LEGAL REFERENCE

How 999club Handles Your Personal Data

At 999club, we treat your personal information with the same care we give your account security. This policy sets out exactly what data we collect when you open...

Transparent data collectionSecure account storagePakistani payment data protectedYour rights, clearly explainedData never sold to third parties
999club How 999club Handles Your Personal Data

What This Policy Covers and Where It Applies

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PRIVACY CONTACT PATHS

Reach Our Privacy Team Directly

If you have a question about how your data is handled, or wish to exercise any of your rights under this policy...

Email Privacy Team Send a written request to our dedicated privacy...
Live Support Chat Start a chat from your account dashboard and...
Formal Written Request For deletion or portability requests that require documentation...
POLICY TRUST SIGNALS

Why You Can Rely on This Privacy Policy

We built this policy around the actual data flows on our platform, not boilerplate. Every signal below reflects a concrete practice we follow when handling your account information in supported Pakistan regions.

Data Minimisation Practice

We collect only what is necessary to operate your account, process JazzCash or Easypaisa transactions, and deliver customer support. No additional profiling data is gathered without your explicit consent.

Encrypted Storage

Your personal records and payment identifiers are stored with AES-256 encryption at rest. Database access is restricted by role, and all access events are logged and reviewed regularly.

Payment Data Isolation

JazzCash, Easypaisa, SadaPay and Raast transaction references are stored in isolated vaults separate from your account profile, reducing exposure in the unlikely event of a system incident.

No Third-Party Data Sales

We do not sell, rent or license your personal data to marketing networks or data brokers. Sharing with third parties is limited to payment processors and regulatory bodies where law requires.

Account Access Logs

Every login to your 999club account is timestamped and recorded. You can request an access log at any time through your account settings to verify activity on your profile.

Policy Review Cycle

This policy is reviewed and updated whenever our data practices change or when applicable law in supported Pakistan regions is amended. The effective date at the top of this page reflects the current version.

How This Policy Aligns With Our Other Terms

Our privacy policy does not stand alone. It connects directly to our other policy pages to give you a complete picture of how your data, account, and activity...

Terms and Conditions
Our terms define the contract between you and 999club. This privacy policy supplements those terms by specifying what personal data that contract requires us to process.
Cookie Policy
Cookie data is a subset of the personal data covered here. Our cookie policy details each category of cookie, its retention period, and how to adjust your consent preferences.
Account Security Policy
Account security measures referenced in our security page rely on the data practices described here, including login logs and identity verification procedures.
Payment Processing Terms
When you add JazzCash, Easypaisa, SadaPay or Raast as a funding method, the payment processing terms cross-reference this policy for how transaction data is retained and audited.
Withdrawal Verification
Identity checks during withdrawal processing are governed jointly by our verification procedures and this policy, which sets out how identity documents are stored and deleted.
Support Interaction Records
Chat and email records generated when you contact support are personal data under this policy. Retention and deletion rules for those records are consistent with what is stated here.
Data Portability Rights
Your right to receive a copy of your data, as described in this policy, applies equally to any data generated under our terms, cookie policy, or payment terms.
ACCOUNT DATA AT A GLANCE

Key Elements of Your Privacy on 999club

These six elements define how your privacy is structured when you hold an account with us. Each one reflects a deliberate design choice we made to keep your...

Consent on Account Creation When you open your account, we present a clear consent...
Right to Access Your Data You may request a full export of the personal data...
Right to Correct Records If any detail in your account profile is inaccurate, you...
Right to Erasure Where no legal hold applies, you may request that we...
Data Breach Notification In the event of a breach affecting your personal data...
No Automated Profiling We do not use your account data to build automated...

Your Privacy Questions, Answered Clearly

We collect your name, email address, phone number, date of birth for age verification, and the payment identifiers linked to JazzCash, Easypaisa, SadaPay or Raast. We do not collect data beyond what your account requires to function.

Payment identifiers for JazzCash, Easypaisa, SadaPay and Raast are stored in encrypted, isolated vaults separate from your main profile. Access is restricted to authorised payment processing systems only, and no raw account numbers are stored in plain text.

Yes. Submit a data access request through your account dashboard or email our privacy team. We will compile and deliver a readable export of all personal data we hold, within the period required by applicable law in supported Pakistan regions.

Retention periods depend on legal obligations. Transaction records linked to JazzCash, Easypaisa, SadaPay or Raast may be retained for the duration required by financial regulation. Once retention obligations expire, your data is permanently deleted from our systems.

We share data only with payment processors necessary to handle your JazzCash, Easypaisa, SadaPay or Raast transactions, and with regulatory bodies where law requires disclosure. We do not sell your data to advertisers or data brokers under any circumstance.

Use the erasure request form in your account settings or contact our privacy team directly. Where no legal hold applies, we complete deletion within 30 days and send written confirmation to your registered email address once the process is finished.

Contact our support team immediately through live chat or email and select the security topic. We will review your access logs, flag the account for investigation, and notify you of findings within 48 hours of your report being received.