gk999 Privacy Policy

Who We Are

gk999 ("we," "us," "our," or "the Operator") operates the online gaming and sports betting platform available at gk999.today. The Operator holds an international gaming licence under which gk999 is authorised to offer real-money casino games, live dealer tables, sports betting, and associated services to eligible players, including those located in Pakistan.

For the purposes of this Privacy Policy, the Operator is the data controller responsible for determining how and why your personal data is processed in connection with your use of the gk999 platform. Questions about this Policy or the Operator's identity may be directed to [email protected].

Scope of This Policy

This Privacy Policy applies to all personal data processed by gk999 in connection with:

• Registration and maintenance of a gk999 player account;
• Use of any game, betting market, or feature available at gk999.today;
• Deposits, withdrawals, and payment processing via JazzCash, EasyPaisa, bank transfer, or any other accepted payment method;
• Identity verification (KYC) conducted on gk999 accounts;
• Customer support communications through live chat or email;
• Participation in gk999 bonus programmes, promotions, or tournaments;
• Browsing or visiting gk999.today without registering an account.

This Policy does not apply to websites, apps, or services operated by third parties that may be referenced from gk999.today. gk999 is not responsible for the privacy practices of any third-party operator.

Personal Data We Collect

The categories of personal information collected by gk999 depend on the nature of your interaction with the platform. The following table sets out the primary data categories:

How We Collect Your Data

gk999 collects personal data through the following channels:

• Direct submission — information you provide when registering a gk999 account, completing KYC, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection — information collected automatically when you access gk999.today, including IP address, browser characteristics, device identifiers, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 7.
• Payment processors — gk999's payment partners (including JazzCash and EasyPaisa integration providers) share transaction confirmation data with gk999 when you complete a deposit or withdrawal. gk999 does not receive or store full payment credentials; only transaction reference data and amounts are shared.
• KYC verification providers — where gk999 uses third-party identity verification technology to process CNIC documents, that provider shares the verification outcome (verified / not verified) and relevant extracted identity fields with gk999.
• Fraud and risk management tools — gk999's fraud detection systems generate risk scores and flag data points associated with suspicious account activity. This is automated processing used for security purposes.

Legal Basis for Processing

gk999 processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contract performance — processing necessary to provide you with the gk999 services you have registered for, including account management, game provision, payment processing, and customer support.
• Legal obligation — processing required to comply with gk999's regulatory obligations under its gaming licence, including anti-money laundering (AML) requirements, age verification, responsible gaming obligations, and cooperation with regulatory authorities.
• Legitimate interests — processing carried out for gk999's legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics, where those interests are not overridden by your data protection rights.
• Consent — where gk999 sends you direct marketing communications or uses non-essential cookies, this is done on the basis of your consent, which you may withdraw at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

How gk999 Uses Your Personal Data

The personal data collected by gk999 is used for the following purposes:

• Account creation and management — to register your gk999 account, authenticate your identity on login, maintain your account preferences, and provide access to all platform features.
• Payment processing — to process PKR deposits via JazzCash, EasyPaisa, and bank transfer; to verify the source of funds where required; and to execute withdrawal requests to your registered payment method.
• KYC and age verification — to confirm that you are at least 21 years of age and that your identity matches the registration details provided. gk999 is legally required to conduct this verification under its gaming licence.
• Responsible gaming — to monitor gaming activity for signs of problem gambling behaviour, to enforce self-imposed limits and exclusions, and to comply with responsible gaming obligations imposed by the Operator's licensing authority.
• Customer support — to respond to your queries, resolve disputes, investigate complaints, and maintain a record of support interactions.
• Fraud and security — to detect and prevent fraudulent activity, money laundering, bonus abuse, unauthorised account access, and other prohibited conduct described in the gk999 Terms and Conditions.
• Legal and regulatory compliance — to fulfil reporting obligations to licensing authorities, respond to lawful requests from law enforcement agencies, and maintain records as required by applicable regulations.
• Marketing communications — where you have opted in, to send you information about gk999 promotions, bonuses, new games, and platform updates. You may opt out of marketing communications at any time through your account settings.
• Platform improvement — to analyse aggregated, de-identified usage data to understand how players use gk999 and to improve the platform's features, performance, and user experience.

Cookies & Tracking Technologies

gk999.today uses cookies and similar tracking technologies to provide core platform functionality, to analyse how the site is used, and to support security measures. The following cookie categories are used:

• Strictly necessary cookies — required for the gk999 platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies — used to remember your preferences, such as language settings, game lobby view preferences, and responsible gaming configurations.
• Analytics cookies — used to collect anonymised data about how players navigate gk999.today, which pages are visited most frequently, and where users encounter difficulties. This data helps gk999 improve the platform.
• Security cookies — used to detect and prevent fraudulent or abusive activity, including session hijacking attempts and automated bot traffic.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use gk999. On your first visit to gk999.today, you will be presented with a cookie consent notice where applicable.

Data Sharing & Third-Party Disclosure

gk999 does not sell your personal data to any third party. Your data may be shared in the following limited circumstances:

• Payment processors — JazzCash, EasyPaisa, and banking partners receive the minimum data necessary to process your deposit or withdrawal instruction. These providers are contractually bound to handle your data securely and only for the specified transaction purpose.
• KYC and identity verification providers — gk999 may use a regulated third-party KYC service to verify your identity documents. This provider receives your identity data solely for verification purposes and is contractually prohibited from using it for any other purpose.
• Fraud and risk management services — gk999 may share Technical Data and account activity data with fraud prevention platforms to detect and block fraudulent activity. These providers act under strict data processing agreements.
• Regulatory and law enforcement authorities — gk999 may disclose your personal data to regulatory bodies, law enforcement agencies, or courts where required by law, where disclosure is necessary to comply with a legal obligation, or where gk999 is required to do so by its gaming licence.
• Game providers — where game providers require Technical Data (such as session identifiers) to deliver their games within the gk999 platform, limited data is shared for that specific purpose only.
• Group entities and successors — gk999 may share data within its corporate group for administrative and operational purposes. In the event of a merger, acquisition, or sale of the Operator's business, player data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

Data Retention

gk999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following retention principles apply:

• Active accounts — all personal data associated with an active gk999 account is retained for the duration of the account's existence plus a post-closure period as required by the Operator's gaming licence (typically five years after account closure).
• Transaction and financial records — deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of the transaction, in compliance with anti-money laundering regulations applicable under the Operator's gaming licence.
• KYC documents — identity verification documents (including CNIC copies) are retained for the duration of the account plus five years after closure, as required by regulatory KYC record-keeping obligations.
• Support communications — customer support records are retained for three years from the date of the interaction.
• Marketing consent records — records of your marketing consent status and any opt-out instructions are retained for five years to demonstrate compliance with consent obligations.
• Technical and session data — server logs and session data are retained for up to twelve months for security and fraud investigation purposes, after which they are deleted or fully anonymised.

When data is no longer required for any lawful purpose, gk999 deletes or irrecoverably anonymises it in accordance with its internal data deletion procedures.

Your Data Rights

Subject to applicable law and certain regulatory exemptions, you hold the following rights in relation to the personal data gk999 holds about you:

• Right of access — you may request a copy of the personal data gk999 holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to rectification — you may request correction of any personal data that is inaccurate or incomplete. For basic account data (name, contact details), you may update information directly in your gk999 account settings.
• Right to erasure ("right to be forgotten") — you may request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected. Note that gk999 may be required to retain certain data for regulatory compliance purposes even following an erasure request.
• Right to restriction of processing — you may request that gk999 restrict its processing of your personal data in specified circumstances, such as while the accuracy of data is contested or while a complaint is being investigated.
• Right to data portability — where processing is based on consent or contract and is carried out by automated means, you may request that gk999 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes. gk999 will cease marketing-related processing upon receipt of a valid objection.
• Rights related to automated decision-making — gk999 may use automated processing for fraud detection and risk scoring. You have the right not to be subject to a decision based solely on automated processing that produces a significant effect on you, except where such processing is necessary for contract performance or required by law.

To exercise any of these rights, contact gk999 at [email protected]. gk999 will respond to verified rights requests within thirty (30) days. Identity verification will be required before personal data is disclosed or amended in response to any request.

Data Security

gk999 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and gk999's servers;
• AES-256 encryption of sensitive data at rest, including identity documents and payment information;
• Role-based access controls ensuring that gk999 staff can only access player data to the extent required for their specific job functions;
• Regular penetration testing and security audits of the gk999 platform and infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing player data;
• Automated intrusion detection and anomaly monitoring systems operating 24/7;
• Secure data destruction procedures for physical media and digital records no longer required.

Despite these measures, no internet-based platform can guarantee absolute security against all threats. In the event of a data breach that poses a risk to your rights, gk999 will notify affected players and relevant authorities in accordance with applicable regulatory requirements.

Children's Privacy — Strict 21+ Policy

gk999 operates exclusively as an adult entertainment platform. The gk999 platform is strictly prohibited to persons under 21 years of age. gk999 does not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the gk999 account registration and KYC process.

If gk999 becomes aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, that account will be immediately suspended, the data will be deleted as required by applicable law, and any funds held in the account will be handled in accordance with the gk999 Terms and Conditions and applicable regulations.

If you are a parent or guardian and believe that a person under 21 has created a gk999 account, please contact gk999 support immediately at [email protected].

International Data Transfers

As gk999 operates under an international gaming licence and uses globally-distributed technology infrastructure, your personal data may be transferred to and processed in countries outside Pakistan. Such transfers may occur in connection with payment processing, identity verification, cloud hosting, or customer support operations.

Where personal data is transferred internationally, gk999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to the protections described in this Privacy Policy. These safeguards include contractual data protection obligations binding on the recipient entities.

Third-Party Services

The gk999 platform integrates technology from third-party providers to deliver certain features — including game software from licensed game providers, payment gateway technology from JazzCash and EasyPaisa integration partners, and identity verification services. These third parties may process limited categories of your personal data as described in Section 8.

All third-party providers engaged by gk999 are required to enter into data processing agreements that bind them to: process data only for the specified purpose; maintain security standards equivalent to those described in this Policy; and delete or return data once the processing purpose is fulfilled. gk999 conducts due diligence on third-party providers prior to engagement and reviews these arrangements periodically.

Links or references to external resources on gk999.today (if any) do not constitute endorsement of those resources' privacy practices. gk999 is not responsible for the data handling of any third-party website or service that you access independently.

Updates to This Privacy Policy

gk999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, gk999 will:

• Update the "Last Reviewed" date at the top of this document;
• Post a notice on the gk999.today homepage or account dashboard describing the nature of the change; and
• Where the change materially affects your rights, notify you via your registered email address or mobile number with a minimum of seven (7) days' advance notice before the change takes effect.

Continued use of the gk999 platform following the effective date of any policy update constitutes your acceptance of the updated Privacy Policy. If you do not accept the updated terms, you may close your gk999 account as described in the Terms and Conditions.

Contact & Privacy Complaints

For any questions, concerns, or requests relating to this Privacy Policy or gk999's data practices, please contact the gk999 support team:

• Live Chat: Available 24/7 at gk999.today — no login required to start a conversation
• Email: [email protected]
• Response Time: Live chat typically within 3 minutes; email within 24 hours

If you believe that gk999 has failed to handle your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to raise a complaint. gk999 takes all privacy complaints seriously and commits to a fair and timely investigation process. Where your complaint relates to gk999's compliance with its gaming licence obligations, you may also raise a complaint directly with the relevant licensing authority.