9sgame Privacy Policy —
Your Data, Your Rights,
Our Obligations

This Privacy Policy ("Policy") describes how 9sgame ("9sgame," "we," "us," or "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you," "Player," or "User") who access or use the 9sgame platform, website, mobile interface, and associated services (collectively, the "Platform").

9sgame is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about using the 9sgame Platform.

By accessing the 9sgame Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not use the 9sgame Platform.

This Policy should be read alongside 9sgame's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of the Platform.

9sgame operates as the data controller for all personal information processed in connection with the Platform. As data controller, 9sgame determines the purposes for which, and the means by which, personal data is processed.

9sgame operates under an international gaming licence and processes personal data in accordance with the data protection obligations attached to that licence. Where 9sgame engages third-party processors — such as KYC verification providers, payment processors, and fraud prevention services — those parties act as data processors under written agreements that impose appropriate data protection obligations.

For all data protection queries, requests to exercise your rights, or complaints relating to 9sgame's data practices, please contact us via the channels listed in Section 16 of this Policy.

9sgame collects the following categories of personal data in connection with operating the Platform:

9sgame collects personal data through the following means:

• Direct collection from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, setting responsible gaming limits, or participating in promotions.
• Automated technical collection: Information collected automatically when you access the Platform, including device identifiers, IP addresses, browser data, and session activity logs collected via cookies, web beacons, and similar tracking technologies.
• Payment processor data: Transaction confirmation data, payment method identifiers, and processing status information received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you conduct financial transactions on 9sgame.
• KYC and fraud prevention providers: Identity verification results, document authenticity checks, and risk scores provided by third-party KYC and fraud prevention services engaged by 9sgame.
• Third-party data: In limited circumstances, 9sgame may receive data about you from third parties for the purpose of fraud prevention, regulatory compliance, or responsible gaming obligations — for example, shared self-exclusion databases operated in connection with 9sgame's international gaming licence.

9sgame processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — specifically, to operate your 9sgame account, accept deposits, process withdrawals, settle wagers, and deliver the gaming and betting services you have registered for.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering obligations, responsible gaming mandates under our international licence, and responses to lawful requests from regulatory authorities and law enforcement.
• Legitimate interests: Processing carried out in 9sgame's legitimate business interests, including fraud detection and prevention, platform security monitoring, internal analytics and product development, and general business communications — provided these interests do not override your fundamental rights and freedoms.
• Consent: Processing for which 9sgame has obtained your specific, informed consent — primarily marketing communications and non-essential cookies. You may withdraw consent for consent-based processing at any time without affecting the lawfulness of prior processing.

9sgame uses personal data for the following specific purposes:

• Creating, verifying, and managing your 9sgame account, including age verification (21+ requirement) and identity verification via CNIC.
• Processing PKR deposits and withdrawals through your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank.
• Operating the betting, casino, slot, Captain Fisher, and VIP programme services you use on the Platform.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activities in accordance with our Terms & Conditions.
• Administering responsible gaming tools — including deposit limits, loss limits, and self-exclusion — and monitoring account activity to identify potential problem gambling indicators.
• Providing customer support through live chat and email, and maintaining records of support interactions for quality assurance and dispute resolution.
• Sending you transactional communications directly related to your account, including payment confirmations, security alerts, and KYC requests.
• Sending you promotional communications about 9sgame offers, bonuses, and new gaming products — subject to your marketing communication preferences and consent where required.
• Analysing Platform usage patterns to improve product features, fix technical issues, and optimise the 9sgame experience for Pakistani players.
• Complying with applicable legal obligations, including responding to lawful requests from regulatory authorities, courts, and law enforcement agencies.

9sgame does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data is shared only in the following circumstances and with the following categories of recipient:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial data protection regulations.
• KYC and identity verification providers: Third-party services engaged by 9sgame to verify the identity, age, and document authenticity of account holders. These providers act as data processors under written data processing agreements and are not permitted to use your data for any purpose other than KYC verification on 9sgame's behalf.
• Fraud prevention and security services: Specialist fraud detection platforms that analyse transaction patterns, device fingerprints, and behavioural data to identify suspicious activity. Data shared with these providers is used solely for fraud prevention purposes.
• Technology infrastructure providers: Cloud hosting, database, and content delivery providers whose services support the 9sgame Platform. These providers operate under strict data processor agreements.
• Regulatory authorities and law enforcement: 9sgame will disclose personal data to regulatory bodies, courts, or law enforcement agencies where required to do so by applicable law, court order, or in connection with our obligations under our international gaming licence.
• Professional advisers: Legal, accounting, or compliance advisers engaged by 9sgame may access personal data where necessary to provide professional advice. Such advisers are bound by professional confidentiality obligations.

9sgame operates internationally and your personal data may be transferred to, stored in, and processed in countries outside Pakistan. Such transfers occur in connection with the operation of 9sgame's Platform infrastructure, KYC verification services, fraud prevention systems, and cloud hosting arrangements.

Where personal data is transferred internationally, 9sgame ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applicable under 9sgame's licence jurisdiction. These safeguards include contractual data protection clauses incorporated into agreements with third-party processors, and selection of processors that maintain recognised information security certifications.

By using the 9sgame Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the protections described herein.

9sgame retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your account's existence on the 9sgame Platform plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following the completion of the relevant KYC verification, or longer where required by applicable regulatory obligations.
• Transaction records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of five (5) years, consistent with standard financial record-keeping requirements.
• Support communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for quality assurance, dispute resolution, and compliance purposes.
• Marketing consent records: Records of your marketing communication consents and opt-outs are retained indefinitely to demonstrate compliance.
• Cookie and analytics data: Aggregated and anonymised analytics data may be retained indefinitely. Individual-level technical data associated with specific sessions is typically retained for no more than thirteen (13) months.

Where personal data is no longer required and no legal obligation requires its retention, 9sgame will securely delete or anonymise that data in accordance with its internal data lifecycle procedures.

9sgame uses cookies and similar tracking technologies (including web beacons and local storage objects) on the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cookies cannot be disabled as they are required for basic Platform functionality.
• Performance cookies: Used to monitor Platform performance, identify technical errors, and measure page load times. Data collected is aggregated and not linked to individual user identities.
• Analytical cookies: Used to understand how players navigate and use the Platform — which game categories are most visited, which features are most frequently used, and where players encounter difficulties. This data informs product improvement decisions.
• Functional cookies: Used to remember your preferences — such as language settings and responsible gaming configuration — to provide a personalised Platform experience.
• Marketing cookies: Used to deliver relevant promotional content to you within the 9sgame Platform and, where you have provided consent, in external environments. These cookies are only placed with your explicit consent and can be withdrawn at any time.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform. For other cookie categories, disabling via browser settings will not retroactively delete cookies already placed but will prevent new cookies in that category from being set.

9sgame implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption applied to all data transmitted between your device and the 9sgame Platform.
• AES-256 encryption at rest for sensitive personal data including identity documents, CNIC records, and financial account details stored on 9sgame infrastructure.
• Role-based access controls that restrict internal access to personal data to authorised personnel who require it to perform their specific job functions.
• Multi-factor authentication required for all internal 9sgame staff access to systems that contain personal data.
• Continuous security monitoring and automated intrusion detection systems that alert the 9sgame security team to suspicious access patterns in real time.
• Regular independent security audits and penetration testing conducted by qualified third-party security professionals.
• Incident response procedures that specify how 9sgame responds to potential data breaches, including notification obligations to affected players and relevant regulatory authorities.

The 9sgame Platform is strictly for persons aged 21 years and older. 9sgame does not knowingly collect, process, or retain personal data from individuals under the age of 21.

Age verification is conducted as part of the KYC process required before any withdrawal is processed on 9sgame. Where 9sgame identifies or reasonably suspects that an account holder is under the age of 21, the account will be suspended immediately, all balances and bonuses will be forfeited, and any deposits made by the underage individual will be returned to the originating payment method following investigation.

Parents and guardians are advised to use device-level parental controls and to keep 9sgame login credentials strictly private to prevent underage access.

Subject to applicable law and certain conditions, you hold the following rights in relation to the personal data 9sgame holds about you:

• Right of access: You may request a copy of the personal data 9sgame holds about you, including information about how it is being used and with whom it has been shared.
• Right to rectification: If personal data held by 9sgame is inaccurate or incomplete, you may request that it be corrected. Note that correcting identity data may require re-submission of KYC documents.
• Right to erasure ("right to be forgotten"): In certain circumstances you may request that 9sgame delete personal data it holds about you. This right does not apply where 9sgame is required to retain data for legal or regulatory compliance purposes — including the five-year retention obligation for transaction and KYC records.
• Right to restrict processing: You may request that 9sgame limit how it uses your personal data in certain circumstances, such as where you contest the accuracy of data or object to a particular processing activity.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of the personal data you have provided to 9sgame.
• Right to object: You may object to 9sgame processing your personal data on the basis of legitimate interests. 9sgame will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Rights related to consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact 9sgame via live chat or at the email address in Section 16. 9sgame will respond to all verified rights requests within thirty (30) days. Complex requests may require an extension of up to a further sixty (60) days, in which case 9sgame will notify you of the extension and the reason for it within the initial thirty-day period.

9sgame may send you promotional communications about bonuses, new game launches, VIP programme updates, cricket betting promotions — including PSL season offers — and other 9sgame services. The method and frequency of such communications are governed by the preferences you set during registration and within your account dashboard.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 9sgame account settings under "Notifications."
• Contacting 9sgame support via live chat and requesting removal from marketing lists.
• Emailing 9sgame support with "Unsubscribe" in the subject line — address listed in Section 16.

Opting out of marketing communications will not affect transactional communications that are required to operate your account — such as deposit confirmations, withdrawal notifications, KYC requests, and security alerts. These operational communications will continue regardless of marketing preferences.

9sgame reserves the right to update or amend this Privacy Policy at any time. Material changes — such as new categories of personal data collected, new third-party sharing arrangements, or significant changes to data retention periods — will be communicated to registered players via on-Platform notification and/or email notification to the address registered on your account, with reasonable advance notice before the change takes effect.

Minor amendments — such as clarifications of existing practices, corrections of typographical errors, or updates to contact details — may be made without advance notice. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made.

The current version of this Privacy Policy is always accessible at 9sgame.app/privacy-policy. It is your responsibility to review this Policy periodically. Continued use of the 9sgame Platform following any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or complaints about this Privacy Policy, 9sgame's data practices, or your data rights, you may contact us through the following channels:

• Live Chat Support: Available 24/7 on the 9sgame Platform. Live chat is the fastest method for most data-related queries, including access requests, rectification requests, and marketing opt-out requests.
• Email Support: [email protected] — for formal data subject rights requests or detailed privacy inquiries. Include "Data Privacy Request" in the subject line for priority routing. Responses are typically delivered within 2–4 hours for general queries; formal rights requests are acknowledged within 5 business days and completed within 30 days.

When submitting a data rights request, please include the following information to enable 9sgame to verify your identity and locate your records:

• Your full name as registered on your 9sgame account.
• The email address associated with your 9sgame account.
• The mobile number registered to your account (if applicable).
• A clear description of the right you are exercising and the data to which your request relates.
• A copy of valid identity documentation (CNIC, passport) if the request relates to access, rectification, or erasure of data.

9sgame takes all privacy complaints seriously and is committed to resolving them promptly, fairly, and transparently.