st999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how st999 ("st999", "we", "us", "our") collects, processes, stores, and protects personal information relating to individuals ("Player", "User", "you") who access or use the st999 online casino and sports betting platform at https://st999.pro.

By registering an account on st999 or by continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the st999 platform.

This Policy applies to all personal data collected through the st999 website, mobile experience, live chat, email correspondence, and any other interaction you have with the st999 platform or its support team. It covers players registering from Pakistan and all other eligible jurisdictions in which st999 operates.

2 Data Controller

st999 is the data controller responsible for the personal information collected through the st999 platform. As data controller, st999 determines the purposes and means by which your personal data is processed in connection with the delivery of the platform's casino, sports betting, payment, and customer support services.

st999 operates under an international gaming license. In fulfilling its regulatory obligations under that license — including anti-money laundering (AML) checks, know-your-customer (KYC) procedures, and responsible gaming requirements — st999 may be required to collect, verify, and retain certain categories of personal data regardless of a player's individual preference.

All questions, requests, and complaints relating to the processing of your personal data by st999 should be directed to our support team using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

st999 collects the following categories of personal data from players. The specific data collected depends on how you interact with the platform and the stage of the player journey you are at:

st999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request.

4 How We Collect Your Data

st999 collects personal data through the following means:

• Direct submission: Information you provide when registering your account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a promotion;
• Automated technical collection: Data collected automatically when you access the st999 platform, including IP addresses, device identifiers, and session activity, collected via server logs, cookies, and similar technologies (see Section 11);
• Payment processors: Transaction confirmation data shared by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners when you initiate a deposit or withdrawal;
• Identity verification providers: Confirmation data returned by third-party KYC and AML service providers used to verify the accuracy of identity documents you submit;
• Third-party analytics: Aggregated, anonymised usage data from platform analytics tools used solely to improve the st999 user experience — this data does not identify individual players.

5 How st999 Uses Your Personal Data

st999 uses the personal data it collects for the following purposes:

• Account creation and management: To register your st999 account, verify your identity, maintain your account settings, and deliver the core casino and sports betting services;
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, verify payment ownership, and maintain accurate financial records;
• Regulatory compliance: To fulfil AML, KYC, and responsible gaming obligations under our international gaming license, including age verification, identity screening, and transaction monitoring;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and abuse of platform features or bonus systems;
• Customer support: To respond to queries, resolve disputes, investigate complaints, and provide 24/7 live chat assistance;
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall st999 player experience;
• Responsible gaming: To monitor player activity for signs of problem gambling, enforce player-requested limits and self-exclusions, and fulfil duty-of-care obligations under our license;
• Marketing communications: To send you relevant promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications. You may opt out at any time.

6 Legal Basis for Processing

st999 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contract performance: Processing necessary to create and manage your account, process transactions, and deliver the casino and sports betting services you have contracted for;
• Legal obligation: Processing required to comply with AML regulations, KYC verification requirements, responsible gaming obligations, and record-keeping requirements under our gaming license;
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection, and product improvement — where these interests are not overridden by your individual rights;
• Consent: Processing for optional marketing communications, where you have explicitly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

st999 does not sell, rent, or trade your personal data. Data is shared only in the following limited and necessary circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards;
• Identity verification providers: Third-party KYC and AML providers receive identity documents and verification data solely for the purpose of completing regulatory checks. These providers are contractually bound to use data only for verification purposes;
• Regulatory authorities: st999 may disclose account and transaction data to gaming regulators, financial intelligence units, or law enforcement agencies where legally required or where there are reasonable grounds to suspect fraud or criminal activity;
• Technology and infrastructure providers: Cloud hosting, platform software, and analytics providers may access anonymised or pseudonymised data as part of delivering technical infrastructure. These providers are contractually bound by data processing agreements;
• Professional advisors: Legal counsel, auditors, and compliance consultants may access personal data where necessary to provide professional services to st999, subject to applicable confidentiality obligations.

Any third party receiving personal data from st999 is required to process that data only for the specified purpose and in accordance with applicable data protection standards. st999 does not authorise any third party to use your data for their own independent commercial purposes.

8 International Data Transfers

As an internationally licensed online gaming platform, st999 may process and store personal data on servers located outside Pakistan. Where personal data is transferred internationally, st999 ensures that appropriate safeguards are in place to protect your data in accordance with the standards set under our gaming license and applicable data protection principles.

Such safeguards may include data processing agreements incorporating standard contractual clauses, adequacy assessments of recipient jurisdictions, and contractual restrictions on data use by receiving parties. By using the st999 platform, you consent to your personal data being transferred to and processed in jurisdictions outside Pakistan where necessary to deliver the service.

9 Data Retention

st999 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law and licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, to comply with AML record-keeping requirements;
• Transaction records: Financial transaction records, including deposit and withdrawal history in PKR, are retained for a minimum of five (5) years from the date of each transaction;
• Identity verification documents: KYC documents are retained for the period required under our gaming license, typically five (5) years from account closure or last transaction, whichever is later;
• Customer support communications: Support tickets and live chat transcripts are retained for three (3) years from the date of the interaction;
• Marketing preferences: Records of your communication preferences and consent history are retained for three (3) years from the last interaction;
• Responsible gaming records: Self-exclusion records and problem gambling flags are retained for the duration of the exclusion period plus five (5) years thereafter, to prevent re-registration during active exclusion periods.

When personal data is no longer required, st999 securely deletes or anonymises it so that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

10 Data Security

st999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the st999 platform;
• Encrypted storage of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that st999 staff can only access personal data that is necessary for their specific function;
• Regular security audits and vulnerability assessments of the st999 platform infrastructure;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access;
• Incident response procedures for detecting, reporting, and managing data security breaches.

While st999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also have a role to play in keeping your account secure — please refer to Section 3 of the st999 Terms & Conditions for guidance on securing your account credentials.

11 Cookies & Tracking Technologies

st999 uses cookies and similar tracking technologies to operate the platform, remember your session, and improve the player experience. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security tokens that protect your account. These cannot be disabled without preventing use of the platform;
• Functional cookies: Store your preferences such as language settings, display options, and responsible gaming limit configurations so you do not need to reset them on each visit;
• Analytics cookies: Collect anonymised data about how players interact with the st999 platform — such as which pages are visited most often and where players encounter issues — to help us improve the experience. Individual players are not identified through analytics data;
• Marketing cookies: Used only where you have opted in to receive personalised promotions. These cookies help st999 understand which offers are most relevant to you based on your platform activity.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from accessing the st999 platform. Disabling functional or analytics cookies may affect certain platform features but will not prevent you from playing.

12 Minors & Age Policy

The st999 platform is strictly intended for adults aged 21 years and older. st999 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the st999 registration process, and all accounts are subject to ongoing eligibility checks.

If st999 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted or rendered inaccessible, and any deposited funds will be returned to the originating payment method pending verification.

If you are a parent or guardian and believe that a minor has registered on the st999 platform using your payment details or personal information, please contact our support team immediately via live chat or at [email protected]. We will investigate and act promptly.

st999 recommends that all players sharing devices with minors install appropriate parental control software to prevent underage access to online gambling content.

13 Your Data Rights

As a player on the st999 platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team as described in Section 15:

• Right of access: You may request a copy of the personal data st999 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared;
• Right to rectification: You may request that inaccurate or incomplete personal data held by st999 be corrected or updated. Some data — such as your registered name or date of birth — may require supporting documentation before it can be changed;
• Right to erasure: You may request that st999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (such as AML record-keeping requirements) that may require certain data to be retained;
• Right to restrict processing: You may request that st999 temporarily restrict the processing of your personal data in certain circumstances, such as while a rectification request is being verified;
• Right to data portability: You may request a copy of the personal data you have provided to st999 in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal;
• Right to object: You may object to processing based on legitimate interests where you believe your individual rights outweigh st999's legitimate interest in the specific processing activity.

st999 will respond to data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notice provided to you within the initial 30-day period. All requests are handled free of charge unless they are manifestly unfounded or excessive.

14 Changes to This Privacy Policy

st999 reserves the right to update this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — st999 will notify registered players via the email address associated with their account and/or via a prominent notice on the st999 platform before the changes take effect.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the st999 platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you should stop using the platform and contact support to close your account.

Minor updates — such as typographical corrections or clarifications that do not materially alter the substance of this Policy — may be made without advance notice.

15 Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to raise a privacy-related complaint, or need to report a suspected data security incident, please contact the st999 support team through the following channels:

• Live Chat: Available 24/7 directly on the st999 website. Live chat is the fastest channel for urgent privacy matters, including suspected unauthorised account access;
• Email: [email protected] — for formal data access requests, erasure requests, or written privacy complaints. Please include your registered account username, a description of your request, and any relevant account or transaction details to help us locate your data promptly.

st999 is committed to handling all privacy requests fairly, transparently, and within the timeframes described in this Policy. If you are not satisfied with the outcome of a privacy complaint submitted to st999, you may escalate the matter to the relevant supervisory authority or dispute resolution body under our gaming license framework.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all personal data processed by st999 from that date forward.