WR999 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected and processed by WR999 ("WR999", "we", "us", "our") in connection with your use of the WR999 platform at wr999.cam and any associated services, tools and communications ("Services"). WR999 acts as the data controller in respect of personal data collected through the platform.

By registering an account, depositing funds or otherwise using the WR999 Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Services.

This Policy should be read alongside our Terms & Conditions, which govern your use of the platform and incorporate this Policy by reference. In the event of conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Policy shall prevail.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including but not limited to a name, identification number, location data, email address, IP address, or one or more factors specific to that person's identity.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, storage, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. WR999 is the Data Controller for data collected through the platform.
• "Data Processor" means any third party that Processes Personal Data on behalf of WR999 under a contractual arrangement.
• "KYC Data" means identity verification documents and related information collected as part of the Know Your Customer process, including but not limited to government-issued identity documents (such as a Pakistani CNIC or passport), proof of address, and payment method verification documentation.
• "Cookies" means small data files placed on your device by the platform to enable certain functionality and collect usage information.

WR999 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third parties where required for verification or fraud prevention purposes.

3.1 Categories of Data Collected

The table below outlines the main categories of Personal Data we collect and the context in which each category arises:

Every Processing activity carried out by WR999 is founded on one or more of the following lawful bases. We do not Process your Personal Data without a documented lawful justification.

• Contractual Necessity: Processing required to create and manage your account, process deposits and withdrawals, settle bets and provide the core Services you have requested.
• Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) regulations, KYC requirements, tax reporting obligations and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, abuse detection, product improvement and statistical analysis, where our legitimate interest is not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, non-essential cookies and certain optional features, which we carry out only where you have provided freely given, specific and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior Processing.

WR999 uses the Personal Data described in Section 3 for the following purposes:

• Account Administration: Creating, maintaining, verifying and managing your WR999 account, including processing password resets, login security and account preference updates.
• Service Delivery: Enabling you to deposit funds, place bets, play games, claim bonuses, request withdrawals and access the full suite of platform features.
• Payment Processing: Communicating with payment providers to process transactions. When you use payment references such as bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah) or mobile wallets (Easypaisa, JazzCash, Raast), the relevant provider receives only the data necessary to process your transaction. WR999 does not share broader account data with payment providers beyond what is required for that specific transaction.
• KYC & Compliance: Verifying your identity, age and address to comply with applicable AML and responsible gambling requirements, and to prevent underage gambling.
• Fraud & Security: Detecting and preventing fraudulent activity, money laundering, unauthorised account access, bonus abuse and other prohibited conduct outlined in our Terms & Conditions.
• Responsible Gambling: Using account activity data to identify potential problem gambling behaviour and — where appropriate — triggering responsible gambling interventions or communicating with you about your activity levels.
• Customer Support: Responding to your enquiries, resolving complaints and maintaining a record of communications for quality assurance and dispute resolution purposes.
• Marketing (with consent): Sending you promotional communications about WR999 products, bonuses, PSL T20 and ICC tournament special offers, and platform updates — only where you have opted in. You may opt out at any time via account settings or by contacting support.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game catalogue, navigation and user experience.

WR999 does not sell your Personal Data. We may share Personal Data with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to deliver specific operational functions, including: payment processing, KYC/AML verification services, cloud hosting and data storage, customer support software, fraud detection tools, and analytics platforms. These providers act as Data Processors under contractual arrangements that require them to process your data only on our instructions and to implement appropriate security measures.

6.2 Regulatory and Legal Authorities

WR999 may disclose Personal Data to governmental bodies, regulatory authorities, law enforcement agencies or courts where required by applicable law, court order or regulatory directive. Such disclosures are made only to the extent legally required and, where permissible, we will endeavour to notify you in advance.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets or similar corporate transaction, Personal Data held by WR999 may be transferred to the relevant successor entity. Users will be notified of any such transfer that materially affects the processing of their data.

WR999 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform functionality, including maintaining your login session, carrying your account balance across pages and enabling security features. These cannot be disabled without impairing platform function.
• Performance Cookies: Collect anonymised data about how pages are used — page load times, error rates, navigation paths — to help us identify and fix technical issues.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gambling limits you have activated.
• Analytics Cookies: Used with your consent to analyse aggregate usage patterns and improve our game and betting product offerings.
• Marketing Cookies: Used with your consent to measure the effectiveness of our promotional communications. We do not use cross-site tracking for advertising purposes without explicit consent.

You may manage non-essential cookie preferences through your browser settings or the cookie preference centre available on the platform. Disabling certain cookies may affect platform functionality.

In order to comply with applicable AML and responsible gambling regulations, WR999 is required to verify the identity and age of all account holders before processing withdrawals, and in certain other circumstances. The KYC process involves collection of the following categories of data:

• Government-issued photo identification: Pakistani CNIC, National Identity Card for Overseas Pakistanis (NICOP), or valid passport;
• Proof of current residential address: utility bill, bank statement or similar document dated within three months;
• Payment method verification: a scan or photograph of the payment card or account used for deposits, where applicable;
• Liveness check or selfie: where our KYC provider requires a face match to the identity document presented.

KYC data is processed by WR999 and/or our contracted KYC verification service provider. This data is stored securely, retained for the period specified in Section 9, and used solely for verification, AML compliance and fraud prevention purposes. It is not used for marketing or shared with third parties other than as described in Section 6.

WR999 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected or as required by applicable law. The following general retention principles apply:

• Active Account Data: Retained for the lifetime of your account plus such additional period as is required by applicable law or regulatory obligation after account closure.
• Transaction Records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of five (5) years from the date of the transaction in compliance with standard AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last relevant transaction, whichever is later, in line with applicable AML obligations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless required to be held for longer in connection with an open dispute or legal process.
• Marketing Data: Retained until you withdraw consent or for three (3) years from your last engagement with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to you.

WR999 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our platform;
• Encryption of sensitive data at rest, including identity documents and financial information;
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Incident response procedures for the detection, investigation and remediation of data security events.

While we apply robust security measures, no system is entirely immune to breach. In the unlikely event of a data breach that affects your Personal Data and poses a risk to your rights, WR999 will notify affected users as required by applicable law.

Subject to applicable law and certain operational limitations, you hold the following rights in respect of your Personal Data:

To exercise any of these rights, please contact our support team at the details provided in Section 15. Identity verification may be required before your request can be processed.

WR999 operates globally and may transfer Personal Data to our service providers and infrastructure partners located in countries outside your country of residence. Where such transfers occur, WR999 ensures that appropriate safeguards are in place to protect your Personal Data — including contractual clauses that bind recipients to data protection standards equivalent to those described in this Policy.

By using the WR999 platform, you acknowledge and consent to such international data transfers being made on the basis described above.

WR999 is strictly an adults-only platform. We do not knowingly collect Personal Data from individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. Age verification is conducted as part of the KYC process.

If WR999 discovers that Personal Data has been submitted by or on behalf of a minor, we will immediately close the relevant account, return any deposits (less any withdrawals already made) in accordance with our Terms & Conditions, and delete the associated Personal Data without undue delay. If you believe that a minor has registered an account, please contact us immediately.

WR999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform operations. Where material changes are made, we will notify registered users via their registered email address and/or through a prominent notice on the platform, with a minimum of seven (7) days' notice before the revised Policy takes effect, except where immediate changes are required to comply with a legal obligation or to address a security threat.

The "Effective Date" shown at the top of this page indicates the date on which the current version came into force. Your continued use of WR999 after the effective date of any revised Policy constitutes your acceptance of the updated terms.

For any questions, requests or concerns relating to this Privacy Policy, or to exercise your data rights as described in Section 11, please contact the WR999 Data Support team. We aim to acknowledge all privacy requests within five (5) business days and to resolve them within thirty (30) days, subject to the complexity of the request.