About This Policy: This Privacy Policy applies to all players who access or use the gh999 platform at gh999.bio, including users from Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan. By creating a gh999 account or using our Services, you acknowledge that you have read and understood this Privacy Policy in full.
1. Who We Are
gh999 is an online casino and sports betting platform operating at gh999.bio, providing gaming and wagering services to adult players (aged 21 and above) in Pakistan. In this Privacy Policy, references to "gh999", "we", "us" and "our" refer to the operator of the gh999 platform and all associated services.
gh999 acts as the data controller in respect of all personal data collected from players via the gh999 website, mobile browser interface, support channels, and any other touchpoint through which we interact with you. This means we are responsible for determining the purposes and means by which your personal data is processed.
If you have any questions about this Privacy Policy or about how gh999 handles your personal data, you can reach our Data Protection team 24/7 via live chat on the gh999 website, or by emailing us at [email protected].
2. Data We Collect
gh999 collects personal data from you through several channels, including your account registration form, identity verification submissions, payment transactions, live chat interactions, and your general use of our platform. The categories of personal data we collect include:
- Identity Data: Your full legal name, date of birth, gender, CNIC (Computerised National Identity Card) number, and any other government-issued identity documents submitted during KYC verification.
- Contact Data: Your email address, Pakistani mobile number, and residential address (street, city, province, postal code).
- Financial Data: Payment method references (such as your JazzCash or EasyPaisa mobile wallet number, HBL or UBL account holder name, or Meezan Bank branch details), transaction reference numbers, deposit and withdrawal amounts, and USDT TRC20 wallet addresses where applicable. gh999 does not store full bank account numbers or complete payment credentials.
- Identity Verification Documents: Scanned copies or photographs of your CNIC, passport, or driving licence submitted for account verification, along with proof of address documents.
- Technical Data: Your IP address, device identifier, browser type and version, operating system, screen resolution, and network provider.
- Usage and Gameplay Data: Your login timestamps, session duration, games played (including Sic Bo, Live Baccarat, Cricket Betting, Slot games, etc.), bet amounts, wagering history, bonus usage, and platform navigation data.
- Communications Data: Records of your live chat conversations with gh999 Support, email correspondence, and any feedback or complaint submissions.
- Marketing Preferences: Your opted-in or opted-out status for promotional emails, SMS notifications, and bonus alerts from gh999.
We only collect what we need. gh999 does not collect data that is unnecessary for the operation of its Services or the fulfilment of its regulatory obligations. Where data is collected for optional purposes such as marketing, we will always ask for your explicit consent first.
3. How We Use Your Data
gh999 uses the personal data we collect for the following purposes:
- Account Creation and Management: To register your gh999 account, authenticate your identity at login, manage your account settings, and maintain accurate account records.
- Age Verification: To confirm that you are 21 years of age or older before granting access to real-money gameplay. This is a strict requirement and a non-negotiable part of our responsible gaming commitment.
- KYC and Identity Verification: To verify your identity in compliance with applicable AML and KYC regulations. Verification is required at registration and again before your first withdrawal.
- Processing Payments: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay and USDT TRC20, and to reconcile your transaction history.
- Fraud Prevention and Security: To detect, investigate and prevent fraudulent activity, money laundering, account takeovers, and other illegal or abusive behaviour on our platform.
- Customer Support: To respond to your support queries, resolve disputes, process complaints, and maintain records of our interactions with you.
- Responsible Gaming: To monitor your gameplay activity for signs of problem gambling behaviour and to enforce any self-exclusion, deposit limits, or cooling-off periods you have set or that we have applied.
- Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and generally improve the gh999 platform for all players in Pakistan.
- Legal Compliance: To comply with applicable laws, regulatory obligations, court orders, or requests from competent authorities.
- Marketing (with consent only): To send you bonus offers, promotional updates, and relevant communications about new gh999 games or features, but only where you have explicitly opted in.
4. Legal Basis for Processing
gh999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:
- Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your gh999 account, process your deposits and withdrawals, and provide you access to our gaming Services.
- Legal Obligation: Processing that is required for us to comply with our legal and regulatory obligations, including AML regulations, KYC requirements, and any lawful requests from regulatory or law enforcement authorities.
- Legitimate Interests: Processing carried out in the pursuit of gh999's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and service improvement, provided such interests do not override your fundamental privacy rights.
- Consent: Processing activities for which gh999 has sought and received your explicit, freely given consent — primarily marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.
5. Sharing Your Data
gh999 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 network processors, solely for the purpose of executing your financial transactions.
- KYC and AML Verification Partners: Licensed identity verification and AML screening service providers who assist gh999 in meeting its regulatory obligations. These partners are contractually bound to process your data only for the specific verification purpose.
- Game Content Providers: Live dealer studios and slot game developers who supply games to the gh999 platform may receive limited technical session data necessary to deliver their game services. They do not receive your full identity or financial data.
- IT and Security Service Providers: Cloud hosting, cybersecurity, and platform monitoring providers who support the technical operation of gh999. All such providers are bound by strict data processing agreements.
- Regulatory and Law Enforcement Authorities: Where gh999 is legally required to disclose your data — for example, in response to a court order, a regulatory audit, or a formal law enforcement request — we will comply with that obligation.
- Fraud Prevention Agencies: Where gh999 has reasonable grounds to suspect fraudulent activity, we may share relevant data with fraud prevention organisations or other online gambling operators for the purpose of preventing further fraud.
gh999 will never share your personal data with third-party advertisers, data brokers, social media platforms, or any organisation whose purpose is commercial profiling. Any third party that processes data on our behalf is subject to a binding data processing agreement that restricts their use of your data to the specified purpose only.
6. Cookies & Tracking Technologies
gh999 uses cookies and similar technologies (such as pixel tags and local storage objects) on its website. Cookies are small text files placed on your device that help us recognise you, remember your preferences, and understand how you use our platform.
We use the following types of cookies on gh999.bio:
- Strictly Necessary Cookies: These cookies are essential for the gh999 platform to function. They manage your login session, maintain your Account security state, and enable core gameplay features. These cookies cannot be disabled.
- Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate the gh999 website — which pages are visited most, how long sessions last, and where technical errors occur. This data helps us improve the platform for all Pakistani players.
- Functional Cookies: These cookies remember your preferences (such as language settings, preferred payment method, and responsible gaming limit settings) so you do not have to re-enter them on each visit.
- Marketing Cookies (consent required): Where you have consented, these cookies help gh999 show you relevant bonus offers and promotions based on your interests and gameplay history. You can withdraw this consent at any time by adjusting your cookie preferences.
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some gh999 features.
7. Data Security
gh999 takes the security of your personal data seriously. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption in Transit: All data transmitted between your device and gh999.bio is encrypted using TLS 1.3 (Transport Layer Security). Look for the padlock icon in your browser address bar when accessing gh999.
- Encryption at Rest: Personal data stored on gh999's servers is encrypted using AES-256 encryption, the same standard used by financial institutions worldwide.
- Access Controls: Access to personal data is restricted to authorised gh999 personnel on a strict need-to-know basis. All staff with data access undergo background checks and receive regular data protection training.
- Intrusion Detection: gh999 operates 24/7 security monitoring, intrusion detection systems, and regular penetration testing to identify and address vulnerabilities before they can be exploited.
- Two-Factor Authentication: gh999 supports and encourages the use of two-factor authentication (2FA) on all player accounts to protect against unauthorised login attempts.
- Incident Response: gh999 maintains a documented data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players within 72 hours of becoming aware of the breach, in accordance with applicable data protection law.
Your role in security: While gh999 takes every reasonable measure to protect your data on our end, you also play an important role. Please use a strong, unique password for your gh999 account, never share your login credentials with anyone, and contact Support immediately via live chat if you suspect your account has been accessed without your authorisation.
8. Data Retention
gh999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our standard retention schedule is as follows:
- Account and Identity Data: Retained for the full duration of your active gh999 account, plus a further five (5) years following account closure, to meet AML and KYC regulatory record-keeping requirements.
- Financial Transaction Data: Retained for the full duration of your active gh999 account, plus a further seven (7) years following account closure, in accordance with financial record-keeping regulations.
- Technical and Usage Data: Retained for a rolling period of thirteen (13) months, after which it is anonymised or deleted.
- Support and Communications Records: Retained for three (3) years following the resolution of the relevant support query or complaint.
- Marketing Preference Data: Retained until you withdraw your consent to marketing communications, plus one (1) year thereafter to maintain our suppression list.
When personal data is no longer required for any lawful purpose, gh999 securely destroys or anonymises it in accordance with our internal data disposal procedures.
9. Your Rights
As a gh999 player, you hold a number of rights in relation to your personal data. gh999 is committed to honouring these rights in a timely and transparent manner. Your rights include:
Right of AccessYou can request a copy of all personal data gh999 holds about you at any time.
Right to RectificationYou can ask us to correct any inaccurate or incomplete data we hold about you.
Right to ErasureYou can request deletion of your personal data where we no longer have a lawful basis to hold it.
Right to RestrictionYou can ask us to restrict processing of your data in certain circumstances while a dispute is resolved.
Right to PortabilityYou can request your data in a structured, machine-readable format for transfer to another provider.
Right to ObjectYou can object to processing of your data for direct marketing or legitimate interest purposes.
Withdraw ConsentWhere processing is based on consent, you can withdraw that consent at any time without penalty.
Right to ComplainYou have the right to lodge a complaint with the relevant data protection supervisory authority.
To exercise any of these rights, please contact gh999 Support via 24/7 live chat or email us at [email protected]. We will respond to all verified data rights requests within thirty (30) calendar days. In complex cases, we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it.
Please note that certain rights — particularly the right to erasure — may be limited or overridden where gh999 is required to retain your data to comply with legal or regulatory obligations such as AML record-keeping requirements.
10. International Data Transfers
gh999 operates internationally and some of the third-party service providers we work with — including cloud hosting providers, KYC verification partners, and live dealer game studios — may process your personal data in jurisdictions outside Pakistan. When your data is transferred internationally, gh999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. Such safeguards include:
- Contractual data processing agreements incorporating standard data protection clauses with all international processors.
- Transfer only to jurisdictions that maintain an adequate level of data protection as assessed by relevant international standards.
- Regular review of our international data processing arrangements to ensure ongoing compliance.
If you would like more information about the specific safeguards applied to any international transfer of your data, please contact our Support team via live chat.
11. Children's Privacy
gh999 is strictly an adults-only platform. Access to real-money gaming Services on gh999 is permitted only to individuals who are 21 years of age or older. gh999 does not knowingly collect, process, or retain personal data from any individual under the age of 21.
If gh999 discovers or has reasonable grounds to believe that personal data belonging to an individual under 21 has been collected — whether through a false age declaration at registration or any other means — the following steps will be taken immediately:
- The account will be permanently suspended.
- All personal data associated with the underage account will be securely deleted, except where retention is required for legal or AML compliance purposes.
- Any real-money balance remaining in the account (excluding bonus funds) will be returned to the registered payment method after verification.
If you are a parent or guardian and you believe your child may have registered a gh999 account without your knowledge, please contact our Support team immediately via live chat or at [email protected] so we can investigate and act promptly.
21+ Strict Policy: gh999 enforces a minimum age of 21 on all accounts. Age verification is conducted at registration and at first withdrawal. Zero exceptions are made. Underage gambling is illegal and gh999 takes its responsibility to prevent it extremely seriously.
12. Marketing Communications
gh999 will only send you promotional emails, SMS messages, or in-platform notifications about bonuses and special offers where you have explicitly opted in to receive such communications during account registration or at a later stage through your account settings.
Our marketing communications may include:
- Welcome bonus and reload bonus announcements.
- PSL cricket season betting promotions and special event odds boosts.
- New game launch notifications for Sic Bo, slots, and live casino titles.
- Loyalty programme updates and VIP player rewards.
- Responsible gaming reminders and account activity summaries.
You may opt out of marketing communications at any time by:
clicking the "Unsubscribe" link included in every promotional email, updating your communication preferences in your gh999 account settings, or contacting our Support team via live chat and requesting to be removed from all marketing lists.
Please allow up to five (5) business days for your opt-out request to take full effect across all communication channels. During this period you may receive one or two final messages as the system processes your preference update. Opting out of marketing communications will never affect your ability to receive essential transactional messages such as deposit confirmations, withdrawal notifications, and security alerts — these are sent regardless of your marketing preference, as they are necessary for the operation of your account.
13. Changes to This Privacy Policy
gh999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our Services. When we make material changes to this Policy, we will:
- Display a prominent notice on the gh999 homepage and login screen for a minimum of seven (7) days before the changes take effect.
- Send an email notification to the registered email address of all active accounts, summarising the key changes.
- Update the "Last Updated" date at the top of this page to reflect the date of the most recent revision.
Your continued use of the gh999 platform after the effective date of any Privacy Policy update constitutes your acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should cease using the gh999 platform and may request account closure by contacting our Support team. We encourage you to review this Privacy Policy periodically to stay informed about how gh999 is protecting your personal information.
14. Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gh999 handles your personal data, please get in touch with our Data Protection team through any of the following channels:
- Live Chat: Available 24/7 directly on the gh999 website — the fastest way to reach our team for any privacy-related query.
- Email: [email protected] — we aim to respond to all privacy-related email enquiries within 24 hours on business days.
If you are not satisfied with our response to your privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing gh999's operations. Details of the applicable supervisory authority are available from our Support team on request.
gh999 is committed to resolving all privacy concerns fairly, transparently and promptly. We value the trust that players across Karachi, Lahore, Islamabad, Faisalabad and the rest of Pakistan place in us, and we take every data protection obligation seriously.