1. Introduction
This Privacy Policy applies to ST999, the online sports betting and casino platform operated at st999.click and directed at users in Pakistan. When we say "ST999", "we", "us" or "our", we mean the operator of this platform. When we say "you" or "your", we mean any person who visits, registers on, or uses any part of the ST999 platform.
ST999 takes the privacy of Pakistani users seriously. We collect only what we need to operate your account safely and deliver a quality betting and gaming experience. We do not sell your information, we do not rent your details to marketing companies, and we do not share your data with anyone who has no legitimate reason to access it.
This policy covers all products and services offered under the ST999 brand, including sports betting, PSL markets, live casino games, jackpot slots, fishing games, and any promotional features associated with these products. It also covers your interactions with our customer support team and any communications you receive from us by email or other channels.
By registering on ST999, you confirm that you have read this Privacy Policy and understand how your data is handled. If you do not agree with any part of this policy, please do not create an account or use the platform.
2. What Data We Collect
ST999 collects personal data through several channels: directly from you during registration and account use, automatically as you interact with the platform, and from trusted third-party verification partners. Here is a clear breakdown of what we collect and why.
Information You Provide Directly
- Registration data: Your full name, Pakistani mobile number, email address, date of birth, and chosen password.
- Identity verification: A copy of your CNIC (Computerised National Identity Card) or passport, requested when you make your first withdrawal or when our compliance process requires it.
- Payment information: Your Easypaisa or JazzCash mobile wallet number, bank account details for IBFT transfers, or card details for Visa/Mastercard payments. Full card numbers are never stored on ST999 servers.
- Communications: Any messages you send to our support team via live chat or email, including their content and timestamps.
- Preferences: Responsible gaming settings you configure, such as deposit limits or self-exclusion requests.
Information Collected Automatically
- Device data: Device type, operating system, browser type and version, screen resolution.
- Usage data: Pages visited, bets placed, games played, time spent on the platform, features interacted with.
- Network data: IP address, approximate geographic location (city level), mobile network operator.
- Session data: Login timestamps, session duration, account actions during each session.
- Cookies and tracking: See Section 7 for full details on cookie usage.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Name, CNIC, date of birth | KYC verification, age check |
| Contact | Mobile number, email | Account access, notifications |
| Financial | Easypaisa/JazzCash number | PKR deposits & withdrawals |
| Technical | IP address, device type | Security, fraud prevention |
| Behavioural | Bets placed, games played | Service improvement, responsible gaming |
| Communications | Support chat transcripts | Complaint resolution, quality assurance |
3. How We Use Your Data
ST999 uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a Pakistani user. We do not use your data for purposes that conflict with the reason it was collected.
- Account creation and management: Your registration data is used to create and maintain your ST999 account, verify your identity, and link your account to your payment methods.
- Processing bets and transactions: Your financial data and betting history are used to process your wagers, calculate payouts, and credit winnings to your ST999 wallet in PKR.
- Verification and compliance: Identity documents are used to perform Know Your Customer (KYC) checks required by our internal compliance policy and to prevent money laundering and underage gambling.
- Fraud prevention and security: Device data, IP addresses, and behavioural patterns are analysed to detect suspicious activity, multiple account creation, and other prohibited conduct described in our Terms and Conditions.
- Customer support: Your contact details and communication history are used to respond to your queries, resolve disputes, and process responsible gaming requests.
- Service improvement: Aggregated and anonymised usage data helps us improve ST999's platform, fix bugs, and optimise the experience for Pakistani users on local devices and networks.
- Responsible gaming monitoring: Behavioural data helps us identify patterns that may indicate problem gambling and allows us to apply appropriate interventions.
- Marketing communications: If you have opted in, we may send you information about ST999 promotions, PSL betting specials, and new features. You can opt out at any time through your account settings or by contacting support.
4. Legal Basis for Processing
ST999 processes your personal data under several legal bases, each of which applies to different categories of processing activity:
- Contractual necessity: Processing your registration data, transaction data, and betting history is necessary to fulfil our contractual obligations to you as a registered ST999 user.
- Legal obligation: KYC verification, fraud monitoring, and retention of financial records are required by our compliance obligations. ST999 must conduct these activities regardless of user preference.
- Legitimate interest: Platform security monitoring, fraud prevention, and service improvement are based on our legitimate interest in operating a safe and reliable platform for Pakistani users.
- Consent: Marketing communications and non-essential cookies are processed only where you have given explicit consent. You may withdraw consent at any time.
5. Who We Share Your Data With
ST999 does not sell your personal data. We share data only with parties that have a genuine operational need to access it in order to provide services to you or to ST999. Every third party we share data with is bound by confidentiality obligations and may not use your data for their own purposes.
Payment Processors
When you deposit or withdraw PKR through Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or Visa/Mastercard, the relevant payment processor receives the transaction details necessary to process the transfer. ST999 does not store full card numbers or Easypaisa/JazzCash PINs. Payment processors operate under their own privacy policies and are subject to Pakistani financial regulation.
Identity Verification Partners
ST999 may share your identity documents (CNIC copy, selfie, or proof of address) with third-party KYC verification providers to automate and expedite the verification process. These providers process data solely for identity verification purposes and are contractually prevented from any other use.
Legal and Regulatory Authorities
ST999 will disclose personal data to Pakistani law enforcement, regulatory bodies, or courts where legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to a third party. We will notify you of such disclosures where permitted by law.
Service Providers
We use trusted third-party service providers for cloud hosting, data analytics (in anonymised form), email delivery, and customer support software. These providers access data only to the extent necessary to provide their services to ST999 and are bound by data processing agreements.
ST999 does not transfer your personal data outside of our operating jurisdictions without appropriate safeguards in place. We take Pakistani users' data sovereignty seriously.
6. Payment Data and PKR Transactions
ST999 operates exclusively in Pakistani Rupees (PKR). All financial transactions are handled through locally recognised payment providers. The way we handle payment data reflects both our commitment to your security and the practical requirements of local payment infrastructure.
When you make a deposit via Easypaisa or JazzCash, ST999 receives a transaction confirmation reference from the payment provider. We record the amount, the time, and the reference number – but we do not store your mobile wallet PIN, OTP codes, or full account credentials. For bank IBFT transfers, we record the transferred amount, the reference number, and the sending bank's details for reconciliation purposes. For card payments via Visa or Mastercard, card details are tokenised by the payment gateway – ST999 receives and stores only the last four digits and card expiry for display purposes.
Your PKR transaction history on ST999 – deposits, withdrawals, bets, winnings, and bonus credits – is retained for a minimum of five years to comply with financial record-keeping requirements. This data is accessible to you at any time through your account transaction history page.
7. Cookies and Tracking Technologies
ST999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by our website. Here is what we use and why.
Essential Cookies
These are strictly necessary for the platform to function. They keep you logged in between pages, remember your bet slip contents, and maintain your session security. You cannot disable essential cookies without breaking core platform functionality. These cookies do not require your consent.
Functional Cookies
These remember your preferences – language settings, display preferences, and whether you have dismissed certain notifications. They improve your experience without being strictly essential. ST999 uses functional cookies based on your consent, which is collected on first visit.
Analytics Cookies
We use analytics cookies to understand how Pakistani users interact with ST999 – which pages perform well, where users drop off, and which features need improvement. Analytics data is aggregated and anonymised. We use self-hosted analytics where possible to keep data within our own infrastructure.
Managing Cookies
You can control and delete cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from using ST999, though some features may work less smoothly. Cookie preferences can also be updated through the cookie settings panel accessible from the footer of every ST999 page.
8. How Long We Keep Your Data
ST999 keeps your personal data only for as long as necessary for the purposes it was collected, or for as long as required by applicable law and our internal compliance policies. Different categories of data are held for different periods.
- Active account data (registration details, contact information, preferences): Retained for the lifetime of your active ST999 account plus a 12-month period following closure.
- Financial transaction records (deposit history, withdrawal records, PKR bet history): Retained for a minimum of 5 years after the transaction date, in line with financial record-keeping obligations.
- Identity verification documents (CNIC copies, passport scans): Retained for a minimum of 5 years after the account is closed or verification is completed.
- Customer support communications: Retained for 3 years from the date of the interaction, or longer if the conversation is relevant to an ongoing dispute.
- Security and fraud detection logs: Retained for up to 2 years from the date the log was generated.
- Marketing preferences and consent records: Retained until you withdraw consent, plus 12 months thereafter as proof of consent.
When data is no longer required, ST999 deletes or anonymises it securely. Anonymised data – where all identifying information has been permanently removed – may be retained indefinitely for aggregate statistical analysis.
9. How We Protect Your Data
Security is not an afterthought at ST999 – it is built into every layer of the platform. We apply technical and organisational measures to protect your personal data against unauthorised access, disclosure, loss, or destruction.
- Encryption in transit: All data transmitted between your device and ST999 servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this is active.
- Encryption at rest: Stored personal data and financial records are encrypted using AES-256 encryption at the database level.
- Access controls: ST999 staff access to personal data is strictly role-based. Only staff who need data to perform their job function are authorised to access it, and all access is logged.
- Two-factor authentication: ST999 encourages all users to enable 2FA on their accounts. It is available through your account security settings and significantly reduces the risk of unauthorised access.
- Penetration testing: We conduct regular security assessments of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
- Incident response: In the unlikely event of a data breach affecting Pakistani users, ST999 will notify affected users promptly via their registered email address and take immediate steps to contain and remediate the breach.
No online platform can guarantee absolute security. We apply industry-standard measures, but you also play a role by keeping your ST999 password strong and not sharing your login credentials with anyone.
10. Your Data Rights as a Pakistani ST999 User
ST999 respects your rights over your own personal data. You can exercise any of the following rights by contacting us at support@st999.click. We aim to respond to all data rights requests within 72 hours and to complete action within 30 days.
To exercise any of these rights, email support@st999.click with the subject line "Data Rights Request" and the specific right you wish to exercise. Please include your registered mobile number so we can verify your identity before actioning the request.
11. Children's Privacy
ST999 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and have reason to believe that a person under 18 has created an ST999 account or provided personal data to the platform, please contact us immediately at support@st999.click.
Upon receiving a verified report involving a minor, ST999 will immediately suspend the account, delete all personal data associated with it, and return any deposited funds to the payment method used. We take underage gambling prevention extremely seriously and apply age verification steps at multiple points in the registration and withdrawal process.
12. Changes to This Privacy Policy
ST999 may update this Privacy Policy from time to time as the platform evolves, as new payment methods are introduced, or as applicable privacy law changes. When we make material changes, we will:
- Display a prominent notice on the ST999 platform home page for at least 14 days after the update.
- Send a notification email to your registered address summarising what has changed.
- Update the "Last Updated" date shown at the top of this page.
Your continued use of ST999 after the effective date of any policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you should stop using the platform and contact support to request account closure and deletion of your personal data.
We recommend checking this page whenever you receive a privacy update notification from ST999. Minor changes such as clarifications, formatting improvements and spelling corrections do not require notification.
13. Contact Us and How to Make a Complaint
If you have any questions about this Privacy Policy, want to exercise a data right, or have a complaint about how ST999 has handled your personal data, please reach out to us through the following channels:
- Email: support@st999.click
- Subject line for data queries: "Privacy Query" or "Data Rights Request"
- Live Chat: Available on the ST999 platform when logged in to your account
- Languages: English and Urdu
- Response time: Acknowledgement within 24 hours; full response within 30 days
If you are not satisfied with how ST999 has responded to your privacy complaint, you have the right to escalate the matter to a relevant data protection supervisory authority. We will cooperate fully with any such investigation and provide all requested documentation promptly.
For responsible gaming concerns – including requests for account self-exclusion, deposit limit reductions, or cooling-off periods – please visit our dedicated Responsible Gaming page or contact support directly. These requests are treated with priority and confidentiality.