we99 Privacy
Policy

This Privacy Policy ("Policy") is published by we99 ("we99", "we", "us", "our") and applies to all users of the we99 online gaming and sports betting platform, accessible at we99.cam and any associated subdomains or mobile-optimized versions of the same platform (the "Platform").

This Policy describes how we99 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform and any related communications we have with you. It also sets out the rights you have over your personal data and how you can exercise those rights.

By registering a we99 account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood its contents. This Policy forms part of the we99 Terms and Conditions, which are available at we99.cam/terms-conditions.

we99 collects personal data in three main ways: information you provide directly, information generated by your use of the Platform, and information received from third parties such as payment processors and KYC verification services.

we99 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless directly relevant to a responsible gaming self-exclusion or account restriction request.

we99 uses your personal data for the following purposes, each of which has a corresponding legal basis set out in Section 4:

• Account Management: Creating, maintaining, and managing your we99 player account, including processing deposits and withdrawals.
• Identity and Age Verification: Confirming that you are who you say you are, and that you meet the minimum age requirement of 21 years to use the Platform.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and unauthorized account access.
• Regulatory Compliance: Meeting our obligations under the terms of our gaming authorization, including KYC, AML, and responsible gaming requirements.
• Customer Support: Responding to your queries, resolving disputes, and managing support interactions through our live chat and email channels.
• Platform Improvement: Analysing usage patterns and player behaviour in aggregate to improve the functionality, design, and performance of the we99 Platform.
• Responsible Gaming: Monitoring account activity for signs of problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off requests.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

we99 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you have agreed to — including account creation, payment processing, and game operation.
• Legal Obligation: Processing required to comply with our obligations under applicable gaming authorization requirements, including KYC, AML, and responsible gaming regulations.
• Legitimate Interests: Processing necessary for the legitimate interests of we99, such as fraud detection, platform security, and business analytics, where those interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — primarily for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

we99 does not sell your personal data to third parties. We share personal data only where necessary, and only with the following categories of recipients:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, Raast, and USDT payment partners. These entities receive only the data necessary to process your transactions securely.
• KYC and Identity Verification Providers: Third-party services used to verify your identity and age as part of our onboarding and ongoing compliance obligations.
• Technology and Infrastructure Partners: Cloud hosting providers, cybersecurity partners, and software vendors who support the operation of the Platform under binding data processing agreements.
• Gaming Platform Providers: Game studios and platform providers whose content is integrated into the we99 Casino, where session data must be shared for game functionality.
• Regulatory Authorities and Law Enforcement: We may disclose personal data to regulators, gaming authorization bodies, financial intelligence units, or law enforcement agencies where required by law or by the conditions of our gaming authorization.

All third-party data processors are contractually bound to process your data only as instructed by we99, to maintain appropriate security measures, and not to use your data for their own independent purposes.

The we99 Platform uses cookies and similar technologies (such as local storage and session tokens) to deliver and improve our services. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-used payment method to improve your experience on return visits.
• Analytics Cookies: Collect anonymised or aggregated data about how players navigate and use the Platform, helping we99 identify performance issues and areas for improvement.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent account activity, bot access, and suspicious session patterns.

we99 does not use third-party advertising cookies or cross-site tracking technologies that follow you across unrelated websites. You can configure your browser to block or delete cookies, but doing so may impair the functionality of the we99 Platform.

we99 retains your personal data for as long as your account is active and for a period thereafter as required by applicable compliance obligations. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure.
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in line with AML compliance requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the business relationship, whichever is later.
• Support Communications: Retained for a period of three (3) years following the resolution of the relevant support interaction.
• Marketing Opt-In Records: Retained for the duration of your marketing consent and for one (1) year following withdrawal of consent, as evidence of the consent record.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

we99 implements a range of technical and organisational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the we99 Platform.
• AES-256 encryption for sensitive data stored at rest on our servers.
• Bcrypt hashing of all account passwords — plain-text passwords are never stored or transmitted.
• Two-factor authentication (2FA) available to all registered players.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and third-party security audits of our infrastructure and codebase.
• 24/7 infrastructure monitoring with automated alerts for anomalous access patterns.

Despite these measures, no digital platform can guarantee absolute security. If you suspect unauthorized access to your we99 account, contact support immediately to initiate an account security review.

As a registered we99 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with your registered mobile number and a description of your request:

• Right of Access: You may request a copy of all personal data we99 holds about you. We will provide this within a reasonable timeframe following identity verification.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your we99 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected and where no overriding legal retention obligation applies. Note that AML and gaming compliance requirements may prevent full erasure of certain records.
• Right to Restrict Processing: You may request that we99 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of data we hold.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where your data is used for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the legality of prior processing.

The we99 Platform is strictly for adults aged 21 years and above. we99 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. If you are under 21, you must not register an account, deposit funds, or place any bets on the Platform.

If we99 becomes aware that personal data has been collected from a user under the age of 21, the affected account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned via the original payment method. Winnings generated on an account held by an underage individual will be forfeited.

If you are a parent or guardian and believe that a minor under your care has registered on the we99 Platform, please contact [email protected] immediately so that we can investigate and take appropriate action.

we99 may send you promotional offers, bonus notifications, game launch announcements, and other marketing communications by SMS, push notification, or email. We will only send you marketing communications where you have provided your consent to do so during registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences within your we99 account settings.
• Contacting we99 support and requesting removal from our marketing list.
• Following the unsubscribe instructions included in any marketing message you receive from we99.

Opting out of marketing communications does not affect your ability to use the Platform or receive transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages. These operational communications are sent regardless of your marketing preferences.

As an internationally operated platform, some of the personal data we collect may be transferred to, stored in, or processed in countries outside Pakistan. This may occur in connection with our cloud infrastructure, KYC verification services, or game platform providers whose servers are located in other jurisdictions.

Where personal data is transferred outside Pakistan, we99 ensures that appropriate safeguards are in place to protect your information. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that provide an adequate level of data protection under internationally recognized standards.

By using the we99 Platform, you acknowledge and consent to the transfer of your personal data to servers and service providers located outside Pakistan where necessary for the operation of our services.

we99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, platform functionality, or regulatory requirements. When material changes are made, we will notify registered players by displaying a prominent notice on the Platform and, where appropriate, by direct communication to your registered mobile number or email address.

The effective date and "Last Reviewed" date shown at the top of this page will be updated each time this Policy is revised. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

If you do not agree with any changes to this Policy, you should cease using the Platform and contact support to close your account and request deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we99 handles your personal data, please contact our support team. We are available 24/7 via live chat on the Platform and by email.

For data protection enquiries, please include "Privacy Request" in the subject line of your message, along with your registered mobile number, so that your query can be directed to the appropriate team promptly.

We will acknowledge all privacy-related enquiries within 48 hours and aim to provide a substantive response within ten (10) business days. For complex data subject access requests, we may require up to 30 days and will notify you if this is the case.