Table of Contents
1. Introduction 2. Definitions 3. Data Controller 4. Data We Collect 5. How We Collect Data 6. Legal Bases for Processing 7. How We Use Your Data 8. Data Sharing & Disclosure 9. International Transfers 10. Data Retention 11. Cookies & Tracking 12. User Rights 13. Security Measures 14. Children's Privacy 15. Policy Amendments 16. Contact & ComplaintsIntroduction
This Privacy Policy (the "Policy") sets out the basis on which dkr999 (the "Platform", "we", "us" or "our"), accessible at dkr999.cam, collects, processes, stores, shares and protects personal data relating to users of the Platform ("you" or "User").
dkr999 is an English-language online gaming information and services platform primarily serving users in Pakistan and other markets. We recognise that privacy is a fundamental right, and we are committed to handling your personal data with integrity, transparency and security — in accordance with internationally recognised data protection principles.
This Policy applies to all personal data collected through the dkr999 website, mobile-optimised platform, email communications, support interactions and any other channel through which dkr999 provides services. By using the Platform, you acknowledge that you have read and understood this Policy.
Definitions
In this Policy, the following terms carry the meanings defined below:
- "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifier, payment details and any other information that can directly or indirectly identify you.
- "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, dkr999.
- "Data Processor" means a third party that processes Personal Data on behalf of dkr999 under a written data processing agreement.
- "Cookies" means small text files placed on your device by the Platform to support session management, analytics and functionality.
- "KYC" means Know Your Customer — identity and address verification procedures required for regulatory compliance and fraud prevention.
- "Special Category Data" means sensitive personal data (e.g., health information) as defined under applicable data protection law. dkr999 does not intentionally collect Special Category Data unless required by law.
Data Controller
dkr999, operating at dkr999.cam, acts as the Data Controller in respect of the personal data it collects and processes in connection with the Platform. dkr999 does not hold a gambling licence issued by any Pakistani authority and does not claim approval from the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani provincial regulatory body.
Data protection obligations are governed by the laws of the operator's licence jurisdiction and applicable international data protection standards. For data-related enquiries, contact details are provided in Section 16.
Data We Collect
dkr999 collects the following categories of personal data, depending on how you interact with the Platform:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC / passport number, selfie or photo ID | Account registration, KYC verification, age verification |
| Contact Data | Email address, mobile number, residential address | Account communications, support, promotional notifications (with consent) |
| Financial Data | Bank account number, wallet identifier (e.g., Easypaisa/JazzCash registered number), transaction history | Payment processing, withdrawal verification, fraud prevention, AML compliance |
| Technical Data | IP address, browser type, device type, operating system, session timestamps | Platform security, fraud detection, service optimisation |
| Usage Data | Pages visited, games played, session duration, click paths, search queries | Platform performance analysis, responsible gambling monitoring, content personalisation |
| Communications Data | Support ticket content, live chat logs, email correspondence | Support resolution, quality assurance, dispute resolution |
How We Collect Your Data
dkr999 collects personal data through the following means:
5.1 Direct Collection
You provide data directly when you: register an Account; complete KYC verification; make a deposit or withdrawal request; complete a contact or support form; participate in a promotion; or communicate with our support team by email or live chat.
5.2 Automated Collection
When you browse or use the Platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs and similar tracking technologies. See Section 11 for full cookie details.
5.3 Third-Party Sources
We may receive data about you from third parties where this is necessary for KYC, fraud prevention or responsible gambling compliance — including identity verification services, payment processors and fraud-screening providers. Data received from such sources is handled in accordance with this Policy.
Legal Bases for Processing
dkr999 processes your personal data on one or more of the following legal bases, as applicable to each processing activity:
- Contractual Necessity: Processing required to perform the contract between you and dkr999, including account management, payment processing and withdrawal handling.
- Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification requirements and regulatory reporting.
- Legitimate Interests: Processing necessary for dkr999's legitimate interests, including fraud prevention, Platform security, responsible gambling monitoring and service improvement — where such interests are not overridden by your rights and freedoms.
- Consent: Where we rely on your consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or updating your Account notification preferences.
How We Use Your Personal Data
dkr999 processes your personal data for the following purposes:
- Account Management: Creating, maintaining and administering your registered Account on the Platform.
- Identity & Age Verification: Conducting KYC checks to verify your identity, age (18+ or higher as required) and eligibility to use the Platform.
- Payment Processing: Facilitating deposits and withdrawals through available payment methods in the Cashier, including bank transfers and verified mobile wallet transactions.
- Fraud Prevention & Security: Detecting and investigating suspicious activity, unauthorised account access and financial crime, including money laundering.
- Responsible Gambling: Monitoring usage patterns to identify problem gambling indicators and enforcing responsible gambling controls such as deposit limits and self-exclusion.
- Customer Support: Responding to your queries, resolving complaints and providing account assistance in English (and Urdu on request).
- Platform Improvement: Analysing usage data to improve Platform performance, content quality, security and user experience.
- Marketing Communications: Sending promotional offers and relevant platform updates to Users who have not opted out of such communications. You may opt out at any time.
- Legal Compliance: Meeting regulatory reporting, record-keeping and data disclosure obligations where required by applicable law or court order.
Data Sharing & Disclosure
dkr999 does not sell, rent or trade your personal data to third parties for their independent marketing purposes. We may share your data only in the following limited circumstances:
8.1 Service Providers (Data Processors)
We engage carefully selected third-party service providers to process data on our behalf under binding data processing agreements. These include identity verification providers, payment processors, fraud-detection services, cloud hosting providers and customer support platforms. All processors are contractually required to handle data only as instructed by dkr999 and in accordance with applicable data protection law.
8.2 Legal & Regulatory Disclosure
We may disclose personal data where required to do so by applicable law, court order, regulatory authority or law enforcement agency. We will, where legally permitted, notify you of such a request before disclosing.
8.3 Business Transfers
In the event of a merger, acquisition, asset sale or restructuring involving dkr999, personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy terms governing your data post-transfer.
8.4 Payment References
When processing transactions, limited payment-related data (such as transaction reference numbers) may be shared with the relevant payment processor or financial institution as necessary to complete the transaction. Payment-provider names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar reference points for Pakistani users only and do not imply any data-sharing partnership or endorsement of gambling by those providers.
International Data Transfers
dkr999 operates internationally and may transfer your personal data to countries outside Pakistan or your country of residence. Where such transfers occur, we ensure that adequate safeguards are in place to protect your data in accordance with applicable data protection standards — including, where relevant, standard contractual clauses or equivalent mechanisms recognised in the receiving jurisdiction.
By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. dkr999 does not operate under the jurisdiction of Pakistani data protection regulators and makes no representations regarding compliance with Pakistani domestic law in this regard.
Data Retention
dkr999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual retention obligations. The following general retention principles apply:
- Account Data: Retained for the duration of your active Account and for a minimum period after Account closure as required by applicable anti-money laundering, KYC and gaming regulatory requirements.
- Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, or such longer period as required by applicable law.
- Communications Data: Support correspondence retained for up to two (2) years from resolution, unless a longer period is required for dispute resolution or regulatory purposes.
- Marketing Preferences: Opt-out records retained indefinitely to prevent re-contact after a marketing opt-out request.
Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised or destroyed in accordance with dkr999's internal data disposal procedures.
Cookies & Tracking Technologies
dkr999 uses cookies and similar technologies to operate the Platform, maintain your session, analyse usage and support security functions. The following cookie categories are in use:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens. Essential for the Platform to function. | No — technically essential |
| Functional | Remembering your language preferences, display settings and notification choices. | Optional |
| Analytics | Aggregated usage statistics to improve Platform performance and content quality. | Optional |
| Marketing / Targeting | Delivering relevant promotional content to Users who have consented to marketing communications. | Yes — consent required |
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair Platform functionality. Detailed cookie management guidance is available in your browser's help documentation.
Your Data Protection Rights
Subject to the applicable data protection law governing dkr999's processing activities, you may have the following rights in respect of your personal data. To exercise any right, submit a written request to the contact details in Section 16. We will respond within the timeframe required by applicable law, typically within 30 days.
You have the right to request a copy of the personal data dkr999 holds about you, along with information about how and why it is being processed.
You have the right to request correction of inaccurate or incomplete personal data held about you. You may also update certain Account details directly through your account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent or where you object to processing. Note that mandatory regulatory retention obligations may limit or delay erasure.
You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is being reviewed, or where you contest the lawfulness of our processing.
You have the right to object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to direct marketing, we will stop processing your data for that purpose without delay.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
Security Measures
dkr999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include:
- SSL/TLS encryption across all Platform connections;
- Access controls and role-based permissions limiting staff access to personal data on a need-to-know basis;
- Firewalls, intrusion detection systems and regular vulnerability assessments;
- Secure password hashing and storage practices;
- Contractual security obligations on all Data Processors.
In the event of a personal data breach that poses a risk to your rights and freedoms, dkr999 will notify affected Users and the relevant supervisory authority as required by applicable law, within the prescribed notification timeframe.
You are responsible for maintaining the security of your Account credentials. dkr999 will never ask you to provide your password in an email, chat message or support ticket.
Children's Privacy
dkr999 is strictly for adults aged 18 years and over — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been collected from an individual below the minimum age, we will take immediate steps to delete that data and close the associated Account.
If you are a parent or guardian and believe that a minor has registered on the Platform or provided personal data without your consent, please contact us immediately at the details set out in Section 16 so that we can investigate and take appropriate action.
Amendments to This Policy
dkr999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users via the email address on file, and the updated Policy will be published at dkr999.cam/privacy-policy with a revised effective date.
Your continued use of the Platform following publication of an updated Policy constitutes your acknowledgement of the changes. If you do not agree with any amendment, you should cease using the Platform and may request Account closure in accordance with the Terms and Conditions.
We recommend reviewing this Policy periodically. The effective date at the top of this page always reflects the current version in force.
Contact & Complaints
For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by dkr999, please contact our support team. We aim to respond to all privacy-related correspondence within a reasonable timeframe.
Support Email (plain text — not a clickable link):
[email protected]
Please mark privacy-related correspondence clearly in your subject line (e.g., "Privacy Request — Right of Access"). All requests are handled by our support team in English. Urdu assistance is available on request.
Cities served: Karachi · Lahore · Islamabad · Rawalpindi · Faisalabad · Multan · Peshawar
16.1 Complaints
If you are dissatisfied with our response to a data protection concern, you have the right to escalate your complaint to the supervisory authority responsible for data protection in the operator's licence jurisdiction. Contact details for the relevant authority are available on request from our support team.