🔒 Privacy Policy — co999

1. Who We Are

This Privacy Policy is issued by co999 ("co999", "we", "us", "our"), the operator of the online betting and casino platform accessible at co999.app. co999 acts as the data controller in respect of the personal data of all Players and visitors who interact with the co999 platform.

co999 operates as an English-language platform serving Pakistani players across the country, including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and other cities. This Privacy Policy applies to all personal data processed in connection with your use of the co999 platform, regardless of how you access it — through a desktop browser, mobile browser, or any other means.

2. Data We Collect

co999 collects the following categories of personal data in the course of operating the platform:

3. How We Collect Your Data

co999 collects personal data through the following channels:

• Direct submission: Information you provide when registering a co999 account, completing KYC, making deposits or withdrawals, or contacting support;
• Automated collection: Technical data collected automatically when you visit co999.app, including IP address, browser type, device information, and session activity via cookies and server logs;
• Third-party verification services: Identity and age verification data obtained through KYC service providers where applicable;
• Payment processors: Transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah in connection with your deposits and withdrawals.

4. Legal Basis for Processing

co999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between co999 and you as a registered Player — including account management, bet settlement, and payment processing;
• Legal obligation: Processing required to comply with applicable KYC, AML, and regulatory requirements imposed on co999 as a licensed gaming operator;
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gaming compliance, and platform analytics, where such interests do not override your privacy rights;
• Consent: Where co999 relies on your consent for specific processing activities (such as promotional communications), you have the right to withdraw that consent at any time.

5. How We Use Your Data

co999 uses the personal data it holds to:

• Create, verify, and manage your co999 account;
• Process deposits and withdrawals via JazzCash, Easypaisa, and other supported Pakistani payment methods;
• Verify your identity and age in compliance with KYC requirements;
• Detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• Monitor your betting and gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling;
• Provide customer support through co999's live chat and email channels;
• Send you transactional notifications regarding your account, deposits, withdrawals, and bets;
• Send you promotional communications about co999 offers, where you have provided consent;
• Comply with applicable legal and regulatory obligations;
• Analyse platform usage patterns to improve the co999 user experience for Pakistani players.

6. Data Sharing & Disclosure

co999 does not sell your personal data. co999 may share your data with the following categories of recipients in the following circumstances:

6.1 Service Providers

co999 works with third-party service providers who process data on co999's behalf, including KYC verification providers, payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), IT infrastructure providers, and analytics platforms. These providers are contractually required to process data only as instructed by co999 and to maintain appropriate security measures.

6.2 Regulatory & Legal Disclosure

co999 may disclose your personal data to regulators, law enforcement agencies, or courts where required by applicable law or where disclosure is necessary to prevent fraud, protect co999's legal rights, or comply with a binding legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of co999's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

7. Cookies & Tracking

co999 uses cookies and similar tracking technologies to enable essential platform functionality and improve the user experience. The categories of cookies used on co999 include:

• Essential cookies: Required for the platform to function — including session authentication, login state management, and security tokens. These cannot be disabled without impairing your ability to use co999.
• Analytics cookies: Used to collect aggregated, anonymised data about how Pakistani players interact with co999.app — page views, session duration, navigation patterns. This data is used to improve the platform.
• Preference cookies: Store your platform preferences such as language and display settings between sessions.

co999 does not deploy third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling essential cookies will affect platform functionality.

8. Data Retention

co999 retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Specific retention periods include:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to comply with AML and regulatory record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years in compliance with applicable financial regulations;
• Support communications: Retained for up to three (3) years to facilitate dispute resolution and quality assurance;
• Technical / log data: Typically retained for up to twelve (12) months for security and fraud prevention purposes.

After the applicable retention period expires, co999 will securely delete or anonymise your personal data.

9. Data Security

co999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and co999's servers;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the co999 platform;
• Secure, monitored server infrastructure with anomaly detection capabilities.

While co999 takes all reasonable precautions to secure your data, no internet transmission is entirely risk-free. You are responsible for keeping your co999 account credentials confidential and for notifying co999 support immediately if you suspect any unauthorised access to your account.

10. Your Rights

As a co999 Player, you have the following rights in respect of your personal data, subject to applicable law:

• Right of access: Request a copy of the personal data co999 holds about you;
• Right to rectification: Request correction of any inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where co999 no longer has a legal basis or legitimate need to retain it;
• Right to restriction: Request that co999 limit its processing of your data in certain circumstances;
• Right to portability: Request a structured, machine-readable copy of personal data you have provided to co999;
• Right to object: Object to co999's processing of your data based on legitimate interests;
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact co999 via live chat or by emailing [email protected] (not a clickable link). co999 will respond to verified requests within 30 days. Note that certain rights are subject to legal limitations — for example, co999 cannot delete data it is legally required to retain for AML compliance purposes.

11. Children's Privacy

co999 is strictly an adult platform restricted to persons aged 18 and above. co999 does not knowingly collect, process, or store personal data relating to individuals under the age of 18. If co999 discovers that personal data of an underage individual has been collected, the relevant account will be immediately closed, all associated data will be deleted, and any deposits will be returned through appropriate channels. If you believe an underage person has registered on co999, please contact support immediately.

12. International Data Transfers

co999's platform may involve the processing of your personal data in jurisdictions outside Pakistan, including where co999's servers, KYC providers, or payment processing partners are located. Where such transfers occur, co999 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Privacy Policy. This may include contractual data protection clauses with service providers and adherence to applicable data transfer frameworks.

13. Policy Amendments

co999 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform operations. When material changes are made, co999 will notify registered Players via email or a platform notification prior to the changes taking effect. The updated Privacy Policy will be published on this page with a revised "Last Updated" date. Continued use of the co999 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact & Complaints

For any questions, requests, or complaints relating to this Privacy Policy or co999's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on co999.app — average response time under 3 minutes.
• Email: [email protected] (plain text — not a clickable link).

co999 will acknowledge privacy-related enquiries within 48 hours and aims to resolve them within 30 days. If you are unsatisfied with co999's response to a privacy complaint, you may have the right to escalate your complaint to a relevant data protection authority in your jurisdiction.