tc999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by tc999 ("we," "us," "our," or "the Platform") and applies to all individuals ("you," "the User," or "the Player") who access, register with, or use any service offered through tc999.lat or any associated tc999 domain, mobile application, or interface.

tc999 is committed to protecting your personal data and to being transparent about what we collect, why we collect it, how long we keep it, and who we share it with. This Policy explains your rights in relation to your personal data and how to exercise them.

This Privacy Policy should be read alongside the tc999 Terms & Conditions, which govern your use of the platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Privacy Policy takes precedence.

2 Data Controller

For the purposes of applicable data protection law, tc999 acts as the data controller in respect of personal data collected and processed through the tc999 platform. As data controller, tc999 determines the purposes and means by which your personal data is processed.

If you have any questions about how tc999 processes your personal data, or wish to exercise any of your data rights set out in Section 11 of this Policy, please contact the tc999 Data Protection team via the contact details provided in Section 16.

3 Personal Data We Collect

tc999 collects personal data through several channels, including account registration, platform usage, customer support interactions, and payment processing. The categories of personal data we collect include:

Registration & Identity Data:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify compliance with the 21+ age requirement);
• Pakistani mobile number used for account registration and two-factor authentication;
• Email address, where provided;
• Residential address, where required for KYC verification;
• Copy of government-issued identity document (CNIC, passport) where KYC is required.

Transaction & Payment Data:

• JazzCash account number or EasyPaisa mobile account details;
• Bank account details for HBL, UBL, Meezan Bank, or other registered bank transfers;
• Deposit and withdrawal history, including amounts, timestamps, and payment method used;
• Raast ID or 1LINK account reference, where applicable.

Platform Usage Data:

• Betting history, casino game play history, and wagering patterns;
• Login timestamps, session duration, and device identifiers;
• IP address and approximate geolocation at the time of login;
• Browser type, operating system, and device type;
• Pages visited on tc999 and navigation behaviour within the platform.

Support & Communications Data:

• Live chat transcripts and support ticket history;
• Email correspondence with the tc999 support team;
• Feedback submitted through tc999 platform surveys or feedback forms.

4 How We Use Your Personal Data

tc999 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and operating your tc999 account, including verifying your identity at registration and during ongoing KYC processes;
• Service Delivery: Processing your bets, settling winnings, crediting bonuses, and operating the live casino and slot game services you use;
• Payment Processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK; processing withdrawal requests to your registered payment method;
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, fraud, money laundering, and other prohibited activity as defined in the tc999 Terms & Conditions;
• Legal Compliance: Meeting our obligations under applicable anti-money laundering laws, gaming licensing requirements, and any court or regulatory orders requiring disclosure;
• Responsible Gaming: Monitoring account activity to identify patterns associated with problem gambling and enabling responsible gaming tools including deposit limits, loss limits, and self-exclusion;
• Customer Support: Responding to your queries, complaints, and support requests via live chat, email, and other support channels;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the tc999 platform, user interface, and service offering;
• Communications: Sending you transactional notifications about your account activity, payment confirmations, and material changes to tc999 policies — where you have provided a contact preference.

5 Legal Basis for Processing

tc999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., operating your tc999 account, processing your bets, and handling your deposits and withdrawals;
• Legal Obligation: Processing required to comply with our legal obligations, including anti-money laundering regulations, identity verification requirements under our gaming licence, and any applicable court or regulatory orders;
• Legitimate Interests: Processing carried out for tc999's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your rights;
• Consent: Where required, processing based on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 Sharing of Personal Data

tc999 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment Processors: Your payment data is shared with the relevant payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — strictly to the extent necessary to process your deposit or withdrawal transaction;
• Identity Verification Services: Where required for KYC compliance, identity document data may be shared with certified third-party identity verification providers operating under strict data processing agreements with tc999;
• Game Software Providers: Your in-game activity data (excluding financial or identity data) is shared with certified game providers — including Evolution Gaming, Pragmatic Play, PG Soft, Habanero, Jili, and Ezugi — to deliver the games you play on tc999;
• Fraud Prevention Services: Anonymised risk signals and device identifiers may be shared with specialist fraud prevention platforms to protect tc999 and its players from fraudulent activity;
• Regulatory & Legal Authorities: tc999 will disclose personal data to competent authorities, regulators, or courts where required to do so by applicable law, court order, or gaming licensing obligations;
• Business Transfers: In the event of a merger, acquisition, or sale of tc999 assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections being maintained.

All third parties with whom tc999 shares personal data are required to process that data only for the specified purpose and under terms that provide equivalent protection to those set out in this Policy.

7 Payment Data & Financial Information

tc999 handles payment data with the highest level of security. Full payment credentials — including JazzCash PINs, EasyPaisa passwords, and bank account login details — are never stored by tc999. Payment transactions are processed directly through the relevant payment provider's secure interface.

tc999 stores only the references necessary to process future withdrawals to your registered payment methods — such as your registered JazzCash mobile number or EasyPaisa account reference. This stored reference data is encrypted at rest using AES-256 encryption and is accessible only to authorised tc999 payment processing systems.

8 Cookies & Tracking Technologies

tc999 uses cookies and similar tracking technologies on the tc999 platform. A cookie is a small text file stored on your device by your web browser when you visit the tc999 website. tc999 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the tc999 platform to function. These include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing platform functionality;
• Functional Cookies: Used to remember your preferences on tc999, such as your preferred language, display settings, and responsible gaming limit configurations;
• Analytics Cookies: tc999 uses anonymised, aggregated analytics to understand how players navigate the platform, which features are most used, and where improvements are needed. No personally identifiable information is associated with these analytics;
• Fraud Prevention Cookies: Device fingerprinting and session cookies used to detect suspicious login patterns and prevent fraudulent account access.

tc999 does not use third-party advertising cookies or cross-site tracking technologies that profile your behaviour across websites unrelated to tc999. You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use tc999 services.

9 Data Security

tc999 implements technical and organisational security measures appropriate to the risk posed by the personal data we process. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the tc999 platform;
• AES-256 encryption of sensitive data stored in tc999 databases, including payment references and identity document metadata;
• Role-based access controls limiting tc999 staff access to personal data strictly to what is required for their role;
• Two-factor authentication available for all tc999 player accounts using Pakistani mobile numbers;
• Regular security audits and penetration testing of the tc999 platform by independent security specialists;
• Intrusion detection systems monitoring tc999 infrastructure for unauthorised access attempts.

While tc999 takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach affecting your personal data, tc999 will notify affected users in accordance with our obligations under applicable data protection law.

10 Data Retention

tc999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

• Active Account Data: Retained for the duration of your tc999 account and for a period of five years following account closure, to meet our anti-money laundering and gaming licence record-keeping obligations;
• Transaction Records: Deposit, withdrawal, and betting history retained for seven years following the transaction date, as required by financial record-keeping obligations;
• KYC Documents: Identity documents retained for five years following account closure, or longer where required by applicable law;
• Support Communications: Live chat transcripts and email correspondence retained for two years from the date of the interaction;
• Analytics Data: Anonymised, aggregated usage data retained indefinitely for platform improvement purposes, as it cannot be linked to any individual;
• Responsible Gaming Records: Self-exclusion requests and responsible gaming tool activations retained for seven years to prevent circumvention of self-exclusion periods.

When the applicable retention period expires, personal data is securely deleted from tc999 systems or anonymised in a manner that prevents re-identification. You may request early deletion of your personal data as described in Section 11, subject to any overriding legal retention obligations.

11 Your Data Rights

As a tc999 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact tc999 support via live chat or email as detailed in Section 16. tc999 will respond to all valid data rights requests within 30 days.

12 Children & Minors

tc999 uses age verification at the point of registration and during ongoing KYC processes to prevent access by minors. If you are a parent or guardian and believe that a minor has registered on tc999, please contact tc999 support immediately. tc999 will investigate and take appropriate action, including account closure and data deletion, within 48 hours of a confirmed report.

13 International Data Transfers

As tc999 operates as an international online gaming platform, some of your personal data may be transferred to, and processed in, countries outside Pakistan where tc999 operates its infrastructure or works with third-party service providers. Such countries may include those where tc999's gaming licence is held and where its licensed server infrastructure is located.

Where personal data is transferred internationally, tc999 ensures that appropriate safeguards are in place — including contractual data protection clauses with third-party processors that impose obligations equivalent to those set out in this Policy. tc999 does not transfer personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate compensating controls.

14 Responsible Gaming Data

tc999 collects and processes specific data in connection with responsible gaming obligations. This includes records of any deposit limits, loss limits, session alerts, or self-exclusion periods you have activated on your tc999 account. This data is processed to:

• Enforce the responsible gaming limits and restrictions you have chosen to set on your account;
• Prevent circumvention of self-exclusion periods — self-exclusion data is retained for the full duration of the exclusion and for seven years thereafter;
• Identify patterns in account activity that may indicate problem gambling behaviour, enabling proactive outreach from the tc999 responsible gaming team where appropriate;
• Meet tc999's obligations under its gaming licence to maintain records of responsible gaming interventions.

Responsible gaming data is treated with the highest level of confidentiality and is never shared with third parties except where required by tc999's gaming licence obligations or applicable law.

15 Updates to This Privacy Policy

tc999 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform operations. Material updates to this Policy will be communicated to registered tc999 users via a notification on the platform, or by message to your registered mobile number or email address, no less than 7 days before the updated Policy takes effect.

The current version of this Privacy Policy, including its effective date, is always available on the tc999 platform. Your continued use of tc999 following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with a revised Policy, you should close your tc999 account before the effective date of the update.

16 Contact & Data Rights Requests

If you have questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how tc999 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 through the tc999 platform — average response time 3–5 minutes in Urdu and English. Suitable for general privacy queries and initiating data rights requests;
• Email: [email protected] — for written privacy queries, data rights requests, and formal complaints. Responses within 24 hours for general queries; data rights requests responded to within 30 days;
• Support Languages: Urdu and English — tc999 privacy support is available to players across Pakistan, from Karachi and Lahore to Islamabad, Faisalabad, and beyond.

When submitting a data rights request, please include your registered tc999 mobile number and a clear description of the data right you wish to exercise. tc999 may require identity verification before processing your request to ensure we release personal data only to the correct account holder.