n899 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how n899 ("n899", "we", "us", "our") collects, uses, discloses and protects personal data relating to individuals ("you", "your", "User") who access or use the n899 website at https://n899.cam and all associated services (collectively, the "Platform").

We are committed to handling personal data responsibly, in accordance with applicable data protection principles. This Policy is intended to be clear, accessible and complete. It should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

By registering an account, using the Platform or submitting personal data to us in any form, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the Platform.

2 Definitions

• "Personal Data" — any information relating to an identified or identifiable natural person.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure and deletion.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For this Platform, that is n899.
• "Data Processor" — a third party that processes personal data on behalf of n899, under our written instructions.
• "KYC Data" — identity and verification documents submitted to satisfy Know Your Customer requirements.
• "Cookies" — small text files stored on your device by the Platform to support functionality and analytics.
• "Third Parties" — entities other than n899 and the User, including payment processors, technology providers and regulatory authorities.

3 Data Controller

n899 acts as the data controller for personal data collected through the Platform. This means we determine the purposes for which your personal data is collected and the manner in which it is processed.

Where we engage third-party service providers to carry out specific processing activities on our behalf — such as payment processing, fraud detection or customer support tooling — those providers act as data processors and are bound by contractual obligations to process your data only on our instructions and in accordance with this Policy.

For all data-related enquiries, including the exercise of your rights, you may contact us at: [email protected]

4 Data We Collect

We collect personal data through several channels, as described below.

4.1 Data You Provide Directly

• Registration data: full name, date of birth, email address, residential address, username and password.
• KYC documents: copies of government-issued identity documents such as a valid CNIC or passport, and proof of address where required.
• Payment data: details necessary to process deposits and withdrawals, including information related to your chosen payment method. Full card numbers are not stored by n899 — payment card processing is handled by our authorised payment processors.
• Support communications: the content of messages, emails and live chat transcripts exchanged with our support team.

4.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution and mobile network information.
• Usage data: pages visited, features used, betting and gaming activity, session duration, click patterns and navigation history within the Platform.
• Log data: server logs recording access timestamps, transaction identifiers and error events.
• Cookies and similar technologies: session identifiers, preference settings and analytics data. See Section 10 for full details.

4.3 Data from Third Parties

In limited circumstances, we may receive personal data from third parties, including identity verification service providers, fraud detection agencies and where permitted, publicly available sources. We use such data only for the purposes described in this Policy.

5 Purposes of Processing & Legal Basis

The table below sets out the primary purposes for which we process your personal data and the legal basis for each activity.

Where we rely on legitimate interests as the legal basis for processing, we have assessed that our interests are not overridden by your interests or fundamental rights. You may object to processing carried out on this basis — see Section 9 for how to exercise this right.

6 Data Sharing

n899 does not sell, rent or trade your personal data. We share personal data with third parties only in the following circumstances:

• Payment processors: authorised payment service providers that process deposits and withdrawals on behalf of n899. These providers process data under strict contractual obligations and applicable financial regulations.
• Identity verification providers: third-party KYC and AML service providers engaged to verify the identity of registered users and screen against regulatory watchlists.
• Technology and infrastructure providers: cloud hosting, security monitoring, content delivery and customer support software providers that process data on our instructions.
• Regulatory and law enforcement authorities: where we are legally required to disclose personal data to a competent authority, court or regulatory body, we will do so in compliance with applicable legal obligations.
• Business transfers: in the event of a merger, acquisition, restructuring or sale of n899's business or assets, personal data may be transferred to a successor entity, subject to the same protections described in this Policy.

In all cases of data sharing, we require recipients to maintain appropriate technical and organisational security measures and to process personal data only for the specific purposes for which it was shared.

7 International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. This may occur when we engage third-party service providers located in other jurisdictions.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, including the use of contractual data protection clauses, adequacy decisions where applicable, or other recognised transfer mechanisms.

Users in Pakistan should be aware that data protection legislation in Pakistan may differ from international standards. By using the Platform, you acknowledge that your personal data may be processed outside Pakistan.

8 Retention Periods

We retain personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law, regulatory obligation or legitimate business need. The following general retention periods apply:

• Active account data: retained for the duration of your account and for a minimum period of five (5) years following account closure, in accordance with applicable anti-money laundering and regulatory requirements.
• KYC and identity documents: retained for a minimum of five (5) years following the end of the customer relationship, or longer where required by applicable law.
• Transaction records: retained for a minimum of five (5) years for financial compliance and audit purposes.
• Support communications: retained for up to two (2) years following the closure of a support case, unless a longer period is required for an ongoing dispute or legal matter.
• Analytics and technical data: retained in aggregated or anonymised form for platform improvement purposes, without a defined maximum retention period, as anonymised data does not constitute personal data.

Where personal data is no longer required for any of the above purposes, we will securely delete or anonymise it.

9 Your Rights

Subject to applicable law, you hold the following rights with respect to the personal data n899 processes about you:

• Right of access: you may request confirmation of whether we process personal data about you and, if so, a copy of that data and information about how it is processed.
• Right to rectification: you may ask us to correct personal data that is inaccurate or to complete personal data that is incomplete.
• Right to erasure ("right to be forgotten"): you may ask us to delete your personal data where: (a) it is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) you successfully object to the processing. This right is subject to legal retention obligations that may require us to retain certain data regardless.
• Right to restrict processing: you may ask us to suspend processing of your personal data in certain circumstances, for example while the accuracy of the data is disputed.
• Right to data portability: where processing is based on consent or contract and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to processing for direct marketing purposes.
• Rights related to automated decision-making: where n899 makes solely automated decisions that produce legal or similarly significant effects, you have the right to request human review, to express your point of view and to contest the decision.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond within thirty (30) days of receiving a valid request. We may ask you to verify your identity before processing a rights request.

10 Cookies & Tracking Technologies

n899 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that enable the Platform to recognise your browser, retain session information and improve user experience.

10.1 Types of Cookies We Use

• Essential cookies: required for the Platform to function. These include session authentication cookies, login state management and security tokens. They cannot be disabled without affecting core Platform functionality.
• Functional cookies: used to remember your preferences, such as language settings and display options, to personalise your experience.
• Analytics cookies: used to collect aggregated data about how visitors interact with the Platform — pages visited, time on site, navigation paths. This data is used to improve Platform performance and content. Where analytics data is processed by a third-party provider, that provider acts as a data processor under our instructions.
• Security cookies: used to detect and prevent fraud, bot activity and unauthorised access attempts.

10.2 Managing Cookies

You may control cookie settings through your browser. Most browsers allow you to refuse new cookies, disable existing cookies or receive a notification when a cookie is set. Please note that disabling essential cookies will affect the functionality of the Platform and your ability to use account features. Refer to your browser's help documentation for instructions on managing cookies.

11 Security Measures

n899 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These include:

• Encryption of data in transit using industry-standard TLS protocols.
• Encryption of sensitive personal data at rest.
• Role-based access controls limiting data access to authorised personnel with a demonstrated operational need.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication available for user accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, contain and report data security events in accordance with applicable obligations.

While we take these obligations seriously, no security system is completely infallible. Users are advised to maintain the security of their own login credentials and to notify us immediately at [email protected] if they suspect any unauthorised access to their account.

12 Minors

The Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the operator or the applicable license jurisdiction. n899 does not knowingly collect or process personal data from individuals below the applicable minimum age.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any balances or winnings accrued by a minor account will be forfeited.

Parents and guardians who believe that a minor may have registered on the Platform should contact us immediately at [email protected].

13 Changes to This Policy

n899 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or Platform functionality. Where changes are material, we will notify registered users by email or by a prominent notice on the Platform, no less than seven (7) days before the changes take effect.

The date at the top of this Policy indicates when it was last updated. We encourage you to review this page periodically to stay informed about how your personal data is handled. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Policy.

14 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way n899 processes your personal data, please contact our support team. All data-related requests are handled with confidentiality and responded to within the applicable timeframe.

Email: [email protected]
(This email address is displayed as plain text and is not a clickable link. Please copy and paste it into your email client.)

Support is available 24 hours a day, 7 days a week. Agents can assist in both English and Urdu. For general account queries and live assistance, the in-platform live chat function provides the fastest response.

We aim to acknowledge all privacy-related requests within 72 hours and to provide a substantive response within 30 days of receiving a verified request.