Privacy Policy — p6999

01 Introduction

This Privacy Policy (hereinafter "Policy") is issued by p6999, the operator of the online gaming information platform accessible at https://p6999.cam/ (hereinafter "Platform", "we", "us" or "our"). This Policy governs the collection, processing, storage and disclosure of personal data relating to any individual who accesses or uses the Platform (hereinafter "User", "you" or "your").

By accessing the Platform, creating an account or otherwise interacting with any part of p6999.cam, you acknowledge that you have read and understood this Privacy Policy in full. This Policy is incorporated by reference into our Terms & Conditions and should be read alongside them.

p6999 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. We process only the data that is necessary for the purposes described in this Policy, and we do not sell personal data to third parties under any circumstances.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, national identity number (CNIC), financial details and device identifiers.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, alteration, retrieval, consultation, use, disclosure, restriction or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is p6999.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, under contractual obligation and subject to appropriate data protection safeguards.
• "KYC Data" — Identity and verification documentation submitted by users as part of the Know Your Customer process, including government-issued ID, proof of address and payment method documentation.
• "Cookies" — Small text files stored on a user's device by a web browser to retain session, preference or analytical information.
• "Consent" — A freely given, specific, informed and unambiguous indication of the user's agreement to the processing of their personal data for one or more stated purposes.
• "Legitimate Interest" — A lawful basis for processing where the processing is necessary for purposes the Data Controller reasonably believes to be legitimate, provided such interests do not override the fundamental rights of the data subject.

03 Data Controller

p6999 acts as the Data Controller in respect of all personal data collected and processed through this Platform. As Data Controller, p6999 is responsible for determining the purposes and lawful bases for all data processing activities described in this Policy.

Where p6999 engages third-party Data Processors — such as identity verification services, payment infrastructure providers or analytics platforms — it does so under written data processing agreements that impose equivalent data protection obligations on those processors.

For all data-related enquiries, requests or complaints, please contact our designated data handling team at the contact details provided in Section 15 of this Policy.

04 Data We Collect

p6999 collects personal data through the following channels: direct submission by the user during registration and account management; automated collection during platform usage; and third-party sources during identity verification and fraud prevention checks.

05 Data Processing & Legal Basis

p6999 processes personal data on the following lawful bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing necessary to perform the contract between p6999 and the user, including account management, payment processing, bonus administration and customer support.
• Legal Obligation: Processing required to comply with applicable regulatory requirements, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) verification and responsible gambling mandates.
• Legitimate Interests: Processing carried out in furtherance of p6999's legitimate business interests, including fraud detection, platform security, analytics and service improvement, provided such interests are not outweighed by the rights of the data subject.
• Consent: Where required by applicable law, p6999 will obtain explicit consent before processing data for specific purposes, such as certain direct marketing activities. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

06 How We Use Your Data

p6999 uses collected personal data for the following purposes:

6.1 Platform Operation

• Creating, managing and maintaining user accounts;
• Processing deposits and withdrawals, including transactions referencing Pakistan payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah where applicable (listed for context only — not an endorsement);
• Operating KYC and identity verification workflows;
• Administering bonus offers and promotional programmes in accordance with published terms.

6.2 Security, Compliance & Fraud Prevention

• Detecting, investigating and preventing fraudulent, abusive or otherwise unlawful activity;
• Fulfilling anti-money-laundering, counter-terrorism-financing and sanctions-screening obligations;
• Monitoring for and responding to platform security incidents;
• Maintaining audit trails as required by applicable regulatory frameworks.

6.3 Responsible Gambling

• Administering self-exclusion requests and cooling-off periods;
• Monitoring usage patterns that may indicate problem gambling behaviour;
• Enforcing deposit limits, loss limits and session time limits set by the user or imposed by p6999.

6.4 Communications & Support

• Responding to support requests, complaints and enquiries;
• Sending transactional communications related to your account (e.g., deposit confirmations, withdrawal notifications, KYC status updates);
• Sending promotional and marketing communications where lawfully permitted and not opted out.

6.5 Analytics & Platform Improvement

• Understanding how users interact with the Platform to improve features, content and navigation;
• Conducting internal research and analytics to enhance the user experience.

07 Data Sharing & Disclosure

p6999 does not sell, rent or trade personal data to third parties. Disclosure of personal data is limited to the following categories of recipient, and only to the extent necessary for the stated purpose:

• Payment Processors: Third-party payment infrastructure providers who process transactions on behalf of p6999, subject to contractual data processing obligations and PCI-DSS compliance requirements.
• Identity Verification Providers: KYC and AML service providers engaged to verify user identities and screen against relevant sanctions and politically-exposed-persons (PEP) lists.
• Regulatory & Law Enforcement Authorities: Government bodies, regulators or law enforcement agencies where disclosure is required by law, court order or binding regulatory directive.
• Fraud Prevention Services: Industry fraud-prevention and risk-assessment platforms used to detect and prevent financial crime and account abuse.
• Technology & Infrastructure Providers: Cloud hosting, data storage and platform infrastructure providers operating under data processing agreements with appropriate security and confidentiality provisions.
• Professional Advisers: Legal, accounting and audit firms, subject to professional confidentiality obligations, where their services require access to relevant data.

In the event of a corporate restructuring, merger, acquisition or sale of assets, user data may be transferred to the successor entity, subject to equivalent data protection commitments.

08 Data Retention

p6999 retains personal data for no longer than is necessary for the purposes for which it was collected, and in compliance with applicable regulatory retention requirements. The following general retention principles apply:

• Account Data: Retained for the duration of the account and for a period of up to five (5) years following account closure, to satisfy AML, KYC and dispute-resolution obligations.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC Documents: Identity verification documents are retained for the period required by applicable regulatory frameworks, typically five (5) years post-account closure.
• Communications Data: Support correspondence and chat transcripts are retained for a minimum of two (2) years from the date of the interaction.
• Technical & Usage Data: Typically retained for up to thirteen (13) months for analytical and security purposes, unless a longer period is required by law.
• Self-Exclusion Records: Retained indefinitely to ensure effective enforcement of self-exclusion commitments and to prevent re-registration during an active exclusion period.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised in accordance with p6999's data disposal procedures.

09 Data Security

p6999 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for data stored at rest on Platform infrastructure;
• Role-based access controls restricting internal access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular security assessments, penetration testing and vulnerability management processes;
• Incident response procedures, including breach notification protocols in accordance with applicable regulatory requirements.

10 Cookies & Tracking Technologies

p6999 uses cookies and similar tracking technologies to operate the Platform, understand user behaviour and improve the user experience. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session management cookies, security tokens and authentication cookies. These cannot be disabled without impairing platform functionality.
• Analytical Cookies: Used to collect anonymised or pseudonymised data about how users interact with the Platform — such as pages visited, time spent and navigation paths — to inform platform improvements.
• Functional Cookies: Used to remember user preferences, such as language settings and responsible gambling limit configurations, to provide a personalised experience.
• Marketing Cookies: Where applicable and consented to, used to track the effectiveness of marketing communications and present relevant promotional content.

You may manage non-essential cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies or alert you before a cookie is set. Please note that disabling cookies may affect certain platform functionalities.

11 User Rights

Subject to the applicable laws of your jurisdiction and the exemptions permitted thereunder, you may have the following rights in respect of your personal data held by p6999:

• Right of Access: The right to request confirmation of whether p6999 processes your personal data, and to obtain a copy of that data.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances, subject to p6999's legal obligations to retain data (e.g., AML record-keeping requirements).
• Right to Restriction: The right to request that p6999 restricts the processing of your personal data in specified circumstances.
• Right to Data Portability: Where technically feasible, the right to receive your personal data in a structured, machine-readable format.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing processing.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time, without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to our data handling team at the contact details in Section 15. p6999 will endeavour to respond within thirty (30) calendar days of receiving a valid request. In complex cases, this period may be extended by a further sixty (60) days with notice.

12 Minors & Age Restriction

The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction, whichever is greater. p6999 does not knowingly collect personal data from minors.

If p6999 becomes aware that personal data has been collected from a person below the minimum eligible age, it will take immediate steps to delete that data and close the associated account. All balances associated with an underage account are subject to review and will not be paid out.

If you have reason to believe that a minor may have registered on the Platform, please contact our support team immediately so that the matter can be investigated and resolved.

13 International Data Transfers

p6999's platform infrastructure and certain third-party Data Processors may be located outside Pakistan. Where personal data is transferred internationally, p6999 ensures that appropriate safeguards are in place to protect the data, including:

• Contractual data processing agreements incorporating standard data protection clauses;
• Transfer to jurisdictions recognised as providing an adequate level of data protection by relevant international standards;
• Technical and organisational measures equivalent to those applied to data processed domestically.

By using the Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, subject to the safeguards described above.

14 Amendments to This Policy

p6999 reserves the right to update or amend this Privacy Policy at any time. Updated versions will be published on this page with a revised "Effective Date". Material changes will, where practicable, be communicated to registered users via email or platform notification.

Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and contact our support team regarding account closure.

We encourage you to review this page periodically to stay informed of our current privacy practices.

15 Contact Us

For all privacy-related queries, data subject access requests, consent withdrawals or complaints regarding p6999's data processing practices, please contact our data handling team using the details below:

• Platform: p6999.cam
• Email: [email protected]
• Subject Line: Please use "Privacy Request" or "Data Subject Request" in your email subject line to ensure prompt routing.
• Response Time: p6999 aims to acknowledge all privacy requests within five (5) business days and to provide a substantive response within thirty (30) calendar days.
• Languages: English (Urdu-speaking support available on request).

Please note: the email address above is provided as plain text only and should not be clicked as a link. Copy the address manually into your email client to reach our team. Do not share sensitive personal documentation through unencrypted public messaging channels.