pv999 Privacy Policy

1.1 pv999 ("pv999", "the Platform", "we", "us") is the data controller responsible for the personal data of all registered users of the pv999 gaming platform accessible at pv999.bio. As data controller, pv999 determines the purposes for which and the means by which personal data is processed.

1.2 pv999 operates under an internationally recognised gaming licence. Our data handling practices are subject to the requirements of our licensing jurisdiction and applicable data protection regulations. We are committed to processing personal data lawfully, fairly, and transparently.

1.3 Questions, data requests, and privacy concerns may be directed to pv999 using the contact details set out in Section 16 of this Policy. For account-specific queries involving your personal data, you may also access pv999 customer support 24/7 via the live chat function within the pv999 platform.

2.1 pv999 collects the following categories of personal data from users of the pv999 platform:

2.2 pv999 does not collect data that is not necessary for the purposes described in this Policy. We apply the principle of data minimisation — collecting only what is required to deliver a secure, compliant, and functional gaming service to Pakistani players.

2.3 We do not collect biometric data (beyond the CNIC photograph required for regulatory compliance), political opinions, religious beliefs, health data, or any other special category personal data as defined under applicable data protection law, except where mandatory under applicable gaming regulation (e.g. responsible gaming status).

3.1 Directly from you. The majority of personal data pv999 processes is provided directly by you at the time of account registration, during the identity verification (KYC) process, when you make deposits or withdrawal requests via EasyPaisa, JazzCash, Raast, or bank transfer, and when you contact pv999 support.

3.2 Automatically through platform usage. When you use the pv999 platform — whether logging in, playing a game, placing a bet, or navigating between sections — pv999's systems automatically collect technical data including your IP address, device identifiers, browser type, session duration, and interaction patterns. This is standard practice for all digital platforms and is essential for security, fraud prevention, and platform functionality.

3.3 From payment processors. When you conduct financial transactions through pv999 using EasyPaisa, JazzCash, Raast, or banking services, our payment processing partners return transaction confirmation data to pv999, including transaction identifiers, amounts, timestamps, and status confirmations. pv999 does not store your full EasyPaisa or JazzCash PIN or account password.

3.4 From identity verification services. Where pv999 uses third-party Know Your Customer (KYC) verification tools to validate CNIC authenticity, those services may return verification status data to pv999. The scope of data transferred in that process is limited to what is necessary for verification.

3.5 Cookies and similar technologies. pv999 uses cookies and similar tracking technologies to maintain login sessions, recognise returning users, and analyse platform usage patterns. Full details are provided in Section 8 of this Policy.

4.1 pv999 processes your personal data for the following purposes:

4.2 pv999 does not use your personal data for purposes other than those listed above without first obtaining your express consent or where otherwise required by applicable law.

5.1 pv999 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing required to fulfil pv999's obligations under the account agreement with you — including account creation, payment processing, game delivery, and support.
• Legal Obligation: Processing required to comply with pv999's regulatory obligations — including AML/CTF compliance, age verification, gaming licence requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing necessary for pv999's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, security monitoring, platform analytics, and dispute resolution.
• Consent: Where pv999 relies on your consent — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

5.2 Where pv999 relies on legitimate interests as a legal basis, we conduct a balancing assessment to ensure that our interests do not unfairly override your fundamental privacy rights.

6.1 CNIC Data. pv999 collects Pakistani CNIC numbers and CNIC photographs as part of the mandatory identity and age verification process. This data is used exclusively for: (a) verifying that you are who you claim to be; (b) confirming that you are 21 years of age or older; and (c) complying with pv999's AML/CTF obligations. CNIC data is stored in encrypted form and is not shared with third parties except where required by law or by our gaming licence obligations.

6.2 EasyPaisa & JazzCash Data. When you use EasyPaisa or JazzCash for deposits or withdrawals on pv999, we receive and store the mobile wallet account number and transaction confirmation data associated with the transaction. We do not store your EasyPaisa or JazzCash account PIN, wallet password, or full financial credentials. Payment processing is handled through encrypted API integrations directly with the respective payment providers.

6.3 Bank & Raast Data. For withdrawals processed via HBL, UBL, Meezan Bank, or the Raast instant payment system, pv999 stores your account title, IBAN, and Raast ID as necessary to process and record the transaction. This data is encrypted and accessible only to authorised pv999 financial operations personnel on a need-to-know basis.

6.4 PCI Compliance. pv999 does not store, transmit, or process full card numbers, CVV codes, or magnetic stripe data for Visa or Mastercard transactions. Card payment processing is handled by PCI-DSS compliant payment gateway partners, and pv999 receives only transaction confirmation tokens.

7.1 pv999 does not sell your personal data to third parties. We do not share your data with advertisers, data brokers, or marketing agencies. The following are the limited circumstances in which pv999 shares personal data with third parties:

7.2 All third parties with whom pv999 shares personal data are required to maintain appropriate security standards and to use the data solely for the purpose for which it was disclosed. pv999 does not permit third-party service providers to use shared data for their own marketing or business purposes.

8.1 pv999 uses cookies — small text files stored on your device — and similar technologies to operate the pv999 platform. The following categories of cookies are used:

• Essential Cookies: Required for the pv999 platform to function. These maintain your login session, remember your security preferences, and enable core gaming features. These cookies cannot be disabled without preventing you from using pv999.
• Security Cookies: Used to detect fraudulent login attempts, prevent cross-site request forgery, and protect your pv999 account from unauthorised access. These are essential and cannot be opted out of.
• Analytics Cookies: Used to understand how Pakistani players use the pv999 platform — which games are most popular, how players navigate between sections, and where technical errors occur. Analytics data is aggregated and anonymised. You may opt out of analytics cookies by adjusting your browser settings.
• Preference Cookies: Remember your display preferences (e.g. language settings, game filter selections) for a more convenient return visit. These are optional.

8.2 pv999 does not use third-party advertising cookies or tracking pixels for behavioural advertising purposes.

8.3 Most browsers allow you to manage, block, or delete cookies through your browser settings. Note that blocking essential or security cookies will prevent you from using the pv999 platform correctly. For guidance on managing cookies on your device's browser (Chrome, Safari, or your phone's default browser), please consult your browser's help documentation.

9.1 pv999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pv999 platform;
• AES-256 encryption for personal data stored in pv999's databases, including CNIC data and financial records;
• Bcrypt hashing for all stored account passwords (pv999 never stores your password in plain text);
• Access controls limiting personal data access to authorised pv999 personnel on a strict need-to-know basis;
• Multi-factor authentication for pv999 staff systems that process personal data;
• Regular penetration testing and vulnerability assessments of pv999's technical infrastructure;
• Automated intrusion detection and suspicious activity monitoring systems.

9.2 Despite these measures, no digital platform can guarantee absolute security. In the event of a data security breach that is likely to result in a risk to your rights and freedoms, pv999 will notify affected users within a reasonable timeframe in accordance with applicable regulatory requirements.

9.3 You are also responsible for maintaining the security of your pv999 account. This includes keeping your password confidential, enabling Two-Factor Authentication (2FA), and not sharing your login credentials with any third party — including anyone claiming to be from pv999 support.

10.1 pv999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with legal and regulatory retention obligations.

10.2 The following retention periods apply to key categories of personal data held by pv999:

10.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for statistical or analytical purposes without further privacy obligation.

11.1 Subject to applicable law and pv999's regulatory obligations, you have the following rights regarding your personal data held by pv999:

11.2 To exercise any of these rights, contact pv999 at [email protected] or via the pv999 live chat support channel. pv999 may require identity verification before processing any data rights request to ensure the request is made by the verified account holder. Requests will be processed within thirty (30) calendar days of receipt of a complete, verified request.

11.3 Where pv999 declines to action a data rights request — for example, because compliance with the request would conflict with a legal retention obligation — pv999 will explain the reason for the refusal in writing.

12.1 pv999 is strictly an adult gaming platform. Access to all pv999 services is restricted to individuals aged 21 years or older. pv999 does not knowingly collect personal data from individuals under the age of 21.

12.2 Age verification is enforced through CNIC-based identity checks at the time of first withdrawal. Where pv999 discovers that an account has been registered by an individual under the age of 21, that account will be immediately and permanently closed, and all personal data associated with the account will be deleted to the extent not required by law to be retained.

12.3 If you are a parent or guardian and have reason to believe that a minor has registered a pv999 account, please contact pv999 support immediately via live chat or at [email protected]. pv999 will investigate and take appropriate action within 48 hours of receipt of a credible report.

13.1 With your consent, pv999 may send you promotional communications about new games, bonus offers, PSL season promotions, and other pv999 platform updates via SMS to your registered Pakistani mobile number or via in-platform notifications.

13.2 You may withdraw your consent to receive marketing communications at any time by: (a) updating your notification preferences within your pv999 account settings; (b) replying "STOP" to any pv999 SMS marketing message; or (c) contacting pv999 support via live chat and requesting removal from marketing communications.

13.3 Withdrawal of consent to marketing communications does not affect your ability to continue using pv999's gaming services or receive essential account and security notifications, which are not marketing communications and cannot be opted out of while your account is active.

13.4 pv999 does not share your contact details with third-party marketers. All pv999 promotional communications are sent directly by pv999 and relate exclusively to pv999 platform content.

14.1 pv999's core platform infrastructure and primary data storage systems are located in data centres that meet international security standards applicable to the gaming industry. Where personal data is transferred outside of Pakistan — for example, to gaming software providers, cloud infrastructure providers, or KYC verification services operating internationally — pv999 ensures that appropriate data transfer safeguards are in place.

14.2 Safeguards used for international data transfers include contractual data processing agreements with all third parties that receive personal data, incorporating data protection obligations equivalent to those applicable in pv999's licensing jurisdiction.

14.3 pv999 does not transfer CNIC data internationally unless required to do so under the specific requirements of our gaming licence regulatory framework or by applicable Pakistani law. Where such transfer is required, it is conducted under strict confidentiality and security obligations.

15.1 pv999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to our gaming licence obligations, changes in applicable law, or improvements to the pv999 platform. When material changes are made, pv999 will notify registered account holders by displaying a prominent notice on the pv999 platform or by sending a notification to the mobile number registered to your account.

15.2 The most current version of this Privacy Policy is always available at pv999.bio/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of pv999 following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

15.3 If any update to this Privacy Policy requires your active consent under applicable law, pv999 will seek that consent before the updated processing begins.

16.1 For all privacy-related enquiries, data rights requests, or concerns about how pv999 handles your personal data, please contact us using the following channels:

16.2 When submitting a data rights request by email, please include your registered Pakistani mobile number and be prepared to verify your identity before we can action any request relating to personal data. This requirement is in place to ensure we only release personal data to verified account holders.

16.3 If you are not satisfied with pv999's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.