wc99 Privacy Policy

wc99 is committed to protecting the privacy and personal data of every Member who accesses the wc99 platform. This Privacy Policy is designed to give you a clear, honest account of what information wc99 collects about you, the purposes for which that information is used, and the controls available to you as a data subject.

wc99 operates as an online casino and sports betting platform primarily serving Pakistani players. The platform handles a range of personal and financial data necessary to provide a secure, verified, and compliant gaming environment. Given the regulated nature of online gaming, certain data collection and retention obligations are not discretionary — they are legal requirements that wc99 must fulfil.

This Privacy Policy applies to all data collected through the wc99 website, mobile-optimised interface, live chat support system, email communications, and any other channel through which you interact with wc99. It applies equally to verified Members, unverified registered users, and individuals who contact wc99 support without holding an active account.

For the purposes of applicable data protection law, wc99 acts as the Data Controller in respect of all personal data collected and processed through the wc99 platform. As Data Controller, wc99 determines the purposes and means by which your personal data is processed and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

Where wc99 engages third-party service providers — such as payment processors, identity verification agencies, or fraud prevention services — to process personal data on its behalf, those providers act as Data Processors operating under binding contractual instructions from wc99. wc99 remains accountable for ensuring that such processors provide sufficient guarantees of compliance with applicable data protection obligations.

For all data protection enquiries, access requests, or complaints, Members may contact the wc99 Data Protection team through the 24/7 live chat support facility or via the support email address listed in Section 15 of this policy.

wc99 collects personal data across several categories, depending on the nature of your interaction with the platform. The following table summarises the primary categories of personal data collected and the contexts in which that collection occurs:

wc99 collects only the minimum personal data reasonably necessary to fulfil the identified purposes. Where data collection is optional — such as for enhanced personalisation features — this will be clearly indicated at the point of collection.

Data Collected From Third Parties: wc99 may also receive personal data about you from third-party sources, including identity verification agencies, credit reference bureaus, fraud prevention databases, and payment processors. Data received from such sources is used solely for the purposes of account verification, fraud prevention, and regulatory compliance.

wc99 processes personal data for the following identified purposes. Each purpose is supported by a specific legal basis, as detailed in Section 5 of this policy:

• Account Registration & Management: To create, maintain, and administer your wc99 Member account, including processing your wc99 login credentials securely and enabling access to all platform features.
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and residential address in compliance with applicable anti-money laundering and gaming regulatory obligations.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, card payments, and bank transfer, including communicating with payment processors on your behalf.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, enforce self-imposed limits and exclusions, and fulfil obligations under responsible gaming policy.
• Customer Support: To respond to support enquiries, resolve disputes, and maintain records of support interactions for quality assurance and training purposes.
• Personalisation: To tailor your wc99 experience based on your preferences, game history, and platform behaviour — including personalised game recommendations and promotional offers relevant to your activity.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Members who have opted in to receive such communications. Marketing communications can be opted out of at any time.
• Legal & Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, and law enforcement requests, including the retention of financial records for the minimum statutory period.
• Platform Improvement: To analyse aggregated usage data for the purpose of improving platform performance, game offerings, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.

wc99 will not use your personal data for any purpose materially different from those listed above without first providing notice and, where required, obtaining your consent.

Every instance of personal data processing by wc99 is carried out on the basis of one or more of the following legal grounds:

1. Contractual Necessity: Processing is necessary to perform the contract between wc99 and the Member — specifically, to provide the gaming, betting, and account management services described in the Terms & Conditions. This covers account management, transaction processing, and customer support.
2. Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations, including anti-money laundering law, age verification requirements, and financial record-keeping obligations. wc99 cannot provide services without fulfilling these obligations.
3. Legitimate Interests: Processing is necessary for the legitimate interests of wc99, provided those interests are not overridden by the rights and freedoms of the Member. Legitimate interests include fraud prevention, platform security, responsible gaming monitoring, and general business analytics.
4. Consent: Where processing is not required by contract or law — most notably in the context of non-essential marketing communications and certain cookie categories — wc99 will seek your explicit consent prior to processing. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

wc99 does not sell, rent, or otherwise commercialise your personal data to any third party. Data is shared only in the circumstances and with the categories of recipients described below:

• Identity Verification Providers: Third-party KYC and age verification services that confirm the identity and eligibility of Members. These providers receive only the minimum data necessary to complete verification checks.
• Payment Processors: Financial institutions and payment service providers — including those facilitating JazzCash, EasyPaisa, and banking transactions — that process deposit and withdrawal transactions on wc99's behalf.
• Fraud Prevention & AML Services: Specialist agencies that screen transactions and account activity against fraud databases and regulatory watchlists. Sharing in this context is a legal obligation rather than a commercial choice.
• Regulatory & Law Enforcement Authorities: wc99 is legally obligated to disclose personal data to competent regulatory authorities and law enforcement agencies where required by law, court order, or in connection with the investigation of criminal activity. Such disclosures are made without prior notification to the Member where legally required.
• IT & Infrastructure Providers: Cloud hosting, data storage, and technical service providers that support the operation of the wc99 platform infrastructure. All such providers operate under contractual data processing agreements that restrict their use of personal data to the specified technical purposes only.
• Professional Advisers: Legal, accounting, and auditing professionals engaged by wc99 on a confidential basis in connection with regulatory compliance, dispute resolution, or corporate governance matters.

All third parties with whom wc99 shares personal data are required to maintain the security and confidentiality of that data and are prohibited from using it for any purpose beyond the specified scope of their engagement with wc99.

The security of financial data is treated as a priority by wc99. All payment transactions — whether conducted via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, debit card, credit card, or direct bank transfer — are processed through third-party payment processors that maintain PCI-DSS (Payment Card Industry Data Security Standard) compliance.

wc99 does not store complete card numbers, CVV codes, or full mobile banking credentials on its own servers at any time. wc99 retains only the minimum transaction reference data required for account reconciliation, dispute resolution, and regulatory record-keeping purposes.

All financial transactions are denominated in Pakistani Rupees (PKR). wc99 records the transaction amount, the payment method category, the date and time of the transaction, and an anonymised reference identifier provided by the payment processor. This data is retained for the minimum period required under applicable financial record-keeping obligations.

wc99 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical data to improve services. Cookies are small text files stored on your device when you visit the wc99 platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the wc99 platform. These cookies maintain your login session, preserve security tokens, and enable core platform functionality. These cookies cannot be disabled without severely affecting your ability to use the platform.
• Functional / Preference Cookies: Used to remember your preferences — such as language settings, preferred game categories, and display configurations — so that your experience is consistent across sessions. These cookies do not track browsing activity outside of the wc99 platform.
• Analytics Cookies: Used to collect anonymised data about how Members interact with the wc99 platform, including pages visited, session duration, and feature usage patterns. This data is used solely to improve platform performance and user experience. Analytics cookies require your consent and can be disabled without affecting core gameplay functionality.
• Marketing Cookies: Where you have opted in to receive promotional communications, marketing cookies may be used to personalise the promotional content you see on the wc99 platform. These cookies are entirely consent-based and will not be set without your explicit approval.

You may manage your cookie preferences at any time through the cookie consent panel available on the wc99 platform. Please note that disabling strictly necessary cookies may prevent access to core platform features, including the wc99 login system.

wc99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:

• Active Account Data: Personal data associated with an active wc99 account is retained for the duration of the account's existence and for a minimum period of five years following account closure, in compliance with applicable anti-money laundering record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five years from the date of the transaction, in accordance with applicable financial regulation.
• KYC Documentation: Identity verification documents submitted during the KYC process are retained for a minimum of five years following the end of the business relationship, as required by AML legislation.
• Support Communications: Customer support correspondence and live chat transcripts are retained for a period of three years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing Data: Where you have opted in to marketing communications, your marketing preferences are retained until you withdraw consent or request deletion. Following opt-out, suppression records are maintained to ensure you do not receive further unsolicited communications.
• Analytics Data: Anonymised or pseudonymised analytics data may be retained for longer periods, as the removal of personal identifiers means such data no longer constitutes personal data under applicable law.

Upon expiry of the applicable retention period, wc99 will securely delete or anonymise personal data in accordance with industry-standard data destruction procedures.

wc99 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. The following security measures are in place across the wc99 platform:

• Encryption in Transit: All data transmitted between your device and wc99 servers is protected using TLS (Transport Layer Security) encryption. The wc99 platform operates exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms on wc99's secure server infrastructure.
• Access Controls: Internal access to personal data is restricted on a strict role-based, need-to-know basis. All internal data access events are logged and subject to regular audit review.
• Two-Factor Authentication: Two-factor authentication is available for all wc99 Member accounts and is strongly recommended to protect the security of your wc99 login credentials and account balance.
• Penetration Testing: The wc99 platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities proactively.
• Incident Response: wc99 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to Member rights, wc99 will notify affected Members and, where required, relevant regulatory authorities, within the timeframes prescribed by applicable law.

While wc99 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. Members are responsible for maintaining the confidentiality of their own wc99 login credentials and should notify wc99 immediately if they suspect unauthorised access to their account.

As a data subject, you hold a set of rights in relation to your personal data held by wc99. wc99 is committed to facilitating the exercise of these rights promptly and without undue obstacle. The following rights are available to all wc99 Members:

• Right of Access: You may request a copy of all personal data wc99 holds about you, together with information about how that data is used and with whom it is shared.
• Right to Rectification: You may request the correction of any inaccurate or incomplete personal data held about you. For straightforward corrections — such as updating a contact email address or residential address — you may make changes directly through your wc99 account settings panel.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. Note that wc99 may be unable to delete certain data where retention is required by legal obligation.
• Right to Restriction: You may request that wc99 restrict processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data pending verification.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of wc99's legitimate interests, including direct marketing. Where you object to direct marketing, wc99 will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact wc99 through the 24/7 live chat support facility or via the support email address listed in Section 15. wc99 will respond to all verified data subject requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reasons for it.

The wc99 platform is strictly intended for individuals aged 21 and above. wc99 does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is expressly prohibited under wc99's Terms & Conditions and is contrary to applicable gaming regulation.

wc99 employs age verification procedures at the point of registration and during the KYC process to confirm that all Members meet the minimum age requirement. Where wc99 becomes aware or has reasonable grounds to suspect that a registered user is under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and the account will be permanently closed in accordance with the age restriction policy.

wc99 operates a platform accessible to players across Pakistan and other jurisdictions. In connection with the provision of services — particularly in the context of identity verification, payment processing, and cloud infrastructure — personal data may be transferred to and processed in countries outside Pakistan.

Where personal data is transferred internationally, wc99 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections applicable in Pakistan. Such safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to an equivalent standard.
• Transfers to countries that have been assessed as providing an adequate level of data protection for the specific categories of data transferred.
• Transfers to recipients who have implemented binding corporate rules or equivalent internal data protection frameworks approved by relevant supervisory authorities.

For further information about the specific safeguards applied to any international data transfer involving your personal data, please contact the wc99 Data Protection team through the contact details in Section 15.

wc99 reserves the right to amend, update, or replace this Privacy Policy at any time. All amendments will be published on this page with an updated effective date. Where an amendment materially affects how wc99 processes personal data or materially affects your rights as a data subject, wc99 will take reasonable steps to notify active Members through the platform notification system or by email to the address registered on your wc99 account.

Continued use of the wc99 platform following the publication of an amended Privacy Policy constitutes your acknowledgment of the updated policy. If you do not accept the amended policy, you must cease using the platform and may request account closure through the wc99 support channel.

wc99 recommends that all Members review this Privacy Policy periodically to remain informed of any changes to how personal data is handled. The effective date displayed at the top of this page and in the sidebar indicates when the current version of this policy came into force.

For all privacy-related enquiries, data subject access requests, or complaints regarding the handling of your personal data by wc99, please contact the wc99 Data Protection team through one of the following channels:

Live Chat Support: Available 24 hours a day, 7 days a week via the live chat facility accessible from any page on the wc99 platform following wc99 login. Live chat is the fastest channel for time-sensitive data requests.

Support Email: [email protected]

wc99 will acknowledge all privacy complaints within 3 business days and aims to provide a substantive response within 30 days. Where a complaint cannot be resolved through direct engagement with the wc99 Data Protection team, you retain the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction applicable to your circumstances.