sc999 Privacy Policy

01 About This Policy

sc999 is committed to protecting the privacy and personal data of every player who uses our platform. This Policy applies to all personal information collected through:

• The sc999 website at sc999.pro and all subdomains.
• The sc999 mobile application available for download on Android and iOS devices.
• Any communication you have with sc999 customer support via live chat, email, or any other channel.
• Participation in promotions, surveys, or feedback programmes operated by sc999.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which are accessible from the sc999 website. In the event of any conflict between this Policy and the Terms and Conditions in relation to a data privacy matter, this Policy shall prevail.

We may update this Policy from time to time in response to changes in applicable law, our business practices, or the services we offer. The effective date at the top of this page will always reflect when the most recent version took effect. We encourage you to review this Policy periodically.

02 Information We Collect

sc999 collects personal information from you directly, automatically, and in some cases from third parties. The categories of personal data we collect are described below.

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, and phone number provided when you create your sc999 account.
• Identity Verification (KYC) Documents: Government-issued photo identification (such as a CNIC, passport, or driving licence), proof of address documents, and any other documentation requested during the KYC process.
• Payment Information: Bank account details, JazzCash or EasyPaisa account numbers, and card information used to make deposits or receive withdrawals. Full card numbers are not stored by sc999 — payment processing is handled by our regulated payment partners.
• Communications: The content of messages you send to sc999 support via live chat, email ([email protected]), or any other channel, including records of complaints and their resolution.
• Preferences and Settings: Responsible gaming limits, notification preferences, and any optional profile information you choose to provide.

2.2 Information Collected Automatically

• Device and Technical Data: IP address, device type and model, operating system version, browser type and version, mobile network information, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on the platform, games played, bets placed, session start and end times, and click-stream data.
• Cookies and Similar Technologies: Session cookies, persistent cookies, and local storage data. See Section 6 for full details of our cookie practices.
• Geolocation Data: Approximate location data derived from your IP address. We do not access precise GPS-level location data without your explicit consent.

2.3 Information from Third Parties

• KYC and AML Providers: Identity verification and fraud screening data obtained from licensed third-party verification bureaus as part of our regulatory compliance obligations.
• Payment Processors: Transaction status and fraud risk indicators provided by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard as applicable to your payment method.
• Responsible Gaming Partners: Self-exclusion registry data where applicable, to prevent individuals who have self-excluded from other platforms from registering with sc999.

2.4 Summary of Data Categories

03 How We Use Your Information

sc999 uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your sc999 account, verify your identity, maintain your account, and enable you to access all platform features including cricket betting, slots, live casino, and Mahjong Ways.
• Processing Transactions: To process deposits and withdrawals in PKR via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard) and to maintain accurate financial records.
• KYC and Regulatory Compliance: To verify your age (minimum 21 years), confirm your identity, conduct anti-money laundering (AML) checks, and meet our obligations under applicable gaming regulations.
• Customer Support: To respond to your queries, resolve complaints, provide technical assistance, and maintain records of our interactions with you.
• Responsible Gaming: To enforce deposit limits, cooling-off periods, and self-exclusion requests you have set on your account, and to monitor for indicators of problem gambling behaviour.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, collusion, and other prohibited conduct described in our Terms and Conditions.
• Service Improvement: To analyse how Pakistani players use the sc999 platform, identify bugs or performance issues, and improve the user experience across our website and mobile app.
• Marketing Communications: To send you promotional offers, PSL and cricket betting promotions, bonus notifications, and platform updates — but only where you have given us consent to do so, or where we have a legitimate interest and you have not opted out.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities, and to protect the rights, property, and safety of sc999, its users, and the public.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your consent.

04 Legal Basis for Processing

sc999 processes your personal data only where we have a valid legal basis to do so. The applicable legal bases are:

• Contractual Necessity: Processing required to fulfil our contract with you — including account registration, transaction processing, and providing access to gaming services.
• Legal Obligation: Processing necessary to comply with our legal and regulatory obligations, including KYC identity verification, AML screening, and responding to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of sc999's legitimate business interests, such as fraud prevention, platform security, service improvement, and responsible gaming monitoring — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting sc999 support or adjusting your communication preferences within your account settings.

Where we rely on legitimate interests as our legal basis, we carry out a balancing test to ensure that your interests and fundamental rights do not override our legitimate interests. You may request details of this balancing test by contacting [email protected].

05 Sharing Your Information

sc999 does not sell, rent, or trade your personal data to any third party. We share your information only in the following limited circumstances:

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with our regulated payment partners, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard.
• Identity Verification Providers: We share identity and document data with licensed KYC and AML service providers for the purpose of verifying your identity and screening for financial crime risk.
• Game Technology Providers: We share limited account and session data with our game software providers to enable delivery of casino games, slots, Mahjong Ways, and live dealer experiences on the platform.
• IT and Security Service Providers: We work with cloud hosting, cybersecurity, and analytics vendors who process data on our behalf under strict data processing agreements that prohibit them from using your data for their own purposes.
• Regulatory and Law Enforcement Authorities: We may disclose your personal data to regulators, law enforcement agencies, or courts where we are required to do so by law, or where such disclosure is necessary to protect the rights and safety of sc999 or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred as part of that transaction. We will notify you of any such transfer and the privacy choices available to you.

06 Cookies and Tracking Technologies

sc999 uses cookies and similar tracking technologies on our website and mobile application. This section explains what types of cookies we use and how you can control them.

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you do not need to re-enter them when you return to the site or browse from page to page.

6.2 Types of Cookies We Use

sc999 does not use third-party advertising or retargeting cookies. You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the sc999 platform, including the ability to log in to your account.

07 Data Retention

sc999 retains your personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law and regulatory obligations. Our general retention guidelines are as follows:

• Account Data: Retained for the duration of your active account relationship with sc999, plus a minimum of five (5) years following account closure, as required by AML and gaming regulatory obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, in compliance with applicable financial regulations.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date for regulatory compliance and dispute resolution purposes.
• Customer Support Communications: Retained for up to three (3) years following the resolution of the relevant query or complaint.
• Marketing Consent Records: Retained for the period during which you remain opted in to marketing, plus one (1) year following opt-out to demonstrate compliance with consent requirements.
• Technical and Usage Logs: Retained for up to twelve (12) months for platform security and performance monitoring purposes, after which logs are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with an identifiable individual. Where deletion is not technically feasible for certain backup systems, the data will be isolated and protected from further processing until deletion is possible.

08 Data Security

sc999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data in transit between your device and sc999 servers is protected by industry-standard SSL/TLS encryption.
• Data Encryption at Rest: Sensitive personal data stored on sc999 servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to sc999 personnel who have a genuine operational need to access it. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): sc999 supports and strongly recommends 2FA for all user accounts as an additional layer of login security.
• Penetration Testing and Security Audits: sc999 conducts regular security assessments and third-party penetration tests to identify and remediate vulnerabilities in our systems.
• Incident Response: sc999 maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, sc999 will notify affected users without undue delay.

While sc999 takes all reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. You are also responsible for maintaining the security of your own account credentials. Please refer to Section 3 of the sc999 Terms and Conditions for your account security obligations.

09 Your Rights

As an sc999 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] or through the 24/7 live chat on the sc999 platform.

• Right of Access: You have the right to request a copy of the personal data sc999 holds about you. We will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Where data cannot be corrected (for example, historical transaction records), we will add a note of the inaccuracy.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose it was collected. Note that this right is subject to our legal and regulatory obligations to retain certain data, as described in Section 7.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in specific circumstances, such as where you contest its accuracy or object to our processing.
• Right to Data Portability: Where we process your data based on your consent or on the basis of a contract with you, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our legal basis. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where we process your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Children and Minors

sc999 operates a strict 21+ age policy and does not knowingly collect personal data from any individual under the age of 21. Our platform is not directed at minors, and we take active steps to prevent under-age access.

During registration, all users are required to confirm that they are at least 21 years of age and to submit valid government-issued identification as part of our KYC process. If sc999 discovers or has reasonable grounds to suspect that an account is held by a person under 21 years of age, we will:

• Immediately suspend access to the account pending investigation.
• Permanently close the account upon confirmation of the age breach.
• Return any genuine deposit balance to the depositing payment method, minus any winnings generated, which will be voided.
• Retain records of the incident as required by applicable regulatory obligations.

Parents and guardians who believe that a minor has gained access to sc999 and provided personal data are strongly encouraged to contact us immediately at [email protected] so that we can take appropriate action without delay.

11 International Data Transfers

sc999 is operated under international gaming regulations and may store and process your personal data on servers located outside Pakistan. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your information, including:

• Transfers to jurisdictions recognised as providing an adequate level of data protection.
• Use of standard contractual clauses approved by relevant data protection authorities in contracts with recipient entities.
• Application of binding corporate rules where transfers occur within a group of companies under shared governance.

Our payment processing partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — process Pakistani Rupee transactions primarily within Pakistan. International card transactions via Visa and Mastercard are processed by those networks' respective international infrastructure in accordance with their published privacy policies and applicable card scheme regulations.

If you would like more information about the specific safeguards we have in place for international data transfers, please contact us at [email protected].

12 Changes to This Privacy Policy

sc999 reserves the right to update or amend this Privacy Policy at any time. When we make material changes to the way we collect, use, or share your personal data, we will notify you by one or more of the following methods:

• Displaying a prominent notice on the sc999 platform upon your next login.
• Sending a notification to the email address registered on your sc999 account.
• Updating the "Effective Date" displayed at the top of this page.

Your continued use of sc999 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you should cease using the platform and request closure of your account in accordance with our Terms and Conditions.

We recommend reviewing this Privacy Policy periodically to stay informed about how sc999 protects your personal data. Previous versions of this Policy are available upon request from [email protected].

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sc999 processes your personal data, please do not hesitate to get in touch with us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the sc999 platform — the fastest way to reach our support team.
• Email: [email protected] — for privacy-related queries, we aim to respond within 48 hours.
• Coverage: Serving players across Pakistan — Karachi, Lahore, Islamabad, Faisalabad, and beyond.

This Privacy Policy is effective as of 1 January 2026. The English-language version of this Policy is the binding version. Any translated summaries or alternative versions provided for convenience are non-binding.