NC999 Privacy Policy —
How We Protect Your Data

NC999 is an online entertainment platform operating at nc999.win. When this Privacy Policy refers to "NC999", "we", "us" or "our", it means the entity responsible for operating the NC999 platform and managing the personal data of registered players.

NC999 is the data controller for the personal information you provide when registering an account, making deposits, playing games or contacting support. This policy explains how that responsibility is carried out and what your rights are in relation to the data we hold.

If you have any questions about this policy or how your data is handled, you can reach us at the contact details provided in Section 12 of this document.

NC999 collects personal data through several touchpoints across the platform. The categories of data we collect and the situations in which they are gathered are summarised below:

NC999 uses the personal data it collects for specific, defined purposes. We do not use your data in ways that go beyond what is described here without informing you first.

• Account management: To create, maintain and manage your NC999 account, including login authentication and session management.
• Transaction processing: To process PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets.
• Identity verification (KYC): To verify your age and identity as required before processing withdrawals or where legally necessary.
• Fraud prevention: To detect, investigate and prevent fraudulent activity, money laundering and abuse of bonuses or platform rules.
• Customer support: To respond to queries, resolve disputes and improve the quality of support interactions.
• Platform improvement: To analyse how the platform is used so we can improve performance, fix bugs and develop new features.
• Personalisation: To show relevant promotions, game recommendations and content based on your activity — only where you have not opted out.
• Responsible gaming: To monitor usage patterns and identify accounts that may benefit from responsible gaming interventions or self-exclusion tools.
• Marketing communications: To send promotional emails, bonus notifications and platform updates to players who have opted in to receive them.

NC999 processes personal data on the following legal grounds, depending on the purpose:

• Contractual necessity: Processing required to fulfil the contract between NC999 and you as a registered player — for example, processing deposits and withdrawals, managing your account and delivering games.
• Legitimate interests: Processing that NC999 has a genuine operational reason to carry out, such as fraud detection, security monitoring and platform analytics, provided these interests are balanced against your privacy rights.
• Legal obligation: Processing required to comply with applicable laws and regulations, including financial crime prevention and identity verification requirements.
• Consent: Processing based on your explicit consent — for example, sending marketing emails or promotional notifications. You may withdraw consent at any time through your account settings.

NC999 does not sell, rent or trade your personal information. We share data only where it is necessary to operate the platform, comply with legal requirements or protect the interests of our players. The categories of third parties who may receive your data are listed below:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card networks receive transaction data strictly to process your deposits and withdrawals in PKR.
• Identity verification providers: KYC service providers may receive identity documents and personal details where verification is required before a withdrawal or account action is processed.
• Game providers: Third-party casino, slots and live dealer providers receive a player identifier and session token to deliver gameplay. They do not receive your full personal profile.
• Fraud and security services: Automated fraud detection tools may process technical and usage data to identify suspicious activity on the platform.
• IT and hosting providers: Infrastructure partners who store and process data on NC999's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by law or in response to a valid legal request, NC999 may share data with relevant authorities.

NC999 uses cookies and similar tracking technologies to operate the platform, remember your preferences and analyse how the site is used. A cookie is a small text file placed on your device when you visit a website. The types of cookies we use are described below:

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the NC999 platform, including the ability to log in and play games.

NC999 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. The general retention periods we apply are as follows:

• Active account data: Retained for the full duration your account is active plus a minimum of five years after account closure, for legal and compliance purposes.
• Transaction records: Financial transaction data, including PKR deposits and withdrawals, is retained for a minimum of seven years in line with standard financial record-keeping requirements.
• Identity verification documents: KYC documents are retained for the period required by applicable anti-money laundering obligations, typically five to seven years after the end of the business relationship.
• Support communications: Customer support chat and email records are retained for up to three years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or opt out, after which marketing communications will cease and preference data will be deleted within 30 days.

When the retention period for any category of data expires, NC999 securely deletes or anonymises it so that it can no longer be linked to you as an individual.

NC999 takes data security seriously and maintains a range of technical and organisational measures to protect your personal information from unauthorised access, loss, alteration or disclosure.

• All data transmitted between your device and NC999 servers is encrypted using TLS (Transport Layer Security).
• Sensitive data at rest — including account credentials and financial records — is stored using strong encryption standards.
• Access to personal data within NC999 is restricted on a need-to-know basis with role-based access controls.
• Regular security audits and vulnerability assessments are conducted to identify and address potential weaknesses.
• In the event of a data breach that poses a risk to your rights, NC999 will notify affected players promptly and take immediate steps to contain and remediate the incident.

As a registered NC999 player you have the following rights in relation to your personal data. To exercise any of these rights, contact NC999 support using the details in Section 12:

• Right of access: You can request a copy of the personal data NC999 holds about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: You can request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
• Right to restrict processing: You can ask NC999 to limit how your data is used in certain circumstances — for example while a dispute is being investigated.
• Right to data portability: You can request a copy of your data in a structured, commonly used format where the processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on your consent — such as marketing emails — you can withdraw that consent at any time through your account settings or by contacting support.

NC999 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. All registration forms require users to confirm they are 18 or older, and age verification checks are carried out where required.

If NC999 becomes aware that personal data has been collected from a minor, that account will be closed immediately, the data will be deleted, and any funds held will be dealt with in accordance with applicable rules. If you believe a minor has registered on the platform, please contact support immediately so the matter can be investigated.

NC999 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, or to comply with updated legal requirements. When material changes are made, we will notify registered players via email or through an in-platform notification.

The "Last updated" date shown at the top of this page will be revised whenever changes are made. We recommend checking this page periodically so you remain informed about how your data is being handled. Continued use of the NC999 platform after any update constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how your personal information is being handled, please get in touch with the NC999 support team. We are available around the clock through live chat on the platform.