Privacy Policy – 3999bet Pakistan Data Protection Commitment

1 Who We Are

3999bet is an online betting and gaming platform operated specifically for the Pakistani market. We offer sports betting — with particular depth on cricket and PSL — alongside live casino games including Baccarat and Andar Bahar. All financial transactions on 3999bet are conducted in Pakistani Rupees (PKR) through local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard cards issued by Pakistani banks.

As the operator of 3999bet, we act as the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your personal data is processed, and we are accountable for ensuring that processing is done lawfully, fairly, and transparently. If you have questions about how 3999bet handles your data, you can reach us at support@3999bet-khelo.com at any time.

2 Personal Data We Collect

3999bet collects personal data in several categories depending on how you interact with the platform. The table below gives a clear breakdown of what we collect, why we need it, and the legal basis for collecting it.

3999bet does not collect sensitive categories of personal data such as ethnic origin, religious beliefs, political opinions, biometric data, or health information — except where health-related information is voluntarily provided in the context of a responsible gaming support request, in which case it is handled with the strictest confidentiality.

3 How 3999bet Collects Your Data

3999bet collects personal data through the following means:

• Direct Submission: Information you provide when registering an account on 3999bet, completing KYC verification, making deposits or withdrawals, or contacting our support team. This is the primary source of your personal data on 3999bet.
• Automated Technical Collection: When you use the 3999bet platform, certain technical data is automatically collected — including your IP address, the type of device you are using, your browser, and your session activity. This happens automatically as a standard feature of all web platforms and is necessary for 3999bet to function securely.
• Cookies and Similar Technologies: 3999bet uses cookies and similar tracking technologies to maintain your login session, remember your preferences, and analyse how users interact with the platform. Further detail on how 3999bet uses cookies is provided in Section 7 of this policy.
• Payment Processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, or another payment method, the relevant payment provider may confirm transaction status and account holder details to 3999bet for verification purposes.
• KYC Verification Services: 3999bet may use third-party identity verification tools to assist with CNIC validation and document authentication. These services confirm the authenticity of documents you submit — they do not retain copies of your documents independently of the verification process.

4 Why 3999bet Uses Your Personal Data

3999bet processes your personal data for clearly defined purposes. We do not use your data for anything beyond what is described here. The main purposes for which 3999bet uses personal data are:

• Operating Your Account: Creating, maintaining, and securing your 3999bet account; processing your bets; managing your balance; handling deposits and withdrawals in PKR.
• Identity Verification: Confirming that you are who you say you are, that you meet the age requirement of 18+, and that your payment methods belong to you. This is required by our compliance obligations and is a condition of using the 3999bet platform.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns to identify and report suspicious financial activity as required under applicable law. 3999bet is obligated to maintain records of financial transactions and to report certain activities to relevant authorities.
• Fraud Prevention and Security: Detecting unauthorised access to accounts, identifying fraudulent payment activity, preventing duplicate account creation, and protecting the integrity of the 3999bet platform for all users.
• Customer Support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality and compliance purposes.
• Responsible Gaming: Monitoring account activity for signs of problem gambling behaviour and intervening proactively where necessary. This use of data is in the legitimate interest of user wellbeing and is a core part of 3999bet's responsible gaming programme.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the functionality, speed, and user experience of the 3999bet platform. Individual user data is not used for this purpose unless anonymised.
• Marketing Communications: Sending you information about promotions, bonuses, and new features on 3999bet — only where you have not opted out. See Section 12 for full details on how to manage your marketing preferences.

5 Who 3999bet Shares Your Data With

3999bet does not sell your personal data to any third party. We share your information only where it is genuinely necessary to operate the platform, comply with legal requirements, or protect the security of the 3999bet service. The categories of third parties with whom 3999bet may share data are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer processors, and card networks such as Visa and Mastercard. These providers receive only the data necessary to process your specific transaction.
• KYC and Identity Verification Providers: Third-party services used to authenticate CNIC documents and confirm identity. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.
• Technology and Hosting Providers: Companies that provide the servers, databases, and infrastructure on which 3999bet operates. These providers act as data processors under our instruction and do not use your data for their own purposes.
• Regulatory and Law Enforcement Authorities: Where required by law, 3999bet may disclose user data to relevant government bodies, law enforcement agencies, or financial intelligence units. This includes mandatory AML reporting obligations. Such disclosures are made only where legally required and are handled with strict care.
• Sporting Integrity Bodies: Where suspicious betting patterns trigger a statutory reporting obligation, 3999bet may share relevant betting records with recognised sporting integrity organisations. Individual users are not identified in such reports unless legally required.

All third-party service providers engaged by 3999bet are subject to data processing agreements that require them to protect your personal data to the same standard that 3999bet applies internally. We do not permit third parties to use your data for their own marketing or commercial purposes.

6 Payment Data & Financial Information

3999bet takes particular care with financial data given the sensitivity of payment information. The following specific rules apply to how financial data is handled on 3999bet:

Card Data

3999bet does not store full card numbers, CVV codes, or card expiry dates on its own servers. All card transactions are processed through a PCI-DSS Level 1 certified payment gateway. The gateway uses tokenisation — meaning a secure reference code replaces your actual card number in our systems. Even in the unlikely event of a data breach on 3999bet's systems, your actual card number would not be exposed.

Mobile Wallet Data

Your Easypaisa and JazzCash account numbers are stored by 3999bet in encrypted form for the purpose of processing deposits and withdrawals and verifying that payment methods match your registered identity. This data is not shared with any party other than the relevant payment processor for the specific transaction being processed.

Transaction Records

Full records of all deposits, withdrawals, and betting transactions on 3999bet are retained for a minimum of 5 years from the date of transaction. This retention is required by our compliance and AML obligations. These records are accessible to you via your account transaction history at any time while your account is active.

7 Cookies & Tracking Technologies

3999bet uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device when you visit a website. They are widely used and play an important role in making the 3999bet platform function correctly. Here is a plain explanation of what types of cookies 3999bet uses and what each one does:

Essential / Strictly Necessary Cookies

These cookies are necessary for the 3999bet platform to work at all. They maintain your login session so you do not have to re-enter your credentials on every page, store your bet slip contents temporarily while you are building a bet, and protect against cross-site request forgery attacks. Without these cookies, the 3999bet platform cannot function.

Analytics Cookies

3999bet uses analytics tools to understand how users navigate the platform — which pages are visited most, where users encounter friction, and how different features are used. This data is aggregated and anonymised and is used solely to improve the 3999bet experience. You can opt out of analytics cookies through your browser settings without affecting your ability to use 3999bet.

Functional Cookies

These cookies remember your preferences — such as your preferred language, odds format, or display settings — so that 3999bet looks and behaves the way you have set it up the next time you visit. Disabling these cookies will not prevent you from using 3999bet but may mean your preferences are not saved between sessions.

You can manage cookie preferences through your browser's settings at any time. Most browsers allow you to view, manage, and delete cookies individually or in bulk. Note that disabling essential cookies will prevent you from logging in to 3999bet.

8 Data Retention

3999bet retains personal data for as long as it is needed for the purpose for which it was collected, subject to applicable legal minimum retention periods. The following retention periods apply to different categories of data on 3999bet:

• Account Registration Data: Retained for the duration of your account being active, plus 5 years following account closure. This period is required for AML and compliance purposes.
• KYC Documents (CNIC copies, selfies): Retained for 5 years from the date of verification or account closure, whichever is later. Original KYC documents are stored in encrypted form with restricted access.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by financial record-keeping obligations.
• Betting History: Retained for 5 years from the date of each bet. Available to you in your account transaction history while your account is active.
• Support Communications: Retained for 2 years from the date of the last communication in a support thread, except where the communication relates to a formal complaint or regulatory matter, in which case the 5-year period applies.
• Technical and Usage Data: Aggregated and anonymised after 12 months. Anonymised analytics data may be retained indefinitely as it no longer constitutes personal data.
• Marketing Preferences: Records of your marketing consent or opt-out status are retained for the life of your account and for 5 years following account closure.

At the end of the applicable retention period, 3999bet securely deletes or anonymises personal data in accordance with industry-standard data destruction practices.

9 How 3999bet Secures Your Data

Data security is a core operational priority at 3999bet, not an afterthought. We employ a layered approach to protecting personal data:

• Encryption in Transit: All data transmitted between your device and 3999bet is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock icon in your browser when visiting 3999bet confirms this encryption is active.
• Encryption at Rest: Sensitive data fields stored in 3999bet's databases — including CNIC numbers, payment account details, and authentication credentials — are encrypted at the database level. Even if unauthorised access to the database were achieved, these fields would not be readable without the encryption keys.
• Access Controls: Access to personal data within 3999bet is restricted to employees and systems with a documented legitimate need. All internal access to identifiable user records is logged, and access logs are reviewed regularly.
• SMS OTP Authentication: Sensitive account actions — including withdrawals, password changes, and email changes — require confirmation via a one-time password sent to your registered Pakistani mobile number. This means even if your password were compromised, a third party could not access your funds without your physical mobile device.
• Penetration Testing: 3999bet's platform undergoes regular security testing by independent specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident affecting personal data, 3999bet has a documented incident response plan. Affected users will be notified promptly if their data is at risk, together with guidance on protective steps they can take.

10 Your Data Rights

As a 3999bet user, you have the following rights over your personal data. To exercise any of these rights, contact us at support@3999bet-khelo.com with your account username and a description of your request. We will respond within 30 calendar days.

11 Children's Privacy

3999bet is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18 years of age. Our registration process includes age verification steps specifically designed to prevent underage access. If 3999bet becomes aware that an account belongs to a person under 18, the account will be closed immediately, deposits will be returned to the original payment source, and any winnings generated will be forfeited.

If you are a parent or guardian and believe your child has created an account on 3999bet, please contact our support team at support@3999bet-khelo.com immediately. We will investigate and take appropriate action within 24 hours of receiving a credible report.

12 Marketing Communications

3999bet may send promotional emails and SMS messages to users about bonuses, new betting markets, platform features, and special offers. These communications are sent only to users who have not opted out of marketing contact. To opt out of 3999bet marketing communications, you can:

• Click the unsubscribe link included at the bottom of every 3999bet marketing email.
• Update your communication preferences in the My Account section of the 3999bet platform.
• Contact 3999bet support at support@3999bet-khelo.com and request removal from all marketing lists.

Once you opt out, 3999bet will stop sending promotional communications within 5 business days. Note that opting out of marketing does not affect service communications — you will still receive transactional messages such as deposit confirmations, withdrawal notifications, and OTP codes, as these are necessary for operating your account.

13 Third-Party Links

The 3999bet platform does not contain links to external third-party websites as a general rule. Where links to third parties do appear — for example, in the context of responsible gaming support resources — those third-party websites operate under their own privacy policies, which are entirely separate from and independent of this 3999bet Privacy Policy. 3999bet is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policy of any external website you visit.

14 Updates to This Privacy Policy

3999bet reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered users via email to their registered address and display a notice on the 3999bet platform for a minimum of 14 days before the changes take effect.

The date of the most recent update is displayed at the top of this page. The version number shown there can be used to identify which version of the policy was in effect at any given time. We recommend checking back periodically to stay informed about how 3999bet protects your information. Your continued use of 3999bet following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

15 Contact Us About Privacy

If you have any questions, concerns, or requests relating to your personal data and how 3999bet handles it, please get in touch. Our support team handles all data privacy enquiries and is available 24 hours a day, 7 days a week.

• Email: support@3999bet-khelo.com — include "Privacy Request" in the subject line for faster routing to the relevant team.
• Live Chat: Available on the 3999bet platform — average response time under 3 minutes.
• WhatsApp: Direct message our support team for account-specific queries.

For data rights requests — access, erasure, portability, rectification — please include your full registered name, the email address on your 3999bet account, and a clear description of what you are requesting. We aim to respond to all data rights requests within 30 calendar days. If your request is complex or involves a large volume of data, we may extend this by up to a further 30 days, in which case we will notify you of the extension before the initial deadline.

3999bet takes all privacy concerns seriously and will never penalise a user for raising a legitimate data rights request. Your account status and service access will not be negatively affected by exercising your rights under this policy.