ppp9 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy ("Policy") is published by ppp9 ("the Company", "we", "us", "our"), the operator of the online gaming platform accessible at ppp9.app ("the Platform"). This Policy applies to all personal data collected from individuals ("you", "the Player", "the User") who access, register with, or otherwise interact with the ppp9 Platform, including through any mobile browser interface, account management portal, or customer support channel.

By registering a ppp9 account or continuing to use the ppp9 Platform after this Policy has been made available to you, you acknowledge that you have read and understood how ppp9 processes your personal data as described herein. This Policy should be read in conjunction with ppp9's Terms & Conditions and the Responsible Gaming Policy, both of which contain additional provisions that relate to your data.

For the purposes of this Privacy Policy, ppp9 — the operator of ppp9.app — acts as the Data Controller in respect of all personal data collected from users of the Platform. As Data Controller, ppp9 determines the purposes and means by which your personal data is processed.

ppp9 operates the Platform under an international gaming operating licence and is bound by the data protection requirements of its licensing jurisdiction in addition to maintaining best-practice data governance standards applicable to the Pakistani market it serves.

All enquiries relating to this Privacy Policy, requests to exercise your data rights, or concerns about the way in which ppp9 processes your personal data should be directed to the ppp9 Data Protection contact at [email protected], clearly marked "Privacy / Data Request" in the subject line of your correspondence.

ppp9 collects personal data from you through a number of sources and means. The following table sets out the categories of personal data collected, the specific data points within each category, and the primary collection method:

In addition to information you provide directly, ppp9 may receive data about you from third-party identity verification partners engaged to perform age and identity checks, and from payment processors facilitating your PKR deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank.

ppp9 processes your personal data for the following specific purposes, each of which is grounded in an appropriate legal basis as set out in Clause 5 below:

• Account Registration and Management: To create and maintain your ppp9 account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment method. Financial data is used solely for transaction facilitation and fraud prevention.
• Gaming and Betting Operations: To record and settle bets and game outcomes, calculate and credit winnings, apply bonus terms, and maintain an accurate history of your gaming activity on the ppp9 Platform.
• Regulatory Compliance and Anti-Money Laundering: To fulfil Know Your Customer (KYC) obligations, conduct required identity verification checks, monitor transactions for suspicious activity, and report to relevant authorities where legally mandated.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour, administer responsible gaming tools you have activated (deposit limits, self-exclusion, cooling-off periods), and contact you with responsible gaming information where appropriate.
• Customer Support: To respond to your queries, complaints, and technical issues, and to maintain records of support interactions for quality assurance and dispute resolution purposes.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multiple account operation, bonus abuse, and other prohibited conduct as defined in ppp9's Terms & Conditions.
• Platform Improvement: To analyse aggregated, anonymised gaming and technical data to improve Platform performance, game selection, and user experience for Pakistani players.
• Marketing Communications (opt-in only): To send you promotional communications about ppp9 bonuses, new games, PSL cricket betting offers, and platform updates, where you have explicitly consented to receive such communications.

ppp9 processes your personal data on the following legal grounds, depending on the specific processing activity involved:

• Contract Performance: The majority of ppp9's data processing is necessary for the performance of the contract between ppp9 and you — namely, the provision of online gaming services as described in the Terms & Conditions. This includes account management, payment processing, game operation, and customer support.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, age verification, and regulatory reporting — are required for ppp9 to comply with its legal and licensing obligations. This processing is non-optional and cannot be removed by player preference settings.
• Legitimate Interests: ppp9 processes technical data and gaming activity data for the legitimate interests of fraud prevention, platform security, responsible gaming monitoring, and Platform improvement. These interests are balanced against and do not override your fundamental privacy rights.
• Consent: Marketing communications are sent only on the basis of your explicit opt-in consent. You may withdraw this consent at any time through your account settings or by contacting support, and withdrawal does not affect the lawfulness of processing conducted prior to the withdrawal.

ppp9 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. ppp9 shares personal data with third parties only in the following defined circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification Partners: Third-party KYC service providers receive identity documents and personal data you submit for age and identity verification. These partners are contractually bound to use your data solely for verification purposes.
• Game Software Providers: Certified gaming software providers whose titles are available on the ppp9 Platform may receive anonymised session and game data for the purpose of game performance monitoring and RNG certification maintenance.
• Regulatory and Law Enforcement Authorities: ppp9 discloses personal data to gaming licensing authorities, financial regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. ppp9 will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention Networks: ppp9 participates in industry-standard fraud prevention networks and may share data with these networks to prevent account fraud, bonus abuse, and money laundering. Data shared for this purpose is handled under strict confidentiality obligations.

ppp9 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve user experience, maintain session security, and — where you have consented — to deliver relevant promotional content. The following categories of cookies may be in use on the ppp9 Platform:

• Strictly Necessary Cookies: These cookies are essential for the ppp9 Platform to function. They enable session authentication, maintain your logged-in ppp9 account state, and support core Platform security features including CSRF protection. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: These cookies remember your preferences — such as your preferred payment method, language settings, and responsible gaming configuration — so you do not need to re-enter them each time you access ppp9.
• Analytical Cookies: ppp9 uses anonymised analytical data to understand how players navigate the Platform, which games are most popular among Pakistani players, and where technical issues most frequently occur. This data is aggregated and not linked to individual identities.
• Marketing Cookies (consent-based): Where you have opted in to receive marketing communications, ppp9 may use cookies to track the effectiveness of promotional campaigns and ensure that bonus offers relevant to your gaming history are presented appropriately.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your use of the ppp9 Platform. Cookie preferences for non-essential categories can also be managed through the cookie settings tool available within your ppp9 account.

ppp9 retains your personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law or regulatory obligation:

Where you request deletion of your personal data and ppp9 is not subject to a legal obligation to retain the specific data in question, deletion will be carried out within 30 days of receipt of your request. Data subject to mandatory retention periods will be deleted as soon as the applicable retention period expires.

As a player whose personal data is processed by ppp9, you have the following rights in relation to your data. To exercise any of these rights, contact ppp9 at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request a copy of the personal data ppp9 holds about you. ppp9 will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. You can update basic account information directly through your ppp9 account settings; other corrections should be requested via support.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to exceptions where ppp9 is legally required to retain data.
• Right to Restriction of Processing: You have the right to request that ppp9 restrict the processing of your data in certain circumstances, including while the accuracy of the data is disputed or while a legitimate interests assessment is reviewed.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of your personal data for the purpose of transferring it to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing of your data based on legitimate interests, and you have an absolute right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

ppp9 will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days, in which case ppp9 will notify you of the extension and the reasons for it within the initial 30-day period.

ppp9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the ppp9 Platform is encrypted using industry-standard SSL/TLS protocols. This applies to ppp9 login sessions, payment transactions, and all account management functions.
• Password Hashing: Your ppp9 account password is never stored in plain text. Passwords are processed through cryptographic hashing algorithms that render them unrecoverable even in the event of unauthorised database access.
• Access Controls: Access to ppp9 systems containing personal data is restricted to authorised personnel only, on a need-to-know basis. All internal access is logged and subject to periodic audit.
• Two-Factor Authentication on Sensitive Actions: High-risk account actions — including password changes, withdrawal requests above certain thresholds, and new device logins — require one-time SMS verification to your registered Pakistani mobile number.
• Automated Threat Detection: ppp9's systems include automated monitoring for unusual login patterns, atypical geographic access, and repeated failed authentication attempts, with automated account protection measures triggered where risk thresholds are exceeded.
• Regular Security Reviews: ppp9 conducts regular internal and third-party security assessments of its Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

The ppp9 Platform is strictly intended for use by individuals aged 21 years and above. ppp9 does not knowingly collect personal data from any individual under the age of 21. If ppp9 discovers or has reason to believe that a registered account belongs to an individual who is under 21, the account will be immediately suspended, all gaming activity will be reversed where technically possible, and all personal data collected in connection with the account will be securely deleted to the extent permitted by anti-money laundering retention obligations.

ppp9 conducts age verification checks at registration and at the point of first withdrawal. Where satisfactory age verification cannot be completed, access to real-money gaming features will be withheld until verification is confirmed. Any deposit funds held in an account that is subsequently found to belong to an under-age individual will be returned to the originating payment method where legally feasible.

If you are a parent or guardian and believe that your child has created a ppp9 account without your knowledge, please contact ppp9 immediately at [email protected] so that the account can be reviewed and closed as a matter of priority.

ppp9 operates as an international gaming platform and, as a consequence, your personal data may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which ppp9 holds its gaming operating licence and the jurisdictions in which ppp9's technology infrastructure providers are based.

Where such international transfers occur, ppp9 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. These safeguards may include:

• Contractual data processing agreements incorporating standard data protection clauses with all international service providers handling ppp9 player data
• Transfer impact assessments conducted prior to initiating data flows to new international jurisdictions
• Selection of technology infrastructure providers who maintain recognised international security certifications

By registering a ppp9 account and accepting these terms, you acknowledge that your personal data may be transferred internationally in accordance with the safeguards described above.

ppp9 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, regulatory requirements, or Platform functionality. The effective date at the top of this page will be updated whenever material changes are made.

Where changes to this Policy are material — for example, where we intend to use your personal data for a new purpose not previously disclosed — ppp9 will notify you via SMS to your registered Pakistani mobile number at least 7 days before the changes take effect. For non-material changes (such as typographical corrections or clarifications that do not alter the substance of processing), notification will be via the updated effective date on this page.

Your continued use of the ppp9 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with changes to the Privacy Policy, you should cease using the Platform and submit an account closure request to ppp9 support.

For any questions, concerns, or requests relating to this Privacy Policy or to ppp9's processing of your personal data — including requests to exercise your data rights as described in Clause 9 — please contact the ppp9 Data Protection team using the details below:

Please note that the email address above is provided as plain text only and is not a clickable link. When contacting ppp9 on privacy matters, please include your registered Pakistani mobile number (partial, for identification — do not send the full number in unencrypted email) and a clear description of your request or concern so that our team can respond as efficiently as possible.

If you have submitted a data rights request or privacy complaint and are not satisfied with ppp9's response, you have the right to escalate your concern to the gaming licensing authority responsible for ppp9's operating licence, in accordance with that authority's published complaint-handling procedures.