NR999 Privacy Policy — How We Handle Your Personal Data

1Introduction

This Privacy Policy ("Policy") is issued by NR999 ("NR999", "we", "us" or "our") and governs the collection, use, storage, sharing and protection of personal data belonging to users ("you", "your" or "User") of the NR999 platform accessible at https://nr999.cam and all associated services.

NR999 is an English-language online gaming information platform primarily serving users based in Pakistan, including those located in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We take privacy seriously and are committed to processing personal data in accordance with applicable data protection principles.

By accessing or using the NR999 platform, you acknowledge that you have read, understood and consent to the data practices described in this Policy. If you do not agree to these practices, you must cease use of the platform immediately.

2Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, national identity number, date of birth, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the NR999 platform, the Data Controller is NR999.
• "Data Processor" means any third party that processes Personal Data on behalf of and under the instructions of NR999.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process using government-issued documentation such as a Pakistan CNIC, passport or equivalent.
• "AML" means Anti-Money Laundering — the regulatory and compliance framework applied to detect and prevent financial crime, requiring certain data to be collected and retained.
• "Cookies" means small text files placed on your device by the NR999 platform to enable functionality, analytics and user experience features.
• "Platform" means the NR999 website, mobile interface and all associated services accessible at https://nr999.cam.
• "Third Party" means any person or entity other than you or NR999, including service providers, payment processors, analytics providers and legal authorities.

3Data Controller

NR999 acts as the Data Controller in respect of all Personal Data collected and processed through the platform. As Data Controller, NR999 is responsible for determining the purposes for which Personal Data is collected and the means by which it is processed.

For all data-related inquiries, requests to exercise your rights, or complaints, please contact NR999 at [email protected]. We aim to acknowledge data subject requests within five (5) business days of receipt and to respond substantively within thirty (30) days, or such longer period as may be permitted under applicable law where the request is complex.

4Personal Data We Collect

NR999 collects Personal Data in the following categories, depending on how you interact with the platform:

4.1 Registration and Account Data

When you create an account, we collect: full legal name, date of birth, residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar), email address, telephone number, chosen username, and any other information required to complete the registration form.

4.2 Identity Verification (KYC) Data

For identity verification purposes, we may collect copies of: government-issued photographic identification (such as Pakistan CNIC, passport or driving licence), proof of residential address (utility bills, bank statements), and — where applicable — documentation evidencing the source of deposited funds.

4.3 Financial and Transaction Data

When you make deposits or withdraw funds, we collect transactional data including: deposit and withdrawal amounts in PKR, payment method identifiers (account references, wallet IDs — not full card numbers unless required by payment processor), transaction timestamps and processing status records.

4.4 Technical and Usage Data

We automatically collect the following when you interact with the platform: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, clickstream data and interaction logs with platform features.

4.5 Communications Data

If you contact NR999 via live chat, email or any other support channel, we retain records of those communications including timestamps, the substance of enquiries, and any personal information you provide in the course of seeking support.

4.6 Responsible Gambling Data

Where you set voluntary responsible gambling controls — including deposit limits, session timers, cooling-off periods or self-exclusion — we record these preferences and their effective dates. This data is processed to give effect to your instructions and to comply with any applicable responsible gambling regulatory requirements.

4.7 Data Collected at a Glance

5Legal Basis for Processing

NR999 processes Personal Data only where a lawful basis for doing so exists. The following bases are relied upon, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract you have entered into with NR999 by accepting our Terms and Conditions — including account management, deposit and withdrawal processing, game access and support services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC/AML identity verification, responsible gambling compliance and record-keeping requirements imposed by the operator's licensing jurisdiction.
• Legitimate Interests: Processing necessary for NR999's legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, platform security, analytics and improvement of services. You may object to processing on this basis.
• Consent: Processing for specific optional purposes where you have provided clear, voluntary and informed consent — including direct marketing communications. You may withdraw consent at any time without detriment to your account status.
• Vital Interests: In exceptional circumstances, processing necessary to protect a vital interest of you or another person.

6How We Use Your Personal Data

NR999 uses the Personal Data it collects for the following specific purposes:

6.1 Account Management

To create, maintain and administer your NR999 account, verify your identity, process login credentials, apply account settings and preferences, and communicate account-related notifications to you.

6.2 Transaction Processing

To facilitate deposits and withdrawals, verify payment methods, detect and prevent fraudulent transactions, maintain transactional records and, where required, report financial activity to applicable regulatory authorities.

6.3 KYC and AML Compliance

To verify your identity and age, screen against applicable watchlists and sanctions lists, monitor account activity for indicators of money laundering or terrorist financing, and maintain records as required by applicable AML regulations.

6.4 Customer Support

To respond to your queries, resolve complaints, investigate disputes and provide assistance via live chat, email and other support channels. Support communications may be recorded for training and quality-assurance purposes.

6.5 Platform Improvement and Analytics

To analyse usage patterns, monitor platform performance, detect technical issues, improve the user experience and develop new features. Analytics data is used in aggregate and pseudonymised form where possible.

6.6 Responsible Gambling Compliance

To implement and enforce voluntary or mandatory responsible gambling controls, detect indicators of problem gambling behaviour, apply self-exclusion measures and maintain records of responsible gambling interactions as required by applicable regulations.

6.7 Direct Marketing (Consent-Based)

Where you have consented to receiving marketing communications, to send you information about promotions, bonuses, new features and relevant gaming content. You may unsubscribe from marketing communications at any time by following the unsubscribe link in any communication or by contacting [email protected].

6.8 Security and Fraud Prevention

To detect, investigate and prevent fraudulent activity, account abuse, bonus exploitation and any other activity that breaches the NR999 Terms and Conditions or applicable law.

7Data Sharing and Disclosure

NR999 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the circumstances set out below:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers acting as Data Processors to carry out functions on our behalf, including: payment processing, identity verification services, cloud hosting and infrastructure, customer support software, analytics platforms and fraud detection tools. All Data Processors are engaged under contractual data processing agreements that restrict their use of your data to the purposes specified by NR999.

7.2 Legal and Regulatory Authorities

We may disclose Personal Data to governmental, regulatory or law enforcement authorities where required to do so by law, court order or binding regulatory direction. This includes disclosure to AML supervisory bodies, licensing authorities and tax authorities where applicable.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of NR999's assets, Personal Data held by NR999 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the acquiring entity.

7.4 Payment Context

References to payment channels familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided for contextual familiarity. NR999 does not share your personal data with these institutions unless they are acting as a Data Processor in connection with an actual transaction you have initiated, and in that case only the minimum data necessary for that transaction is shared. No endorsement, affiliation or partnership with any of these institutions is implied.

8International Data Transfers

NR999 is an internationally accessible platform. The servers, infrastructure and service providers engaged by NR999 may be located in jurisdictions outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries that do not have the same data protection laws as Pakistan.

Where such international transfers occur, NR999 takes appropriate safeguards to ensure that your Personal Data receives an adequate level of protection, including: engaging only service providers in jurisdictions recognised as offering adequate data protection standards, entering into standard contractual data processing clauses with Data Processors, and applying internal data governance policies consistent with applicable data protection principles.

By using the NR999 platform, you acknowledge that your Personal Data may be transferred internationally in accordance with the safeguards described in this section.

9Data Retention

NR999 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with NR999 and for a reasonable period thereafter to manage any residual obligations or disputes.
• KYC/AML Records: Retained for a minimum of five (5) years following the end of the account relationship, in accordance with standard AML regulatory requirements applicable in the operator licensing jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years for compliance, audit and dispute resolution purposes.
• Support Communications: Retained for up to two (2) years following the resolution of the relevant query or complaint.
• Analytics Data: Aggregated or pseudonymised analytics data may be retained indefinitely for platform improvement purposes.
• Marketing Consent Records: Retained for as long as you remain subscribed, and for a reasonable period thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where deletion is not immediately possible due to backup system constraints, data is isolated from active processing pending deletion.

10Data Security

NR999 implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• HTTPS/SSL/TLS encryption for all data in transit between your device and the NR999 platform;
• Encryption of sensitive data at rest in our database and storage systems;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security assessments and vulnerability management procedures;
• Two-factor authentication options for user accounts;
• Incident response procedures for the identification, containment and notification of data security incidents.

Notwithstanding these measures, no internet transmission or electronic storage system can be guaranteed as completely secure. NR999 cannot guarantee absolute security of Personal Data. You are responsible for maintaining the confidentiality of your own account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

11Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device when you visit the NR999 platform. They allow the platform to recognise your device, remember your preferences and collect analytical information about how the platform is used.

11.2 Types of Cookies We Use

11.3 Managing Cookies

Most browsers allow you to manage cookie preferences through their settings menus. You can typically block or delete cookies, though doing so may affect the functionality of the NR999 platform. Strictly Necessary cookies cannot be disabled without impairing core platform operations. Instructions for managing cookies in major browsers are available through the browser's own help documentation.

12Minors and Under-Age Access

The NR999 platform is strictly for adults aged 18 years or over, or such higher minimum age as may be required by the operator's licensing jurisdiction. NR999 does not knowingly collect Personal Data from persons under 18 years of age.

Where NR999 becomes aware that Personal Data belonging to a minor has been collected — whether through account registration, age verification failure or any other means — that data will be deleted immediately and the associated account will be permanently closed. Any deposits associated with a minor's account will be returned in accordance with applicable policy, subject to legal constraints.

If you believe that a minor has registered an account or that NR999 has inadvertently collected data from a minor, please notify us immediately at [email protected] so that the appropriate remedial action can be taken without delay.

We encourage parents and guardians in Pakistan to make use of parental control software and internet filtering tools to restrict access to gambling-related content for minors in their household.

13Exercising Your Data Rights

To exercise any of the data rights described in this Policy and summarised in the User Rights section above, please submit a written request to [email protected] with the following information:

• Your full name and registered account username;
• The specific right you wish to exercise (e.g., access, erasure, rectification);
• Sufficient detail to allow NR999 to identify the data in question;
• Where identity verification is required, a copy of your government-issued identification.

NR999 will acknowledge your request within five (5) business days. Substantive responses will be provided within thirty (30) days. Where a request is complex or involves a large volume of data, an extension of up to an additional sixty (60) days may apply, and you will be informed of this extension with an explanation.

14Pakistan-Specific Privacy Context

NR999 primarily serves users based in Pakistan, including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Pakistan is in the process of developing comprehensive data protection legislation. While the Personal Data Protection Bill (Pakistan) had not yet been enacted as of the effective date of this Policy, NR999 acknowledges its existence and is committed to aligning its practices with internationally recognised data protection principles consistent with the direction of that legislation.

NR999 does not claim to be regulated by any Pakistani government authority for data protection purposes. This Policy is governed by the data protection framework of the applicable operator licensing jurisdiction. Pakistani users who have concerns about how their data is handled are encouraged to contact us in the first instance at [email protected].

For contextual reference only: NR999's content makes reference to Pakistani payment channels including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah. These are mentioned as contextual references familiar to Pakistani users and do not indicate a data-sharing relationship with those institutions beyond any strictly necessary transaction processing as described in Section 7.4.

15Amendments to This Policy

NR999 reserves the right to update, amend or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how your Personal Data is collected, used or shared — NR999 will provide advance notice via the email address registered to your account, or by means of a prominent notice on the Platform, prior to the changes taking effect.

Where amendments are non-material (for example, typographical corrections, clarifications of existing practices or changes to contact information), we reserve the right to update this Policy without advance notice, updating the effective date and version number at the top of the page.

Your continued use of the NR999 platform following any amendment to this Policy constitutes acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the platform and may request account closure in accordance with our Terms and Conditions.

We encourage you to review this Policy periodically. The current version, version number and effective date are displayed at the top of this page.

16Contact Us

If you have questions, concerns or complaints regarding this Privacy Policy, or if you wish to exercise any of your data rights, please contact the NR999 privacy team using the details below:

• Email (Privacy & Data Inquiries): [email protected]
• Subject Line: "Privacy Request — [Your Username]"
• Live Chat: Available 24/7 through the NR999 platform (English primary; Urdu available on request)
• Response Commitment: Acknowledgement within 5 business days; substantive response within 30 days

For questions about your account Terms and Conditions, please see our Terms & Conditions page. For responsible gambling assistance, please visit our Responsible Gambling page. For frequently asked questions, see our FAQ page.