wg999 Privacy
Policy

For the purposes of this Privacy Policy, the data controller responsible for the personal data collected through the wg999 platform is the operating entity behind wg999.bio ("wg999," "we," "us," or "our"). As data controller, wg999 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through:

• The wg999 website accessible at wg999.bio and all pages within that domain;
• The account registration and wg999 login processes;
• All financial transactions conducted through the wg999 Cashier;
• All gameplay activity on wg999 platform games, including cricket betting, W Live dealer tables, slot games, and sports markets;
• Communications between you and the wg999 customer support team;
• Any promotional or loyalty programme participation on the wg999 platform.

By creating an account on wg999 or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein.

wg999 collects the following categories of personal data from players registered on the platform:

Registration & Identity Data

• Full legal name;
• Date of birth (used for age verification — players must be 21 or older);
• Pakistani mobile phone number (used as primary account identifier and OTP channel);
• Email address;
• Residential address (collected at KYC stage);
• Government-issued identification details (e.g., Pakistani CNIC number, where verification is required).

Financial & Transaction Data

• Deposit and withdrawal amounts, timestamps, and payment method references;
• JazzCash or EasyPaisa mobile wallet identifiers associated with transactions;
• Bank account references (HBL, UBL, Meezan Bank, or other institutions) where bank transfer methods are used;
• Debit or credit card details (card number, expiry date) — collected and handled by our PCI-DSS certified payment processor; wg999 does not store full card details on its own servers;
• Transaction history — all deposits, wagers, winnings, and withdrawals associated with your Account.

Gameplay & Behavioural Data

• Game session history, wager amounts, game titles played, and outcomes;
• Sports betting selections, odds accepted, and market settlement data;
• Session duration, frequency of play, and platform navigation patterns;
• Responsible gaming tool activations (deposit limits, self-exclusion requests).

Technical & Device Data

• IP address and approximate geographic location derived therefrom;
• Device type, operating system, and browser information;
• Session tokens, login timestamps, and authentication event logs;
• Cookie identifiers and similar tracking data (see Section 7).

Communications Data

• Records of all communications between you and the wg999 support team, including live chat transcripts and email correspondence;
• Feedback, complaints, or dispute submissions you make to wg999.

wg999 collects personal data through the following mechanisms:

• Directly from you: When you complete the account registration form, submit identity verification documents, make a deposit, request a withdrawal, or communicate with the wg999 support team.
• Automatically during platform use: Through server logs, session management systems, and cookies that capture technical and behavioural data as you navigate and play on the platform.
• From third-party payment processors: Transaction confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and card processing networks when you make deposits or withdraw funds.
• From identity verification service providers: Where wg999 uses a regulated third-party KYC provider to validate documents submitted as part of the account verification process.
• From fraud prevention and security services: Risk signals and device fingerprint data from third-party fraud detection tools integrated into the wg999 platform infrastructure.

wg999 uses your personal data for the following purposes:

wg999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the agreement between you and wg999 — including account management, payment processing, and game service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you as a registered player.
• Legal obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and regulatory reporting — is carried out on the basis of legal compliance necessity.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is based on wg999's legitimate business interests, balanced against your rights and interests as a data subject.
• Consent: Where wg999 sends you optional marketing communications about promotions, bonuses, or new game releases, this is carried out on the basis of your consent, which you may withdraw at any time.

wg999 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment processors and financial institutions: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and card network processors — for the processing of deposits and withdrawals in PKR.
• Identity verification (KYC) providers: Regulated third-party KYC service providers used to verify identity documents submitted by players during the account verification process.
• Fraud prevention and security services: Specialised fraud detection and risk management technology providers integrated into the wg999 infrastructure to protect the platform and its players.
• Game content providers and software licensors: Where technical data (such as session identifiers) is required to deliver game content served by third-party game studios or aggregators through the wg999 platform.
• Regulatory authorities and law enforcement agencies: Where wg999 is legally required or compelled by lawful authority to disclose player data as part of a regulatory investigation, court order, or statutory reporting obligation.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by wg999, where disclosure is necessary for the provision of professional services to wg999 and subject to confidentiality obligations.

All third-party data processors engaged by wg999 are contractually bound to process player data only for the stated purpose, to maintain adequate security standards, and not to disclose it to any further parties without wg999's authorisation.

The wg999 platform uses cookies and similar tracking technologies to ensure the correct functioning of the platform, maintain your session while you are logged in, and gather analytical data about how the platform is used. The following categories of cookies are used:

• Essential cookies: Required for the platform to function correctly. These include session authentication tokens that keep you logged in during a session, and security cookies that protect against cross-site request forgery. These cannot be disabled without severely impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby display preferences, and responsible gaming tool configurations set in your Account Settings.
• Analytical cookies: Used to collect anonymised data about how players navigate and interact with the platform — page visit duration, navigation paths, and feature engagement — to help wg999 improve the platform experience.
• Security and fraud prevention cookies: Device fingerprinting and risk-scoring cookies used to detect suspicious login patterns, bot activity, and potentially fraudulent transactions.

wg999 retains personal data for as long as is necessary for the purposes for which it was collected, subject to applicable legal and regulatory retention requirements. The following general principles apply:

• Active account data: Retained for the duration of the active account relationship plus any mandatory post-closure retention period required by applicable law or regulation.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with standard financial record-keeping and anti-money laundering requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from account closure or the date of document submission, whichever is later, in accordance with AML regulatory requirements.
• Customer support and communications records: Retained for a minimum of two (2) years from the date of the last relevant communication, or longer where a dispute or regulatory matter remains outstanding.
• Responsible gaming records: Self-exclusion records and responsible gaming tool activation logs are retained for the duration required to enforce the applicable restriction and for a further period of five (5) years thereafter.
• Anonymised analytical data: Retained indefinitely in aggregated, anonymised form for statistical and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with wg999's internal data lifecycle management procedures.

Subject to applicable law and certain platform-specific limitations (such as mandatory regulatory retention requirements), you have the following rights in relation to the personal data wg999 holds about you:

• Right of access: You may request a copy of the personal data wg999 holds about you. wg999 will respond to verified access requests within a reasonable timeframe.
• Right of rectification: If any personal data wg999 holds about you is inaccurate or incomplete, you have the right to request correction. Many basic account details can be updated directly through your Account Settings.
• Right to erasure ("right to be forgotten"): In certain circumstances — where data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you may request deletion of your personal data. Note that data subject to mandatory regulatory retention obligations (such as transaction records) cannot be deleted until the applicable retention period expires.
• Right to object to marketing: You may opt out of receiving promotional communications from wg999 at any time through your Account notification settings or by contacting support.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: Where processing is carried out by automated means on the basis of contract or consent, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to restrict processing: In certain circumstances, you may request that wg999 restricts the processing of your data while a complaint or accuracy dispute is being resolved.

wg999 implements and maintains a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all data transmissions between your device and the wg999 platform;
• Encryption at rest for sensitive stored data including payment method details and identity documents;
• Access controls and role-based permissions ensuring that employee access to player data is restricted strictly to those with a legitimate operational need;
• OTP-based two-factor authentication for player account logins on unrecognised devices, and for internal administrative access to player data;
• Comprehensive audit logging of all access to player account data by internal personnel, with regular review of access logs;
• Regular security assessments and penetration testing of the wg999 platform infrastructure;
• PCI-DSS compliant payment processing — card data is handled exclusively by certified processors and is not stored on wg999 servers.

wg999 does not knowingly collect or process personal data from any person under the age of 21. The platform's registration process includes an age declaration requirement, and wg999 reserves the right to request proof of age at any time. Where wg999 discovers or has reasonable grounds to believe that an account is being operated by a person under 21 years of age, the following actions will be taken without prior notice:

• The account will be immediately suspended and then permanently closed;
• All personal data associated with the account will be flagged for investigation and then deleted (subject to any regulatory retention requirements in relation to the incident);
• Any deposits or winnings associated with the account will be handled in accordance with the wg999 Terms & Conditions for under-age account violations.

If you are a parent or guardian and believe your child has registered an account on wg999, please contact the support team immediately via live chat or email so the account can be investigated and closed.

In order to operate the wg999 platform and deliver its services to players across Pakistan, certain personal data may be processed by wg999's infrastructure providers, game content providers, or payment processors whose servers or operational facilities are located outside Pakistan. Where such international transfers of personal data occur, wg999 takes steps to ensure that appropriate safeguards are in place to protect the security and confidentiality of the transferred data.

These safeguards may include:

• Contractual clauses in agreements with third-party processors imposing equivalent data protection obligations;
• Use of service providers that maintain international security certification standards (such as ISO 27001 or PCI-DSS) applicable to their processing of your data;
• Transfers to jurisdictions that maintain adequate data protection standards as assessed by wg999 in the context of the nature of the data being transferred.

By using the wg999 platform, you acknowledge that your personal data may be transferred and processed outside Pakistan as described above.

wg999 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance, or platform functionality. When changes are made, the revised policy will be published on this page with an updated effective date.

Where a change to this Privacy Policy is material — meaning it significantly affects how your personal data is collected or used — wg999 will take reasonable steps to bring the change to your attention, which may include displaying a notice on the platform upon your next login or communicating directly to your registered contact details.

We recommend that all wg999 players review this Privacy Policy periodically — particularly before making significant financial transactions — to remain informed of how your personal data is being handled.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way wg999 processes your personal data, you may contact the wg999 Data Protection team through the following channels:

• Live Chat: Available 24/7 through the wg999 platform — for all account-related and time-sensitive data queries, live chat is the fastest route to a response from the wg999 support and data team.
• Email: [email protected] — for formal data subject access requests, rectification requests, erasure requests, or written complaints regarding data handling. Please include "Privacy" or "Data Request" in your subject line to ensure your query is routed to the appropriate team. Response times are typically within 5 business days for formal requests.

wg999 is committed to resolving all privacy queries and complaints fairly and promptly. For players across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, Peshawar, or elsewhere — the wg999 support team is trained to handle data-related queries in the context of Pakistani player accounts and the payment methods and processes specific to the Pakistani market.