sp999 Privacy Policy

1. Who We Are

sp999 operates the online casino and sports betting platform accessible at sp999.club (the "Platform"). For the purposes of this Privacy Policy, sp999 is the data controller responsible for the collection and processing of personal data in connection with the Platform. References to "sp999", "we", "us", or "our" throughout this Policy refer to the sp999 platform operator. References to "you" or "the User" refer to any individual who accesses, registers on, or uses the sp999 Platform.

By registering an account with sp999 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Personal Data We Collect

2.1 Registration Data

When you create a sp999 account, we collect the personal information you provide during registration, which includes: full legal name, date of birth, email address, and any additional contact details requested during the registration process. This information is necessary to create and administer your account and to verify your identity and age eligibility (18+).

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, sp999 may request and collect copies of government-issued identity documents, proof of address documents, and payment method verification materials. This data is collected solely for the purpose of verifying your identity, age, and the legitimacy of payment methods used on the Platform.

2.3 Transaction and Financial Data

sp999 collects records of all deposit and withdrawal transactions on your account, including payment method identifiers (e.g. JazzCash mobile number, Easypaisa account reference, bank account details), transaction amounts in PKR, timestamps, and transaction status records. sp999 does not store full payment card numbers or complete bank account credentials — this information is handled by our regulated payment processing partners.

2.4 Platform Usage Data

sp999 automatically collects data about how you interact with the Platform, including: login timestamps and session durations, game history and betting records, pages visited and features used, device type, operating system, and browser information, and IP address and approximate geographic location data derived from your IP address.

2.5 Communications Data

When you contact the sp999 support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and training purposes.

3. How We Use Your Personal Data

sp999 uses the personal data collected for the following purposes:

• Account Management: To create, maintain, and administer your sp999 account, process login requests, manage account settings, and maintain the security of your account.
• Identity and Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. Age and identity verification is a legal and regulatory obligation that sp999 takes seriously.
• Payment Processing: To process deposits and withdrawals via supported payment methods including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, and to maintain accurate financial records for your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other unlawful conduct on the Platform.
• Responsible Gaming: To monitor betting and gaming behaviour patterns to identify indicators of potential gambling harm and to facilitate the responsible gaming tools available in your account dashboard.
• Customer Support: To respond to your support enquiries, resolve disputes, and improve our support services.
• Legal Compliance: To comply with applicable anti-money laundering regulations, record-keeping obligations, and any other legal or regulatory requirements applicable to the sp999 Platform.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how the Platform is used and to improve Platform performance, features, and user experience.

4. Legal Basis for Processing

sp999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations under the account agreement with you, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering requirements, age verification obligations, and record-keeping requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time by contacting our support team.

5. Third-Party Data Sharing

sp999 does not sell, rent, or otherwise commercialise your personal data. We share personal data with third parties only in the following circumstances:

5.1 Service Providers

sp999 engages third-party service providers to assist with Platform operation, including payment processors (e.g. the operators of JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah payment infrastructure), identity verification providers, fraud detection services, IT infrastructure providers, and customer support tools. These providers are subject to contractual data protection obligations and are only permitted to use your data for the specific purposes for which they are engaged by sp999.

5.2 Legal and Regulatory Disclosure

sp999 may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or regulatory requirement. sp999 will, where legally permitted, notify you of any such disclosure request.

5.3 Business Transfers

In the event that sp999's business or a part thereof is acquired by or merged with another entity, your personal data may be transferred as part of that transaction. In such circumstances, sp999 will take reasonable steps to ensure that your data continues to be handled in accordance with this Privacy Policy.

6. Data Retention Periods

sp999 retains personal data for defined periods in accordance with its legal obligations and operational requirements:

• Active account data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, in accordance with standard record-keeping practices.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the most recent transaction, in accordance with anti-money laundering regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Support communications: Retained for three (3) years from the date of the communication.
• Self-exclusion records: Retained indefinitely to prevent re-registration in breach of a self-exclusion request.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with sp999's internal data management procedures.

7. Cookies and Tracking Technologies

sp999 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and allow sp999 to understand how the Platform is being used.

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate. They include session management cookies that keep you logged in to your sp999 account during a session, security cookies that protect against cross-site request forgery, and load-balancing cookies. Essential cookies cannot be disabled without preventing Platform functionality.

7.2 Functional Cookies

Functional cookies remember your Platform preferences, such as language settings and display preferences, to improve your experience on return visits. These cookies do not track your activity across other websites.

7.3 Analytical Cookies

sp999 may use analytical cookies to collect aggregated, anonymised data about how the Platform is used — such as which pages are visited most frequently, where users encounter errors, and how different features are engaged with. This data is used to improve the Platform and is not linked to individual user identities.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain Platform features but will not prevent you from accessing your account or using core Platform functionality.

8. Data Security

sp999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the sp999 Platform;
• Encryption at rest for sensitive stored data including KYC documents and financial records;
• Access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and monitoring for intrusion attempts or anomalous activity;
• Two-factor authentication availability for user accounts to protect against unauthorised login.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own sp999 account credentials and for notifying sp999 immediately if you suspect any unauthorised access to your account. sp999 staff will never ask you for your password under any circumstances.

9. Your Data Rights

Subject to applicable law, you have the following rights with respect to the personal data sp999 holds about you:

• Right of Access: You may request a copy of the personal data sp999 holds about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal basis for retention exists.
• Right to Restriction: You may request that sp999 restrict processing of your personal data in certain circumstances, such as during the resolution of a dispute about data accuracy.
• Right to Withdraw Consent: Where sp999's processing of your data is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the sp999 support team via live chat from within your account dashboard or by email at [email protected]. sp999 will respond to verified data rights requests within a reasonable timeframe. We may need to verify your identity before processing a data rights request.

10. Children's Privacy

The sp999 Platform is strictly intended for persons aged 18 years and older. sp999 does not knowingly collect personal data from individuals under the age of 18. If sp999 becomes aware that personal data has been collected from an individual under the age of 18, we will take immediate steps to close the relevant account and delete the associated data. If you believe that a minor has registered on the sp999 Platform, please contact our support team immediately.

11. International Data Transfers

sp999 may use service providers and infrastructure located in jurisdictions outside Pakistan. Where personal data is transferred to processors or sub-processors in other countries, sp999 takes reasonable steps to ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection standards, including contractual data protection clauses with the receiving parties.

12. Updates to This Privacy Policy

sp999 reserves the right to update or modify this Privacy Policy at any time. Material changes to the Policy will be communicated to registered account holders via email to the address on file or via an in-platform notification, at least seven (7) days before the updated Policy takes effect. The effective date at the top of this page will be updated upon each revision. Your continued use of the sp999 Platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

Previous versions of this Privacy Policy are available upon request to the sp999 support team.

13. Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or sp999's handling of your personal data, please contact the sp999 support team:

sp999 aims to respond to all privacy-related enquiries within five (5) business days. Requests relating to data deletion, account closure, or self-exclusion are treated as priority.