sc999 Privacy
Policy

This Privacy Policy ("Policy") describes how sc999 ("sc999", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to users ("you", "your") of the sc999 platform at sc999.biz, including all associated services such as sports betting, live casino, slots, crash games, promotions, and customer support.

This Policy is incorporated into and forms part of sc999's Terms & Conditions. By creating a sc999 account or otherwise using the sc999 Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

Who We Are

sc999 is the operator of the online gaming platform accessible at sc999.biz. sc999 is operated under an international gaming license, which imposes specific obligations on how sc999 handles user data, including requirements relating to identity verification (KYC), anti-money-laundering compliance (AML), responsible gaming, and data protection. sc999 acts as the data controller for personal data processed under this Policy — meaning sc999 determines the purposes and means of processing your personal data.

For any privacy-related queries, complaints, or rights requests, sc999's designated privacy contact point is reachable at [email protected] with the subject line "Privacy Request".

Personal Data sc999 Collects

sc999 collects the following categories of personal data from users of its Platform:

How sc999 Collects Your Data

sc999 collects personal data through the following means:

3.1 Directly From You

Information you provide voluntarily when registering for a sc999 account; completing the KYC verification process; making deposits or withdrawal requests; contacting sc999 customer support via live chat or email; updating your account profile; or participating in sc999 promotional activities or surveys.

3.2 Automatically During Platform Use

Technical and gaming data is collected automatically as you use the sc999 Platform. This includes session data, IP address, device identifiers, betting and gaming activity, and browsing behaviour on the Platform. This data is collected using cookies, server logs, and similar tracking technologies, as further described in Section 6 of this Policy.

3.3 From Third Parties

sc999 may receive data about you from third parties in the following limited circumstances: (a) identity and fraud screening services used as part of the KYC and AML compliance process; (b) payment processors, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay, who confirm transaction details; (c) game providers whose titles are hosted on the sc999 Platform, who may share session data to resolve disputes or technical issues; (d) analytics service providers operating under data processing agreements with sc999.

Purpose of Processing & Legal Basis

sc999 processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which sc999 uses your personal data and the legal basis for each:

Data Sharing & Disclosure

sc999 does not sell your personal data. sc999 shares user data only in the circumstances described below, and only to the extent necessary for the stated purpose:

5.1 Service Providers

sc999 engages third-party service providers who process data on sc999's behalf under written data processing agreements. These include: payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, USDT network validators); identity verification and KYC service providers; fraud detection and cybersecurity providers; IT infrastructure, cloud hosting, and database providers; customer support platform providers; and game studio partners whose titles are offered on the sc999 Casino and sc999 Slot lobbies.

5.2 Legal and Regulatory Obligations

sc999 may disclose your personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where required to do so by its international gaming license conditions, applicable law, court order, or other legal process. sc999 will notify you of any such disclosure where it is legally permitted to do so.

5.3 Corporate Transactions

In the event that sc999 undergoes a merger, acquisition, asset sale, or restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change of control and any material change to this Privacy Policy that results from it.

Cookies & Tracking Technologies

sc999 uses cookies and similar tracking technologies on the Platform to maintain session integrity, personalise your experience, prevent fraud, and analyse Platform performance. The following categories of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the sc999 Platform to function. They maintain your sc999 login session after authentication, preserve your preferences within a session (e.g., selected sport or game), and protect against cross-site request forgery. These cookies cannot be disabled without disrupting your use of sc999. No consent is required for strictly necessary cookies.

6.2 Analytics Cookies

sc999 uses analytics cookies to understand how Pakistani users navigate the Platform — which pages are visited most frequently, how long users spend in the sc999 Casino lobby, which deposit methods are most commonly used. This data is aggregated and does not identify individual users. Analytics cookies help sc999 improve the Platform experience for all Pakistani users.

6.3 Functional Cookies

Functional cookies remember your preferences across sessions — such as your preferred sc999 language setting, last-used payment method in the cashier, or responsible gaming reminder settings. These improve usability but are not strictly necessary for the Platform to operate.

Data Security

sc999 implements technical and organisational security measures proportionate to the sensitivity of the data processed and the risks involved in its processing. These measures include:

• Encryption in transit: All data transmitted between your device and sc999's servers is encrypted using TLS 1.3, preventing interception by third parties on the network — including on mobile connections used by Pakistani players on Jazz, Zong, Telenor, or Ufone.
• Encryption at rest: Sensitive data stored on sc999's servers — including KYC documents, financial records, and user credentials — is encrypted using AES-256.
• Access controls: Access to personal data within sc999's systems is restricted to personnel with a legitimate operational need. Access is role-based, logged, and subject to periodic review.
• Two-factor authentication: sc999 makes 2FA available to all users and recommends its use. sc999 employees with access to user data are required to use 2FA on all internal systems.
• Security monitoring: sc999's systems are monitored for unauthorised access attempts, anomalous activity, and potential data breaches in real time.
• Penetration testing: sc999 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Data Retention

sc999 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to applicable legal and licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your sc999 Account plus a minimum of 5 years after account closure, as required by sc999's AML obligations under its international gaming license.
• Financial and transaction records (PKR deposits and withdrawals): Retained for a minimum of 5 years from the date of the transaction, as required by AML regulations.
• KYC documents: Retained for the duration of the account plus 5 years after closure. KYC documents are stored in an access-controlled, encrypted environment.
• Gaming activity records (betting history, casino sessions, slot spins): Retained for 5 years from the date of the activity, to support dispute resolution and regulatory compliance.
• Customer support communications: Retained for 3 years from the date of the interaction.
• Marketing consent records: Retained for as long as the marketing consent is active, plus 1 year after withdrawal of consent as a record of the consent lifecycle.
• Technical and analytics data: Aggregated analytics data is retained indefinitely in anonymised form. Individual session logs and IP records are retained for 12 months.

Where retention beyond these periods is required by a specific legal order, regulatory requirement, or active legal dispute involving the relevant data, sc999 will retain the data until the relevant obligation is discharged.

Your Privacy Rights

As a user of the sc999 Platform, you have the following rights in relation to your personal data. sc999 will respond to all valid rights requests within 30 days of receipt, and will not charge a fee for reasonable requests:

To exercise any of the above rights, contact sc999 at [email protected] with the subject line "Privacy Rights Request", clearly describing the right you wish to exercise and the data it relates to. sc999 may need to verify your identity before processing the request. sc999 will acknowledge your request within 5 business days and provide a substantive response within 30 days.

Children's Privacy — 21+ Only

sc999 is strictly an adult platform. The minimum age to register for and use sc999 is 21 years. sc999 does not knowingly collect personal data from persons under the age of 21. sc999 employs age verification measures at registration and during the KYC process to enforce this requirement.

If sc999 discovers that personal data has been collected from a person under 21 — whether through a registration made using false information or any other means — sc999 will immediately close the associated account, delete the personal data of the underage user to the extent not required to be retained for legal compliance purposes, and take all steps required by its gaming license in relation to underage access.

Marketing Communications

sc999 sends promotional communications — including information about bonuses, new games, cricket betting promotions around PSL and Pakistan internationals, and other sc999 offers — to registered users who have not opted out of marketing communications. Marketing communications are sent via email to your registered address and/or SMS to your Pakistani mobile number.

You may withdraw your consent to receive marketing communications from sc999 at any time by: (a) updating your communication preferences in the sc999 Account settings panel; (b) clicking the "Unsubscribe" link in any sc999 marketing email; or (c) contacting sc999 support at [email protected] with the request to remove you from marketing lists. Withdrawal of marketing consent takes effect within 5 business days and does not affect your ability to use sc999 or receive transactional communications (such as deposit confirmations and bet settlements).

sc999 does not share your contact details with third parties for their marketing purposes. All sc999 marketing is sent directly by sc999 or by service providers acting on sc999's explicit instructions under data processing agreements.

International Data Transfers

As an internationally licensed gaming platform, sc999 may process and store personal data on servers located outside Pakistan. Where personal data is transferred outside your country of residence, sc999 ensures that appropriate safeguards are in place to protect the data to the same standard as required under this Policy, including use of data processing agreements incorporating standard contractual clauses, transfer to countries with adequacy determinations, and reliance on binding corporate rules where applicable.

Financial data relating to JazzCash and EasyPaisa transactions is processed in compliance with the requirements of the respective payment network operators and applicable Pakistani financial regulations. Where these require data to remain within specific jurisdictions, sc999 complies with those requirements.

Changes to This Privacy Policy

sc999 may update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or gaming license requirements. The most current version of this Policy is always available on this page, identified by the "Last Updated" date at the top.

Where changes to this Policy are material — meaning they significantly affect your rights or the way sc999 uses your data — sc999 will notify registered users by email to their registered address and/or via a prominent Platform notification before the changes take effect. Continued use of sc999 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

Contact Us — Privacy Enquiries

For any questions about this Privacy Policy, the data sc999 holds about you, or to exercise any of your privacy rights, please contact sc999 through the following channels:

• Email (Privacy Requests): [email protected] — use subject line "Privacy Request" or "Privacy Rights Request" for faster routing to sc999's privacy team.
• Live Chat: Available 24/7 inside your sc999 Account after login. Advise the support agent that your query relates to a privacy matter for escalation to the appropriate team.

sc999 will acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 days. For complex requests that require additional time, sc999 will notify you within the initial 30-day period and provide an updated estimated response date.

If you are not satisfied with sc999's response to a privacy complaint, you have the right to escalate the matter through the dispute resolution mechanism of sc999's licensing jurisdiction, as described in sc999's Terms & Conditions.