VR999 Privacy Policy – How We Protect Your Data

This Privacy Policy applies to vr999.ws and the entity that operates it (referred to throughout this document as "vr999", "we", "us", or "the platform"). vr999 operates an online gaming platform offering casino games, live dealer tables, crash games, card games, roulette, sports betting, and PSL markets. The platform is designed specifically for Pakistani players, with all transactions conducted in Pakistani Rupees (PKR).

For the purposes of data protection, vr999 is the data controller — meaning we determine how and why personal data about our players is processed. If you have any questions about how vr999 handles your data, or if you wish to exercise any of the rights described in this policy, you can reach us at support@vr999.ws.

vr999 collects the following categories of personal data from players. This list covers the full range of data that may be collected — not every item will be collected from every player in every circumstance.

vr999 does not collect sensitive categories of personal data — such as ethnic origin, religious belief, health data, or political opinion — and does not request or store such information at any stage of the registration or verification process.

vr999 collects personal data through several routes, depending on how you interact with the platform. Being transparent about these routes is important to us, so here is a clear breakdown:

• Directly from you: When you register an account on vr999, you provide your name, date of birth, mobile number, and email address. When you make a deposit or request a withdrawal, you provide payment information. When you contact vr999 support, you provide whatever information is in your message.
• Automatically during platform use: When you browse or use vr999, technical data such as your IP address, device type, and browser version is collected automatically by our servers. Usage data about which pages you visit and how long you spend on the platform is collected via analytics tools.
• From payment processors: When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or Visa/Mastercard, the payment processor confirms the transaction and shares confirmation data with vr999 — including the transaction reference and amount. The payment processor does not share your full payment credentials with vr999.
• From identity verification services: If vr999 asks you to complete identity verification (KYC), the third-party verification service we use will share a confirmation result with us. We do not receive raw copies of your CNIC from the verification service beyond what is needed to match your account details.
• From cookies and similar technologies: Cookies placed on your browser when you visit vr999 collect usage and session data. The cookies section of this policy explains this in detail.

vr999 uses personal data for specific, defined purposes. We do not use your data in ways that go beyond what is described here. The primary purposes are:

• To operate your account: Your identity, contact, and financial data are needed to create and maintain your vr999 account, process deposits and withdrawals in PKR, and ensure that your winnings are paid to the correct person.
• To verify your identity: vr999 is required to verify that players are who they say they are and are old enough to use the platform. This requires processing identity data to confirm age and authenticity.
• To prevent fraud and money laundering: Financial transaction data and gaming activity data are monitored to detect unusual patterns that may indicate fraudulent behaviour, money laundering, or multi-accounting. This is both a regulatory obligation and a platform integrity measure for vr999.
• To provide customer support: When you contact vr999 support, we need your account and transaction history to investigate and resolve your query. Support communications are stored so that we can follow up and maintain quality.
• To improve the platform: Usage data and technical data help the vr999 team understand how the platform is being used, which features are popular, and where improvements can be made. This data is analysed in aggregate form wherever possible.
• To communicate with you: Contact data is used to send you account-related communications — deposit confirmations, withdrawal notifications, important policy updates. vr999 does not send promotional emails without your consent.
• To apply responsible gaming measures: Gaming activity data is used to identify patterns that may indicate problem gambling behaviour, enabling vr999 to apply the responsible gaming safeguards described in the Responsible Gaming policy.

Every use of your personal data by vr999 must rest on a recognised legal basis. The bases vr999 relies on are as follows, matched to the processing activity described in Section 4:

• Contract performance: Account operation, deposit and withdrawal processing, and customer support are all necessary to fulfil the contract between you and vr999. Without processing this data, vr999 cannot provide the service you have signed up for.
• Legal obligation: Identity verification, anti-money laundering monitoring, and fraud detection are carried out to comply with applicable regulatory requirements. vr999 does not have a choice about whether to conduct these processes.
• Legitimate interests: Platform improvement, security monitoring, and responsible gaming monitoring are based on vr999's legitimate interest in operating a secure, high-quality platform and protecting both the business and its players from harm. These interests do not override your rights as a player.
• Consent: Marketing communications, if you opt in to receiving them, are based on your consent. You can withdraw consent for marketing communications at any time by contacting vr999 support.

vr999 shares personal data with a limited and defined set of third parties. In every case, sharing is done only to the extent necessary to fulfil the stated purpose, and all third-party partners are bound by data processing agreements that require them to handle your data securely and in accordance with this Privacy Policy.

The categories of third parties vr999 shares data with are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks, and Visa/Mastercard networks — solely to facilitate the deposit and withdrawal transactions you initiate on vr999.
• Identity verification providers: Third-party KYC services used to verify player identity as required by applicable regulations.
• Game software providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and other licensed game providers receive the technical data necessary to load and run games within your vr999 session. They do not receive your personal or financial details.
• Platform analytics providers: Anonymous and aggregated usage data may be shared with analytics tools used to monitor vr999 platform performance. This data does not identify individual players.
• Regulatory and law enforcement bodies: vr999 is required by law to share certain information with regulatory authorities and law enforcement agencies when lawfully requested. This is not discretionary — it is a legal obligation.

vr999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulations. The general retention principles applied at vr999 are:

• Account data (identity, contact details) is retained for the duration of your active account and for a minimum of five years after account closure, as required by anti-money laundering regulations.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years from the date of the transaction.
• Support communications are retained for three years from the date of the most recent interaction.
• Technical and usage data collected via cookies and analytics tools is retained for up to 24 months from collection.

Once the applicable retention period has expired, data is deleted securely. If you request deletion of your account, vr999 will delete all data that is not required to be retained under a legal obligation. Data subject to a mandatory retention period will be held for the minimum required period and deleted immediately upon expiry.

The security of your personal and financial data is one of the most important operational concerns at vr999. The technical and organisational measures we have in place include:

• SSL/TLS encryption: All data transmitted between your device and vr999 is encrypted using industry-standard SSL/TLS protocols. This includes login credentials, payment details, and personal account information.
• Access controls: Personal data stored on vr999 systems is accessible only to employees and contractors who have a genuine business need to access it. Role-based access controls limit what each team member can see.
• Data minimisation: vr999 does not store payment credentials in full. For example, card numbers are truncated and only the last four digits are stored. Easypaisa and JazzCash authentication takes place through the providers' own secure systems.
• Security monitoring: vr999 systems are monitored for unusual access patterns and potential security threats on an ongoing basis. Alerts are generated for suspicious activity and reviewed by the compliance team.
• Breach response: In the event of a data breach that is likely to result in risk to players, vr999 will notify affected players as quickly as practicable and will take all available steps to contain and remedy the breach.

Cookies are small text files stored on your device when you visit a website. vr999 uses cookies to make the platform work correctly, to keep your session active while you play, and to understand how the platform is being used so we can improve it. Here is a clear breakdown of the types of cookies vr999 uses:

You can manage cookie preferences through your browser settings. Most browsers allow you to see which cookies are stored and delete them individually or in bulk. Note that deleting essential cookies will log you out of your vr999 session.

As a player on vr999, you have specific rights over your personal data. These rights are listed below. To exercise any of them, send a request to support@vr999.ws with your full name and registered mobile number so we can verify your identity before acting on the request.

vr999 is strictly an 18+ platform. The platform is not directed at and does not knowingly collect personal data from anyone under the age of 18. If vr999 discovers that data from a minor has been collected — whether through a misrepresentation during registration or any other means — that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that a minor has registered an account on vr999 using your contact details or payment information, please contact support@vr999.ws immediately with the relevant account details. vr999 will investigate and take action within one business day of receiving a verified report.

vr999 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in how we operate, changes in applicable regulations, or improvements in how we protect your data. The date at the top of this page shows when the policy was last reviewed.

When changes are material — such as a change in what data we collect, who we share it with, or how long we retain it — vr999 will notify registered players via the email address on their account before the changes take effect. For minor updates (such as clarifications of existing practices that do not change your rights), notification may be limited to updating the date on this page.

Continued use of the vr999 platform after a Privacy Policy update is published constitutes your acceptance of the updated policy. If you have concerns about any changes, please contact the vr999 support team before the effective date of the update.