sc999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how sc999 ("sc999", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "Player", "User") who access or use the sc999 online gaming platform at https://sc999.bio and all associated services.

sc999 is committed to protecting the privacy of its players across Pakistan, including those based in Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions. This Policy is written in plain English so that every Pakistani player fully understands how their data is handled — without needing a lawyer to interpret it.

This Policy was last reviewed and updated on 1 January 2026 and supersedes all previous versions. sc999 reserves the right to amend this Policy at any time. Material changes will be communicated to registered players via their registered contact details or through a prominent notice on the Platform.

2. Data Controller

sc999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, sc999 determines the purposes for which and the manner in which personal data is processed. sc999 operates under an internationally recognised gaming licence that imposes strict data governance obligations on the Platform operator.

If you have any questions about sc999's role as data controller, or wish to exercise any of your data rights described in this Policy, you may contact sc999's data team through the support channels listed in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create an sc999 account, we collect the following information: your full legal name, date of birth, residential address (including city and province within Pakistan), email address, and mobile phone number. This information is required to create and verify your account in compliance with our licensing obligations.

3.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) regulations and to verify that players meet the 21+ age requirement, sc999 may collect copies of your government-issued Computerised National Identity Card (CNIC), proof of address documents, and proof of your payment method. KYC documents are processed securely and retained only for as long as required by applicable law and our licensing obligations.

3.3 Financial Data

sc999 collects transactional data related to deposits and withdrawals, including your JazzCash account number, EasyPaisa wallet reference, HBL or UBL bank account details, Meezan Bank information, or other payment method identifiers as applicable. sc999 does not store full debit card numbers on its servers. Card data is processed exclusively through PCI-DSS compliant payment processors.

3.4 Gaming Activity Data

sc999 automatically records data relating to your gaming activity on the Platform, including bet history, game session logs, deposit and withdrawal records, bonus usage, and any responsible gaming tool settings you have configured. This data is used to operate your account, resolve disputes, and meet regulatory reporting requirements.

3.5 Technical & Device Data

sc999 collects technical information about the device and network you use to access the Platform, including your IP address, device type and model, operating system version, browser type, and approximate geographic location derived from your IP address. This data is used for fraud prevention, security monitoring, and Platform optimisation.

3.6 Communications Data

When you contact sc999 support via live chat or email, we retain records of those communications, including the content of your messages and the date and time of contact. These records are used to resolve your queries, improve our support services, and maintain an audit trail of support interactions.

4. How We Collect Your Data

sc999 collects personal data through the following means:

• Direct collection: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform through cookies, server logs, and similar tracking technologies (see Section 10).
• Third-party sources: Identity verification data from KYC service providers; fraud risk signals from fraud prevention platforms; payment confirmation data from JazzCash, EasyPaisa, and banking partners.
• Publicly available sources: Sanction list checks and politically exposed person (PEP) screening conducted as part of our AML obligations.

5. Purpose & Legal Basis for Processing

sc999 processes your personal data for the following purposes and on the following legal bases:

• Contract performance: Processing necessary to operate your sc999 account, execute your bets and gaming sessions, process PKR deposits and withdrawals, and deliver the services you have contracted for.
• Legal obligation: Processing required to comply with AML regulations, age verification requirements, tax reporting, licensing authority obligations, and law enforcement requests.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, improvement of sc999 services, and detection of terms violations — where such interests are not overridden by your data protection rights.
• Consent: Marketing communications (promotional offers, bonus notifications) where you have provided explicit opt-in consent. You may withdraw consent for marketing communications at any time through your account settings.

6. Data Sharing & Disclosure

6.1 Service Providers

sc999 shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors (JazzCash, EasyPaisa, banking partners), identity verification providers, fraud prevention services, cloud infrastructure providers, and customer support platform operators. All service providers are contractually bound to process your data only on sc999's instructions and to maintain appropriate security standards.

6.2 Regulatory & Legal Disclosure

sc999 may disclose your personal data to gaming regulators, licensing authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law or a valid legal order. sc999 will notify you of any such disclosure where it is legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of sc999's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transaction.

6.4 No Data Sales

sc999 does not sell, rent, or lease your personal data to third-party marketers, data brokers, or any other commercial entity for their own purposes. This commitment applies without exception.

7. International Data Transfers

sc999 operates globally and some of the service providers it works with may process your data in countries outside Pakistan. Where personal data is transferred internationally, sc999 ensures that appropriate safeguards are in place — including contractual data transfer agreements — to maintain a level of data protection equivalent to the standards applied within Pakistan and the sc999 licensing jurisdiction.

By using the sc999 Platform, you acknowledge and consent to the transfer of your personal data to sc999's international service providers where such transfers are necessary to deliver the services you have requested.

8. Data Retention

sc999 retains your personal data for as long as your account remains active and for a period of at least five (5) years following account closure, in order to meet our regulatory, legal, and licensing obligations. Financial transaction records and KYC documentation may be retained for longer periods where required by AML regulations or a specific legal order.

Gaming activity logs are retained for a minimum of three (3) years to support dispute resolution and responsible gaming monitoring. Communications data is retained for two (2) years from the date of the last interaction. When data is no longer required, sc999 securely deletes or anonymises it in accordance with our internal data lifecycle policy.

9. Security Measures

sc999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sc999 servers
• Encrypted storage of sensitive personal data including CNIC details and payment method identifiers
• Role-based access controls limiting staff access to player data on a strict need-to-know basis
• Regular third-party security audits and penetration testing of the sc999 Platform
• Two-factor authentication (2FA) availability for all player accounts
• Continuous automated monitoring for suspicious login attempts and fraudulent activity
• Incident response procedures for prompt detection and reporting of data breaches

While sc999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your sc999 login credentials confidential and for using a strong, unique password for your account.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by the sc999 Platform when you visit. They enable sc999 to recognise your browser, remember your preferences, and improve your overall gaming experience. sc999 also uses similar technologies including web beacons and local storage.

10.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without impairing your ability to use sc999.
• Functional cookies: Remember your preferences such as language settings, currency display, and responsible gaming tool configurations to personalise your sc999 experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform — such as which game categories are most visited — to help sc999 improve its services.
• Fraud prevention cookies: Used to detect and prevent fraudulent activity, duplicate account creation, and bot traffic on the sc999 Platform.

10.3 Managing Cookies

You can manage or delete cookies at any time through your browser settings. Please note that disabling non-essential cookies will not prevent you from using sc999, but may affect certain Platform features and your personalised experience. Disabling essential cookies will prevent you from logging in or using the Platform.

11. Your Data Rights

As an sc999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact sc999 support via live chat or email (see Section 15). sc999 will respond to all valid data rights requests within 30 calendar days.

• Right of access: Request a copy of the personal data sc999 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sc999's legal retention obligations.
• Right to restriction: Request that sc999 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Request your personal data in a structured, machine-readable format where processing is based on your consent or on contract performance.
• Right to object: Object to sc999's processing of your data for legitimate interest purposes, including profiling for responsible gaming monitoring.
• Right to withdraw consent: Withdraw consent for any processing based on consent — including marketing communications — at any time, without affecting the lawfulness of prior processing.

12. Children & Minors

sc999 services are strictly restricted to individuals aged 21 years and over. sc999 does not knowingly collect personal data from individuals under the age of 21. If sc999 becomes aware that personal data has been collected from an underage individual, the relevant account will be immediately suspended, all data will be deleted, and any deposits will be returned after verification.

If you are a parent or guardian and believe that a minor has registered an sc999 account, please contact sc999 support immediately via live chat or email so that the matter can be investigated and resolved without delay.

13. Third-Party Links

The sc999 Platform does not contain links to third-party websites for commercial or advertising purposes. All navigation links within sc999 point exclusively to internal pages of the sc999 Platform. sc999 accepts no responsibility for the privacy practices of any external websites that players may access independently outside of the sc999 Platform.

14. Amendments to This Policy

sc999 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. When material changes are made, sc999 will notify registered players via their registered email address or mobile number, or by displaying a clear notice on the Platform homepage. The effective date of the current version is stated at the top of this Policy.

Your continued use of the sc999 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you must cease using the Platform and request account closure before the revised Policy takes effect.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or sc999's data practices, please contact us through the following channels:

• Live Chat: Available 24/7 via the chat icon on any sc999 page — the fastest way to reach our team
• Support Email: [email protected]
• Response Time: sc999 targets a response to all privacy-related enquiries within 5 business days

If you are not satisfied with sc999's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction or to sc999's licensing authority's player dispute resolution service.

This Privacy Policy was last reviewed and updated on 1 January 2026. sc999 reserves all rights not expressly granted herein.