TD999 Privacy Policy – How We Protect Your Data in Pakistan

TD999 is an online gaming platform operating at td999.click, designed specifically for Pakistani players. For the purposes of this Privacy Policy, "TD999," "we," "our" and "us" refer to the operator of the TD999 platform. "You" and "the Player" refer to any individual who visits, registers with or uses any part of the TD999 website or its associated services.

TD999 acts as the data controller for all personal data collected through the platform — meaning we determine the purposes for which your data is collected and the ways in which it is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors operating under our instructions and under binding contractual terms that protect your data.

TD999 collects the minimum personal data necessary to operate your account, process your transactions and comply with legal obligations. Below is a breakdown of the categories of data we collect and examples of what each category includes.

TD999 collects your personal data through the following means:

• Directly from you — when you register an account, complete verification, make a deposit, contact support, participate in a promotion or update your account settings.
• Automatically — when you access or use the TD999 platform, our systems automatically collect technical and device data including your IP address, device type, browser and session activity logs. This happens regardless of whether you are logged in.
• From payment processors — when you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, we receive transaction confirmation data from the payment processor sufficient to verify the transaction and credit your TD999 wallet.
• From identity verification services — if we require you to verify your identity, we may use a third-party verification partner who checks your CNIC details against official records. We receive a verification result (pass/fail) and the details you submitted, but do not receive any data directly from government databases ourselves.
• Through cookies and tracking technologies — see Section 8 for full details of how TD999 uses cookies.

TD999 only processes your personal data where we have a lawful basis for doing so. The primary purposes for which we use your data are as follows:

• Account operation (contractual necessity): To create and maintain your TD999 account, authenticate your identity at login, process your deposits and withdrawals in PKR, apply bonuses and maintain your game and transaction history.
• Legal compliance: To verify that you meet the minimum age requirement (18+), to comply with anti-money laundering obligations, to respond to lawful requests from relevant authorities and to maintain records required by law.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, unauthorised account access, bonus abuse and any breach of our Terms and Conditions.
• Customer support: To handle your support queries, complaints and dispute resolution requests efficiently and accurately, with a record of past interactions for context.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply and enforce any responsible gaming restrictions you have set on your account.
• Platform improvement: To analyse aggregate, anonymised usage data that helps us improve the TD999 platform — faster load times, better mobile experience on Pakistani networks, more relevant game recommendations.
• Marketing (with consent): To send you promotional offers, bonus notifications and platform updates via SMS or email, where you have opted in to receive these. See Section 10 for opt-out options.

TD999 shares your personal data only with the parties listed below, and only to the extent necessary for the stated purpose. We do not sell your data to anyone.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing banks and card networks receive transaction data necessary to execute your deposit or withdrawal. These providers have their own privacy policies and are independently regulated.
• Identity verification providers: Where we are required to verify your identity, we share the information you submit with a verification partner. The partner confirms whether your details match official records and returns a result to us. They do not retain your data beyond this purpose.
• Cloud infrastructure and hosting providers: TD999's platform runs on secure cloud infrastructure. Our hosting provider processes data on our behalf under a strict data processing agreement and has no rights to use your data for their own purposes.
• Anti-fraud and security services: We use industry-standard anti-fraud tools that analyse transaction patterns and device signals to detect suspicious activity. These tools receive limited technical data (IP address, device fingerprint, transaction metadata) but not your full identity or payment details.
• Law enforcement and regulatory authorities: Where required by applicable law or a valid legal order, TD999 may be required to disclose certain player data to relevant authorities. We will always seek to limit such disclosure to the minimum required and, where legally permitted, will notify affected players.
• Professional advisors: Legal counsel, accountants and auditors may access limited account data in the course of providing professional services to TD999. All such parties are bound by confidentiality obligations.

TD999 applies a layered approach to data security. No single measure is relied upon exclusively — multiple overlapping protections ensure that even if one layer is compromised, your data remains protected at other levels.

• Transport security: All data transmitted between your device and TD999 servers is encrypted using TLS 1.2 or higher (256-bit). HTTPS is enforced across the entire platform — there is no unencrypted HTTP access.
• Data at rest: All personal and financial data stored on TD999 servers is encrypted at rest. Database access is restricted to authorised systems and personnel only.
• Access controls: TD999 staff access to player data follows a strict need-to-know principle. Customer support staff can view only the data necessary to handle your enquiry. Financial records are accessible only to authorised finance personnel.
• Password security: Passwords are hashed using industry-standard one-way hashing algorithms. TD999 does not store readable passwords and cannot retrieve your password — only reset it through a verified process.
• Two-factor authentication: TD999 supports and strongly recommends two-factor authentication (2FA) for all accounts. 2FA adds a second layer of identity verification beyond your password.
• Security monitoring: TD999 systems are monitored continuously for unusual activity, intrusion attempts and access anomalies. Security events trigger automated alerts and are reviewed by our security team.
• Incident response: In the event of a data breach that affects your personal information, TD999 will notify affected players within 72 hours of becoming aware of the breach and take immediate steps to contain and remediate it.

TD999 retains your personal data for as long as necessary to fulfil the purposes described in this policy, subject to the following principles:

• Active accounts: Data is retained for the full duration that your account remains active on TD999.
• Closed accounts: Following account closure (voluntary or otherwise), TD999 retains core identity and financial records for a minimum of five years to comply with anti-money laundering obligations and applicable financial record-keeping requirements. This retention period cannot be shortened by a deletion request where a legal obligation requires retention.
• Support communications: Chat transcripts, emails and complaint records are retained for two years from the date of the last interaction, or for the duration of any open dispute.
• Technical logs: Server access logs and security event logs are retained for 90 days.
• Marketing data: If you withdraw consent to marketing communications, your contact details are removed from marketing lists within 10 business days. A suppression record (recording that you have opted out) is retained to prevent accidental re-addition to marketing lists.

After retention periods expire, data is securely deleted or anonymised so it can no longer be linked to you as an individual.

TD999 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. We use cookies for the following purposes:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a game session and security cookies that help protect against cross-site request forgery attacks. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences — such as your preferred game lobby view, language settings and responsible gaming limits — so you don't have to re-enter them each time you visit.
• Analytics cookies: Collect anonymised, aggregate data about how players use the platform — which pages are visited most, where players encounter issues and how navigation flows are used. This data helps us improve TD999 for Pakistani users. No individual player is identified in analytics reports.
• Security and fraud detection cookies: Help identify devices associated with suspicious activity and prevent automated attacks on the platform.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent the TD999 platform from functioning correctly. Disabling functional or analytics cookies will not prevent you from using TD999 but may affect your experience.

As a TD999 player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@td999.click with the subject line "Privacy Request" and your registered account details. We will respond within 30 days.

TD999 will never charge a fee for exercising these rights. We will not penalise, restrict or treat differently any player who exercises their privacy rights.

TD999 may send you promotional communications about bonuses, new games, seasonal offers and platform updates via SMS and/or email. We only do this where you have opted in to receive such communications during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your TD999 account settings under "Notifications."
• Replying STOP to any TD999 SMS message.
• Using the unsubscribe link in any TD999 email.
• Contacting TD999 support directly and requesting removal from all marketing lists.

TD999 is strictly for players aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes a date of birth requirement, and age verification checks are conducted on accounts where there is any doubt about eligibility.

If TD999 discovers that an account has been created by or on behalf of a person under 18, the account will be immediately and permanently closed, all funds will be handled in accordance with applicable law and any personal data associated with the account will be deleted from our systems as promptly as legally permissible.

If you believe a minor has created a TD999 account, please contact us immediately at support@td999.click. We take this extremely seriously and will act on all credible reports without delay.

The TD999 platform does not contain links to external third-party websites in its main navigation or content areas. Our internal link structure uses only td999.click URLs as specified in our site architecture.

Where any third-party service is accessed as part of the TD999 platform experience — such as a payment processor interface — that third party operates under their own privacy policy. TD999 is not responsible for the privacy practices of third-party payment processors or identity verification services, though we contractually require them to handle your data responsibly as a condition of partnering with us.

TD999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements or platform services. The "Last Updated" date at the top of this page is updated each time a change is made.

When a material change is made to this Privacy Policy — one that affects how we collect, use or share your personal data in a way that is less favourable to you — TD999 will provide advance notice through at least one of the following channels:

• An in-platform notification displayed when you next log in.
• An SMS or email to your registered contact details (where marketing consent exists).
• A prominent notice on the TD999 homepage for at least 7 days before the change takes effect.

Continued use of TD999 after a Privacy Policy update takes effect constitutes your acknowledgement of the updated policy. If you disagree with any change, you may request account closure before the update takes effect.

If you have any question, concern or complaint about how TD999 handles your personal data, please get in touch. We take all privacy concerns seriously and aim to resolve them fairly and promptly.

Email: support@td999.click (subject line: "Privacy Request" or "Privacy Complaint")
Live Chat: Available through the TD999 platform — our support team operates on Pakistan Standard Time, 24 hours a day.

When submitting a privacy concern, please include:

• Your registered TD999 username.
• A clear description of your concern or the specific right you wish to exercise.
• Any relevant dates, transaction references or other supporting information.

TD999 will acknowledge all privacy-related contacts within 48 hours and aim to provide a full response or resolution within 30 days. If you are not satisfied with our response to a complaint, you have the right to escalate the matter through applicable dispute resolution channels, which we will communicate to you at the time of escalation.