🔒 DATA PROTECTION & PRIVACY

KD999 Privacy Policy – How We Protect Your Data in Pakistan

At KD999, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains clearly and honestly what personal information we collect from Pakistani users, exactly how we use it, who we share it with and what rights you have over your own data.

Effective: 1 January 2025
Last Updated: 1 June 2025
256-bit SSL Encryption
No Data Sold to Third Parties
This Privacy Policy applies to all KD999 members and visitors in Pakistan. Questions? Contact us at support@kd999.fun — our privacy team responds within 48 hours.

1. Introduction

KD999 operates the website kd999.fun and all associated services under the KD999 brand, including sports betting, PSL betting, live cricket scores, esports wagering, virtual sports, poker, casino games and payment processing. This Privacy Policy describes how KD999 handles personal data belonging to Pakistani users who visit the platform, register an account or use any KD999 service.

We understand that handing over personal information — your name, phone number, CNIC details and payment records — requires trust. KD999 takes that trust seriously. This document is not written to confuse you with legal language; it is written to give you a clear, honest picture of your data and what we do with it.

By using KD999 — whether you are browsing the site, registering an account or placing a bet — you acknowledge that you have read this Privacy Policy and agree to the collection and use of your data as described here. If you do not agree, please do not use the KD999 platform.

Data Controller: KD999 is the data controller for all personal information collected through kd999.fun and its associated services. For all data-related queries and requests, contact support@kd999.fun.

2. What Personal Data KD999 Collects

KD999 collects personal data in several ways: information you provide directly when registering or using the platform, information generated automatically through your device and browsing activity, and information received from third-party payment providers who process your transactions.

2.1 Information You Provide Directly

  • Identity data: Full name as it appears on your CNIC, date of birth, CNIC number (for identity verification).
  • Contact data: Pakistani mobile number, email address (if provided), city and province of residence.
  • Account credentials: Username, password (stored in hashed form — never as plain text), security questions.
  • Verification documents: Copies of CNIC, selfie or video verification images submitted during identity verification.
  • Support communications: Any messages, complaints or queries you submit to KD999 support via chat, email or phone.

2.2 Information Generated Through Platform Use

  • Betting and gaming activity: Bets placed, markets selected, stakes, winnings, game sessions, poker hands played and tournament history.
  • Transaction records: Deposits made, withdrawals requested, bonus claims, referral bonus activity, all denominated in PKR.
  • Device and technical data: IP address, device type, operating system, browser type, screen resolution and mobile network information.
  • Session data: Pages visited, time spent on the platform, features used, click paths and login timestamps.
  • Location data: Approximate geographic location derived from IP address for fraud prevention and eligibility verification.

2.3 Information From Third Parties

  • Payment provider data: Transaction confirmations, payment method identifiers and anti-fraud signals from Easypaisa, JazzCash, NayaPay, SadaPay, banks and card networks.
  • Identity verification services: Verification results from third-party CNIC and identity checking services used during account opening or review.
  • Referral data: If you joined KD999 through a referral link, the referring member's identifier is recorded for the purpose of awarding the referral bonus.
kd999

3. How KD999 Uses Your Personal Data

KD999 uses your personal data only for specific, defined purposes. We do not use your data in ways that were not disclosed at the time of collection, and we do not sell your personal data to any third party for their commercial purposes.

PurposeData UsedWhy We Need It
Account creation & managementIdentity, contact, credentialsTo operate your KD999 account and verify your identity
Payment processingPayment data, transaction recordsTo accept deposits and process withdrawals in PKR
Identity verification (KYC)CNIC, verification documentsTo confirm age (18+) and prevent fraud
Bet settlementBetting activity, session dataTo record, manage and settle your bets accurately
Fraud & abuse preventionDevice data, IP, location, behaviourTo detect multi-accounting, bonus abuse and fraudulent activity
Customer supportSupport communications, account dataTo respond to your queries and resolve complaints
Responsible gamingBetting activity, session dataTo identify and act on signs of problematic gambling behaviour
Bonus & promotion managementTransaction records, betting activityTo credit eligible bonuses and verify wagering completion
Platform improvementSession data, usage patternsTo analyse how KD999 is used and improve features
Marketing communicationsContact data (opt-in only)To send promotions and offers to members who have opted in
Marketing opt-out: If you have opted in to KD999 marketing communications and wish to opt out, you can do so at any time through your account settings or by emailing support@kd999.fun. Opting out of marketing does not affect any other aspect of your account.

4. Lawful Basis for Processing Your Data

KD999 processes your personal data based on one or more of the following lawful grounds:

  • Contractual necessity: Processing required to fulfil our obligations under the agreement between you and KD999 — including operating your account, processing deposits and withdrawals, and settling bets. Without this processing, the KD999 service cannot function.
  • Legal obligation: Processing required to comply with legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, tax reporting and responses to lawful requests from authorities.
  • Legitimate interests: Processing that serves KD999's legitimate business interests where these interests do not override your privacy rights. This includes fraud detection, abuse prevention, platform security and platform improvement activities.
  • Consent: Processing that relies on your freely given, specific and informed consent, primarily for marketing communications and non-essential cookies. You can withdraw consent at any time without affecting any other processing.

5. Who KD999 Shares Your Data With

KD999 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. Your data is shared with external parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Payment Processors

Your payment information is shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank or your card network — solely for the purpose of processing your deposit or withdrawal transaction. These providers operate under their own privacy policies and are bound by applicable financial data protection obligations.

5.2 Identity Verification Services

During account verification, KD999 shares identity data with third-party KYC verification service providers for the purpose of confirming your identity and age. These providers are contractually bound to use your data only for the verification purpose and to maintain appropriate security standards.

5.3 Fraud Prevention

KD999 may share device signals, IP addresses and behavioural data with specialist fraud detection providers. These providers analyse patterns to identify fraudulent accounts and protect the platform from abuse. Information shared is anonymised or pseudonymised where possible.

5.4 Regulatory and Legal Authorities

KD999 may disclose personal data to governmental, regulatory or law enforcement authorities when required to do so by applicable law, court order, regulatory direction or when we have a good-faith belief that disclosure is necessary to protect the rights, property or safety of KD999, its members or the public. KD999 will notify you of such disclosures where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of KD999's business, your personal data may be transferred as part of that transaction. KD999 will notify affected members before their data is transferred and becomes subject to a different privacy policy.

We never sell your data: KD999 does not and will not sell, rent or lease your personal information to any third party for their own commercial or marketing purposes. If you receive an approach claiming to be based on KD999 data, it is not from us.
kd999

6. How KD999 Handles Payment Data

Payment data is among the most sensitive information KD999 handles, and it is treated with the highest level of care. This section explains specifically how your PKR payment information is processed and protected at KD999.

6.1 Card Data

KD999 does not store your full card number, CVV or expiry date on its servers. When you make a deposit using a Visa or Mastercard issued by a Pakistani bank, your card details are submitted directly to the payment gateway through encrypted transmission and are tokenised at the gateway level. KD999 receives only a transaction token and the last four digits of your card number for reference purposes.

6.2 Mobile Wallet Data

For Easypaisa, JazzCash, NayaPay and SadaPay transactions, KD999 records your registered mobile number and transaction confirmation identifiers. KD999 never has access to your wallet PIN, MPIN or any mobile wallet credential. All payment authorisation occurs within your wallet provider's own secure environment.

6.3 Bank Transfer Records

For IBFT bank transfers, KD999 records your bank name, account title and last four digits of the IBAN for withdrawal processing purposes. Full IBAN details submitted for withdrawals are stored in encrypted form and accessible only to the KD999 payments processing team.

6.4 Transaction History

A complete record of all your KD999 deposits, withdrawals and bonus transactions is maintained in your account history and is accessible to you at any time through your account dashboard. KD999 retains transaction records for a minimum of seven years in compliance with anti-money laundering obligations.

7. Cookies and Tracking Technologies

KD999 uses cookies and similar tracking technologies on the kd999.fun website to provide platform functionality, remember your preferences, maintain your logged-in session and analyse how the platform is used. This section explains what types of cookies KD999 uses and why.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use core KD999 features including login, bet placement and payment processing.

8. How KD999 Secures Your Data

KD999 implements a multi-layered security framework to protect your personal data from unauthorised access, loss, alteration or disclosure. The following technical and organisational measures are in place across the KD999 platform at all times.

  • 256-bit SSL/TLS encryption: All data transmitted between your device and KD999's servers is encrypted using bank-standard TLS encryption. The padlock icon in your browser confirms this connection is secure.
  • Password hashing: Your KD999 account password is never stored as plain text. It is irreversibly hashed using a strong cryptographic algorithm. Even KD999 staff cannot retrieve your actual password.
  • Payment tokenisation: Card details are tokenised by the payment gateway — KD999's servers never store your full card number or CVV.
  • Access controls: KD999 employee access to personal data is governed by strict role-based access controls. Staff can only access the data necessary for their specific job function. All access is logged and audited.
  • Two-factor authentication: KD999 supports two-factor authentication (2FA) on all member accounts. We strongly recommend enabling this in your account security settings.
  • Regular security audits: KD999's platform undergoes regular independent security assessments including penetration testing and code audits.
  • Data breach response: KD999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you without undue delay as required by applicable law.
Your role in account security: KD999 provides the tools to keep your account secure, but your own behaviour matters too. Use a strong, unique password for KD999. Never share your login credentials. Enable 2FA. If you suspect your account has been compromised, contact support@kd999.fun immediately.
kd999

9. How Long KD999 Keeps Your Data

KD999 retains personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

  • Account data (active accounts): Retained for as long as your KD999 account remains open and active.
  • Account data (closed accounts): Retained for a minimum of 5 years following account closure to satisfy regulatory, anti-money laundering and dispute resolution obligations.
  • Transaction and payment records: Retained for a minimum of 7 years from the date of the transaction in compliance with financial record-keeping requirements.
  • Identity verification documents: Retained for the duration of your account and for 5 years following account closure.
  • Betting and gaming activity records: Retained for 5 years and used for dispute resolution, responsible gaming monitoring and regulatory compliance.
  • Support communications: Retained for 3 years from the date of the communication for quality assurance and dispute reference purposes.
  • Marketing consent records: Retained for 3 years from the date consent was given or withdrawn, to demonstrate compliance with consent obligations.

When the applicable retention period expires and there is no legitimate reason to retain the data further, KD999 will securely delete or anonymise it.

10. Your Privacy Rights as a KD999 Member

As a KD999 member, you have specific rights regarding your personal data. KD999 is committed to respecting and facilitating these rights. To exercise any of the rights below, contact KD999 at support@kd999.fun with your account details and a description of your request. KD999 will respond within 30 days.

Right of Access
You can request a copy of all personal data KD999 holds about you. This includes your account information, betting history, transaction records and any communications.
Right to Rectification
If any personal data KD999 holds about you is inaccurate or incomplete, you can request that it be corrected or updated. Basic account details can be updated directly in your account settings.
Right to Erasure
You can request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that legal and regulatory obligations may require KD999 to retain certain data regardless.
Right to Object
You can object to processing of your data based on legitimate interests, including profiling. You can also object to direct marketing communications at any time with immediate effect.
Right to Restriction
You can request that KD999 temporarily restrict processing of your data — for example while a dispute about data accuracy is being resolved or an objection is being considered.
Right to Portability
Where data is processed by automated means based on your consent or a contract, you can request your data in a structured, commonly used, machine-readable format for transfer to another service.
Response timeframe: KD999 aims to respond to all data rights requests within 30 days. For complex requests this period may be extended to 60 days, with notification provided. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

11. Children's Privacy and Under-18 Protection

KD999 services are strictly for adults aged 18 and above. KD999 does not knowingly collect personal data from anyone under 18 years of age. All registration processes include an age declaration and KD999 uses identity verification to confirm member ages.

If KD999 discovers that personal data has been collected from a person under 18 years of age, the account will be immediately closed, all associated data will be securely deleted (except where retention is required to investigate the breach), and any funds will be handled in accordance with KD999's minor protection procedure.

If you are a parent or guardian and believe your child may have accessed KD999, please contact us immediately at support@kd999.fun. We will investigate and take action within 24 hours of the report.

Age Verification: KD999 uses third-party identity verification services to confirm member ages at registration and during account review. This verification requirement is non-negotiable and applies to all Pakistani KD999 accounts regardless of deposit amount or account history.

12. Changes to This Privacy Policy

KD999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When material changes are made, KD999 will:

1
Update the "Last Updated" date
The date at the top of this policy will reflect when the most recent revision was made.
2
Notify affected members
For material changes, KD999 will send a notification to your registered email address or display a prominent notice on the platform at least 7 days before the change takes effect.
3
Seek fresh consent if required
Where a change involves a new purpose that requires your consent, KD999 will seek that consent explicitly before beginning the new processing activity.
4
Keep previous versions accessible
Earlier versions of this Privacy Policy are archived and available on request at support@kd999.fun, so you can always see exactly what changed and when.

Continued use of KD999 following notification of a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with a change, you should stop using the platform and contact us to arrange account closure and data deletion.

13. Contact KD999 About Privacy

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact KD999 through the following channels. Our privacy team handles all data-related enquiries as a priority.

  • Email: support@kd999.fun (use subject line: "Privacy Request" for faster routing)
  • Live Chat: Available 24/7 in your KD999 account dashboard — in English and Urdu
  • Response time: Acknowledged within 48 hours; resolved within 30 days for standard requests

When submitting a data request, please include your registered KD999 account mobile number and a clear description of your request. This helps us locate your account records quickly and respond accurately. For erasure and portability requests, identity verification may be required before we can fulfil the request.

Related Policies: This Privacy Policy should be read together with KD999's Terms and Conditions and Responsible Gaming Policy, all of which form part of your agreement with KD999.

KD999's Privacy Commitments to Pakistani Users

Six concrete data protection commitments that KD999 upholds for every member in Pakistan — not aspirations, but operational practices in place today.

256-bit Encryption on Everything

Every data connection between your device and KD999 — login, bet placement, payment processing — is protected by the same encryption standard used by major Pakistani and international banks. Your data travels securely, always.

Your Data Is Never Sold

KD999 does not sell, rent or trade your personal information to any third party for commercial gain. If you receive unsolicited contact claiming to use KD999 data, it is not from us. Report it to support@kd999.fun immediately.

Card Details Never Stored

KD999's servers never store your card number, CVV or PIN. Card transactions are tokenised through the payment gateway — KD999 receives only a reference token, not your actual card credentials.

Full Data Rights for Members

Every KD999 member can access, correct, delete or export their personal data on request. Rights requests are handled within 30 days and are free of charge. Your data belongs to you — KD999 facilitates that ownership.

Minimal Data Access Internally

KD999 employees access member data only as required for their specific role, under strict access controls and audit logging. No employee has broad access to the full member database — access is always role-limited and logged.

Breach Notification Commitment

In the unlikely event of a data breach affecting your personal information, KD999 will notify you without undue delay as required by law — not weeks later, not buried in a policy update, but directly and promptly to your registered contact.

Privacy Questions Pakistani KD999 Members Ask Most

KD999 discloses personal data to governmental or law enforcement authorities only when legally required to do so — for example, in response to a valid court order, regulatory directive or formal law enforcement request under applicable law. KD999 does not voluntarily share member data with any authority beyond what is legally mandated. Where legally permitted, KD999 will notify the affected member before disclosure. Regulatory compliance obligations such as anti-money laundering reporting may require us to share transaction data with relevant financial authorities without prior member notification in specific circumstances.

Yes. Your Easypaisa or JazzCash mobile number is stored in KD999's encrypted database and is used solely for processing your deposits and withdrawals. It is shared with your wallet provider only for transaction processing purposes. KD999 will never contact you through your Easypaisa or JazzCash number for purposes unrelated to payment processing. If you receive any payment request or call claiming to be from KD999 asking for your wallet PIN or MPIN, it is not from us — report it to support@kd999.fun immediately, as this is likely a phishing attempt.

You can submit a data erasure request to KD999 at any time by emailing support@kd999.fun. KD999 will delete your personal data to the maximum extent possible. However, certain categories of data must be retained for legally prescribed periods regardless of your erasure request — this includes transaction records (7 years for AML compliance), identity verification records (5 years after account closure) and any data subject to an active legal hold or regulatory investigation. KD999 will be transparent with you about what can and cannot be deleted and the reasons why, so you always know exactly what data remains and why.

KD999 uses betting activity data primarily for account management, dispute resolution, responsible gaming monitoring and fraud prevention. While KD999's risk management team does review betting patterns as part of standard operations — which is an industry-standard practice — this is not done to penalise honest winning members. Where KD999 exercises its right to adjust limits for risk management purposes, this is disclosed in the account and can be queried through support. KD999 does not engage in the practice of systematically limiting accounts simply because they are profitable — our business model is built on having many active, engaged members, not on limiting winners.

When you close your KD999 account, your access to the platform is terminated but your personal data is not immediately deleted. KD999 retains account data for a minimum of 5 years and transaction records for a minimum of 7 years following closure, as required by anti-money laundering regulations and applicable financial record-keeping obligations. After these retention periods expire and there is no legal reason to keep the data, it is securely deleted or anonymised. You can request confirmation of what data is being retained and for how long by emailing support@kd999.fun after your account closure.
🔒

Your Privacy Is Protected at KD999 — Join With Confidence

Half a million Pakistani players trust KD999 with their data, their PKR and their entertainment. That trust is earned through transparent policies, genuine data protection and straightforward practices — not marketing promises. Create your account today and experience a platform built to respect your privacy.

KD999 Privacy At a Glance
  • Zero data selling — ever
  • 256-bit SSL on all connections
  • Card details never stored on our servers
  • Full data rights — access, correct, delete
  • 24/7 privacy support in Urdu & English
  • Breach notification within legal timeframe