vt999 Privacy Policy

This Privacy Policy ("Policy") describes how vt999 ("vt999", "we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the operation of the vt999 online casino and sports betting platform, accessible at vt999.asia (the "Platform").

vt999 is committed to protecting the privacy and personal data of all players, visitors, and users who interact with the Platform. We process personal data only for lawful purposes, in a transparent manner, and in strict accordance with the data protection obligations applicable under our operating licence conditions.

This Policy applies to:

• All registered players with an active or former vt999 Account;
• Visitors to the vt999.asia website, whether registered or unregistered;
• Individuals who contact vt999 support via live chat, email, or any other channel;
• Any other person whose personal data vt999 processes in connection with the Platform.

This Policy should be read alongside the vt999 Terms & Conditions (/terms-conditions) and the Responsible Gaming Policy (/responsible-gaming), which together govern your relationship with the Platform.

For the purposes of applicable data protection law, vt999 acts as the Data Controller in respect of personal data collected and processed through the Platform. As Data Controller, vt999 determines the purposes for which personal data is processed and the means by which that processing is carried out.

Where vt999 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, and analytics platforms), those parties act as Data Processors under written data processing agreements that bind them to process data only on vt999's documented instructions and to maintain appropriate security measures.

vt999 collects personal data across the following categories, limited to what is necessary for the stated processing purposes described in Section 5:

• Full legal name (as per CNIC, passport, or other government-issued document);
• Date of birth;
• Pakistani mobile number (registered with JazzCash or EasyPaisa, or as primary contact);
• Email address;
• Residential address (city, province, postal code);
• CNIC or passport number (collected as part of KYC — stored encrypted).

• Deposit and withdrawal transaction records (amount, method, date, status);
• Payment method identifiers (e.g., last four digits of a bank account, registered mobile wallet number);
• Account balance and bonus balance history;
• Source of funds documentation (where requested under AML procedures).

• Game session records (game title, stake, outcome, timestamp);
• Sports betting slip history (event, selection, odds, stake, result);
• Login and session timestamps;
• Responsible gaming tool usage (deposit limits set, self-exclusion periods);
• Bonus and promotion participation records.

• IP address at time of registration and each login;
• Device type, operating system, and browser type;
• Mobile network operator (where applicable);
• Geolocation data (country and city level, derived from IP address);
• Cookie identifiers and session tokens (see Section 9).

• Records of live chat support conversations;
• Email correspondence between the Player and vt999;
• Records of any complaints or formal dispute submissions.

vt999 collects personal data through the following channels and mechanisms:

vt999 does not purchase personal data lists from third-party data brokers or acquire player data from other gaming operators.

vt999 processes personal data for the following purposes, each supported by a lawful basis:

Purpose: Creating and maintaining your vt999 Account, including authentication and profile management.
Legal Basis: Performance of a contract (the Player Agreement formed upon registration).

Purpose: Verifying that you are aged 21 or above and that you are who you say you are, in compliance with licence conditions and applicable anti-money laundering obligations.
Legal Basis: Legal obligation and legitimate interests (regulatory compliance).

Purpose: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20; processing withdrawal requests; maintaining transaction records.
Legal Basis: Performance of a contract.

Purpose: Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited conduct. Monitoring transactions for suspicious activity in compliance with AML obligations.
Legal Basis: Legal obligation and legitimate interests (protection of the platform and other players).

Purpose: Monitoring gaming behaviour to identify potential problem gambling indicators; enforcing deposit limits and self-exclusion periods; sending responsible gaming communications.
Legal Basis: Legal obligation and legitimate interests (player welfare).

Purpose: Responding to queries, complaints, and disputes; maintaining support records for quality assurance and training.
Legal Basis: Performance of a contract and legitimate interests.

Purpose: Sending promotional emails, SMS notifications about bonuses, new games, and PSL / cricket betting offers — only where the Player has opted in to receive such communications.
Legal Basis: Consent. Players may withdraw consent at any time via account settings.

Purpose: Understanding how players use the Platform in aggregate in order to improve game selection, interface design, payment flows, and support quality. Analytics data is aggregated and de-identified where possible.
Legal Basis: Legitimate interests.

vt999 does not sell your personal data. We share personal data with third parties only in the following circumstances, and only to the minimum extent necessary:

We share transaction-relevant data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 network processors solely to execute deposit and withdrawal instructions. These providers receive only the data they require to complete the transaction.

We share identity documents and verification requests with licensed KYC and anti-fraud service providers who process this data under strict data processing agreements. These providers are prohibited from using your data for any purpose other than verification on vt999's behalf.

Game studios and live dealer operators (such as those supplying casino and live table content) receive anonymised session and game play data necessary to operate the game technically. These providers do not receive your identity or payment data.

vt999 will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. vt999 will notify affected players of such disclosures where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or a material part of vt999's business, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer before it takes effect and given the opportunity to delete their Account if they do not consent.

vt999 operates servers and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside of Pakistan. These countries may have data protection laws that differ from those in Pakistan.

Where personal data is transferred internationally, vt999 takes the following steps to ensure an appropriate level of protection:

• Transfers to third-party processors are governed by data processing agreements that incorporate standard contractual data protection clauses;
• We conduct due diligence on international service providers to confirm their data security standards before engaging them;
• Player financial data transferred for payment processing purposes is subject to PCI-DSS standards maintained by the relevant payment processors.

vt999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or licence obligations. The following indicative retention periods apply:

When data is no longer required, it is securely deleted or anonymised. Anonymised data (which cannot be re-linked to an individual) may be retained indefinitely for aggregate statistical analysis.

vt999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you visit a website. They serve a range of functions from essential Platform operation to analytics and, where consented to, personalisation.

You can manage cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary ones may affect Platform functionality. Blocking all cookies will prevent login from functioning correctly.

As a data subject, you hold the following rights in respect of your personal data held by vt999. To exercise any of these rights, contact vt999 support as described in Section 15. vt999 will respond to all data subject requests within 30 calendar days of receipt.

vt999 implements a layered security architecture to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures include:

• Transport Encryption: All data transmitted between your device and vt999 servers is encrypted using TLS 1.2 or higher (effectively 256-bit SSL). This applies to all pages, including login, deposit, and account management.
• Data Encryption at Rest: Sensitive data categories — including KYC documents and payment method identifiers — are encrypted at rest using AES-256 encryption on vt999's storage infrastructure.
• Access Controls: Internal access to player data is restricted on a need-to-know basis using role-based access control (RBAC). All access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): vt999 supports 2FA for player accounts to reduce the risk of unauthorised access via compromised credentials.
• Fraud Detection Systems: Automated systems monitor login patterns, transaction behaviour, and gaming activity for anomalies indicative of fraud or account takeover. Suspicious activity triggers automated holds and manual review.
• Regular Security Testing: vt999's Platform infrastructure undergoes periodic vulnerability assessments and penetration testing by qualified security professionals.
• Staff Training: All vt999 staff with access to player data receive regular data protection and security training as a condition of their role.

Age verification is a mandatory step in the vt999 registration and KYC process. Where vt999 identifies or has reasonable grounds to suspect that an Account is registered to an individual under the age of 21, the Account will be immediately suspended, all deposits refunded to the originating payment method, and any associated winnings voided.

Parents and guardians in Pakistan are strongly encouraged to make use of parental control tools and content filtering software to prevent minors from accessing online gambling platforms, including vt999. If you believe a minor has accessed or registered on the Platform, please contact vt999 support immediately at [email protected] so that the Account can be investigated and closed.

The vt999 Platform may display or reference links to third-party content, payment platforms, or service portals (for example, the JazzCash or EasyPaisa payment interface during a deposit flow). Once you navigate away from the vt999 Platform, this Privacy Policy no longer applies.

Third-party services and platforms operate under their own privacy policies and data practices. vt999 is not responsible for the data handling practices of third-party providers accessed through or in connection with the Platform. We encourage all players to review the privacy policies of any third-party service they interact with.

vt999 does not embed third-party advertising scripts, social media tracking pixels, or retargeting pixels on the Platform that would allow third parties to independently collect player data from vt999 pages without vt999's knowledge and documented approval.

vt999 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the features and services offered on the Platform. The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made.

When material changes are made to this Policy — that is, changes that significantly affect your privacy rights or how your data is used — vt999 will notify registered players by:

• Displaying a prominent notice on the Platform for a minimum of seven (7) days prior to the change taking effect; and / or
• Sending a notification to your registered email address (where you have opted into email communications).

Continued use of the Platform after the effective date of a Policy update constitutes acceptance of the revised Policy. If you do not accept the updated Policy, you should cease using the Platform and may close your Account in accordance with the vt999 Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or vt999's data processing activities — including the exercise of data subject rights as described in Section 10 — please contact the vt999 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the vt999 Platform. Recommended for general privacy questions and time-sensitive data requests.
• Email: [email protected] — For formal data subject requests (SAR, erasure, rectification, etc.), please use the subject line "Data Subject Request – [Your Request Type]". Include your registered Account username and a description of your request.

vt999 commits to acknowledging all privacy-related requests within 3 business days and to providing a full response within 30 calendar days. Complex requests may take up to an additional 30 days, in which case you will be informed of the extended timeline and the reason for it.