
why 999 may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or our data practices. When material changes are made, players will be notified through a notice displayed upon next login and, where an email address is registered, via email.
The "Last Updated" date at the top of this page reflects when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of why 999 after a Policy update constitutes your acceptance of the revised terms.
If you disagree with material changes to this Privacy Policy, you may close your account by contacting support. Existing data rights are not reduced by Policy updates — your rights as described in Section 11 remain intact regardless of Policy changes.
If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a privacy-related concern about why 999, please contact us through the following channel:
Privacy enquiries: support@why999.ws
Response time: Privacy requests are acknowledged within 24 hours and resolved within 30 days.
Support hours: 24 hours a day, 7 days a week via live chat inside your account.
Language: Support is available in both English and Urdu.
When contacting why 999 about a privacy matter, please include your registered mobile number (or email), a clear description of your request or concern, and any relevant dates or transaction references. This helps us locate your data and respond as quickly as possible.
Register your account, make your first deposit via Easypaisa or JazzCash, and claim your 100% welcome bonus up to Rs 10,000. Your data is encrypted, never sold, and handled with care at every step.
Easypaisa · JazzCash · NayaPay · SadaPay · IBFT · Visa/Mastercard | 18+ Only | Play Responsibly