tp999 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how tp999 ("tp999," "we," "our," or "us") collects, receives, uses, stores, shares, transfers, and otherwise processes personal data relating to individuals ("Players," "you," or "your") who access or use the tp999 online gaming platform available at https://tp999.vu and all associated mobile-optimised sites, applications, and services operated under the tp999 brand.

This Policy applies to all personal data processing activities conducted by tp999 in connection with the Platform, regardless of how you access or use the Platform — whether via desktop browser, mobile browser, or any tp999-branded application. This Policy should be read together with the tp999 Terms & Conditions, which are incorporated by reference.

By registering a tp999 account, depositing funds, or otherwise using any feature of the tp999 Platform, you acknowledge that you have read, understood, and agree to the data processing practices described in this Policy. If you do not agree with this Policy, you must not use the tp999 Platform.

For the purposes of applicable data protection legislation, tp999 is the data controller in respect of all personal data collected and processed through the tp999 Platform. As data controller, tp999 determines the purposes for which and the means by which your personal data is processed.

tp999 operates under an international gaming licence and is committed to processing all player personal data in accordance with recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.

All enquiries, requests, and complaints relating to tp999's data processing activities should be directed to our dedicated data protection contact at [email protected].

tp999 collects personal data from Pakistani players through several means: directly from you when you register an account or use our services; automatically through your use of the Platform; and in limited circumstances from trusted third parties as described below.

3.1 Registration and Identity Data

When you create a tp999 account, we collect the personal data you provide during the registration process, which includes:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address (city, province, and postal code within Pakistan)
• Valid email address
• Pakistani mobile telephone number
• Username and encrypted account password

3.2 Verification and Identity Documents

To comply with our legal obligations under anti-money laundering (AML) regulations and to verify player eligibility, tp999 may request and collect copies of identity documents including:

• Pakistani Computerised National Identity Card (CNIC)
• Proof of residential address (utility bill, bank statement)
• Proof of payment method ownership (JazzCash account confirmation, bank statement header)

3.3 Financial Transaction Data

tp999 processes financial transaction data associated with deposits and withdrawals made through your tp999 account. This includes transaction amounts (in PKR), payment method type, transaction timestamps, and transaction reference numbers. tp999 does not store full bank account numbers, card numbers, or mobile wallet PINs.

3.4 Gaming Activity Data

tp999 collects data relating to your gaming activity on the Platform, including games played, bet amounts and outcomes, session duration, deposit and withdrawal history, and bonus usage patterns. This data is used to operate the platform, detect fraud, support responsible gaming interventions, and improve the tp999 experience for Pakistani players.

3.5 Technical and Device Data

When you access the tp999 Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, and referring URL. This data is used for platform security, fraud prevention, and service optimisation purposes.

tp999 uses the personal data we collect for the following specific, documented purposes. We do not use your personal data for any purpose that is incompatible with those listed below without first obtaining your explicit consent.

• Account Registration and Management: To create and maintain your tp999 player account, verify your identity and age eligibility, and administer your account settings and preferences.
• Service Delivery: To provide you with access to the tp999 casino games, live dealer tables, sports betting markets, keno, fishing games, slots, and all other Platform features.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported PKR payment methods — and to verify the ownership of payment instruments.
• Legal Compliance: To fulfil our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and gaming regulatory requirements — including age verification, transaction monitoring, and suspicious activity reporting.
• Responsible Gaming: To monitor player gaming patterns, implement responsible gaming tools (deposit limits, self-exclusion, session reminders), and identify players who may be exhibiting signs of problem gambling in order to provide appropriate support and interventions.
• Fraud Prevention and Security: To protect the tp999 Platform and all registered players from fraud, cheating, money laundering, collusion, account takeover, and other security threats.
• Customer Support: To respond to your support enquiries, resolve complaints, and provide assistance in both English and Urdu through our 24/7 support team.
• Marketing and Promotions: Where you have consented to receive marketing communications, to send you information about tp999 bonuses, promotions, new game releases, and special offers. You may withdraw marketing consent at any time.
• Platform Improvement: To analyse Platform usage patterns and technical performance data in order to improve the tp999 experience for all Pakistani players.

tp999 processes your personal data only where we have a valid legal basis to do so. The legal bases on which tp999 relies for its data processing activities are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between tp999 and the registered player — including account creation, game provision, payment processing, and customer support.
• Legal Obligation: Processing that is required for tp999 to comply with its legal obligations, including AML/KYC compliance, age verification requirements, and regulatory reporting obligations under the terms of tp999's international gaming licence.
• Legitimate Interests: Processing carried out in pursuit of tp999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by the data subject's fundamental rights and freedoms.
• Consent: Where tp999 relies on your consent to process personal data — most notably for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

tp999 does not sell, rent, or trade your personal data to any unaffiliated third parties for their own marketing or commercial purposes. tp999 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

6.1 Payment Service Providers

To process deposits and withdrawals, tp999 shares necessary transaction data with Pakistani payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers receive only the data necessary to process the specific transaction and are contractually bound to maintain the confidentiality and security of any data shared with them.

6.2 Identity Verification Services

tp999 uses third-party identity verification service providers to fulfil its KYC and AML obligations. These providers may receive identity document images and personal information necessary to perform automated or manual identity verification checks.

6.3 Game Software Providers

The casino games and live dealer tables available on tp999 are provided by third-party game software studios. Certain anonymised gameplay data may be shared with these providers for the purpose of game performance monitoring and RNG certification. These providers do not receive personally identifiable player information unless specifically required by their certification obligations.

6.4 Regulatory and Law Enforcement Authorities

tp999 may disclose personal data to gaming regulatory authorities, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, valid legal process, regulatory requirement, or where necessary to protect the rights, property, or safety of tp999, its players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of tp999's assets, player personal data may be transferred to the acquiring entity, subject to the same data protection commitments set out in this Policy. Affected players will be notified in advance of any such transfer.

tp999 uses cookies and similar tracking technologies on the Platform to provide core functionality, remember your preferences, analyse usage patterns, and support security and fraud prevention measures.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, login authentication, and security token cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gaming limit configurations.
• Analytical Cookies: Used to collect anonymised data about how players use the tp999 Platform, which pages are visited most frequently, and where technical errors are encountered — to help us continuously improve the Platform.
• Security Cookies: Used to detect fraudulent activity, prevent account takeover attacks, and identify automated access to the Platform inconsistent with genuine human player behaviour.

7.2 Managing Cookies

You may control non-essential cookies through your browser settings or through tp999's cookie preference centre, accessible from the Platform footer. Please note that disabling certain cookies may affect the functionality, performance, or security of your tp999 gaming experience. Strictly necessary and security cookies cannot be disabled while using the tp999 Platform.

tp999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active tp999 player account is retained for the duration of the account's active status and for a minimum period of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: All PKR deposit, withdrawal, and bonus transaction records are retained for a minimum of seven (7) years following the date of each transaction, as required under applicable financial regulatory standards.
• Identity Verification Documents: Copies of CNIC and other identity verification documents are retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer Support Records: Records of support interactions, complaints, and their resolutions are retained for three (3) years following the closure of each support case.
• Gaming Activity Logs: Detailed game transaction logs are retained for a minimum of three (3) years for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.
• Marketing Data: Where you have consented to receive marketing communications, your marketing preferences and associated data are retained until you withdraw consent, at which point marketing data will be suppressed within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

tp999 implements a comprehensive range of technical, organisational, and procedural security measures to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between player devices and the tp999 Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data cannot be intercepted or read in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial information, and account credentials — is stored using strong encryption standards on secured server infrastructure.
• Access Controls: Access to player personal data within tp999's internal systems is restricted on a strict need-to-know basis. All staff members with access to personal data are subject to confidentiality obligations and regular data protection training.
• Regular Security Audits: tp999's technical infrastructure undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Intrusion Detection: tp999 operates continuous automated monitoring of its systems for signs of unauthorised access or suspicious activity, with 24/7 incident response capability.
• Two-Factor Authentication: tp999 supports and encourages the use of two-factor authentication (2FA) by all registered players as an additional layer of account security.

While tp999 takes all reasonable and appropriate technical measures to protect your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their tp999 accounts and to enable two-factor authentication where available.

tp999 respects and upholds your rights in relation to your personal data. The following rights are available to all registered tp999 players. To exercise any of these rights, please contact our support team at [email protected] with a clear description of your request.

tp999 will respond to all verified data subject rights requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further two months, in which case you will be notified of the extension and the reasons for it within the initial 30-day period.

The tp999 Platform is strictly intended for adults aged 21 years and above. tp999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is conducted at the point of registration, and tp999 may request additional identity documentation to confirm age eligibility at any point during a player's use of the Platform.

If you believe that tp999 has inadvertently collected personal data from an individual under 21 years of age, please notify us immediately at [email protected] and we will take immediate remedial action.

tp999 operates as an international gaming platform and, as such, certain personal data processed by tp999 may be transferred to, stored in, or processed in countries outside of Pakistan. This may occur, for example, in connection with the use of international game software providers, payment processing networks, or server infrastructure.

Where tp999 transfers personal data to countries that may not provide a level of data protection equivalent to that applicable in Pakistan, tp999 takes appropriate safeguards to ensure that such transfers are conducted lawfully and that your personal data remains adequately protected. These safeguards may include contractual data protection obligations imposed on recipient organisations, adherence to recognised international data transfer frameworks, and technical security measures applied consistently regardless of the data's physical location.

By using the tp999 Platform, you acknowledge and agree to the potential transfer of your personal data to international locations for the purposes described in this Policy, subject to the safeguards described above.

The tp999 Platform may incorporate third-party services — such as game software from external studio providers, payment gateways, and analytical tools — that operate under their own privacy policies. tp999 is not responsible for the privacy practices of third-party services accessed through the Platform, and we encourage players to review the privacy policies of any third-party services they interact with.

tp999 does not include links to external third-party websites within the Platform content. Any URLs encountered on the tp999 Platform will direct to pages within the tp999 domain or to officially integrated service interfaces. tp999 is not responsible for the data practices of any website or service outside of the tp999 Platform domain.

tp999 reserves the right to update, modify, or replace this Privacy Policy at any time. When we make material changes to this Policy — changes that affect your rights, the types of data we collect, or the purposes for which we use your data — we will provide advance notice through one or more of the following channels:

• A prominent notice displayed on the tp999 Platform homepage and within the player account dashboard
• A direct email notification sent to the registered email address associated with your tp999 account
• An in-Platform notification displayed upon your next login following a Policy update

Minor or non-material changes — such as typographical corrections, formatting updates, or clarifications that do not alter the substance of the Policy — may be made without advance notice, though the "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the tp999 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any updates to this Policy, you must cease using the Platform and may request account closure by contacting our support team.

For all enquiries, requests, or complaints relating to this Privacy Policy or tp999's personal data processing activities, please contact our dedicated data protection team using the details below:

• Email: [email protected]
• Response Time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week
• Languages: English and Urdu
• Players Served: Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan

If you are not satisfied with tp999's response to a privacy complaint, you may have the right to escalate your complaint to the relevant supervisory authority or regulatory body responsible for data protection oversight in the jurisdiction under which tp999 holds its gaming licence. tp999 will provide all reasonable assistance to facilitate this process.