sa999 Privacy Policy

This Privacy Policy ("Policy") is published by sa999, the operator of the online gaming and sports betting platform accessible at sa999.biz. It applies to all individuals who access or use the sa999 platform, including registered players, visitors browsing the site without an account, and any person who contacts sa999 through our customer support channels.

sa999 operates as an internationally licensed online gaming operator and takes its obligations as a data controller with the utmost seriousness. We are committed to handling all personal data entrusted to us by Pakistani players in a manner that is lawful, transparent, fair, and consistent with recognised data protection principles.

By registering an account on sa999, using any of our gaming or betting services, or simply browsing sa999.biz, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Policy should be read together with our Terms and Conditions, which govern your overall use of the sa999 platform.

sa999 collects personal data through several channels: directly from you when you register an account or use our services, automatically through your use of the sa999 platform, and from third-party identity verification and payment processing partners. The categories of data we collect are as follows:

2.1 Registration & Identity Data

When you create a sa999 account, we collect your full legal name, date of birth, gender, Pakistani CNIC number, residential address (including city — whether Karachi, Lahore, Islamabad, Faisalabad, or elsewhere in Pakistan), mobile number, and email address. This information is required to create and verify your account and to comply with our Know Your Customer (KYC) obligations.

2.2 KYC Verification Documents

To process withdrawal requests and comply with anti-money laundering regulations, sa999 requires copies of government-issued identity documents (such as your CNIC or passport), proof of residential address, and proof of ownership of any payment method you use to deposit funds. These documents are handled with the highest level of security and access is restricted strictly to authorised compliance personnel.

2.3 Financial & Transaction Data

sa999 records details of all deposits and withdrawals made through your account, including transaction amounts, timestamps, payment method identifiers (e.g., JazzCash account numbers, EasyPaisa wallet IDs, HBL or UBL account details), and transaction reference numbers. We do not store full card numbers or full bank account numbers — only the minimum identifiers required to process and reconcile transactions.

2.4 Gaming & Betting Activity Data

sa999 maintains a full record of your gaming and betting activity on the platform, including all bets placed, games played, wagers, winnings, losses, session durations, and any responsible gaming tools you have activated (such as deposit limits or self-exclusion settings). This data is used for account management, player protection, and regulatory compliance purposes.

2.5 Technical & Device Data

When you access sa999.biz, our systems automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data is used for fraud prevention, platform security, and aggregate analytics to improve the sa999 user experience.

2.6 Communications Data

If you contact sa999 through our Live Chat support, by email, or through any other communication channel, we retain records of that correspondence including the content of your messages, your contact details, and the date and time of the interaction. This data is used to resolve your query, improve our support service, and maintain a record for compliance purposes.

sa999 uses the personal data it collects for the following specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent:

sa999 processes your personal data only where it has a valid legal basis to do so. The legal bases on which sa999 relies are as follows:

• Contractual necessity: Processing that is necessary for sa999 to perform its obligations under the account agreement with you — including creating your account, processing transactions, and providing gaming services;
• Legal obligation: Processing that is required to comply with applicable anti-money laundering laws, KYC regulations, responsible gaming requirements, and any orders from competent regulatory or law enforcement authorities;
• Legitimate interests: Processing carried out for purposes such as fraud prevention, platform security, network integrity, and aggregate analytics, where those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional personalisation features, which is carried out only where you have given your explicit, freely given, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

sa999 does not sell, rent, or trade your personal information to third parties for commercial marketing purposes. Your data may be shared only in the following limited and carefully controlled circumstances:

5.1 Payment Processing Partners

To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT, sa999 must share the minimum necessary financial and identity data with the relevant payment processing partner to complete the transaction. All such partners are contractually bound to handle your data in accordance with applicable data protection standards.

5.2 Identity Verification Providers

sa999 engages third-party KYC and identity verification service providers to assist with CNIC verification and document authentication. These providers act as data processors on sa999's behalf and are permitted to use your data solely for the purpose of performing identity verification services for sa999.

5.3 Game Software Providers

The slot games, live casino tables, and cricket betting markets available on sa999 are powered by third-party software providers. These providers may receive certain technical and gameplay data (such as session identifiers and bet amounts) that is necessary to deliver the games to your device. They are strictly prohibited from using this data for their own marketing or analytics purposes.

5.4 Regulatory and Law Enforcement Authorities

sa999 will disclose personal data to competent regulatory bodies, law enforcement agencies, or other government authorities where required to do so by law, court order, or regulatory direction. sa999 will always endeavour to notify the affected player of such disclosure unless prohibited from doing so by law.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of sa999's assets, your personal data may be transferred to the acquiring entity as part of the transaction. sa999 will notify registered players of any such transfer and ensure that the acquiring entity is bound by data protection obligations consistent with this Policy.

sa999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to comply with applicable legal, regulatory, and internal policy obligations. Our standard data retention periods are as follows:

Upon expiry of the applicable retention period, sa999 will securely delete or anonymise your personal data in accordance with our internal data deletion procedures. Where deletion is not immediately possible due to technical constraints, sa999 will isolate the data from further active processing until deletion can be completed.

sa999 uses cookies and similar tracking technologies (such as web beacons and local storage objects) on sa999.biz. Cookies are small data files placed on your device that help sa999 provide a secure, functional, and personalised experience on the platform.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of sa999.biz. These include session management cookies, security tokens, and login state cookies. These cookies cannot be disabled without impairing the core functionality of the platform;
• Functional Cookies: Used to remember your preferences on sa999 — such as your preferred language, display settings, and responsible gaming tool configurations — to personalise your experience across sessions;
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with sa999.biz. This data is used exclusively by sa999 to improve platform usability and performance — it is never shared with third-party advertisers;
• Security & Fraud Prevention Cookies: Used to detect and prevent suspicious account activity, multiple account creation, and other forms of platform abuse.

7.2 Managing Your Cookie Preferences

You can manage your cookie preferences through the settings available in your sa999 account dashboard. You may also configure your browser to block or delete cookies; however, please note that disabling strictly necessary cookies will prevent you from accessing certain features of sa999.biz, including the ability to log in to your account.

sa999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following controls:

• AES-256 encryption for all personal data stored on sa999's servers;
• TLS 1.3 encryption for all data transmitted between your device and sa999.biz;
• Multi-factor authentication requirements for all sa999 internal systems that have access to player data;
• Role-based access controls ensuring that sa999 personnel can only access the minimum player data necessary for their specific job function;
• Regular third-party penetration testing and vulnerability assessments of the sa999 platform;
• 24/7 automated intrusion detection and real-time security monitoring;
• Secure, geographically redundant data backup systems with point-in-time recovery capabilities.

As a player on sa999, you have a number of rights in relation to the personal data that sa999 holds about you. sa999 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights include the following:

To exercise any of the rights listed above, please contact our Data Protection team through the Live Chat inside your sa999 account dashboard or by emailing [email protected]. sa999 aims to respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case sa999 will notify you of the extension and the reasons for it.

sa999 employs mandatory CNIC-based age verification as part of its KYC process to ensure that all registered players meet the minimum age requirement of 21 years. If sa999 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, it will immediately suspend the relevant account, freeze all associated funds pending investigation, and permanently delete all personal data collected from that individual in accordance with applicable data protection law.

If you are a parent or guardian and believe that your child may have registered an account on sa999 or provided their personal data to sa999, please contact our support team immediately via Live Chat or by emailing [email protected]. We will investigate the matter and take appropriate action as a matter of priority.

sa999 is an internationally licensed online gaming operator and, as such, certain personal data may be transferred to and processed in countries outside of Pakistan in connection with the operation of the platform. This may include transfers to the jurisdiction in which sa999's gaming licence is held, to the locations of our third-party KYC, payment processing, and game software providers, and to our secure data centre infrastructure.

Wherever personal data is transferred outside of Pakistan, sa999 ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Policy. These safeguards include contractual data protection clauses with all data recipients, binding corporate rules where applicable, and transfers only to jurisdictions that provide an adequate level of data protection.

If you would like further information about the specific safeguards in place for any international data transfer, please contact our Data Protection team at [email protected].

sa999.biz may from time to time contain links to third-party websites or services, for example links to payment provider portals or responsible gaming resource organisations. sa999 has no control over the content, privacy practices, or data handling policies of these third-party sites and accepts no responsibility or liability for them.

This Privacy Policy applies solely to personal data collected and processed by sa999 through sa999.biz and our associated services. We strongly recommend that you review the privacy policy of any third-party website you visit before providing any personal data to that site.

sa999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services we offer. All amendments will be published on this page with an updated "Last Updated" date at the top of the Policy.

Where a change to this Policy is material — meaning it significantly affects the way in which sa999 processes your personal data or the rights available to you — sa999 will provide you with prominent notice of the change via your registered email address or through a notification within your sa999 account dashboard prior to the change taking effect. Your continued use of sa999 following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which sa999 handles your personal data, please do not hesitate to get in touch with our Data Protection team. We are available 24 hours a day, 7 days a week, and will do our best to address your concern promptly and transparently.

• Email: [email protected]
• Live Chat: Available inside your sa999 account dashboard at all times
• Response Time: sa999 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days

If you are not satisfied with sa999's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.