Your privacy matters at why999. This Privacy Policy explains in plain terms exactly what personal data we collect from Pakistani players, how we use it, who we may share it with, and what rights you hold over your own information. We believe transparency is the foundation of trust — and trust is how why999 has built its reputation across Karachi, Lahore, Islamabad, and beyond.
Summary: why999 collects your personal data to operate your account, process PKR transactions, comply with our international gaming licence obligations, and provide a safe, fair gaming environment. We do not sell your data to third-party advertisers. You have the right to access, correct, or request deletion of your personal information at any time by contacting our support team.
why999 ("the Company," "we," " us," "our") operates the online casino and sports betting platform accessible at https://why999.app. why999 is licensed under an international gaming licence and provides its services to eligible players in Pakistan and other permitted jurisdictions.
This Privacy Policy applies to all personal data processed by why999 in connection with your use of the why999 platform, including the website, any mobile-optimised interface, and all associated services such as customer support, promotions, and financial transactions.
For the purposes of applicable data protection law, why999 is the data controller in respect of your personal information. Any questions regarding this Privacy Policy or our data processing activities should be directed to our support team using the contact details provided in Section 15.
why999 collects personal data that is necessary for the lawful operation of a licensed online gaming platform. The categories of personal data we collect are set out in the table below:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, gender | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, city of residence (e.g., Lahore, Karachi, Faisalabad) | Account communication, support, promotional messages (where consented) |
| Financial Data | JazzCash / EasyPaisa account details, HBL / UBL / Meezan Bank account references, PKR transaction history | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session tokens | Platform security, fraud detection, service optimisation |
| Usage Data | Games played, bet amounts in PKR, session duration, login timestamps, bonus usage | Service delivery, responsible gaming monitoring, personalisation |
| KYC Documents | Scanned CNIC, proof of address, payment method ownership evidence | Identity verification, regulatory compliance, anti-fraud |
| Communications Data | Live chat transcripts, support emails, dispute records | Customer service, dispute resolution, quality assurance |
why999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming assessments and only with your explicit consent.
why999 collects personal data through the following means:
why999 uses your personal data only for the purposes for which it was collected, or for compatible purposes that you would reasonably expect. Specifically, we use your data to:
why999 processes your personal data on the following legal bases:
why999 does not sell your personal data to third parties. We may share your data with the following categories of recipients where strictly necessary:
why999 does not share your personal data with third-party marketers, data brokers, or advertising networks. Any third party that processes your data on our behalf is bound by a contractual data processing agreement requiring them to maintain appropriate security standards and process your data only for the specified purposes.
All financial transactions on why999 are denominated in Pakistani Rupees (PKR) and processed exclusively through the supported payment channels. The following specific terms apply to the handling of your payment data:
why999 uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies we use are as follows:
On your first visit to why999.app, you will be presented with a cookie consent notice. You may accept all cookies, accept only strictly necessary cookies, or customise your preferences. You may update your cookie preferences at any time through your account settings.
why999 does not use third-party advertising or behavioural targeting cookies. We do not participate in cross-site tracking networks or sell cookie data to any third party.
why999 retains your personal data for as long as your account remains active and for such additional periods as are required by our international gaming licence obligations, legal requirements, and legitimate business purposes. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Licensing obligation, AML compliance |
| KYC Documents | Duration of account + 5 years after closure | Regulatory requirement |
| Financial Transaction Records | Duration of account + 7 years after closure | AML regulations, audit requirements |
| Communications & Support Records | 3 years from date of communication | Dispute resolution, quality assurance |
| Technical & Usage Data | 13 months from collection date | Security, fraud prevention |
| Self-Exclusion Records | Indefinitely | Responsible gaming obligation |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes in a form that no longer identifies you.
As a why999 player whose personal data we process, you hold the following rights in respect of your information. These rights may be subject to limitations where overriding legal or regulatory obligations apply:
To exercise any of the above rights, please contact the why999 support team via live chat or email as detailed in Section 15. We will respond to all verified data subject requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notification provided within the initial 30-day period.
why999 will not charge a fee for exercising your data rights in ordinary circumstances. However, where requests are manifestly unfounded or excessive — in particular because of their repetitive character — the Company reserves the right to charge a reasonable administrative fee or to refuse the request.
why999 takes the security of your personal data seriously and implements technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. Our security infrastructure includes:
Despite these measures, no system is completely immune to security threats. In the event of a personal data breach that poses a high risk to your rights and freedoms, why999 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
You are responsible for maintaining the confidentiality of your own why999 login credentials. Do not share your password with anyone. why999 will never ask for your password via email, live chat, or any other channel. If you believe your account has been compromised, contact why999 support immediately.
The why999 platform is strictly intended for use by adults aged 21 years and over. why999 does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification, and all accounts are subject to KYC checks that confirm the player's date of birth.
If why999 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and permanently close the associated account. Any funds held in an underage account will be handled in accordance with the why999 Terms & Conditions underage gambling provisions.
If you have reason to believe that a minor has registered or is using a why999 account, please contact our support team immediately via live chat or the email address in Section 15.
why999 operates under an international gaming licence and some of its service providers, game technology partners, and data processing infrastructure may be located outside Pakistan. Where your personal data is transferred to a country that does not provide an equivalent level of data protection to that applicable under why999's licensing jurisdiction, the Company implements appropriate safeguards, which may include:
You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting the why999 support team.
why999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised each time a material change is made.
Where changes are material — meaning they significantly affect your rights or how your data is processed — why999 will provide prominent notice on the platform and, where practicable, direct notification to your registered email address. Your continued use of the why999 platform following notification of a material change constitutes acceptance of the revised Privacy Policy.
We recommend that all players review this Privacy Policy periodically. The current version of the Privacy Policy is always accessible at why999.app/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way why999 processes your personal data, please contact the why999 Data Support team through any of the following channels:
Our support team will acknowledge all privacy-related enquiries within 48 hours and will endeavour to provide a full response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, and we will inform you of any such extension within the initial 30-day period.
This Privacy Policy was last reviewed on 1 January 2026. why999 recommends that all players re-read this policy periodically to stay informed about how their personal data is protected on the platform.
These are the concrete data protection standards every why999 player in Pakistan can hold us to — from Karachi to Islamabad and everywhere in between.
Every byte of data exchanged between your device and why999 travels over TLS-encrypted connections. Whether you are depositing via JazzCash or checking your game history, your data is protected in transit at all times.
Personal data stored on why999 servers — including KYC documents and PKR transaction records — is encrypted at rest using AES-256 standards. Unauthorised access to raw database files reveals nothing readable.
Your personal data is accessible only to why999 staff with a direct operational need. Role-based access controls, audit logs, and mandatory confidentiality agreements govern every internal interaction with player data.
why999 does not sell, rent, or trade your personal information to advertisers, data brokers, or marketing agencies. Your data is used exclusively to operate your account and comply with our gaming licence obligations.
why999 does not participate in cross-site advertising networks or place behavioural targeting cookies. The only cookies we use are those required for platform operation, security, and your own saved preferences.
Access, correct, or request deletion of your personal data at any time by contacting why999 support. We respond to all verified data requests within 30 days — no hoops, no unnecessary delays.
With SSL encryption, strict data controls, and full transparency about how your information is used, why999 is the online casino Pakistani players can trust with both their PKR and their personal data. 21+ only. Please play responsibly.