wg999 Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, and shared by wg999 in connection with the operation of its online casino, sports betting, and gaming platform accessible at wg999.onl (the "Platform"). It governs data collected from all users of the wg999 Platform, including registered account holders, users who browse the Platform without registering, and any individual who contacts wg999 support.

wg999 operates as Pakistan's premier online casino and sports betting destination, serving players across Karachi, Lahore, Islamabad, Faisalabad, and all other regions of Pakistan. Given that our Platform processes real-money PKR transactions and personal identity documents, we recognise that data protection is not merely a legal obligation — it is a fundamental component of the trust our players place in us.

This Policy should be read alongside the wg999 Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated into our broader player agreement framework. In the event of any conflict between this Privacy Policy and any other document on the Platform, this Privacy Policy shall prevail with respect to data protection matters.

wg999 is committed to handling all personal data in a manner that is lawful, fair, transparent, and proportionate to the purpose for which it was collected. We do not use personal data in ways that are incompatible with the purposes stated in this Policy without first obtaining fresh consent or establishing an alternative lawful basis.

wg999 collects personal data through several channels — directly from you during registration and KYC verification, automatically through your use of the Platform, and from trusted third-party payment providers. The categories of data we collect are set out in the table below:

wg999 does not collect biometric data, racial or ethnic origin, religious beliefs, political opinions, health records, or criminal conviction data except where strictly required under applicable anti-money laundering law and only to the minimum extent necessary for that purpose.

Passwords are never stored in plain text. All wg999 login credentials are one-way hashed using industry-standard cryptographic algorithms prior to storage, meaning wg999 staff cannot retrieve or read your password in its original form under any circumstances.

wg999 uses the personal data we collect for the following purposes, each of which is underpinned by a specific legal basis described in Section 4:

• Account Creation & Management: To register your wg999 account, authenticate your wg999 login sessions, maintain your account balance in PKR, and process your account closure or self-exclusion requests;
• KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity before processing withdrawal requests, as required under our KYC obligations;
• Payment Processing: To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, and to process withdrawal requests to your designated payment instrument;
• Game & Betting Services: To deliver cricket betting markets, slot games, live dealer games, lottery, and poker services; to record bet placements and settle outcomes; and to credit winnings to your account balance;
• Bonus & Promotions Administration: To evaluate your eligibility for welcome bonuses, reload offers, and PSL cricket promotions; to apply wagering requirement tracking; and to prevent bonus abuse;
• Fraud Prevention & Anti-Money Laundering: To monitor account activity for patterns indicative of fraudulent conduct, money laundering, collusion, or underage gambling; and to report suspicious activity to relevant authorities where legally required;
• Responsible Gaming: To monitor your betting and deposit patterns for indicators of problem gambling; to enforce deposit limits, loss limits, and self-exclusion restrictions; and to send responsible gaming notifications as configured in your account;
• Customer Support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance purposes;
• Platform Improvement: To analyse aggregated and anonymised behavioural data in order to improve the wg999 platform experience, game offerings, and payment processing efficiency;
• Legal Compliance: To fulfil all legal and regulatory obligations applicable to wg999's operations, including record-keeping requirements, responses to lawful information requests from Pakistani authorities, and cooperation with law enforcement investigations.

wg999 will never use your personal data to make fully automated decisions that produce significant legal effects on your account without providing you with the ability to request human review of that decision.

Every processing activity carried out by wg999 in relation to your personal data is grounded in one or more of the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contractual obligations to you under the wg999 Terms and Conditions — including account management, payment processing, game delivery, and KYC verification;
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering reporting, age verification requirements, and responses to lawful requests from Pakistani law enforcement or judicial authorities;
• Legitimate Interests: Processing carried out for the legitimate interests of wg999, provided those interests are not overridden by your fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics for service improvement;
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — including the sending of marketing and promotional communications about bonus offers, cricket betting events, and new slot game releases. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

wg999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared externally only in the following strictly defined circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum payment data required to process your PKR deposits and withdrawals. These providers operate under their own data protection frameworks and are contractually prohibited from using your data for any purpose other than processing the payment transaction;
• KYC & Identity Verification Partners: wg999 may share identity documents and personal details with authorised identity verification service providers for the purpose of satisfying KYC and age verification requirements. Such providers are bound by confidentiality obligations;
• Responsible Gaming Services: Where you request self-exclusion, wg999 may share relevant identifying information with responsible gaming registries or exclusion databases as required by applicable gaming standards to enforce your exclusion across affiliated platforms;
• Legal & Regulatory Authorities: wg999 will disclose personal data to Pakistani law enforcement authorities, financial intelligence units, or courts where required to do so by lawful order, warrant, or regulatory obligation. wg999 will not notify you of such disclosures where it is legally prohibited from doing so;
• Professional Advisers: wg999 may share personal data with legal advisers, auditors, or accountants on a strictly confidential basis where necessary for the provision of professional services to wg999;
• Business Transfers: In the event of a merger, acquisition, or sale of wg999's business or assets, personal data held by wg999 may be transferred to the acquiring entity, subject to the acquiring entity agreeing to be bound by data protection obligations no less stringent than those set out in this Policy. wg999 will notify affected players prior to any such transfer where practicable.

All third parties with whom wg999 shares personal data are required to implement appropriate technical and organisational security measures and to process your data solely for the purposes for which it was shared.

The wg999 Platform uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to deliver, maintain, and improve our services. The categories of cookies we use are described below:

Essential cookies are strictly necessary for the Platform to function and cannot be disabled without breaking core features including the wg999 login session. All other cookie categories may be controlled through your browser settings or through the cookie preference centre accessible in the Platform footer. Note that disabling functional or analytics cookies may degrade certain non-essential features of the Platform.

wg999 does not deploy third-party advertising network cookies or cross-site tracking pixels from social media platforms on any page of the wg999.onl domain.

wg999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your active wg999 account relationship plus a minimum of five years following account closure, in line with anti-money laundering record-keeping requirements;
• KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of five years from the date of submission or from account closure, whichever is later;
• Transaction Records: PKR deposit and withdrawal transaction records are retained for a minimum of five years from the date of the transaction;
• Betting History: Bet placement records, cricket market selections, slot spin histories, and game outcomes are retained for a minimum of three years from the date of each transaction;
• Support Correspondence: Live chat transcripts and email support records are retained for two years from the date of the final communication in each thread;
• Technical Logs: Server logs and access logs are retained for a maximum of 12 months unless a security incident, fraud investigation, or legal hold requires extended retention;
• Self-Exclusion Records: Records of self-exclusion requests are retained permanently to prevent re-registration during active exclusion periods and to support responsible gaming monitoring obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where anonymisation is not technically feasible, the data is securely destroyed using industry-standard data destruction methods.

wg999 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data in transit between your browser or mobile device and wg999 servers;
• AES-256 encryption at rest for all databases containing personal and financial player data;
• One-way cryptographic hashing of all wg999 login passwords using bcrypt with an appropriate work factor — your password is never stored in recoverable form;
• Multi-factor authentication available for all player accounts and mandatory for all wg999 staff accounts with access to player data;
• Role-based access controls ensuring that wg999 staff can only access player data relevant to their specific job function;
• Comprehensive audit logging of all internal access to personal data systems, reviewed by the security team on a routine basis;
• Regular penetration testing and vulnerability scanning of all Platform components by qualified security professionals;
• Incident response and data breach notification procedures aligned with internationally recognised standards.

In the event of a personal data breach that is reasonably likely to result in significant risk to affected players, wg999 will notify affected players without undue delay via the email address registered on their wg999 account, describing the nature of the breach, the categories of data affected, and the steps being taken to address the incident and mitigate its effects.

As a wg999 player, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting wg999 support at [email protected]:

wg999 will respond to all valid data rights requests within 30 days of receipt. Where a request is complex or wg999 receives a high volume of requests, this period may be extended by a further 60 days, in which case wg999 will notify you of the extension and the reason for it within the initial 30-day period.

wg999 will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive in nature, in which case a reasonable administrative fee may be levied. wg999 reserves the right to refuse requests that are manifestly unfounded or where fulfilling the request would require wg999 to breach a separate legal obligation, such as an anti-money laundering record-keeping requirement.

wg999 operates robust age-verification procedures as part of the registration and KYC process. Any account found to have been registered by a person under 21 years of age will be closed immediately and all funds, including any winnings, will be handled in accordance with applicable responsible gaming and player protection standards.

If you are a parent or guardian and have reason to believe that a person under 21 in your household has registered a wg999 account or accessed the Platform, please contact us immediately at [email protected]. wg999 will investigate and take appropriate action without delay. We also strongly encourage parents and guardians to install appropriate parental control software on any shared household devices that may be used to access the internet.

wg999 does not direct any marketing or promotional communications toward individuals who are known to be under the age of 21, and actively screens our marketing lists against known age verification outcomes to prevent such communications from being sent.

wg999 will only send direct marketing communications — including bonus offer emails, PSL cricket betting alerts, new slot game announcements, and seasonal promotions — to players who have provided clear, affirmative consent to receive such communications during the registration process or through their account settings.

You may withdraw your marketing consent at any time by:

• Clicking the unsubscribe link included in every promotional email sent by wg999;
• Updating your communication preferences in the Notifications section of your wg999 account settings;
• Contacting wg999 support at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect the delivery of transactional and account-essential communications, such as deposit confirmations, withdrawal notifications, KYC verification requests, responsible gaming alerts, and self-exclusion confirmations. These communications are necessary for the operation of your wg999 account and cannot be opted out of while your account remains active.

wg999 does not engage in unsolicited cold-calling, SMS spamming, or any other form of intrusive direct marketing. All wg999 promotional communications include a clear identification of wg999 as the sender and a clear opt-out mechanism.

wg999's primary player data infrastructure is hosted on servers located in secure, internationally recognised data centre facilities. In operating the Platform, your personal data may be transferred to, stored in, or processed in jurisdictions outside Pakistan. This may occur in the following circumstances:

• Where wg999 uses cloud infrastructure, content delivery networks, or third-party technology services whose servers are located outside Pakistan;
• Where KYC or identity verification services are provided by partners whose processing facilities are located in other jurisdictions;
• Where payment processing infrastructure for international card schemes operates through servers outside Pakistan.

Where personal data is transferred outside Pakistan, wg999 takes reasonable steps to ensure that the receiving entity implements an appropriate level of data protection through contractual safeguards, including data processing agreements that incorporate obligations equivalent to those set out in this Privacy Policy. wg999 does not transfer personal data to jurisdictions that are known to offer materially inadequate data protection standards without first implementing additional contractual or technical safeguards.

By using the wg999 Platform and providing your personal data, you acknowledge and consent to such cross-border transfers on the terms described in this section.

wg999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the features and services offered on the Platform. The most current version of this Privacy Policy will always be accessible at wg999.onl/privacy-policy, and the "Last Updated" date at the top of this page will be revised accordingly.

Where wg999 makes a material change to this Privacy Policy — meaning a change that substantially alters your rights or the way in which wg999 processes your personal data — wg999 will provide advance notice to all registered players via the email address on their wg999 account at least 14 days before the revised Policy takes effect. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

If you do not agree with any material changes to this Privacy Policy, you have the right to close your wg999 account before the revised Policy takes effect, subject to any outstanding wagering requirements or pending withdrawal requests. Contact [email protected] to initiate account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wg999 processes your personal data, you are welcome to contact our Data Protection team at any time. Our support team handles all data protection enquiries with strict confidentiality:

wg999 aims to resolve all data protection complaints promptly and fairly. If you submit a formal complaint, wg999 will acknowledge receipt within 5 business days and provide a substantive response within 30 days. Where additional time is required to investigate a complex complaint, wg999 will notify you of the expected resolution timeline.

If you are not satisfied with wg999's response to your complaint, or if you believe wg999 is not processing your personal data in accordance with applicable data protection standards, you may escalate your complaint to the relevant supervisory authority or regulatory body in your jurisdiction. wg999 will cooperate fully with any such regulatory investigation.

wg999 values every player's trust and is committed to resolving all data-related concerns in a manner that is fair, transparent, and consistent with the principles set out in this Privacy Policy. Your privacy matters to us — and we take every enquiry seriously, whether it comes from a player in Karachi, Lahore, Islamabad, or anywhere else across Pakistan.