Privacy Policy for vr999

vr999 ("vr999", "we", "us" or "our") is committed to protecting the privacy and personal data of all individuals who use the vr999 platform at vr999.cam (the "Platform"). This Privacy Policy (the "Policy") sets out in detail how we collect, use, store, process, share and protect personal data in connection with the Platform and its associated services.

This Policy applies to all users of the Platform ("you" or "the User"), including persons accessing the Platform from Pakistan and other jurisdictions where access is not prohibited. By registering an account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.

vr999 operates under international licensing frameworks and does not hold a local Pakistani data-protection licence or gambling licence. This Policy is designed to reflect internationally recognised data-protection principles. It does not constitute legal advice and should not be relied upon as such.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, CNIC number, financial information and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, vr999 and/or the licensed Operator.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller.
• "Operator" means the entity that holds the applicable international gaming licence under which the Platform operates.
• "KYC" means Know Your Customer — the identity verification process required for certain account activities.
• "AML" means Anti-Money Laundering obligations applicable to the Platform and Operator.
• "Cookies" means small text files placed on your device by the Platform for operational, functional and analytical purposes.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.

vr999 collects personal data through the following means: data you provide directly, data collected automatically through your use of the Platform, and data received from third-party verification and payment partners.

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data or political opinions) unless specifically required for regulatory compliance purposes with appropriate safeguards in place.

vr999 processes personal data only where a lawful basis for doing so exists. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing and service delivery.
• Legal Obligation: Processing required to comply with applicable regulatory obligations, including KYC identity verification, AML monitoring and responsible gambling compliance requirements.
• Legitimate Interests: Processing undertaken for vr999's legitimate business interests, including fraud prevention, Platform security, performance analytics and internal reporting — where these interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as marketing communications and non-essential cookies, where you have given explicit, informed and freely withdrawable consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

vr999 uses your personal data for the following specific purposes:

• Account Registration & Management: To create, maintain and administer your user account on the Platform.
• Identity Verification (KYC): To verify your identity, age and eligibility in compliance with the Operator's regulatory obligations.
• Payment Processing: To process deposits, withdrawals and refunds in PKR through available payment channels. References to familiar Pakistani payment methods (such as Easypaisa, JazzCash, Raast and bank transfers via HBL, UBL, Meezan Bank and Bank Alfalah) are for contextual purposes only. Data shared with payment processors is governed by those processors' own privacy policies.
• Fraud Prevention & AML Compliance: To monitor transactions and account activity for signs of fraudulent, abusive or money-laundering activity, in fulfilment of the Operator's legal obligations.
• Responsible Gambling Monitoring: To identify patterns of play that may indicate gambling harm and to administer responsible gambling tools including limits and self-exclusion.
• Customer Support: To respond to enquiries, process complaints and provide service-related communications.
• Platform Improvement: To analyse usage patterns and improve the functionality, performance and content of the Platform.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders and lawful requests from competent authorities.
• Marketing Communications: Where you have given explicit consent, to send promotional offers, bonus notifications and other marketing materials. You may opt out of marketing communications at any time.

vr999 shares personal data with third parties only to the extent necessary for the purposes described in this Policy and only with parties who are bound by appropriate data-protection obligations. Categories of recipients include:

• The Licensed Operator: The entity holding the international gaming licence under which the Platform operates. The Operator processes data as a data controller in its own right for regulatory and compliance purposes.
• KYC / Identity Verification Partners: Third-party service providers engaged to conduct identity document verification and age checks as required by the Operator's licence conditions.
• Payment Processors: Third-party payment service providers engaged to facilitate deposits and withdrawals. Data shared is limited to that required to process the relevant transaction.
• Technology & Infrastructure Providers: Hosting, cloud infrastructure, content delivery and platform technology providers who process data solely on vr999's instruction.
• Responsible Gambling Service Providers: Organisations operating cross-operator self-exclusion schemes where applicable under the Operator's licence conditions.
• Legal & Regulatory Authorities: Where required by applicable law, court order or lawful request from a competent governmental, judicial or regulatory authority.
• Fraud Prevention & AML Agencies: Specialist third-party services and shared databases used to identify and prevent fraud, money laundering and related financial crimes.

All third-party data processors are engaged under data-processing agreements that require them to implement appropriate technical and organisational security measures and to process personal data only in accordance with vr999's instructions and applicable law.

As an internationally operating Platform, vr999 may transfer personal data to countries outside your own jurisdiction, including the country in which the Operator is licensed. Such transfers are made where necessary for the purposes described in this Policy.

Where personal data is transferred internationally, vr999 takes steps to ensure that an appropriate level of data protection is maintained, including through the use of contractual safeguards with receiving parties. Pakistani users should be aware that data may be processed in jurisdictions that do not have data-protection laws equivalent to those in your country of residence.

vr999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your account relationship with vr999, plus a minimum retention period after account closure as required by the Operator's regulatory obligations (typically five to seven years).
• KYC / Identity Documents: Retained for the period required by AML legislation applicable to the Operator's licence jurisdiction, which typically extends beyond account closure.
• Transaction Records: Retained for accounting and regulatory compliance purposes for the period mandated by applicable financial regulation.
• Responsible Gambling Records: Self-exclusion requests and problem gambling flags may be retained for an extended period to prevent circumvention of exclusion periods.
• Communications Data: Support communications are typically retained for a period of 12 to 36 months following resolution of the relevant interaction.

When personal data is no longer required, it is deleted or anonymised in a manner designed to prevent reconstruction of the original personal data.

vr999 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration and destruction. Measures include, but are not limited to:

• HTTPS/TLS encryption for all data transmitted between your device and Platform servers;
• Encrypted storage of sensitive personal data including identity documents and financial records;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular review of access permissions and security configurations;
• Two-factor authentication options for user accounts;
• Monitoring systems designed to detect and alert on unusual access patterns or potential breaches.

No data transmission over the internet or electronic storage method is 100% secure. While vr999 applies appropriate safeguards, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to affected individuals, vr999 will take appropriate steps to contain the breach and, where required by applicable law, notify affected users and relevant authorities.

vr999 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and analyse usage patterns. The following cookie categories are used:

• Essential Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication, security tokens and load-balancing cookies. These cookies cannot be disabled without impairing Platform functionality.
• Functional Functional Cookies: Used to remember your preferences such as language settings, time-zone display and accessibility options. These improve your experience but are not strictly required.
• Analytics Analytical Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This data helps vr999 identify areas for improvement. Analytical cookies are only set with your consent.

You may manage cookie preferences through your browser settings at any time. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies will impair the functionality of the Platform.

Subject to applicable law and any overriding regulatory obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by vr999:

To exercise any of the above rights, please contact our support team using the details in Section 16. We will acknowledge your request within a reasonable period and respond within the timeframe required by applicable law.

The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the Operator or the applicable licence jurisdiction. vr999 does not knowingly collect personal data from persons below the applicable minimum age.

Age verification is conducted as part of the KYC process. Where vr999 identifies or is made aware that personal data has been collected from a minor, that data will be deleted promptly and the associated account closed. Any funds deposited by a person below the eligible age will be handled in accordance with the Operator's applicable terms and regulatory requirements.

If you are a parent or guardian and believe that a minor has registered on the Platform, please contact our support team immediately at [email protected].

vr999 is designed for Pakistani users and is fully displayed in English with PKR as the native currency display. The following considerations are specifically relevant to Pakistani users:

• No Pakistani Regulatory Endorsement: vr999 does not hold a licence issued by any Pakistani authority, including the PTA, SBP or any provincial gaming or financial regulator. This Policy is not governed by any Pakistani data-protection law, as Pakistan has not yet enacted comprehensive data-protection legislation analogous to internationally recognised frameworks.
• Payment Data: When processing deposits or withdrawals referencing Pakistani payment methods (such as Easypaisa, JazzCash, Raast or bank transfers via HBL, UBL, Meezan Bank or Bank Alfalah), only the data necessary to complete the transaction is shared with the relevant payment processor. vr999 does not claim any partnership with, endorsement from or affiliation with these payment providers.
• Local Law Responsibility: Users in Pakistan are responsible for ensuring their use of the Platform and any associated data processing complies with applicable local laws. This includes the Prevention of Gambling Act, 1977. This Policy does not constitute legal advice.
• Data Location: Personal data relating to Pakistani users may be processed in jurisdictions outside Pakistan, including the jurisdiction in which the Operator holds its gaming licence. As noted in Section 7, vr999 applies appropriate contractual safeguards for international transfers.

Financial data processed through the Platform — including transaction amounts in PKR, payment method references and bank account or e-wallet details used for withdrawals — is handled with heightened security measures commensurate with its sensitivity.

Full payment card or bank account numbers are not stored by vr999 on our own systems. Where applicable, payment data is tokenised or handled directly by the payment processor in a manner that limits vr999's direct access to sensitive financial credentials.

Transaction history data (amounts, timestamps, method references) is retained for the duration required by applicable financial, AML and tax reporting obligations applicable to the Operator's licence jurisdiction.

vr999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, changes in applicable law, or changes to the Platform's features and services. Where amendments are material, we will endeavour to notify registered users via email or through a prominent notice on the Platform with reasonable advance notice.

The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following publication of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and request account closure.

We recommend that you review this Policy periodically to stay informed about how vr999 protects and processes your personal data.

If you have questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact vr999's support team through the following channels:

• Email (plain text — not a clickable link): [email protected]
• Live Chat: Available 24/7 via the Platform, as per operator commitment
• Response Time: Email queries relating to data rights are typically acknowledged within 5 business days and responded to substantively within 30 days
• Support Language: English; Urdu available on request

When submitting a data-related request, please provide sufficient information to allow us to identify your account and the nature of your request. We may need to verify your identity before processing certain types of data requests.