dk9990 Privacy Policy

01 Who We Are

dk9990 operates the online casino and sports betting platform accessible at https://dk9990.app (the "Platform"). References to "dk9990", "we", "us", or "our" throughout this Privacy Policy refer to the operating entity behind the dk9990 Platform, which holds an international gaming licence authorising it to offer online gaming services.

For the purposes of data protection, dk9990 acts as the data controller in respect of personal data collected from players and website visitors in Pakistan and internationally. As data controller, dk9990 determines the purposes and means by which your personal data is processed.

If you have any questions about who controls your data or how to exercise your rights, you may contact us at any time using the details provided in Section 15 of this Policy.

02 Data We Collect

dk9990 collects personal data in several categories depending on your interaction with the Platform. The following table summarises the main categories of data we collect and the context in which each arises:

03 How We Collect Your Data

3.1 Information You Provide Directly

The majority of personal data dk9990 holds is information you provide to us directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. This is the primary source of your personal data on our Platform.

3.2 Automatically Collected Data

When you visit the dk9990 website or use our Platform, certain technical data is collected automatically via cookies and server logs. This includes your IP address, the pages you visit, the duration of your session, and the device and browser you use. This data helps us maintain Platform security, diagnose technical issues, and understand how players in Karachi, Lahore, Islamabad, and across Pakistan interact with our services.

3.3 Data from Payment Providers

When you make a deposit via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, or GrabPay, our payment processing partners share limited transaction confirmation data with dk9990 to verify that a payment has been received. dk9990 does not receive or store your full bank account credentials or card numbers.

3.4 Data from Third-Party Game Providers

Some games on the dk9990 Platform are provided by licensed third-party game studios. These providers may process technical gameplay data (such as game session logs and RNG outcomes) on their own systems in order to deliver the game to you and to maintain audit trails required by gaming regulators. Game providers are contractually prohibited from using this data for any purpose beyond game delivery and regulatory compliance.

04 How We Use Your Data

dk9990 uses the personal data we collect for the following specific purposes:

• Account Creation & Management: To register your dk9990 account, authenticate your identity at login, and maintain your account settings and preferences.
• Age & Identity Verification: To confirm that you meet the 21+ age requirement and to verify your identity as required by our licensing obligations and anti-money laundering regulations.
• Payment Processing: To process deposits from and withdrawals to your registered JazzCash, EasyPaisa, or bank account in PKR, and to maintain a complete and accurate transaction record.
• Platform Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions.
• Regulatory Compliance: To fulfil our obligations under anti-money laundering (AML) regulations, our gaming licence conditions, and any lawful request from a regulatory or law enforcement authority.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via live chat and email.
• Responsible Gaming: To apply and enforce the responsible gaming controls you have elected, including deposit limits, self-exclusion orders, and cooling-off periods, and to identify patterns of play that may indicate problem gambling behaviour.
• Platform Improvement: To analyse aggregated, anonymised usage data to identify technical issues, improve game performance, and develop new features for Pakistani players.
• Marketing Communications: To send you promotional emails and on-platform notifications about dk9990 bonuses and offers, where you have provided your consent to receive such communications (see Section 13).

05 Legal Basis for Processing

dk9990 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and dk9990 — including account management, payment processing, and game delivery — is undertaken on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, gaming licence conditions, and lawful orders from competent authorities is undertaken on the basis of legal obligation.
• Legitimate Interests: Processing undertaken for Platform security, fraud prevention, responsible gaming monitoring, and first-party analytics is based on dk9990's legitimate interest in operating a safe, fair, and compliant gaming platform. We have assessed that these interests are not overridden by your rights in any of these use cases.
• Consent: Processing for direct marketing communications is based on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

dk9990 does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the minimum extent necessary:

6.1 Payment Service Providers

We share necessary transaction data with JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, 1LINK, and GrabPay to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by financial services regulations applicable in Pakistan.

6.2 Licensed Game Providers

Third-party game studios that supply games available on the dk9990 Platform receive gameplay session data necessary to deliver games and maintain regulatory audit logs. All game providers are contracted to handle this data securely and are prohibited from using it for any purpose beyond game delivery and regulatory compliance.

6.3 KYC & Identity Verification Services

To verify the identity documents you submit during KYC, dk9990 may use a licensed third-party identity verification service. This service processes your CNIC, passport, or other document data solely for the purpose of identity verification and does not retain your data beyond the period required to complete the verification check.

6.4 Regulatory & Law Enforcement Authorities

dk9990 will disclose personal data to our gaming licensing authority, financial intelligence units, law enforcement agencies, or other competent governmental bodies where required to do so by law, court order, or as part of our ongoing licensing compliance obligations. We will notify you of such disclosure where permitted by law.

6.5 Professional Advisers

In limited circumstances, dk9990 may share personal data with legal counsel, auditors, or compliance consultants acting in a professional capacity. Such advisers are bound by confidentiality obligations and are prohibited from using your data for any purpose other than the professional service being rendered.

07 Cookies & Tracking Technologies

The dk9990 website uses cookies and similar technologies to support essential platform functionality and to collect first-party analytics data. The following categories of cookies are in use:

dk9990 does not use third-party advertising cookies or cross-site tracking technologies. You may disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform, including the ability to log in and maintain a session.

08 Data Retention

dk9990 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by our legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the duration of your active dk9990 account plus a mandatory period after account closure as required by our gaming licence (typically 5 years from the date of last transaction).
• KYC & Identity Documents: Retained for the mandatory period prescribed by our licensing authority and applicable AML regulations from the date of last account activity.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction in accordance with financial record-keeping requirements.
• Support Communications: Retained for 3 years from the date of the communication to allow for complaint review and regulatory inspection.
• Marketing Consent Records: Retained until you withdraw consent, plus a short period thereafter for compliance record-keeping.
• Technical & Log Data: Retained for up to 12 months from collection for security monitoring and fraud detection purposes, after which it is deleted or anonymised.

When retention periods expire, dk9990 securely deletes or irreversibly anonymises personal data using industry-standard data destruction methods.

09 Data Security

dk9990 implements a layered approach to data security that includes both technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive personal data held in our databases, including identity documents and financial records.
• Role-based access controls ensuring that dk9990 staff can only access personal data where their job function genuinely requires it.
• Regular penetration testing and security audits conducted by independent third-party security firms.
• Two-factor authentication available to all players and mandated for all internal staff accounts with access to player data.
• Incident response procedures that include mandatory notification to our licensing authority and to affected players in the event of a data breach involving significant risk.

10 Your Rights Over Your Data

Subject to applicable law and our regulatory obligations, you have the following rights in respect of the personal data dk9990 holds about you:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used format within 30 calendar days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legal obligation or legitimate purpose requiring us to retain it. Note that data subject to AML and gaming licence retention requirements cannot be deleted before the mandatory retention period has elapsed.
• Right to Restrict Processing: In certain circumstances, you may request that we restrict the processing of your personal data while a dispute about accuracy or lawfulness is resolved.
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format for transfer to another service provider, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team.
• Right to Object: You may object to processing based on our legitimate interests. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact the dk9990 support team at the details provided in Section 15. All requests are handled free of charge and will receive an initial response within 5 business days.

11 Children & Minors

The dk9990 Platform is strictly intended for individuals aged 21 years and above. dk9990 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted at registration and before the first withdrawal is processed.

If dk9990 becomes aware that personal data has been collected from a person under the age of 21, all such data will be securely deleted, the account will be permanently closed, and any deposited funds will be returned to the original payment method after deduction of any bonuses claimed. Parents or guardians who believe an underage person has registered on dk9990 should contact us immediately at [email protected].

12 International Data Transfers

dk9990's primary servers and data storage infrastructure are located in jurisdictions covered by our international gaming licence. In delivering services to players in Pakistan, some personal data may be processed by our service providers (including game studios and KYC verification providers) in data centres located outside Pakistan.

Where such transfers occur, dk9990 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that your personal data receives a level of protection equivalent to that described in this Privacy Policy. dk9990 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13 Marketing Communications

dk9990 may send you promotional emails, SMS notifications, and on-platform messages about bonuses, new games, PSL cricket betting promotions, and other dk9990 offers. We will only send you direct marketing communications where you have explicitly opted in to receive them at the time of registration or through your account notification preferences.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from dk9990.
• Updating your notification preferences in the Account Settings section of your dk9990 account.
• Contacting the dk9990 support team and requesting removal from marketing lists.

Opting out of marketing communications will not affect your ability to receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts. These communications are sent on the basis of contractual necessity and cannot be unsubscribed from while your account remains active.

14 Changes to This Privacy Policy

dk9990 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform services. When material changes are made, we will notify you by email or through a prominent notice on the dk9990 Platform at least 7 days before the revised Policy takes effect.

The "Effective Date" displayed at the top of this page will be updated each time a new version of this Policy is published. We encourage you to review this Privacy Policy periodically to stay informed about how dk9990 is protecting your data. Continued use of the Platform after the effective date of any revised Policy constitutes your acknowledgement of the changes.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how dk9990 has handled your personal data, you may contact our support team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" for data rights enquiries
• Live Chat: Available on every page of the dk9990 Platform, 24 hours a day, 7 days a week
• Response Time: Privacy-related requests receive an initial acknowledgement within 48 hours and a full response within 30 calendar days

If you are not satisfied with dk9990's response to a privacy concern, you have the right to escalate your complaint to the data protection authority or gaming regulator responsible for overseeing dk9990's licensing jurisdiction. Contact details for the relevant authority are available on request from our support team.