Privacy Policy
How WK999 Handles Your Data

Introduction

This Privacy Policy ("Policy") sets out how WK999 ("Platform", "we", "us", "our"), operating at wk999.cam, collects, processes, stores, shares and protects personal data relating to individuals ("Users", "you") who access or use the WK999 online gaming platform and its associated services.

WK999 is an English-language gaming platform serving users across Pakistan, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles.

By registering an account with WK999 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact support to close your account.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which form part of your agreement with WK999.

Definitions

The following terms are used throughout this Privacy Policy with the meanings set out below:

• Personal Data: Any information relating to an identified or identifiable natural person, including name, contact details, identification documents, financial information and behavioural data generated through use of the platform.
• Processing: Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, erasure or destruction.
• Data Controller: The entity that determines the purposes and means of processing personal data. WK999 acts as the data controller in respect of personal data collected through the platform.
• Data Processor: A third party that processes personal data on behalf of WK999, under contractual instruction and in accordance with this Policy.
• Consent: A freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• KYC Data: Identity verification information collected for Know Your Customer compliance purposes, including government-issued identification documents, selfie verification and proof of address.
• Cookies: Small text files placed on a User's device by the platform for the purposes of session management, preference storage and analytical tracking.

Data We Collect

WK999 collects personal data across several categories, depending on the nature of the User's interaction with the platform. The categories of data we may collect include:

How We Collect Data

WK999 collects personal data through the following primary channels:

• Account Registration: Information provided directly by the User when completing the registration form, including name, date of birth, email and contact details.
• KYC Submission: Documents and verification materials submitted by the User in response to identity verification requests from the compliance team.
• Deposit & Withdrawal Transactions: Financial data generated when a User initiates a transaction through the platform's cashier function.
• Platform Usage: Behavioural and technical data collected automatically as a User navigates the platform, places bets, plays games or interacts with features.
• Support Interactions: Data exchanged through live chat, email or any other customer support channel.
• Cookies and Tracking Technologies: Data collected passively through cookies, web beacons and similar technologies as described in Section 10 of this Policy.
• Third-Party Verification Providers: Identity and fraud-check data returned by authorised third-party KYC, payment processing or fraud-prevention service providers acting as data processors on our behalf.

Data Processing & Legal Basis

WK999 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely for processing are as follows:

• Contractual Necessity: Processing required to fulfil the agreement between WK999 and the User, including account creation, payment processing, game delivery and withdrawal administration.
• Legal Obligation: Processing required to comply with applicable anti-money laundering, KYC, responsible gambling and regulatory requirements under the laws of the operator's licence jurisdiction.
• Legitimate Interests: Processing undertaken for WK999's legitimate business interests, including fraud prevention, platform security, product improvement and analytics, where those interests are not overridden by the User's rights.
• Consent: Where specific processing activities are not covered by the above, WK999 will seek the User's explicit consent before proceeding. Consent may be withdrawn at any time, although withdrawal does not affect processing already carried out prior to that withdrawal.

Purposes of Processing

The table below sets out the specific purposes for which WK999 processes personal data, together with the associated legal basis:

Data Sharing & Disclosure

WK999 does not sell, rent or trade personal data to third parties for their own marketing purposes. We may, however, share personal data with the following categories of recipients where necessary and in accordance with applicable law:

• KYC and Identity Verification Providers: Third-party services engaged to verify User identity and authenticate KYC documents. These providers act as data processors under contract and are prohibited from using data for purposes beyond the contracted service.
• Payment Processing Partners: Financial service providers involved in the technical processing of deposit and withdrawal transactions. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah on this platform are for contextual familiarity only and do not imply a direct data-sharing relationship with those institutions.
• Fraud Prevention and Security Services: Third-party providers engaged to detect, investigate and prevent fraudulent activity, money laundering or platform abuse.
• Regulatory and Law Enforcement Authorities: Where WK999 is legally required to disclose data to a regulatory authority, law enforcement body or court of competent jurisdiction, we will comply with such legally binding requests.
• Game Content Providers: Third-party game studios or software providers who deliver game content through the WK999 platform may receive limited technical and gameplay data required to operate their services.
• Analytics and Platform Technology Providers: Technology partners who assist WK999 in operating and improving the platform, subject to data processing agreements that restrict use to contracted purposes only.

In all cases where data is shared with third-party processors, WK999 implements appropriate contractual safeguards to ensure that personal data is handled in a manner consistent with this Policy.

Data Retention

WK999 retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable legal, regulatory or compliance obligations.

• Active Accounts: Personal and financial data is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping obligations applicable to the operator's licence jurisdiction.
• KYC Documents: Identity verification documents are retained for a minimum period of five (5) years from the date of submission or the date of account closure, whichever is later, subject to applicable regulatory requirements.
• Gaming Activity Records: Betting history and game session records are retained for at least five (5) years to support dispute resolution, regulatory audits and responsible gambling monitoring obligations.
• Communications Records: Support interaction records and live chat transcripts are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Consent Records: Records of consent granted or withdrawn for marketing communications are retained for the duration of the account relationship and for a period thereafter sufficient to demonstrate compliance.

When personal data is no longer required for any of the purposes described above and no legal obligation requires its continued retention, WK999 will securely delete or anonymise the data using appropriate technical methods.

Data Security

WK999 implements technical and organisational security measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:

• Transport Layer Security (TLS / SSL) encryption applied to all data in transit between the User's device and WK999 platform infrastructure;
• Encryption of sensitive data at rest, including identity documents and financial records stored on platform servers;
• Role-based access controls limiting personnel access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Documented data breach response procedures, including assessment, containment and notification protocols.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. WK999 cannot provide an absolute guarantee of the security of personal data transmitted to or from the platform. Users are responsible for maintaining the confidentiality of their account credentials and must notify WK999 support immediately upon suspecting any unauthorised access to their account.

Cookies & Tracking Technologies

WK999 uses cookies and similar tracking technologies to operate the platform, maintain session state, analyse usage patterns and deliver a consistent experience across device sessions. The categories of cookies used are described in the table below:

Users may manage cookie preferences through their browser settings. Disabling strictly necessary cookies will impair the functionality of the WK999 platform. Disabling analytical or functional cookies will not prevent access but may affect the quality of the User experience.

User Rights

Subject to applicable data protection law and any overriding legal obligations (such as anti-money laundering retention requirements), Users may exercise the following rights in relation to their personal data held by WK999:

To exercise any of the above rights, contact WK999 at [email protected]. WK999 will respond to all valid requests within a reasonable timeframe. Identity verification may be required before any request is actioned to protect against fraudulent access to personal data.

Minors & Age Verification

WK999 does not knowingly collect personal data from individuals under the age of 18, or the higher minimum age required by the applicable licence jurisdiction. The platform is strictly restricted to adults.

Age verification is conducted as part of the KYC process for all registered accounts. Where WK999 discovers or has reasonable grounds to believe that a User is below the required minimum age, the account will be suspended immediately, all activity during the minor's use of the platform will be reviewed, and any net real-money balance will be returned to the original deposit source where feasible.

International Data Transfers

WK999 operates internationally and may transfer personal data to servers, processors or service providers located outside the jurisdiction in which Users are based, including outside Pakistan. Such transfers may include data centres and third-party processors in jurisdictions that may not provide data protection standards equivalent to those applicable in the User's home jurisdiction.

Where personal data is transferred internationally, WK999 will implement appropriate safeguards to protect the data, which may include contractual clauses with processors, encryption in transit and at rest, and access controls limiting personnel exposure to transferred data.

Users who have concerns about international data transfers may contact the WK999 support team for further information on the safeguards in place.

Policy Amendments

WK999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, WK999 will publish the revised Policy on this page with an updated effective date. Where required by applicable law or where changes significantly affect Users' rights, WK999 will endeavour to provide advance notice via email or in-platform notification.

Your continued use of the WK999 platform after a revised Privacy Policy has been published constitutes your acknowledgement of the updated Policy. We recommend reviewing this page periodically to stay informed of how your personal data is being handled.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or WK999's data handling practices, please contact the support team through the following channels. All communications regarding personal data should clearly state "Privacy Request" in the subject line or opening message:

• Support Email: [email protected] — plain text, not a clickable link. For privacy-related enquiries, include "Data Privacy Request" in your message.
• Live Chat: Available 24/7 via the platform interface as provided by the operator. Identity verification will be required before any personal data is discussed.
• Response Time: WK999 aims to acknowledge data-related requests within 5 business days and to provide a substantive response within 30 days of receipt of a verified, valid request.
• Languages: Privacy requests are handled in English. Urdu assistance is available on request via live chat for Users who require it.