sx999 Privacy Policy

1 Data We Collect

sx999 collects personal data that is necessary to provide the Platform Services, fulfil our legal and regulatory obligations, and maintain the integrity and security of the Platform. The categories of data we collect are as follows:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where legally required as part of an enhanced KYC process and subject to your explicit consent.

2 How We Collect Your Data

sx999 collects personal data through the following primary channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated technologies: Technical and usage data collected automatically when you interact with the Platform, including through cookies, server logs, and session tracking technologies as described in Section 7.
• Third-party sources: Data received from payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, cryptocurrency networks) in connection with financial transactions, and from identity verification service providers engaged to assist with KYC compliance.
• Publicly available sources: In limited circumstances, sx999 may cross-reference publicly available data — such as sanctions lists or politically exposed persons (PEP) databases — as part of our anti-money laundering and regulatory compliance obligations.

3 Why We Use Your Data

sx999 uses personal data for the following specific purposes:

• Account creation and management: To register, maintain, and administer your sx999 account, including verifying your identity and age (21+ requirement) before granting access to Platform Services.
• Transaction processing: To process deposits, withdrawals, and bonus transactions in Pakistani Rupees (PKR) via your chosen payment method.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), counter-terrorism financing (CTF), and responsible gaming regulations.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, account takeovers, unauthorised access, money laundering, and bonus abuse on the Platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and deliver effective technical and account support.
• Responsible gaming: To monitor gaming behaviour, apply player-requested limits, identify potential problem gambling indicators, and proactively offer responsible gaming resources where appropriate.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve the performance, features, and content of the Platform.
• Marketing communications: To send you promotional offers, platform updates, and news relevant to your sx999 account — but only where you have provided consent or where we have a legitimate interest to do so, and always with a clear option to opt out.

4 Legal Basis for Processing

For each purpose for which sx999 processes your personal data, we rely on one of the following lawful bases:

• Contractual necessity: Processing required to perform the contract between you and sx999 — including account registration, transaction processing, and providing access to Platform Services.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including AML, KYC, CTF, and responsible gaming obligations.
• Legitimate interests: Processing necessary for sx999's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing — particularly for direct marketing communications — you have the right to withdraw that consent at any time by contacting support or updating your account notification preferences.

5 Sharing Your Data

sx999 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipient only where strictly necessary and in accordance with this Policy:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and supported cryptocurrency networks — solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and AML compliance partners engaged to assist with age verification, document authentication, sanctions screening, and PEP checks.
• Game content providers: Licensed third-party game studios whose products are available on the Platform. These providers may receive anonymised session data for the purpose of game integrity monitoring.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and analytics service providers who process data on sx999's behalf under strict data processing agreements that prohibit any independent use of your data.
• Law enforcement and regulatory authorities: Where sx999 is legally obliged to disclose personal data in response to a valid legal request, court order, or regulatory obligation — including reporting suspected money laundering or fraud to the relevant authorities in Pakistan or internationally.
• Professional advisors: Lawyers, auditors, and accountants, where necessary for the conduct of sx999's business operations, subject to professional confidentiality obligations.

All third parties with whom sx999 shares personal data are required to handle that data in a manner consistent with this Policy and applicable data protection standards.

6 International Data Transfers

sx999 operates under an international gaming licence and, as a result, your personal data may be transferred to, and processed in, countries outside of Pakistan. This may include countries whose data protection laws differ from those of Pakistan.

Where such international transfers occur, sx999 implements appropriate safeguards to ensure that your personal data remains protected to a standard consistent with this Policy. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities, incorporated into agreements with our data processors and sub-processors.
• Data processing agreements that impose binding confidentiality, security, and purpose-limitation obligations on all recipients of your data.
• Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection for the categories of data being transferred.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our compliance team.

7 Cookies & Tracking Technologies

sx999 uses cookies and similar tracking technologies on the Platform to deliver an optimal user experience, maintain session security, and gather analytical data that helps us improve the Platform. The types of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the operation of the Platform — including maintaining your logged-in session, remembering your language preference, and enabling secure financial transactions. These cookies cannot be disabled without rendering the Platform non-functional.
• Performance and analytics cookies: These cookies collect anonymised or aggregated data about how players use the Platform — such as which pages are visited most frequently and whether any technical errors are encountered. This data helps sx999 identify areas for improvement.
• Functional cookies: These cookies remember your preferences and personalisation choices — such as your responsible gaming limit settings — so you do not need to re-enter them each time you log in.
• Marketing cookies: These cookies track your interactions with sx999 content and may be used to deliver promotional communications that are relevant to your activity on the Platform. They are only placed with your consent.

You can control and manage cookies through your browser settings. Please be aware that disabling certain categories of cookies may affect the functionality of the Platform. Your cookie preferences can also be updated via the cookie management tool available within the Platform Settings section of your sx999 account.

8 Data Retention

sx999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying our legal, regulatory, tax, and accounting obligations. The following general retention principles apply:

• Active accounts: Personal and financial data associated with active sx999 accounts is retained for the duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction records: Records of all deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years to satisfy financial reporting and regulatory audit obligations.
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Customer support correspondence is retained for a minimum of three (3) years to support dispute resolution and quality assurance processes.
• Marketing data: Where processing was based on consent, marketing preference data is deleted within 30 days of a consent withdrawal request.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

9 Your Data Rights

As a data subject, you have the following rights in respect of your personal data held by sx999. These rights may be subject to certain limitations and exemptions under applicable law:

• Right of Access: You have the right to request a copy of the personal data sx999 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Minor account details can be updated directly via your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sx999's legal retention obligations.
• Right to Restrict Processing: You have the right to request that sx999 restricts the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where sx999 relies on legitimate interests as the legal basis, and where you believe your fundamental rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without detriment to your use of the Platform Services.

To exercise any of the above rights, please submit a written request to [email protected] — this address is plain text only, not a clickable link. sx999 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. We may need to verify your identity before processing your request.

10 Children & Minors

The sx999 Platform is strictly restricted to individuals who are 21 years of age or older. sx999 does not knowingly collect personal data from individuals under the age of 21. The Platform incorporates age verification checks at registration and during the KYC process to enforce this restriction.

If sx999 discovers or is notified that personal data has been collected from an individual who is under the age of 21, we will take immediate steps to close the account, delete the personal data in question, and — where applicable — refund any deposits to the original payment source.

11 Security Measures

sx999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the sx999 Platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal and financial data stored on sx999 servers is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging in place.
• Two-factor authentication: sx999 offers and encourages the use of two-factor authentication (2FA) to protect your account against unauthorised login attempts.
• Regular security audits: sx999 conducts periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses in the Platform infrastructure.
• Incident response: sx999 maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

Whilst sx999 takes all reasonable steps to protect your personal data, no system or transmission of data over the internet can be guaranteed to be 100% secure. You are encouraged to take steps to protect your own account security — in particular by using a strong, unique password and enabling 2FA.

12 Changes to This Policy

sx999 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The most current version of this Policy will always be accessible at sx999.bet/privacy-policy, and the effective date at the top of the document will be updated to reflect when the latest revision took effect.

Where changes are material in nature — meaning they meaningfully affect how your personal data is collected, used, or shared — sx999 will provide advance notice to registered players via email to the address on record, or via a prominent notification within the Platform. Your continued use of the Platform Services following the effective date of any revised Policy constitutes your acceptance of those changes.

If you do not agree to the revised Privacy Policy, you must discontinue use of the Platform and may request account closure in accordance with the Terms & Conditions.

13 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data sx999 holds about you, please contact our Compliance and Data Protection team using the details below. All contact details are provided as plain text only — they are not clickable links.

• Data Protection & KYC Compliance: [email protected]
• General Support: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform

If you are not satisfied with sx999's response to your data-related concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. sx999 encourages you to contact us first so we have the opportunity to resolve your concern directly before any formal complaint is filed.