SG999 Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by SG999 ("SG999", "We", "Us" or "Our"), the operator of the online gaming platform accessible at https://sg999.cam (the "Platform"). This Policy describes how SG999 collects, uses, stores, shares and protects the personal data of individuals ("Users", "Players" or "You") who access or use the Platform.

SG999 is an English-language online gaming information and services platform primarily serving Pakistani users. SG999 does not hold a Pakistani gambling license and does not operate a physical office in Pakistan. This Policy does not constitute legal advice. Users are encouraged to seek independent guidance on their rights and obligations under applicable local law, including Pakistani data protection regulations, which continue to evolve.

By registering an Account, accessing the Platform or otherwise providing your personal data to SG999, you acknowledge that you have read and understood this Policy and you consent to the processing of your data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform.

Definitions

For the purposes of this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifier or factors specific to that person's identity.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, restriction, erasure or destruction.
• "Data Controller" means SG999, which determines the purposes and means of processing your personal data.
• "Data Processor" means a third party that processes personal data on behalf of SG999 under a contractual arrangement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — the identity and age verification procedure required to satisfy regulatory and fraud-prevention obligations.
• "Cookie" means a small text file placed on your device by the Platform to facilitate certain functionality and analytics.

Personal Data We Collect

3.1 Data You Provide Directly

When you register an Account, complete KYC verification or contact our support team, you provide us with personal data including but not limited to:

• Full legal name, date of birth and email address;
• Country of residence and city (for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Phone number;
• Identity documents: CNIC number, CNIC front and back image, passport scan;
• Proof of address documentation where required;
• Selfie or liveness verification image;
• Payment method information as required for deposit and withdrawal processing.

3.2 Data Generated Through Platform Use

As you use the Platform, we automatically collect information about your activity and interactions, including:

• Login history, session timestamps and session durations;
• Game history, wager amounts, outcomes and account balance changes;
• Deposit and withdrawal records, transaction timestamps and payment method references;
• Responsible gambling tool settings and limit configurations;
• Support queries and communication history.

3.3 Technical and Device Data

We collect technical data generated when you access the Platform, including your IP address, device type, operating system, browser type and version, referring URLs and cookie identifiers. This data is used for security, fraud detection and performance analytics.

How We Collect Your Data

SG999 collects personal data through the following mechanisms:

• Direct submission: Information you actively provide during registration, KYC processes, deposit/withdrawal requests or support interactions;
• Automated collection: Technical and activity data collected automatically as you interact with the Platform, including via cookies and server logs;
• Third-party service providers: Identity verification services, payment processors and fraud detection providers may supply or confirm personal data in connection with KYC, AML compliance and transaction processing;
• Public sources: Where permitted by law, publicly available information may be used for identity verification or fraud prevention purposes.

Purposes of Processing & Legal Bases

SG999 processes personal data only for defined, lawful purposes. The principal purposes and the corresponding legal bases are set out below:

5.1 Account Management and Service Delivery

We process identity, contact and financial data to create and maintain your Account, authenticate your login, process deposits and withdrawals, and deliver the services you have requested. Legal basis: contractual necessity.

5.2 Identity Verification and Compliance

KYC procedures require us to collect and verify identity documents to confirm age, identity and address. AML (Anti-Money Laundering) obligations require us to monitor transaction patterns and maintain records. Legal basis: legal obligation.

5.3 Fraud Prevention and Security

We analyse account activity, technical data and transaction patterns to detect and prevent fraud, unauthorised access, money laundering and other prohibited conduct. Legal basis: legitimate interest; legal obligation.

5.4 Responsible Gambling Monitoring

Gameplay data, session activity and limit configurations are used to monitor for indicators of problem gambling and to ensure that responsible gambling tools are effective. Legal basis: legitimate interest; contractual necessity.

5.5 Marketing Communications

Where you have provided explicit consent, we may use your contact data to send promotional offers, bonus notifications and platform updates. You may withdraw consent at any time through your Account settings or by contacting support. Legal basis: consent.

5.6 Analytics and Platform Improvement

Aggregated and anonymised usage data helps us understand how the Platform is used, identify areas for improvement and optimise the user experience. Legal basis: legitimate interest.

Data Sharing & Disclosure

SG999 does not sell your personal data to third parties. We may share personal data in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage third-party service providers to support Platform operations, including payment processors, identity verification services, cloud hosting providers, email delivery services and customer support tools. Each provider is contractually bound to process personal data only on our instructions, to maintain appropriate security measures and not to use your data for their own purposes.

6.2 Regulatory and Legal Authorities

We may disclose personal data to regulatory bodies, law enforcement authorities or courts where required by applicable law, in response to a lawful request, court order or to comply with AML, counter-terrorism financing or other legal obligations.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, personal data held by SG999 may be transferred to the relevant successor entity, subject to equivalent privacy protections.

International Data Transfers

SG999 operates an international Platform. Your personal data may be transferred to and processed in countries outside Pakistan, including countries where data protection standards may differ from those in your home jurisdiction. Where such transfers occur, SG999 implements appropriate safeguards — including contractual data protection clauses with the relevant service providers — to ensure your data receives an equivalent level of protection.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred internationally as described in this Policy.

Data Retention

SG999 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, to maintain a registered Account, and to comply with our legal, regulatory and contractual obligations.

For closed or dormant accounts, relevant personal data — particularly KYC documents and transaction records — may be retained for a period of up to five (5) years following Account closure, or longer where required by applicable AML, regulatory or tax legislation.

Technical and analytics data that cannot be linked to a specific individual may be retained indefinitely in aggregated or anonymised form. When personal data is no longer required, it is securely deleted or irreversibly anonymised.

Cookies & Tracking Technologies

SG999 uses cookies and similar tracking technologies to operate and improve the Platform. The main categories of cookies used are:

• Essential cookies: Strictly necessary for the Platform to function. They manage session state, authentication and security. These cannot be disabled without affecting core functionality.
• Analytics cookies: Used to collect aggregated information about how the Platform is used — pages visited, session duration and navigation paths. This data is used to improve user experience and Platform performance.
• Preference cookies: Remember your Platform settings and preferences — such as language selection and display options — so you do not need to reconfigure them on each visit.

You can manage cookies through your browser settings. Most browsers allow you to refuse third-party cookies, delete existing cookies or be notified when a new cookie is set. Please note that disabling essential cookies may prevent you from using certain parts of the Platform.

Children's Privacy

The Platform is strictly intended for adults. SG999 does not knowingly collect personal data from individuals under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. If you are under this age limit, you must not register an Account or submit any personal data to SG999.

If SG999 becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated Account. Account holders are responsible for ensuring that no minor gains access to their Account or any part of the Platform.

Your Data Rights

Subject to applicable law, you hold the following rights in relation to your personal data held by SG999. To exercise any of these rights, please contact us using the details in Section 15.

Data Security

SG999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption of sensitive data at rest on secure, access-controlled infrastructure;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Regular security reviews and penetration testing of Platform infrastructure;
• Incident response procedures to detect, assess and address data security events promptly.

While SG999 takes reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately of any suspected unauthorised access to your Account.

Third-Party Links

The Platform may contain references to third-party services or payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — as contextual examples only. These references are informational and do not constitute links to, or endorsements of, any external website or service.

SG999 is not responsible for the privacy practices or content of any third-party services engaged through the Platform's payment or verification flows. We recommend that you review the privacy policies of any third-party service provider whose services you use in connection with your SG999 Account.

Amendments to This Policy

SG999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Users via the email address on record or through a prominent notice on the Platform. The "Last Updated" date at the top of this page reflects the current version.

Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with the revised Policy, you should close your Account and cease using the Platform.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data is being handled, please contact the SG999 Data & Privacy team. All requests are acknowledged within 5 business days and responded to substantively within 30 days.

Support Email (plain text — not a clickable link):
[email protected]

Please include "Privacy Request" in the subject line of your message and provide sufficient detail to allow us to identify your Account and understand your request. We may need to verify your identity before processing certain data rights requests.