Personal data
This policy covers details that identify you, relate to your account or can be linked with your activity. It explains collection, use, storage, access and sharing in practical terms.
This Privacy Policy explains how 999pak collects, uses, stores and protects personal details connected with your account in Pakistan. We describe the records created when you open an...
We collect details you provide when creating or updating an account, including your name, contact details, date of birth where required, preferred language and verification records. We also receive technical data such as device type, browser details, IP address, session events and security signals. Account activity may include selected lobby areas, transaction requests, support messages and withdrawal status. We use these records
to provide account access, check unusual activity, maintain service security, answer requests, meet legal duties and resolve disputes. Payment references from JazzCash, Easypaisa, SadaPay, Raast or NayaPay may be retained to match an authorised transaction, but we do not ask for unrelated credentials. We share data only with service providers, professional advisers, authorities or business partners when necessary for these purposes and
subject to appropriate controls. Retention depends on legal, security and operational needs. Access may be limited in supported regions or where local law permits.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Our support routes are available for privacy questions, access requests, correction requests and concerns about how your account data is handled. When you contact us, we may ask for account details needed to confirm your identity before discussing records. This protects your account while keeping the request process practical for people using 999pak in Pakistan.
Use the signed-in support chat for a privacy question connected with your account. We can explain a data field, clarify a retention point or direct your request to the appropriate internal team.
Send a written request through our listed contact channel when you need access, correction or deletion to be considered. Include enough account detail for us to locate the correct record safely.
For sensitive requests, we may ask for reasonable proof that you control the account. We avoid disclosing personal records through an unverified message or to a person without proper authority.
This policy reflects the account events our service needs to handle in practice: account creation, sign-in protection, transaction matching, withdrawal checks and support conversations. We separate necessary records from optional preferences where...
We use sign-in controls, session monitoring and access restrictions to reduce unauthorised use. Security events may be retained so we can investigate suspicious access, protect account records and respond to a genuine concern.
Where identity checks apply, submitted records are used for account protection, legal duties and transaction handling. Access is limited to personnel or providers who need those records for an authorised purpose.
JazzCash, Easypaisa, SadaPay, Raast and NayaPay references can help us match an account request with a payment event. We retain only the details needed for reconciliation, security and lawful records.
Device and browser signals help us recognise unusual sign-ins, reduce automated misuse and keep sessions stable. They may include operating system, browser type, IP address and time of access.
Messages sent to support may be kept so we can follow an issue, prevent repeated identity checks and maintain an accurate response trail. Access remains limited to service-related purposes.
We maintain this page as the reference for 999pak privacy practices. If our handling changes materially, we may update the wording, display a notice or request a fresh acknowledgement.
Privacy rules sit alongside account terms and service notices, but this page has one focused purpose: explaining personal data handling. It does not replace a request process, alter a transaction record or...
This policy covers details that identify you, relate to your account or can be linked with your activity. It explains collection, use, storage, access and sharing in practical terms.
Account terms address access conditions and conduct, while this policy addresses the personal records created when those conditions are applied. Read both when a question involves account access and data handling.
A payment reference may appear in privacy records because it helps match a transaction. This page explains handling of that reference, not the separate rules of JazzCash, Easypaisa or another named rail.
A privacy request asks about your personal data, such as access or correction. A general service question follows the normal support route and may not require the same identity checks.
Authorities or authorised representatives may request records through a lawful process. We assess such requests before disclosure and provide only data relevant to the stated legal purpose.
When our data practices change, we may amend this page and provide an account notice where appropriate. The newest published wording applies from its stated effective date.
Data handling can depend on your location and applicable law. If access is limited in a supported region, we will apply the relevant regional requirement to the account process.
We designed this privacy page so you can find the practical parts of data handling without searching through unrelated service copy. The layout separates purpose, contact...
Each policy area identifies why a category of personal data may be collected or retained. This helps you distinguish account security, transaction matching, support handling and legal record needs.
The wording recognises Pakistani account journeys and names relevant local rails without asking you to share unnecessary payment credentials. Regional limits are described with supported-region wording.
The contact section shows where to raise an access, correction or deletion request. It also explains why identity confirmation may be needed before personal records are discussed.
Account controls, device signals and access restrictions are described plainly, giving you a useful picture of how we work to reduce unauthorised handling of personal records.
We explain that retention depends on legal, security and operational needs rather than presenting one fixed period for every record. Different data categories can therefore follow different schedules.
The final section answers common privacy questions in direct language, including data access, correction, sharing, transaction references, device signals and policy updates.