dc999 Privacy Policy – How We Protect Your Data 18+

1. Introduction and Scope

This Privacy Policy ("Policy") sets out how dc999 ("dc999", "we", "us", "our") collects, processes, stores, and shares personal data in connection with the operation of the dc999 online casino and sportsbook platform accessible at dc999.club ("the Platform").

This Policy applies to all individuals who visit the dc999 website, register a dc999 account, use any dc999 product or service, or otherwise interact with dc999 in connection with the Platform. It applies regardless of the device or browser used to access dc999 and regardless of whether you are located in Karachi, Lahore, Islamabad, or any other location.

By accessing dc999.club or creating a dc999 account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside the dc999 Terms & Conditions and Responsible Gaming Policy.

2. Data Controller Information

dc999 operates as the data controller in respect of the personal data collected through the Platform. As data controller, dc999 determines the purposes and means of processing your personal data. For all privacy-related enquiries, the dc999 Data Protection contact is reachable via the support channels listed in Section 15 of this Policy.

3. Personal Data We Collect

dc999 collects the following categories of personal data:

4. How We Collect Your Data

dc999 collects personal data through the following means:

• Direct Collection: Information you provide when registering a dc999 account, completing KYC verification, submitting deposit or withdrawal requests, contacting dc999 support, or participating in dc999 promotions.
• Automated Collection: Technical and usage data collected automatically when you access the dc999 Platform, including via cookies, server logs, and analytics tools.
• Third-Party Sources: Identity and fraud-check data received from KYC verification providers and payment processors in connection with account verification and transaction processing.

5. Purposes and Legal Basis for Processing

dc999 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to create and manage your dc999 account, process deposits and withdrawals, deliver gaming services, and administer the dc999 VIP Programme.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, age verification requirements (18+), tax record-keeping obligations, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and improving dc999's products and services, where such interests are not overridden by your fundamental rights.
• Consent: Processing of your data for direct marketing communications, where you have provided explicit consent. You may withdraw this consent at any time.

6. Sharing of Personal Data

dc999 does not sell your personal data to third parties for commercial purposes. We share your data only in the following circumstances:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers require transaction and identity data to process deposits and withdrawals on your dc999 account.
• KYC and Identity Verification Providers: Third-party identity verification services used to authenticate the identity and age of dc999 members during the KYC process.
• Game Software Providers: Providers including Evolution Gaming, Pragmatic Play, NetEnt, PG Soft, and others may receive technical session data necessary to deliver their certified games on the dc999 Platform.
• Regulatory and Law Enforcement Authorities: dc999 will disclose personal data to regulatory bodies, tax authorities, or law enforcement agencies where required to do so by applicable law or regulatory obligation.
• Service Providers: Third-party IT infrastructure, hosting, analytics, and customer support tool providers who process data on dc999's behalf under appropriate data processing agreements.

All third parties with whom dc999 shares personal data are required to process it only for the specified purpose and in accordance with applicable data protection standards.

7. International Data Transfers

dc999 may transfer personal data to third parties located outside of Pakistan in connection with the provision of its services. Where such transfers occur, dc999 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses and, where applicable, adherence to recognised international data transfer frameworks.

8. Cookies and Tracking Technologies

dc999 uses cookies and similar technologies including web beacons, pixel tags, and local storage on the Platform. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for the dc999 Platform to function. These cookies maintain your login session and cannot be disabled without impacting platform operation.
• Performance and Analytics Cookies: Used to measure how members interact with dc999, identify technical errors, and improve platform performance. Data collected is aggregated and does not identify individual users.
• Functionality Cookies: Remember your preferences — such as language or display settings — to personalise your dc999 experience.
• Responsible Gaming Cookies: Store information about your session time limits and responsible gaming settings to support dc999's harm-reduction obligations.

You can manage cookie settings via your browser preferences. Blocking strictly necessary cookies will impair dc999 functionality including the ability to remain logged in to your dc999 account.

9. Data Security

dc999 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the dc999 Platform.
• Encrypted storage of passwords and sensitive account credentials.
• Two-factor authentication (2FA) available for all dc999 accounts.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of dc999 infrastructure.

No security system is completely impenetrable. In the event of a data breach that poses a high risk to your rights, dc999 will notify affected members as required by applicable law.

10. Data Retention

dc999 retains personal data for the period necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory requirements. As a general principle:

• Active dc999 account data is retained for the lifetime of the account plus the period required by applicable regulations following account closure.
• Transaction and financial records are retained for a minimum of five years following the relevant transaction or account closure date, whichever is later, to satisfy AML and tax obligations.
• KYC and identity verification records are retained for the period required by applicable regulatory guidance.
• Marketing consent records are retained until consent is withdrawn plus a reasonable period thereafter for compliance purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

11. Your Rights

Subject to applicable law and dc999's legitimate interests and legal obligations, you have the following rights in respect of your personal data:

• Right of Access: Request a copy of the personal data dc999 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where dc999 no longer has a legal basis to retain it. Note that mandatory regulatory retention obligations may prevent immediate erasure.
• Right to Restriction: Request that dc999 restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to dc999 where processing is based on consent or contract performance.
• Right to Object: Object to processing based on dc999's legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact dc999 via the channels listed in Section 15. dc999 will respond to valid requests within 30 days. In complex cases, this period may be extended with notice provided to you.

12. Marketing Communications

dc999 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, sportsbook promotions, and VIP Programme updates where you have opted in to receive such communications, or where dc999 has a legitimate interest in contacting you about services closely related to those you use.

You may opt out of marketing communications at any time by updating your notification preferences in your dc999 account settings, clicking the unsubscribe link in any marketing email, or contacting dc999 support directly. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

13. Children and Minors

dc999 is strictly an 18+ platform. dc999 does not knowingly collect personal data from individuals under the age of 18. If dc999 becomes aware that personal data has been collected from a minor, the relevant account will be closed immediately and the data deleted in accordance with applicable legal requirements. dc999 employs age verification controls during the registration process and at the KYC stage to prevent underage access. If you have reason to believe a minor has accessed or registered a dc999 account, please notify dc999 support immediately.

14. Changes to This Privacy Policy

dc999 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, dc999 will provide advance notice via email to registered members or by posting a prominent notice on the dc999 Platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this Policy. Your continued use of dc999 following the effective date of any amendment constitutes your acceptance of the updated Policy.

15. Contact and Data Enquiries

For all privacy-related enquiries, data subject access requests, or concerns about dc999's handling of your personal data, please contact the dc999 Data Protection team through the following channels:

• Live Chat: Available 24/7 via your dc999 account dashboard.
• Email: [email protected] (mark your subject line: "Privacy Enquiry").
• Ticket Portal: Accessible from within your dc999 account. Average response time: under 4 hours.

dc999 support operates in English with Urdu-friendly assistance available on request, serving members across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and throughout Pakistan.