LEGAL REFERENCE

How we protect your privacy on ph999

Your account information, payment details and gaming activity remain private and secure. We've built our privacy framework around what matters most: keeping your data encrypted, your withdrawals verified...

Encrypted account securityJazzCash, Easypaisa, SadaPay and Raast data protectionYour withdrawal verification process

Explore the lobby Read FAQ

What we collect and why

When you open an account with ph999, we collect your name, email address, phone number and payment details to process deposits and withdrawals through JazzCash, Easypaisa, SadaPay and Raast. We also track your gaming activity, account balance changes and session logs to prevent fraud and verify your identity during withdrawals. This information is stored on secure servers and shared only with payment

partners and regulatory authorities where local law permits. You control your account deletion, data export and communication preferences through your account settings at any time.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

PRIVACY QUESTIONS

How to reach our privacy team

SECURITY STANDARDS

Trust signals behind our privacy

TLS encryption

All data between your device and ph999 servers is encrypted using TLS 1.2 protocol, ensuring your login credentials and payment details remain unreadable to third parties.

PCI-DSS compliance

We comply with Payment Card Industry Data Security Standards for handling card and payment data across JazzCash, Easypaisa, SadaPay and Raast transactions.

Account verification

Before your first withdrawal, we verify your identity using phone, email and payment method confirmation to prevent account takeover and fraud.

Session timeout

Your account automatically logs out after 30 minutes of inactivity to protect against unauthorized access on shared or public devices.

Two-factor authentication

Enable SMS or email verification for extra security when logging in from new devices or when withdrawing funds above certain amounts.

Annual privacy audit

We review our data handling practices annually with third-party auditors to ensure compliance with Pakistan data protection frameworks.

How our privacy compares across platforms

Data retention

We keep your account data for seven years after closure, as required for financial record-keeping. Gaming logs are archived after two years.

Third-party sharing

We never sell your personal data to marketers. We share payment information only with our processor partners and legal authorities when required.

Cookie usage

We use cookies to remember your language preference, keep you logged in and track gameplay for fraud prevention—not for external advertising.

International transfers

Your data may be processed in data centres outside Pakistan if hosted on regional cloud infrastructure, but remains subject to our encryption standards.

Children's data

ph999 is not intended for users under 18 years old. We do not knowingly collect data from children and will delete accounts found to violate this policy.

Privacy law updates

When Pakistan data protection laws change, we update this policy within 30 days and notify you via email if your rights are materially affected.

Right to be forgotten

You can request full account deletion through [email protected]. We anonymise your gaming data within 90 days while retaining payment records for compliance.

What defines our privacy approach

Password strength

Your ph999 password is hashed using bcrypt with salting, so even our team cannot see your plain-text password if our systems are compromised.

Withdrawal holds

First-time withdrawals are held for 24 hours while we verify your payment method and account age to prevent money-laundering and fraud.

Login activity log

View all logins to your account with timestamps, device types and IP addresses. Report suspicious activity immediately to our security team.

Payment method linking

You can link JazzCash, Easypaisa, SadaPay and Raast accounts only once per identifier. Transfers between accounts require 48-hour cooling-off periods.

Fraud alerts

We monitor for unusual withdrawals or logins and may contact you via SMS or email to confirm whether activity is legitimate before processing.

Data export format

Request a full export of your personal data in machine-readable CSV or JSON format. We deliver it within 14 days to your registered email.

Privacy questions answered

No. We never store or see your payment app passwords or PIN codes. We receive only a confirmation token after you approve a deposit or withdrawal through the official payment app on your device. Payment details are tokenized and encrypted.

Your profile, username and gaming history are anonymised within 90 days. Payment records and identity documents are retained for seven years to comply with financial regulations. You cannot recover a deleted account after 30 days.

We retain identity proofs (CNIC, utility bills) for three years after your last transaction, then delete them securely. You can request deletion earlier through [email protected] if you no longer play with us.

No. Your ph999 account data is not shared with third-party platforms. We share only with payment processors, fraud detection services and legal authorities acting under proper legal orders.

Your full name (matching your payment method), phone number, email address and a photo of your CNIC or valid ID. This is required by Pakistan's anti-money-laundering regulations for all transactions above PKR 50,000.

Yes. Every marketing email contains an unsubscribe link, or manage your preferences in Account Settings under Communications. We respect opt-outs and will not contact you after 48 hours of your request.

Enable two-factor authentication in Security Settings. Even if someone accesses your device, they cannot log in or withdraw funds without your email confirmation or SMS code sent to your registered number.