Privacy Policy – How w3999 Protects Your Personal Data

1.Who We Are

w3999 operates the online gaming and entertainment platform available at w3999.onl. This platform is built specifically for adult players in Pakistan and offers slot games, fish games, bingo, promotions and related gaming entertainment. All operations, including payment processing and player account management, are conducted in Pakistani Rupees (PKR).

When this Privacy Policy refers to "w3999", "we", "us" or "our", it means the operator of the w3999.onl platform. When it refers to "you" or "your", it means you as a registered player or a visitor to the platform.

This Privacy Policy applies to all personal data collected through the w3999 website, the w3999 Android app, and any communication between you and our support team. It should be read together with the w3999 Terms and Conditions and Responsible Gaming Policy.

2.Data We Collect

The categories of personal data we collect from registered players and, in some cases, from visitors to the platform are set out below.

Identity Information

Full name, date of birth, gender, national identity number (CNIC) or passport number. This information is collected during registration and used for identity verification before your first withdrawal is processed.

Contact Information

Mobile phone number, email address and, where provided, a correspondence address. This is used for account-related communications, withdrawal notifications, support responses and – if you have opted in – promotional messages.

Payment Information

JazzCash mobile number, Easypaisa account number, Raast-linked bank account details, bank account number, card number (last four digits only – full card numbers are not stored by w3999), and transaction history within your account.

Account & Gaming Activity

Login history, session duration, games played, bets placed, deposit and withdrawal history, bonus usage and account preferences. This data is used for account administration, fraud prevention and improving the platform experience.

Device & Technical Data

IP address, browser type and version, device type (phone, tablet, desktop), operating system, screen resolution and referral source. This is collected automatically when you access the platform and is used for security monitoring and analytics.

3.How We Collect Your Data

Personal data is collected through several routes depending on how you interact with the w3999 platform:

• Registration: The information you enter when creating your w3999 account, including your name, contact details and date of birth.
• Deposits and withdrawals: Payment details and transaction data processed when you fund your account or request a payout.
• Identity verification: Documents you submit during the KYC (Know Your Customer) verification process, including copies of identity documents.
• Platform usage: Automatically collected data about how you navigate the site and app, which games you play and how long sessions last.
• Support interactions: Any information you provide when contacting the w3999 support team through live chat or email.
• Cookies and similar technologies: See Section 7 for full details on how cookies are used on the platform.

4.Why We Use Your Data

w3999 processes personal data for the following specific purposes. Each purpose has a corresponding legal basis under which processing takes place.

w3999 does not use personal data to build advertising profiles, sell audience data to third-party advertisers or make automated decisions that produce legal or significant effects on your account without human review.

5.Who We Share Your Data With

w3999 does not sell, rent or trade your personal data. Sharing occurs only in the following limited and necessary circumstances:

• Payment processors: JazzCash, Easypaisa, Raast-linked banks and card payment gateways receive the transaction data necessary to process your deposits and withdrawals. These processors have their own data protection obligations and cannot use your data beyond the specific transaction purpose.
• Identity verification providers: Third-party KYC service providers that confirm the validity of the identity documents you submit during account verification. Data shared is limited to what is needed for the verification check.
• Fraud prevention services: Industry databases and fraud detection systems that help identify and prevent money laundering, multiple account abuse and payment fraud.
• Technical service providers: Cloud hosting and infrastructure partners that store and serve platform data. These operate under data processing agreements with w3999 and cannot use your data for any purpose beyond the contracted service.
• Legal and regulatory authorities: Where w3999 is legally required to disclose data – for example, in response to a valid court order, anti-money laundering inquiry or regulatory request. In such cases, disclosure is limited to what is legally required.

All third parties who process data on behalf of w3999 are bound by contractual obligations to handle your personal data securely and in accordance with applicable data protection standards.

6.Payments and Financial Data

Given that all transactions on w3999 occur in PKR through Pakistani payment channels, financial data handling is designed specifically around the local payment environment.

When you deposit using JazzCash or Easypaisa, the transaction is handled through the respective mobile wallet provider's secure API. w3999 receives a transaction reference and confirmation but does not store your mobile wallet PIN or any authentication credentials. When you use Raast or direct bank transfer, bank account details are stored encrypted and used exclusively for withdrawal processing to verified accounts.

Transaction history – the record of deposits and withdrawals on your w3999 account – is retained for a minimum of five years in accordance with standard financial record-keeping requirements. This history is accessible to you through your account at any time and can also be requested from support in document form.

7.Cookies and Tracking Technologies

The w3999 website and app use cookies and similar tracking technologies to make the platform function correctly and to understand how it is being used. Here is a plain explanation of what is in use:

• Essential cookies: Required for the platform to work. These include session cookies that keep you logged in during your visit, security tokens that protect against cross-site request forgery and cookies that remember your language and region preferences. These cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand how players navigate the platform – which pages are visited most, where sessions tend to end, how long average visits last. This data is aggregated and anonymised. It is used to improve the platform and is not linked to individual player profiles.
• Functional cookies: Remember preferences such as your last-visited game category, display settings and whether you have previously seen certain platform notifications.

w3999 does not use advertising or targeting cookies. There are no third-party ad networks embedded in the platform. Cookies set by payment processors during a transaction are controlled by those processors and their own privacy policies apply to those cookies.

You can manage cookie settings through your browser. Note that disabling essential cookies will affect your ability to use the platform correctly.

8.Data Security

w3999 takes the security of your personal data seriously. The following technical and operational measures are in place to protect your information:

• Encryption in transit: All connections between your device and the w3999 platform use 256-bit SSL/TLS encryption. This applies to the website, the app and all API calls including payment processing.
• Encrypted storage: Sensitive personal data including identity documents and payment details is stored encrypted at rest on secured servers with restricted access.
• Access controls: Internal access to personal data is limited to authorised team members who require it to perform their job function. All internal access is logged.
• Fraud detection systems: Automated monitoring systems flag unusual account activity – including login attempts from unrecognised devices, unusual withdrawal patterns or multiple failed authentication attempts – for manual review.
• Two-factor authentication: Available on all w3999 accounts as an additional layer of security for logins. Players are encouraged to enable this in account settings.

Despite these measures, no system connected to the internet can be guaranteed entirely free from risk. In the unlikely event of a data breach affecting your personal information, w3999 will notify affected players promptly through their registered contact details and take immediate steps to contain and remediate the breach.

9.Data Retention

w3999 retains personal data for as long as your account is active and for a period following account closure that is determined by the nature of the data and applicable obligations. The general retention periods are as follows:

• Active account data: Retained for the lifetime of your account plus a period of up to 60 days after closure to allow for final transactions to clear.
• Financial transaction records: Retained for a minimum of five years following the date of the transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for five years from the date of verification or account closure, whichever is later.
• Support communications: Retained for two years from the date of the interaction, unless the communication relates to an ongoing dispute.
• Analytics data: Aggregated and anonymised analytics data is retained indefinitely, but this data cannot be linked back to any individual player.

Once a retention period has passed, data is securely deleted or rendered permanently anonymous so that it can no longer be associated with any identifiable individual.

10.Your Rights Over Your Data

As a w3999 player, you have the following rights in relation to your personal data. All requests are handled by the support team and are typically responded to within 30 days.