CW999 Privacy Policy – How We Protect Your Data

01 Introduction

This Privacy Policy describes how CW999 ("the Platform", "we", "us") collects, processes, stores and protects the personal data of players ("you") who access or use any part of the cw999 platform, including the main website at cw999.win, the mobile app and all associated services.

CW999 operates as an online gaming and casino platform serving players in Pakistan. All financial transactions on the platform are conducted in PKR and supported through local payment channels including JazzCash, Easypaisa, Raast and bank transfer. The personal data we collect is directly tied to operating these services securely and fairly.

This policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy. Together, these documents form the complete framework that governs your relationship with CW999.

If you have any specific questions about how your data is handled that are not answered here, you can contact our support team — details are in Section 12 of this policy.

02 Data We Collect

CW999 collects personal data in several ways — information you provide directly when registering or using the platform, data generated automatically through your use of services, and in some cases data from third-party verification partners. Here is a breakdown of what we collect:

Information You Provide

• Registration data: Full name, date of birth, gender, email address, phone number and country of residence (Pakistan).
• Identity verification documents: CNIC (Computerised National Identity Card) or equivalent identity document, and proof of address when requested.
• Account preferences: Username, preferred language, notification settings and responsible gaming limits you set yourself.
• Support communications: Messages, chat transcripts and emails exchanged with the CW999 support team.

Data Generated Through Platform Use

• Transaction records: Deposit and withdrawal amounts in PKR, payment method used (JazzCash, Easypaisa, Raast, bank transfer), transaction timestamps and reference numbers.
• Gaming activity: Games played, bet amounts, win/loss records, session durations and betting history.
• Device and technical data: IP address, device type, operating system, browser type, screen resolution and app version.
• Session data: Login timestamps, session lengths, pages visited and features used within the platform.

Data from Third Parties

• Identity verification providers may share confirmation of identity check results with us.
• Payment processors share transaction status updates necessary to credit or process your PKR deposits and withdrawals.
• Fraud detection services may share risk signals related to account or payment activity.

03 How We Use Your Data

Every piece of data CW999 collects has a specific, legitimate purpose. We do not collect data speculatively or hold data we have no use for. The table below summarises the primary purposes for which your data is used:

CW999 does not use your data to make fully automated decisions that significantly affect you without human review. Game outcomes are determined by certified RNG technology and are not based on your personal profile data.

04 Payment Data & PKR Transactions

Because CW999 processes financial transactions in PKR through Pakistani payment channels, payment data receives additional layers of protection on the platform. Here is how we handle it:

• JazzCash and Easypaisa transactions are processed through the respective providers' secure APIs. CW999 stores the transaction reference, amount and status — we do not store your full JazzCash or Easypaisa account credentials.
• Raast and bank transfer details are used solely to process the specific transaction requested. Account numbers shared for withdrawal purposes are stored in encrypted form and are not used for any other purpose.
• Card details — where card payments are accepted — are processed through PCI-compliant payment gateways. CW999 does not store full card numbers on its own servers.
• All payment data is linked to your verified CW999 account and access is restricted to authorised platform staff with a need to process or investigate specific transactions.

05 Cookies & Tracking Technologies

CW999 uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how players use the site and app. Here is what each category does:

• Essential cookies: Required for the platform to function. These handle session authentication, security tokens and language preferences. You cannot opt out of essential cookies while using the platform.
• Functional cookies: Remember your account settings, preferred games and responsible gaming choices across sessions.
• Analytics cookies: Help us understand which pages and features are most used, where players encounter issues and how navigation can be improved. Data is aggregated and does not identify individual players.
• Marketing cookies: Only placed if you have opted in to marketing communications. These help us show relevant promotions — such as PSL match bonuses or cricket betting offers — rather than generic ads.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core platform features, though some personalisation may be reduced.

The CW999 mobile app uses equivalent local storage and session tracking for the same functional purposes as described above.

06 Data Sharing

CW999 does not sell your personal data to any third party. Full stop. Data is shared with external parties only where it is strictly necessary to operate the platform or meet a legal obligation. Specific sharing arrangements include:

• Payment processors (JazzCash, Easypaisa, Raast, bank transfer partners): Share the minimum data required to process your PKR transactions — typically your name, account reference and transaction amount.
• Identity verification providers: Receive your name, date of birth and identity document details to complete the verification check required for account activation and withdrawal processing.
• Game providers: Third-party casino game suppliers receive your player ID and session data to deliver games and track RTP. They do not receive your full name, CNIC or payment details.
• Fraud detection and security services: May receive device identifiers and behavioural data to identify unusual activity patterns that could indicate account compromise or platform abuse.
• Legal and regulatory authorities: In cases where CW999 receives a valid legal request or is required to disclose information to prevent fraud or comply with an investigation, data may be shared under that obligation.

07 Data Retention

CW999 retains personal data only for as long as it is needed for the purpose it was collected. General retention periods are as follows:

• Active account data: Retained for the duration of your account and for a period after closure to allow for transaction disputes, chargebacks or investigation requests.
• Transaction and financial records: Retained for a minimum of five years from the date of transaction. This is standard practice for financial record-keeping and fraud prevention.
• Identity verification documents: Retained for the duration your account is active plus an additional period for compliance purposes. Copies are securely deleted after the retention period ends.
• Support communications: Retained for up to two years from the date of the last communication, unless tied to an ongoing investigation.
• Analytics and session data: Aggregated analytics data is retained indefinitely in anonymised form. Individual session logs are retained for up to 12 months.

When data reaches the end of its retention period, it is securely deleted or anonymised so it can no longer be linked back to you as an individual.

08 Data Security

CW999 applies industry-standard technical and organisational measures to protect your personal data from unauthorised access, accidental loss, disclosure or destruction. Key security measures include:

• SSL/TLS encryption for all data transmitted between your device and the CW999 platform.
• Encrypted storage for sensitive data fields including payment details and identity document references.
• Access controls ensuring that only authorised staff with a specific business need can access player account data.
• Regular security reviews of platform infrastructure, including vulnerability assessments and monitoring for unusual access patterns.
• Two-factor authentication available for your CW999 account to add an extra layer of protection beyond your password.

While CW999 maintains strong security practices, no online platform can guarantee absolute security against all threats. You also play a role in protecting your account — use a strong, unique password for cw999, do not share your login credentials, and contact support immediately if you suspect any unauthorised access to your account.

09 Your Rights

As a CW999 player, you have the following rights over your personal data. To exercise any of these rights, contact our support team through the details in Section 12:

CW999 aims to respond to all data rights requests within 30 days. In some cases — particularly for deletion requests — certain data may need to be retained to meet legal obligations, such as financial record-keeping requirements. We will explain clearly what can and cannot be deleted and why.

If you have opted in to receive marketing communications from CW999 and wish to opt out, you can do so at any time through your account notification settings or by contacting support. Opting out of marketing does not affect transactional communications such as deposit confirmations and security alerts.

10 Children's Privacy

CW999 is strictly an 18+ platform and is not directed at, and does not knowingly collect personal data from, anyone under the age of 18. If you are under 18, you are not permitted to create an account, make a deposit or use any CW999 service.

If CW999 discovers that personal data has been collected from a person under 18, that account will be closed immediately and the data will be deleted as quickly as reasonably possible, subject to any legal obligation to retain records of the closure.

If you are a parent or guardian and believe a minor has registered on CW999 using your details or otherwise, please contact our support team immediately. We take these reports seriously and will act on them promptly.

11 Changes to This Privacy Policy

CW999 may update this Privacy Policy from time to time as the platform evolves, as payment methods change or as data protection practices are refined. When updates are made, the revised policy will be published on this page with the updated "Last Updated" date shown clearly at the top.

For material changes — such as new types of data being collected or new sharing arrangements with third parties — CW999 will notify active players through in-platform messaging or via the registered email address before the changes take effect.

Continued use of the CW999 platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you disagree with any change, you should stop using the platform and may request account closure as described in the Terms and Conditions.

12 Contact & Data Requests

For any privacy-related queries, data access requests, correction requests or deletion requests, you can reach the CW999 team through the following:

• Email: [email protected] (displayed for reference only — plain text, not a clickable link)
• Support email: [email protected]
• In-platform live chat: Available when you are logged into your CW999 account — the fastest way to reach the team for account-specific queries.
• FAQ: Visit the FAQ page for answers to common questions about accounts, data and platform rules.

When submitting a data rights request, please include your registered username and the email address associated with your account so we can locate your records efficiently. CW999 may need to verify your identity before processing sensitive data requests — this is to protect your own account security.

We aim to respond to all privacy queries within 3 business days and to fulfil data access or correction requests within 30 days of receipt.