dne999
Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is published by dne999 ("dne999," "we," "us," or "our") and applies to all personal data collected, processed, and stored in connection with the dne999 online gaming platform, accessible at dne999.net ("the Platform").

This Policy applies to all persons who interact with the Platform in any capacity, including registered members, visitors who browse the Platform without registering, and individuals who contact dne999's support team. It applies regardless of the device or network connection used to access the Platform.

dne999 serves an English-speaking Pakistani user base across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities and regions of Pakistan. The data practices described in this Policy reflect the requirements of applicable international online gaming regulatory standards and Pakistan's data protection framework.

Data Controller

For the purposes of this Privacy Policy, dne999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, dne999 determines the purposes for which, and the means by which, personal data is processed.

dne999 is responsible for ensuring that personal data is collected, processed, stored, and transferred in a manner that is lawful, fair, transparent, and consistent with the purposes described in this Policy.

Where dne999 engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, or analytics service providers — those third parties act as data processors under the direction of dne999, and are contractually bound to process data only in accordance with dne999's instructions and this Policy.

What Data We Collect

dne999 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table sets out the categories of data collected and examples of specific data points within each category:

How We Collect Data

dne999 collects personal data through the following channels and methods:

• Direct submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated collection: Technical data — including IP address, device identifiers, and session data — is collected automatically when you access the Platform, using standard web server logging and first-party analytics tools.
• Payment providers: When you make a deposit or withdrawal through JazzCash, EasyPaisa, Raast, or a bank transfer, the relevant payment provider may share transaction confirmation data with dne999 to facilitate processing and reconciliation.
• KYC verification services: dne999 may use third-party identity verification services to assist with CNIC document verification and fraud screening. These services process identity data on behalf of dne999 under contractual data processing agreements.
• Cookies and tracking technologies: dne999 uses first-party cookies and similar technologies to manage login sessions, remember member preferences, and gather anonymised usage analytics. See Section 7 for full details.

Purposes & Legal Basis

dne999 processes personal data only for defined, specific, and legitimate purposes. The following table sets out each purpose, the categories of data used, and the legal basis for processing:

dne999 does not process personal data for purposes that are incompatible with those listed above without seeking fresh consent or establishing an alternative legal basis.

Sharing & Disclosure

dne999 does not sell, rent, or commercially transfer personal data to third parties. Personal data is shared only in the following limited circumstances:

• Payment service providers: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Pakistani financial regulations.
• KYC and identity verification providers: Third-party KYC services may process your CNIC and identity documents on behalf of dne999 for the purpose of verifying your identity and preventing fraud. These providers are contractually bound to use data only for verification purposes.
• Fraud prevention and security services: dne999 may share technical and financial data with specialist fraud prevention services to detect and prevent money laundering, account takeover, and related financial crimes.
• Regulatory and law enforcement authorities: dne999 may be required by applicable law, court order, or regulatory direction to disclose personal data to governmental, regulatory, or law enforcement authorities in Pakistan or other relevant jurisdictions.
• Professional advisers: dne999 may share data with legal counsel, auditors, and other professional advisers where strictly necessary for the provision of professional services and subject to confidentiality obligations.

Cookies & Tracking

dne999 uses cookies and similar browser-based technologies on the Platform. A cookie is a small text file placed on your device that allows the Platform to recognise your browser across sessions and store certain preferences or session data.

dne999 uses the following categories of cookies:

• Essential cookies: These are strictly necessary for the Platform to function. They manage your login session, maintain your PKR wallet session, and prevent cross-site request forgery. These cookies cannot be disabled without preventing your use of the Platform.
• Functional cookies: These remember your language preferences, display settings, and other optional customisations to improve your experience on the Platform.
• Analytics cookies: dne999 uses first-party analytics to understand how members use the Platform — for example, which sports markets are most browsed, which pages take longest to load, and where members encounter difficulty. Analytics data is aggregated and does not identify individual members.

dne999 does not use third-party advertising cookies, tracking pixels, or cross-site tracking technologies that would enable commercial profiling of members. You can control cookie settings through your browser preferences; however, disabling essential cookies will prevent Platform login and core functionality.

Data Retention

dne999 retains personal data only for as long as is necessary for the purposes set out in this Policy, and in any case for no longer than is required by applicable regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your membership and for a period of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial transaction records: Retained for seven (7) years from the date of each transaction, in accordance with standard financial record-keeping requirements.
• KYC documentation: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Gaming activity logs: Retained for three (3) years from the date of each gaming session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for three (3) years from the date of the interaction.
• Technical and access logs: Retained for twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified or identifiable individual.

Data Security

dne999 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport security: All data transmitted between your device and dne999 is encrypted using 256-bit SSL/TLS protocols. dne999 enforces HTTPS across all pages and sub-domains.
• Storage encryption: Personal and financial data stored in dne999's databases is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: dne999 supports SMS-based two-factor authentication for member accounts and enforces two-factor authentication for all internal administrative access to production systems.
• Intrusion detection: dne999 operates continuous monitoring for unusual access patterns, potential intrusions, and account compromise attempts, with automated alerts and response protocols.
• Third-party auditing: dne999's security practices and game integrity are subject to periodic third-party auditing by independent technical assessors.

Your Rights

As a dne999 member, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting the dne999 support team through live chat or email:

• Right of access: You have the right to request a copy of the personal data dne999 holds about you. dne999 will provide this within thirty (30) calendar days of a valid request, at no charge for the first request.
• Right to rectification: If any personal data held by dne999 is inaccurate or incomplete, you have the right to request that it be corrected. Identity and contact data can be updated via your account settings; CNIC and KYC data corrections require support assistance.
• Right to erasure: In certain circumstances, you have the right to request deletion of your personal data. This right is subject to dne999's overriding legal obligations to retain certain data under AML and regulatory frameworks. Where erasure is not possible in full, dne999 will explain specifically what data must be retained and why.
• Right to restrict processing: You have the right to request that dne999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful.
• Right to object: You have the right to object to processing based on dne999's legitimate interests, including processing for analytics purposes. This right does not apply to processing based on legal obligation or contract performance.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible, to enable transfer to another service provider.

To exercise any of the above rights, contact dne999 support via live chat or at support @ dne999.net. dne999 may require identity verification before processing rights requests to ensure data is not disclosed to unauthorised individuals.

Children's Privacy

dne999 services are strictly intended for persons aged 21 years and above. dne999 does not knowingly collect, process, or store personal data from any person under the age of 21.

Where dne999 discovers or reasonably suspects that personal data has been collected from a person under 21 — whether through inaccurate age declaration during registration or any other means — dne999 will immediately suspend the relevant account, delete or quarantine the associated personal data, and notify appropriate parties where required by law.

International Transfers

Personal data collected by dne999 may be transferred to, and processed by, servers and service providers located outside of Pakistan, including in jurisdictions where online gaming is regulated. Where personal data is transferred internationally, dne999 ensures that appropriate safeguards are in place to maintain the level of data protection described in this Policy.

Safeguards used for international transfers include contractual data processing agreements with all data processors, which require processors to apply security and privacy standards consistent with those described in this Policy and applicable international data protection frameworks.

dne999's payment processing partners — including JazzCash and EasyPaisa — are Pakistani entities subject to Pakistani financial regulations and handle transaction data within Pakistan's regulatory framework.

Changes to This Policy

dne999 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — for example, where new categories of data are collected or new processing purposes are added — dne999 will notify members through the Platform's notification system or via the contact details held on the member's account.

The current version of this Privacy Policy is always accessible at dne999.net/privacy-policy and is identified by the "Effective" date at the top of the page. Continued use of the dne999 Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

It is your responsibility to review this Policy periodically. If you disagree with any update to the Policy, you should cease using the Platform and may contact support to request account closure.

Contact & Complaints

If you have any question about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how dne999 has handled your personal data, please contact the dne999 Data Support team through the following channels:

• Live Chat: Available 24/7 in English and Urdu via the dne999 Platform. Average response time under 5 minutes. Fastest channel for account and data queries.
• Support Email: support @ dne999.net — please note this is displayed as plain text and is not a clickable link. Responses within 24 hours.

dne999 will acknowledge all privacy-related complaints within 24 hours and will provide a substantive response within 30 calendar days of receipt. Where a matter requires more complex investigation, dne999 will communicate a revised timeline.