Privacy Policy — tc999 Data Protection

tc999 is an internationally licensed online gaming platform operating at tc999.im. We offer Pakistani players access to sports betting — including cricket betting covering the PSL, international Test matches, and T20 leagues — live casino games, slot titles, and associated financial services including deposits and withdrawals in Pakistani Rupees (PKR).

tc999 operates under an international gaming license. The operating entity behind tc999 is the data controller in respect of all personal data collected from users of the platform. Where tc999 engages third-party service providers to process data on its behalf — such as payment processors or identity verification services — those providers act as data processors under contractual obligation.

For all privacy-related matters, inquiries, and data subject requests, you can reach the tc999 data team at [email protected]. Please include "Privacy Request" in the subject line of your message so it is routed to the correct team promptly.

tc999 collects personal data in several ways: directly from you when you register, make a deposit, or contact support; automatically as you use the platform; and from third parties such as KYC verification providers. The categories of data we collect are described below.

• Full legal name, date of birth, and nationality
• Residential address (city, province, postal code — Pakistan)
• Email address and mobile phone number
• Username and encrypted password
• Currency preference (PKR) and language settings

• Government-issued ID (National Identity Card / CNIC, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Proof of payment method ownership (screenshot of JazzCash / EasyPaisa / bank account)
• Selfie or liveness check image for identity confirmation

• Deposit amounts, dates, and payment method references (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20)
• Withdrawal requests, amounts, and processing status
• Betting and gaming activity records — markets wagered on, stake amounts, results
• Bonus and promotion claim history

• IP address, device type, operating system, and browser version
• Session timestamps, page views, and interaction events
• Referring URL (the site or link that brought you to tc999.im)
• Cookie identifiers and local storage data (see Section 6)

• Support chat transcripts and email correspondence with tc999
• Records of promotional communications sent and opened
• Responsible gaming interaction history, including self-exclusion and limit requests

tc999 processes your personal data for clearly defined purposes. We do not use your data in ways that are incompatible with the original purpose for which it was collected. The primary purposes for which tc999 uses your personal data are set out below.

tc999 processes your personal data on one or more of the following legal bases, in line with internationally recognised data protection principles:

• Contractual necessity: Processing your registration data, KYC documents, and financial records is necessary to fulfil our obligations to you under the tc999 account agreement. Without this processing, tc999 cannot legally provide its services to you.
• Legal obligation: tc999 is required under its international gaming license to conduct KYC checks, retain transaction records for a minimum period, file reports with regulatory authorities, and implement responsible gaming controls. This processing is mandatory and non-negotiable.
• Legitimate interests: tc999 processes technical and usage data to detect fraud, prevent account abuse, maintain platform security, and improve the quality of services. These interests do not override your privacy rights and are always balanced proportionately.
• Consent: Where tc999 sends you promotional emails, push notifications, or personalised offers, this is done on the basis of your explicit opt-in consent. You may withdraw consent to marketing communications at any time by using the unsubscribe link in any email or by contacting support at [email protected].

tc999 may share your personal data with the following categories of third parties under the circumstances described:

• KYC & Identity Verification Providers: tc999 uses third-party identity verification services to validate government-issued IDs (such as Pakistani CNICs and passports) as required under our international gaming license. These providers receive only the data necessary to complete the verification check.
• Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20, the relevant payment provider receives transactional data necessary to process the payment. tc999 does not store full payment credentials — only transaction references.
• Gaming Software Providers: Live casino and slot game providers may receive anonymised session data necessary to deliver and audit game outcomes. They do not receive personally identifiable information beyond what is required for session management.
• Regulatory Authorities: tc999 is legally obligated to share player data with its licensing authority and relevant regulatory bodies upon lawful request. This may include transaction records, KYC files, and responsible gaming intervention history.
• Fraud Prevention & AML Services: tc999 uses third-party anti-money laundering screening tools that may process transaction data and identity information to flag suspicious activity. All such providers operate under strict contractual and regulatory confidentiality obligations.
• Platform Infrastructure Providers: Cloud hosting, database management, and cybersecurity vendors who support tc999's technical infrastructure may have limited, controlled access to data. All such vendors are bound by data processing agreements.

tc999 does not share your personal data with social media companies, advertising networks, or any third party for their own marketing purposes. All third-party data sharing is governed by written agreements requiring the recipient to maintain data security standards no lower than those applied by tc999 itself.

tc999 uses cookies and similar tracking technologies on the tc999.im website. Cookies are small text files placed on your device that allow tc999 to remember your preferences, keep you logged in, and analyse how the platform is used. The types of cookies used by tc999 are described below.

• Strictly Necessary Cookies: These are essential for the tc999 platform to function. They enable your login session, remember your account preferences, and maintain the security of your session. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: tc999 uses aggregated analytics data to understand how users navigate the platform, which features are most used, and where technical issues arise. This data is used to improve the tc999 experience for all Pakistani players. Where possible, this data is anonymised before analysis.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display (PKR), and responsible gaming settings — so you do not need to re-enter them on each visit.
• Marketing Cookies (Consent-Based): Where you have provided consent, tc999 may use cookies to track which tc999 promotional materials you have engaged with, to avoid sending you offers you have already seen, and to measure the effectiveness of our communications. You can withdraw consent at any time via the cookie preference centre in your account settings.

You can manage or disable non-essential cookies at any time through your browser settings or through the tc999 cookie preference centre. Disabling strictly necessary cookies will affect your ability to use the platform.

tc999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

After the applicable retention period has expired, tc999 will securely delete or irreversibly anonymise your personal data. Where anonymisation is used, the resulting data may be retained for longer periods for statistical and analytical purposes, as it can no longer be linked back to any individual.

tc999 implements a comprehensive set of technical and organisational security measures to protect the personal data of all Pakistani players on the platform. These include:

• Transport Layer Security (TLS 1.3): All data transmitted between your browser or mobile device and tc999 servers is encrypted using TLS 1.3, preventing interception by third parties.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment references, and account credentials — is stored in encrypted form on tc999's infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within tc999's organisation is restricted on a strict need-to-know basis. Staff who do not require access to personal data as part of their role do not have it. All access is logged and audited.
• Two-Factor Authentication: tc999 offers 2FA for player accounts and requires it for all internal staff accounts with access to production systems. Players are strongly encouraged to enable 2FA in their account settings.
• Penetration Testing: tc999 conducts regular penetration testing by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: tc999 maintains a documented data breach response plan. In the event of a breach that poses a risk to your rights, affected players will be notified promptly and authorities informed as required under our licensing obligations.

As a tc999 account holder, you hold meaningful rights in relation to the personal data tc999 processes about you. tc999 respects these rights and will respond to all verified requests within 30 calendar days of receipt. The following rights are available to you:

• Right of Access: You may request a copy of the personal data tc999 holds about you. tc999 will provide this in a clear, structured format. Standard access requests are fulfilled free of charge.
• Right to Rectification: If any personal data tc999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections — particularly to name or date of birth — may require supporting documentation to be submitted.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where tc999 no longer has a lawful basis for ret aining it. Please note that tc999 is legally required to retain certain data — particularly KYC records and transaction history — for a minimum period under its international gaming license. These records cannot be erased before the mandatory retention period expires, even upon request.
• Right to Restriction of Processing: In certain circumstances — for example, where you contest the accuracy of data or have objected to processing — you may request that tc999 restrict how your data is used while the matter is under review.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request that tc999 provide your personal data in a commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of tc999's legitimate interests. tc999 will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing emails — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, contact tc999 at [email protected] with the subject line "Data Subject Request" and a brief description of your request. tc999 may need to verify your identity before processing the request. There is no charge for standard requests. Where requests are manifestly unfounded or excessive, tc999 reserves the right to charge a reasonable administrative fee or decline to respond, with reasons provided.

tc999 takes the protection of minors extremely seriously. All new accounts on tc999 are subject to mandatory age verification as part of the KYC process. Players are required to submit a government-issued identity document — such as a Pakistani CNIC (which is issued from age 18) or passport — that confirms they are at least 21 years of age before any deposit, withdrawal, or real-money betting activity is permitted.

tc999 uses third-party age verification technology as an additional layer of protection. If at any point tc999 has reason to believe that an account is being used by, or was created on behalf of, a person under 21, the account will be immediately suspended pending full verification. Any funds deposited to such an account will be returned to the original payment source after compliance review.

If you are a parent or guardian and believe your child has created a tc999 account, please contact us immediately at [email protected]. tc999 will investigate and close the account within 24 hours of a verified report, and will delete any personal data belonging to the minor that is not subject to mandatory retention requirements.

tc999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or regulatory requirements, or improvements to the platform. The date at the top of this page ("Last Updated") will always reflect when the most recent version was published.

Where a change is material — meaning it meaningfully affects how we collect, use, or share your personal data — tc999 will notify registered players by email to the address on file, and display a prominent notice on the tc999.im platform, at least 14 days before the change takes effect. Non-material changes (such as clarifications of existing language or structural improvements) may be made without prior notice.

Your continued use of the tc999 platform after a notified update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data (subject to mandatory retention obligations) by contacting [email protected] before the change comes into effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way tc999 handles your personal data, please get in touch with the tc999 privacy team. We aim to respond to all privacy-related inquiries within 5 business days.