NK999 Privacy Policy — How We Handle Your Personal Data as a Pakistani Player

1. Who We Are and What This Policy Covers

This Privacy Policy applies to the NK999 online gaming platform, accessible at nk999.best and through any associated mobile-optimised interfaces. NK999 is the data controller responsible for the personal information collected from players who register and use the NK999 platform.

This Privacy Policy applies to all NK999 players, including registered account holders in Pakistan and visitors who browse the NK999 platform without creating an account. It covers all personal data that NK999 collects, processes, and stores in connection with the operation of the platform and the provision of gaming services to Pakistani players.

By registering an NK999 account and accepting the NK999 Terms and Conditions, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with how NK999 handles personal data, please do not register an account. Registered players who wish to withdraw their consent should contact NK999 support to discuss account closure options.

2. What Personal Data NK999 Collects

NK999 collects personal data in distinct categories depending on your relationship with the platform. Below is a comprehensive breakdown of the data we may hold about you:

3. How NK999 Collects Your Personal Data

NK999 collects personal data through the following mechanisms:

• Direct provision by you: When you register an account, complete KYC verification, submit a deposit or withdrawal request, contact NK999 support, or set responsible gaming preferences, you provide data directly. This is the primary source of personal data NK999 holds.
• Automated collection during platform use: When you access NK999 — whether on mobile or desktop — technical data including your IP address, device identifier, session duration, and navigation behaviour is automatically logged by our servers. This data is used for fraud detection, security monitoring, and platform performance analysis. It is not used to build a marketing profile of you as an individual.
• Payment processing partners: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, NK999 receives a transaction confirmation record from the payment provider. NK999 does not receive full card numbers or mobile wallet PINs — only transaction reference data and the amount in PKR.
• KYC verification providers: Where NK999 uses a third-party identity verification service, that provider processes your CNIC images and returns a verification result. NK999 stores the outcome and reference number; the raw image processing occurs within the provider's secure environment.
• Cookies and local storage: NK999 uses cookies and local browser storage as described in Section 9 of this Policy.

NK999 does not collect personal data from social media platforms, purchase third-party marketing databases, or acquire data about you from sources other than those listed above without your explicit knowledge and consent.

4. Why NK999 Uses Your Personal Data

NK999 processes your personal data for the following specific purposes:

1. Account registration and management: Creating and maintaining your NK999 player account, verifying your identity, and managing account settings.
2. Processing deposits and withdrawals: Executing PKR transactions via your chosen payment method, verifying payment method ownership, and reconciling transactions.
3. KYC and age verification: Confirming that you are 18 years of age or older and that the identity you have provided is genuine — both legal requirements for licensed online gaming platforms.
4. Fraud prevention and platform security: Detecting and preventing fraudulent account activity, unauthorised access, money laundering, and abuse of promotional offers.
5. Regulatory compliance: Meeting NK999's legal obligations under its operating licence, including transaction record-keeping, AML (Anti-Money Laundering) reporting, and co-operation with law enforcement where required.
6. Customer support: Responding to your queries, resolving disputes, and maintaining records of communications for quality and compliance purposes.
7. Responsible gaming: Administering your self-exclusion, deposit limits, and cooling-off preferences — and ensuring they are enforced accurately.
8. Platform improvements: Analysing aggregated, anonymised usage data to improve the NK999 platform experience — game loading times, payment flow usability, and mobile interface performance on Pakistani devices.
9. Marketing communications: Sending you information about NK999 promotions and bonuses via SMS or in-app notifications — only if you have not opted out of marketing communications. NK999 does not use personal data for targeted advertising on third-party platforms.

NK999 does not use automated decision-making or algorithmic profiling to make consequential decisions about individual players — such as denying withdrawals or restricting gameplay — without human review. Any account action that materially affects your access to your funds involves review by NK999's compliance or payments team.

5. Legal Basis for Processing Your Data

NK999 processes your personal data on the following legal bases:

• Contractual necessity: Processing your registration data, payment details, and KYC information is necessary to fulfil NK999's contractual obligations to you as a player — specifically, to provide access to the gaming platform and to process your PKR deposits and withdrawals.
• Legal obligation: NK999 is required by its operating licence and applicable regulations to verify player identities, maintain transaction records, conduct AML screening, and co-operate with law enforcement investigations. Processing your data for these purposes is not optional for NK999.
• Legitimate interests: NK999 processes technical and device data for fraud prevention and platform security based on its legitimate interest in protecting the platform and its honest players from fraudulent activity. This processing is proportionate — it does not go beyond what is necessary for security purposes.
• Consent: Where NK999 processes your data for marketing communications (promotional SMS), we rely on your consent. You can withdraw this consent at any time from your account notification settings without affecting any other aspect of your account.

6. Who NK999 Shares Your Data With

NK999 shares player personal data only with the categories of third parties listed below, and only to the extent necessary for the specific purpose described:

• Payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, banks, card networks): NK999 shares transaction data necessary to execute your deposit and withdrawal requests. Payment providers receive the minimum information required to process the transaction — typically your registered account identifier and the transaction amount in PKR. NK999 does not transmit your CNIC to payment providers.
• KYC / identity verification providers: Where NK999 uses a third-party service to process CNIC verification, that provider receives your CNIC image data under a strict data processing agreement. They are not permitted to use your data for any purpose other than identity verification for NK999.
• Game content providers (e.g., Spribe for Aviator): Game providers may receive an anonymised session identifier to associate your game round results with your NK999 account for dispute resolution purposes. NK999 does not pass your full name, CNIC, or payment details to game providers.
• Regulatory authorities and law enforcement: NK999 is legally obliged to disclose player data to regulatory authorities and law enforcement agencies upon receipt of a valid legal request or court order. NK999 will not voluntarily disclose player data to any government body beyond what is legally required.
• Professional advisers: NK999's legal advisers, auditors, and compliance consultants may access player data in anonymised or aggregated form as necessary for their professional services to NK999.

NK999 does not share your personal data with any third party for that party's own marketing or commercial purposes. We do not sell, rent, or license player data to any organisation.

7. Data Storage and Security Measures

NK999 takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• Encryption in transit: All data exchanged between your browser or device and NK999's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login sessions, deposit flows, KYC document uploads, and all other platform interactions.
• Encryption at rest: Sensitive data fields — including CNIC numbers, payment account identifiers, and KYC document images — are encrypted within NK999's database infrastructure using industry-standard symmetric encryption.
• Access controls: Access to personal player data within NK999's internal systems is restricted on a need-to-know basis. Only team members with a legitimate operational reason — such as processing a withdrawal or investigating a support query — can access your account data. All internal access is logged and audited.
• CNIC image security: Identity document images submitted for KYC are stored in a separate, access-restricted document vault with additional access logging. These images are not accessible to general platform operations staff.
• Fraud monitoring: NK999's systems continuously monitor for anomalous login patterns, unusual transaction activity, and other indicators of potential account compromise. Suspicious activity triggers an automatic account review process.
• Incident response: NK999 maintains a documented data breach response procedure. In the event of a security incident affecting player data, NK999 will notify affected players via their registered mobile number within a reasonable period and will take immediate steps to contain the incident.

8. How Long NK999 Keeps Your Personal Data

NK999 retains personal data only for as long as necessary for the purposes described in this Policy, or for as long as required by NK999's legal and regulatory obligations.

When retention periods expire, NK999 securely deletes or anonymises personal data so that it can no longer be linked to an individual player. Deletion requests received from players (see Section 10) are assessed against these retention obligations — where a legal retention requirement applies, the data cannot be deleted until that period expires, but access will be restricted in the interim.

9. Cookies, Local Storage, and Tracking Technologies

NK999 uses cookies and local browser storage to maintain your session, remember your preferences, and support the platform's security and performance functions. NK999 does not use third-party advertising cookies or place tracking pixels for advertising networks on its platform.

The categories of cookies NK999 uses are:

• Essential / session cookies: Required for the platform to function. These maintain your login session so you don't have to re-enter your credentials every time you navigate between pages. Disabling essential cookies will prevent NK999 from working correctly. These cookies expire at the end of your browser session or after a fixed timeout period for security.
• Preference cookies: Remember your language settings and interface preferences (such as notification settings you've configured). These are set by NK999 only — not by third parties.
• Security cookies: Support NK999's fraud detection by maintaining a secure, verified session token linked to your account. These cookies help NK999 identify whether a login attempt is originating from your usual device and location.
• Performance / analytics cookies: NK999 uses anonymised analytics to understand how the platform is used in aggregate — which pages load slowly, which payment flows are completed successfully, and where users encounter errors. This data is aggregated and cannot be used to identify individual players. NK999 does not share analytics data with advertising networks.

You can manage cookie preferences through your browser settings. However, disabling essential cookies will prevent you from logging into NK999 and using platform features. If you play NK999 on a mobile browser, your browser's privacy settings also apply to cookies set by NK999.

10. Your Rights Over Your Personal Data

As an NK999 player based in Pakistan, you have the following rights in relation to the personal data NK999 holds about you. These rights may be subject to applicable legal retention requirements — where a legal obligation requires NK999 to retain your data, we will explain this clearly when you exercise a right.

• Right of access: You can request a copy of all personal data NK999 holds about you. NK999 will respond within 14 business days with a summary of your data in a readable format. We may ask you to verify your identity before releasing the data to prevent unauthorised access requests.
• Right to rectification: If any personal data NK999 holds about you is inaccurate or outdated, you can request a correction. Name corrections require updated CNIC documentation. Contact details can be updated directly from your account settings or via support.
• Right to erasure ("right to be forgotten"): You can request deletion of your personal data. NK999 will action this request to the extent permitted by our legal retention obligations. Data required for AML compliance (transaction records, KYC documents) cannot be deleted until the regulatory retention period expires — we will advise you of this clearly and restrict access to the data in the interim.
• Right to restrict processing: If you dispute the accuracy of your data or have objected to its processing, you can request that NK999 restrict further use of your data while the matter is resolved.
• Right to withdraw consent: Where NK999 processes your data based on consent (marketing communications), you can withdraw consent at any time from your notification settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You can object to NK999 processing your data based on its legitimate interests. NK999 will review the objection and respond within 14 business days.

To exercise any of these rights, contact NK999 support via live chat or email at support@nk999.best. Please include your NK999 username and registered mobile number in your request so we can verify your identity before taking action on your data.

11. Children, Minors, and Underage Protection

NK999's platform and services are strictly intended for individuals who are 18 years of age or older. NK999 does not knowingly collect personal data from individuals under 18. CNIC verification during the KYC process is specifically designed to prevent underage access — a Pakistani CNIC is only issued to individuals who have reached the required age threshold.

If NK999 identifies or is notified that an account has been registered by an individual under 18, the account will be immediately closed, all gameplay data will be retained as required by applicable regulations, and any balance in the account will be reviewed in accordance with NK999's minor access policy.

Parents and guardians who suspect that a minor in their household has registered at NK999 should contact our support team immediately. NK999 also encourages the use of parental control software on shared mobile phones and computers to restrict access to online gaming platforms.

12. Changes to This Privacy Policy

NK999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made to this Policy, NK999 will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via SMS to their registered Pakistani mobile number and/or via in-app notification on next login.
• Make the updated Policy available at /privacy-policy at least 7 days before the changes take effect, where practicable.

Continued use of the NK999 platform after the effective date of any update to this Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any material change to how NK999 handles your personal data, you should stop using NK999 and contact support to request account closure and data export or deletion.

Minor changes — such as clarifications to existing practices, correction of typographical errors, or formatting updates that do not affect the substance of the Policy — may be made without player notification. NK999 recommends reviewing this page periodically to stay informed.

13. How to Contact NK999 About Your Privacy

For any questions, concerns, or requests related to this Privacy Policy or NK999's handling of your personal data, please contact the NK999 Data Privacy team through the following channels:

• Live chat: Available 24/7 via the NK999 platform. The quickest way to reach NK999 for most privacy queries. Our support agents can escalate privacy-specific requests to the appropriate team.
• Email: support@nk999.best — please use the subject line "Privacy Request" and include your NK999 username and registered mobile number. Formal data access, correction, and deletion requests should be submitted via email for documentation purposes. NK999 responds to privacy emails within 1–2 business days.

NK999 is committed to handling all privacy-related queries fairly, transparently, and within reasonable timeframes. Where a request involves complex data processing considerations or requires legal review, we will acknowledge the request within 3 business days and provide a full response within 14 business days.

This Privacy Policy was last reviewed and updated in January 2025. The most current version is always available at /privacy-policy. NK999 thanks you for taking the time to read this Policy — your trust is something we take seriously and work to earn through transparent, responsible data practices every day.