Privacy Policy

This Privacy Policy ("Policy") describes how ve999 ("we", "us", "our", "the Operator") collects, uses, stores, discloses and protects the personal data of individuals ("User", "you", "your") who access or use the ve999 website at https://ve999.cam and any associated products or services provided through the platform.

ve999 is committed to handling personal data responsibly and in accordance with applicable data-protection principles. By registering an account on ve999, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which form part of the overall agreement between you and ve999.

For the purposes of this Policy, the following definitions apply:

• "Controller" means ve999, the entity that determines the purposes and means of processing personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed — in this context, a registered or prospective user of the ve999 platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, date of birth, payment details, IP address and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Processor" means any third party that processes personal data on behalf of ve999 under a contractual obligation and subject to appropriate data-protection safeguards.
• "Sensitive Personal Data" means data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or data concerning a person's sexual orientation or identity.
• "Third Party" means any natural or legal person other than the Data Subject, the Controller and the Processor.

ve999 collects personal data through several channels, including account registration, identity verification, platform usage, payment processing and support interactions. The categories of data we may collect include:

• Full legal name, date of birth and gender.
• Residential address, city and country (including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar).
• Email address and telephone number.
• Username and password (stored in encrypted form).
• Copies of government-issued identity documents (e.g., National Identity Card, passport) submitted for KYC purposes.

• Deposit and withdrawal transaction records, including amounts, dates, currencies and payment method references.
• Payment method identifiers (e.g., partial account numbers, wallet IDs) necessary to process transactions. Full payment card numbers are not stored by ve999 and are handled directly by our payment processor partners.
• PKR (Pakistani Rupee) transaction history where applicable.

• IP address, browser type, operating system and device identifiers.
• Pages visited, features used, session duration and navigation patterns on the ve999 platform.
• Geolocation data derived from IP address (not GPS-level location).
• Cookie identifiers and tracking pixels (see Section 8).

• Records of live chat conversations, email correspondence and support tickets submitted to ve999's support team.
• Feedback and survey responses submitted voluntarily.

• Records of responsible-gambling tool usage, including deposit limits set, self-exclusion requests and cooling-off periods applied.
• Behavioural data used to identify patterns consistent with problem gambling in order to fulfil our duty-of-care obligations.

ve999 processes personal data for the following purposes:

ve999 processes personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing required to fulfil the agreement between you and ve999 under the Terms & Conditions — including account creation, transaction processing and KYC verification.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering regulations and licence obligations.
• Legitimate Interests: Processing carried out in pursuit of ve999's legitimate business interests, including fraud prevention, platform security, responsible-gambling monitoring and service improvement, where such interests are not overridden by the rights and interests of Data Subjects.
• Consent: Processing based on your freely given, specific and informed consent — primarily in relation to marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ve999 does not sell your personal data to third parties. We may share personal data with the following categories of recipients, only to the extent necessary for the stated purpose and subject to appropriate contractual data-protection obligations:

• KYC & Identity Verification Providers: Third-party services that assist with age and identity verification as part of our licence obligations.
• Payment Processors: Service providers that facilitate deposits and withdrawals. Payment references to familiar Pakistani services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual only; these entities receive only the data necessary to process the specific transaction they facilitate and are subject to their own privacy policies.
• Fraud Prevention & AML Services: Third-party providers used to detect and prevent fraudulent activity and to fulfil anti-money laundering obligations.
• Platform Technology Providers: Software and infrastructure providers supporting the operation of the ve999 platform, including cloud hosting, analytics and customer support software.
• Regulatory Authorities & Law Enforcement: Where required by law, court order or legitimate regulatory request, ve999 may disclose personal data to competent authorities.
• Professional Advisors: Legal, financial and compliance advisors engaged by ve999, subject to professional confidentiality obligations.

ve999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active account is retained for the duration of the account relationship plus any mandatory post-closure retention period required by applicable law or licence conditions.
• KYC & Transaction Records: Identity documents and financial transaction records are retained for a minimum period as required by anti-money laundering regulations applicable to ve999's operating jurisdiction. This typically ranges from five to seven years following account closure or the date of the last relevant transaction.
• Responsible Gambling Records: Self-exclusion records and responsible-gambling intervention records are retained for the period of the exclusion and for a minimum period thereafter, to prevent circumvention of self-exclusion through re-registration.
• Support & Communications Records: Support ticket and chat records are retained for a period sufficient to resolve any related disputes and to comply with applicable complaint-handling obligations.
• Marketing Data: Marketing opt-in records and related communications are retained for the period of the consent plus a reasonable period thereafter for evidential purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ve999's internal data disposal procedures.

ve999 uses cookies and similar tracking technologies (including pixels, local storage objects and session identifiers) to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Preference Cookies: Used to remember your settings and preferences, such as language selection and display options, to provide a more personalised experience.
• Analytics Cookies: Used to collect anonymised data about how users interact with the ve999 platform, including pages visited, session duration and navigation paths. This data is used solely to improve platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content to users who have opted in to receive marketing communications. These cookies require your prior consent and may be disabled without affecting core platform functionality.

You may manage your cookie preferences through the cookie consent interface provided when you first access the platform, or through your browser settings. Please note that disabling certain cookies may affect the functionality of specific platform features.

ve999 implements technical and organisational measures appropriate to the sensitivity of the personal data we process, including:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the ve999 platform.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Access controls restricting personal data access to authorised personnel with a documented legitimate need.
• Two-factor authentication (2FA) available to all registered users to protect account access.
• Regular security assessments and monitoring to detect and respond to potential vulnerabilities or incidents.
• Incident response procedures to manage, contain and notify of personal data breaches in accordance with applicable obligations.

ve999 operates as an international online platform. Personal data collected from users — including those based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other cities across Pakistan — may be transferred to and processed in countries other than the country in which it was collected.

Where personal data is transferred outside the country of collection, ve999 ensures that appropriate safeguards are in place to protect the data in accordance with applicable data-protection standards. These safeguards may include contractual clauses, processor agreements or other recognised transfer mechanisms.

By registering and using the ve999 platform, you consent to the transfer of your personal data to ve999's servers and service providers, which may be located in jurisdictions outside Pakistan.

Subject to applicable law and any overriding legitimate or regulatory interests, you have the following rights in respect of your personal data held by ve999:

To exercise any of the above rights, please contact the ve999 support team using the details provided in Section 15. ve999 will respond to verified rights requests within a reasonable timeframe. We may need to verify your identity before processing certain requests.

The ve999 platform is strictly for adults aged 18 years or older, or the higher minimum age required by the operator or applicable licence jurisdiction. ve999 does not knowingly collect personal data from individuals who are under the applicable minimum age.

If ve999 becomes aware that personal data has been collected from a minor, the relevant account will be suspended immediately and the data will be deleted, subject to any overriding legal retention obligations. Any winnings or transactions associated with an underage account may be voided in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on ve999 or that personal data of a minor has been collected, please notify our support team immediately using the contact information in Section 15 of this Policy.

The ve999 platform does not contain links to external third-party websites. However, certain third-party service providers — including payment processors and identity verification providers — operate their own platforms and privacy practices independently of ve999.

When you interact with a third-party service in connection with your ve999 account (for example, by initiating a payment through a payment provider), that third party's own privacy policy and terms govern their processing of your personal data. ve999 is not responsible for the privacy practices of third-party service providers beyond the contractual obligations imposed on them as data processors acting on ve999's behalf.

Payment provider names referenced on ve999 — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned for contextual familiarity only. Their inclusion does not imply any affiliation, endorsement or data-sharing arrangement beyond what is strictly necessary to process user-initiated transactions.

ve999 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements or our data-processing practices. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a material change is made to this Policy, ve999 will use reasonable endeavours to notify registered users via email or a prominent notice on the platform prior to the change taking effect. Continued use of the ve999 platform following notification of changes constitutes acceptance of the revised Policy.

We encourage you to review this Policy periodically. If you have any questions about a recent amendment, please contact our support team using the details provided in Section 15.

If you have any questions about this Privacy Policy, wish to exercise your data-subject rights or have a concern about how ve999 handles your personal data, please contact our support team using the details below. We aim to respond to all privacy-related inquiries within a reasonable timeframe.

When contacting us in relation to a data-subject rights request, please include your registered email address and a clear description of the right you wish to exercise. We may need to verify your identity before processing your request. Responses will be provided in English.