NR999 Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy explains how NR999 ("we", "us", "the Platform", "nr999") collects, processes, stores, and protects personal information belonging to players and visitors who use the website nr999.ws and all related services — including casino games, sports betting, live dealer tables, the Aviator crash game, and all account management functions.

This policy applies to every person who accesses nr999.ws from Pakistan or any other location, whether or not they have created a registered account. If you are simply browsing the site, some data collection (such as cookies and technical logs) still occurs as described in Section 6. If you register an account, a broader range of personal data is collected and processed as set out in Section 2.

By using NR999 and accepting these terms at registration, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree, you should not use the platform.

NR999 only collects data that is genuinely necessary to operate a secure online gaming platform for Pakistani players. We do not collect data "just in case" — every category below has a specific purpose explained in Section 3.

Registration and Identity Data

• Full name as registered
• Pakistani mobile number (used for account access and transactional alerts)
• Date of birth (age verification — 18+ only)
• National Identity Card (CNIC) number and/or copy (requested during KYC verification for accounts above certain transaction thresholds)
• Email address (if provided during registration)

Financial and Transaction Data

• Easypaisa or JazzCash wallet numbers used for deposits and withdrawals
• NayaPay, SadaPay, or bank account details (where used for IBFT transactions)
• Visa/Mastercard bank card details (card number is tokenised and never stored in plain text by NR999 directly)
• Transaction history: deposit amounts, dates, withdrawal amounts, bonus awards, and betting history in PKR

Technical and Device Data

• IP address at time of access
• Device type, operating system version, and browser type
• Session timestamps and duration
• Game interaction logs (rounds played, amounts wagered, outcomes) — used for dispute resolution and responsible gaming monitoring

Communications Data

• Records of live chat and email exchanges with our support team
• Records of any self-exclusion or responsible gaming tool activations

NR999 processes your personal information for clearly defined purposes. We do not use your data for anything outside the scope of running the platform securely and fairly for Pakistani players.

• Account Creation and Authentication: Your mobile number, name, and date of birth are required to create a secure account, verify that you are 18 or over, and confirm your identity when you log in.
• Processing Payments in PKR: Financial data including your Easypaisa/JazzCash wallet number and transaction history is essential for processing deposits, paying out withdrawals, and maintaining an accurate account balance in Pakistani Rupees.
• Anti-Money Laundering (AML) and Know Your Customer (KYC): Certain transaction thresholds trigger identity verification requirements. NR999 is obligated to conduct KYC checks to prevent the platform being used for money laundering or fraud. This involves verifying your CNIC and cross-checking your identity against relevant databases.
• Fraud Detection and Account Security: IP address logs, device data, and session information are used to detect suspicious login attempts, multiple account creation, and patterns consistent with fraud or bonus abuse.
• Responsible Gaming Monitoring: Game interaction logs allow NR999 to identify patterns that may indicate problem gambling behaviour, enabling proactive outreach and ensuring responsible gaming tools are offered appropriately.
• Customer Support: Communication records allow our support team to resolve your queries accurately and give you continuity across multiple interactions without you needing to repeat your history each time.
• Regulatory Compliance: Pakistani law and international gaming regulations require us to maintain certain records for specified periods. Compliance with legal obligations is a non-negotiable use of your data.
• Promotional Communications: Where you have opted in, your contact details may be used to send bonus offers, platform updates, and relevant promotions. You can opt out at any time.

NR999 processes personal data under several lawful bases, each of which applies to specific categories of processing:

• Contractual Necessity: Most core data processing — account creation, payment processing, game access, withdrawal management — is necessary for NR999 to fulfil its obligations under the User Agreement you accepted at registration.
• Legal Obligation: KYC verification, AML record-keeping, and transaction logging are required by applicable legal and regulatory frameworks. We cannot waive these requirements.
• Legitimate Interests: Fraud detection, platform security monitoring, and responsible gaming monitoring are conducted based on NR999's legitimate interest in maintaining a safe and fair platform for all players.
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

NR999 does not sell your personal data to any third party. Your information is shared only in the following specific and controlled circumstances:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and bank partners receive the transaction data strictly necessary to process your deposits and withdrawals. These providers operate under their own certified data protection frameworks (PCI-DSS for card processors).
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, and Spribe receive your session identifier and game-interaction data necessary to deliver game functionality. They do not receive your name, CNIC, payment details, or contact information.
• Identity Verification Services: Where KYC checks are required, your CNIC information may be shared with a certified identity verification service. These providers are bound by strict confidentiality agreements with NR999.
• Fraud and AML Detection Services: Anonymised or pseudonymised transaction patterns may be shared with specialist fraud detection services to identify and prevent abuse across the platform.
• Legal and Regulatory Authorities: NR999 will disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, a valid court order, or a legitimate regulatory investigation. We will challenge any legally deficient requests.

NR999 uses cookies and similar browser-based storage technologies to operate the platform efficiently and to understand how players use the site. Here is a breakdown of the types of cookies in use:

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in and using the platform. Disabling optional cookies will not affect core gameplay or payment functionality.

NR999 does not keep your data indefinitely. Retention periods are set based on operational necessity and legal requirements:

• Active account data: Retained for the full duration of your active account relationship with NR999, plus a period of up to five years after account closure, as required for financial and regulatory audit purposes.
• Transaction records: Deposit, withdrawal, and betting history is retained for a minimum of five years from the date of the transaction to comply with AML record-keeping requirements.
• KYC verification documents: Retained for up to five years after the account is closed. Secure deletion is carried out after this period.
• Support communications: Retained for up to three years after the last interaction or account closure, whichever is later, to support any subsequent dispute or regulatory enquiry.
• Marketing preferences: If you have opted in to promotional communications, your preference record is retained until you opt out. After opting out, your marketing data is deleted within 30 days.
• Technical logs (IP, session): Retained for up to 12 months for fraud detection and security monitoring purposes, then deleted.

When data reaches the end of its retention period, NR999 carries out secure deletion using certified data destruction processes. This applies to all data storage systems — databases, backups, and any offline archives.

Protecting the personal data of NR999 players is one of the platform's highest operational priorities. The following security measures are in place at all times:

• 256-bit SSL/TLS Encryption: All communications between your device and nr999.ws are encrypted using industry-standard SSL/TLS certificates. The padlock icon in your browser confirms this on every page.
• Encrypted Data at Rest: All databases containing personal and financial data are encrypted at rest. Even if a storage medium were compromised, the data would be unreadable without the encryption keys, which are stored separately.
• Access Controls: Personal data is accessible only to NR999 team members with a demonstrated need to access it for their role. Access is logged, audited, and role-restricted.
• Two-Factor Authentication (2FA): All internal NR999 staff with access to player data systems are required to use 2FA. Players can also enable 2FA on their own accounts for additional security.
• PCI-DSS Compliant Payment Processing: Card payment processing is handled by certified payment processors who meet Payment Card Industry Data Security Standard (PCI-DSS) requirements. NR999 itself never stores raw card details.
• Regular Security Audits: The NR999 platform undergoes periodic security reviews and vulnerability assessments conducted by our technical team.
• Incident Response: In the event of a confirmed data breach affecting Pakistani players, NR999 will notify affected users promptly with information about what data was involved and what steps to take.

You have real, actionable rights over your personal data held by NR999. Here is what each right means and how to exercise it:

To exercise any of the above rights, contact NR999 at support@nr999.ws with the subject line "Data Rights Request" and your registered mobile number. We will acknowledge your request within 48 hours and complete it within 30 days. Complex requests may take up to 60 days; we will inform you if this applies.

Please note that the Right to Erasure is subject to legal limitations. We cannot delete financial transaction records or KYC documentation before their mandatory retention period expires, as these are required by law. We will explain clearly which data can and cannot be deleted and why.

NR999 does not knowingly collect personal data from any person under the age of 18. The platform is strictly intended for adults. If you are under 18, you must not attempt to register an account or use any service on nr999.ws.

If NR999 discovers or has reasonable grounds to believe that a registered account belongs to a minor, the account will be closed immediately. All funds in the account will be returned to the payment source used for the initial deposit, and all game history associated with that account will be voided. The matter may be referred to relevant child protection authorities where appropriate.

If you are a parent or guardian and believe that your child has registered on NR999, please contact us immediately at support@nr999.ws. We will investigate and take action within 24 hours of a substantiated report.

NR999 reviews this Privacy Policy periodically and updates it when our practices change, when the platform introduces new features that affect data collection, or when regulatory requirements change. The "Last Updated" date at the top of this page reflects the most recent revision.

When we make substantive changes that affect your rights or the way your data is used, we will notify registered players via their registered mobile number or email address at least 7 days before the changes take effect. For minor clarifications and non-material updates, the revised policy will simply be published without prior notification.

Continued use of NR999 after a notified policy update comes into effect constitutes your acceptance of the revised Privacy Policy. If you disagree with a revision, you have the right to close your account and request deletion of your data in accordance with Section 9.

If you have any questions, concerns, or requests related to this Privacy Policy or to the personal data NR999 holds about you, you can reach us through the following channels:

• Email: support@nr999.ws — use the subject line "Privacy Query" or "Data Rights Request"
• Live Chat: Available 24/7 on nr999.ws — ask to speak with someone about a privacy or data matter
• Response Time: We acknowledge all privacy queries within 48 hours and aim to fully resolve them within 30 days

Our support team includes trained staff who handle data protection queries and can escalate to our data management team where required. All privacy-related communications are treated as confidential and handled separately from general support queries.