How vp999 Handles Your Personal Data — Transparently and Securely

1 Data Controller

For the purposes of this Privacy Policy, vp999 is the data controller responsible for the personal information of its registered users. vp999 operates the online gaming platform accessible at vp999.games and is the entity that determines the purposes and means by which personal data is processed in connection with platform services.

All data-related enquiries, access requests, and complaints should be directed to our dedicated privacy contact: [email protected]. We will acknowledge all privacy-related correspondence within five business days and endeavour to resolve matters within thirty days of receipt.

2 Personal Data We Collect

vp999 collects personal data across several categories. The following table summarises the types of data collected, the reason for collection, and whether collection is mandatory or optional for platform use.

3 How We Collect Your Data

vp999 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical and usage data collected automatically when you access the vp999 platform, using cookies, server logs, and session tracking technologies.
• Third-party sources: Identity verification data cross-checked with third-party identity verification service providers; payment confirmation data received from Easypaisa, JazzCash, HBL, UBL, MCB, and other payment processors.
• Game provider data: Game outcome records, bet history, and RNG seed data received from vp999's certified game content providers for dispute resolution and audit purposes.

4 How We Use Your Personal Data

vp999 uses the personal data collected for the following specific purposes:

4.1 Account Management

To create, maintain, and manage your vp999 account; authenticate your identity at login; process password resets and two-step verification; and maintain accurate records of your PKR balance, game history, active bonuses, and account preferences.

4.2 Transaction Processing

To process PKR deposits via Easypaisa, JazzCash, Raast, bank transfer, and USDT; to verify withdrawal requests; to confirm payment method ownership; and to maintain an auditable financial transaction record for your account.

4.3 Identity Verification and AML Compliance

To verify your age and identity using CNIC documentation before processing withdrawals; to fulfil anti-money-laundering (AML) and know-your-customer (KYC) obligations; to screen transactions against financial crime indicators; and to report suspicious activity to relevant Pakistani financial intelligence authorities where legally required.

4.4 Platform Improvement and Personalisation

To analyse usage patterns and improve the vp999 platform's performance, navigation, and game offering; to personalise your experience by surfacing games and promotions relevant to your play history; and to conduct internal analytics to guide product development decisions.

4.5 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and maintain a record of support interactions for quality assurance and training purposes.

4.6 Marketing Communications

With your consent, to send you promotional emails or SMS messages about vp999 bonuses, new games, and platform updates. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication.

4.7 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and unauthorised access; to enforce the vp999 Terms & Conditions; and to protect the security and integrity of the platform and its users.

5 Legal Basis for Processing

vp999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the vp999 Terms & Conditions — including account creation, game access, transaction processing, and support.
• Legal obligation: Processing required to comply with AML/KYC laws, financial crime reporting obligations, and any other applicable legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional marketing communications, where you have expressly opted in.

6 Data Sharing and Disclosure

vp999 does not sell your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Game content providers (e.g., Evolution, Pragmatic Play, Microgaming): Receive player session identifiers and bet data necessary to operate live dealer games and slot titles. These providers operate under contractual data processing agreements with vp999.
• Payment processors (e.g., Easypaisa, JazzCash, HBL, UBL, MCB): Receive transaction data necessary to process deposits and withdrawals in PKR.
• Identity verification providers: Receive CNIC data and documentation to carry out AML/KYC checks on behalf of vp999.
• IT infrastructure providers: Cloud hosting and server providers who store platform data under strict confidentiality agreements and security controls.
• Regulatory and law enforcement authorities: Where vp999 is under a legal obligation to disclose data to Pakistani financial intelligence authorities, law enforcement agencies, or regulatory bodies.
• Professional advisors: Legal, audit, and compliance advisors who process personal data as necessary in the course of professional services, subject to professional confidentiality obligations.

7 Payment Data Security

Payment data processed on the vp999 platform receives the highest level of security treatment. vp999 does not store full payment card numbers or CVV codes. For Easypaisa and JazzCash transactions, only account identifiers necessary to process the transaction are retained; full wallet credentials are never stored by vp999 systems.

All financial data transmitted between your device and vp999 servers is protected by TLS 1.3 encryption. Transaction records retained by vp999 are encrypted at rest using AES-256 encryption and are accessible only to finance and compliance personnel with appropriate authorisation.

8 Cookies and Tracking Technologies

vp999 uses cookies and similar tracking technologies to operate the platform and improve your experience. Cookies are small text files placed on your device by your browser when you visit vp999.games.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function — including session authentication, login state, and security tokens. These cannot be disabled without preventing platform access.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and notification preferences.
• Analytics Cookies: Collect anonymised usage data to help vp999 understand how players navigate the platform and identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent account activity, bot traffic, and brute-force login attempts.

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your vp999 account. Disabling analytics cookies will not affect your ability to use the platform but will mean your usage behaviour is not included in platform improvement analysis.

9 Data Retention

vp999 retains personal data for no longer than is necessary for the purposes for which it was collected. The following retention periods apply:

• Active account data: Retained for the lifetime of your active vp999 account plus a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Identity verification documents (CNIC): Retained for a minimum of five years from the date of the last transaction on your account, in compliance with financial regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support correspondence: Retained for three years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.
• Technical and usage logs: Retained for up to 12 months, then aggregated or anonymised.

10 Security Measures

vp999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: TLS 1.3 for all data in transit; AES-256 encryption for sensitive data at rest.
• Access control: Role-based access controls ensure that only authorised personnel with a legitimate operational need can access specific categories of personal data.
• Two-factor authentication: Available for all vp999 player accounts, and mandatory for all internal administrative access.
• Penetration testing: Regular third-party security assessments of the vp999 platform infrastructure.
• Incident response: A documented data breach response procedure is in place. In the event of a breach likely to affect your rights and freedoms, vp999 will notify affected users promptly.
• Staff training: All vp999 personnel with access to personal data receive data protection and privacy training.

11 Your Data Rights

As a vp999 user, you have the following rights over your personal data. To exercise any of these rights, contact us at [email protected] with your registered mobile number and a description of your request:

• Right of Access: You may request a copy of all personal data vp999 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held on your vp999 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligation to retain certain records (e.g., AML transaction data).
• Right to Restriction: You may request that vp999 restricts the processing of your personal data in certain circumstances — for example, while a disputed accuracy claim is being resolved.
• Right to Object: You may object to processing based on legitimate interests, including profiling for personalisation. You may also withdraw consent for marketing communications at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.

12 Minors and Age Verification

vp999 requires CNIC-based identity verification before processing any withdrawal, which provides an additional layer of age verification beyond the self-declaration made at registration. 18+ If vp999 discovers that personal data has been collected from a person under the age of 18, the account will be immediately suspended, all balances will be handled in accordance with the Terms & Conditions for underage accounts, and the minor's personal data will be deleted from vp999 systems as promptly as legally possible.

Parents and guardians who believe a minor may have registered a vp999 account should contact [email protected] immediately. vp999 will investigate and act on all such reports as a priority matter.

13 International Data Transfers

vp999 primarily operates its data infrastructure within or near Pakistan. Some of vp999's certified game content providers and cloud infrastructure partners operate servers in other jurisdictions. Where personal data is transferred outside Pakistan, vp999 ensures that appropriate safeguards are in place — including contractual data processing agreements that require the recipient to protect personal data to a standard equivalent to that described in this Policy.

vp999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without ensuring appropriate contractual safeguards are in place.

14 Changes to This Privacy Policy

vp999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When a material change is made, we will notify registered users via a notice on the vp999 platform and/or an email to your registered address. The updated Policy will be posted at vp999.games/privacy-policy with a revised "Last Updated" date.

Continued use of the vp999 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should close your account before the changes take effect.

15 Contact and Privacy Queries

For all privacy-related queries, data rights requests, or concerns about how vp999 handles your personal data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the vp999 platform for logged-in account holders.
• Response Time: Privacy queries are acknowledged within five business days and resolved within 30 days.