Our Commitment: wc99 is committed to protecting the privacy of every player who registers on our platform. This Privacy Policy is a real document, written for real Pakistani players — not a copy-paste legal formality. If anything here is unclear, please reach out to our support team and we will explain it in plain language.
Introduction
This Privacy Policy describes how wc99 — the online gaming and betting platform accessible at wc99.im — collects, processes, stores and protects personal information relating to its registered players and website visitors. It applies to all interactions you have with wc99, including account registration, gameplay, deposits and withdrawals, customer support and use of any features on the platform.
By registering an account on wc99 or by continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data in the ways described. If you do not agree with any part of this policy, you should not register on or continue to use wc99.
This policy should be read alongside the wc99 Terms and Conditions. In the event of any conflict between these two documents in relation to data handling, the Privacy Policy will take precedence.
Who We Are
wc99 is the data controller responsible for the personal information of players who use the wc99 platform. As data controller, wc99 determines the purposes and means by which your personal data is processed. Where data is shared with third-party service providers, those providers act as data processors under instructions from wc99 and are contractually bound to handle your data in accordance with this policy.
If you have any questions about how wc99 handles your personal data, or if you wish to exercise any of your data rights described in Section 10, you can contact wc99 directly through the live chat feature on the platform or by emailing [email protected]. Our support team handles privacy queries in both English and Urdu and will respond within two business days.
What Data We Collect
wc99 collects the minimum personal data necessary to operate the platform safely, comply with legal obligations and deliver the service you have requested. The categories of data we collect are described below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, CNIC scan or photograph | During registration and verification |
| Contact Data | Mobile phone number, email address | During registration |
| Financial Data | Mobile wallet account reference (Easypaisa, JazzCash, NayaPay, SadaPay), bank account name for IBFT, last four digits of card for Visa/MC | When adding a payment method or making a transaction |
| Transaction Data | Deposit and withdrawal history, amounts, timestamps, payment method used | Automatically on each transaction |
| Gaming Activity Data | Games played, bets placed, outcomes, session durations, bonus history | Automatically during platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatically on each visit or session |
| Usage Data | Pages visited, features used, click patterns, session frequency | Automatically via cookies and analytics |
| Communication Data | Chat logs, email exchanges, support ticket content | When you contact wc99 support |
wc99 does not collect full card numbers. Card payments are processed through a PCI-DSS certified payment gateway and full card data is never transmitted to or stored on wc99 servers.
How We Use Your Data
wc99 uses your personal data for specific, defined purposes. We do not use your data for any purpose beyond what is described here without first informing you and, where required, obtaining your consent.
- Account registration and management: Your identity and contact data are used to create and manage your wc99 account, send you OTP verifications and communicate important account-related notices.
- Identity verification (KYC): CNIC data is used to confirm your age and identity as required before processing withdrawals. This is a mandatory regulatory and fraud-prevention measure at wc99.
- Processing payments: Financial data is used to process deposits, withdrawals and refunds. wc99 retains transaction records for legal compliance and dispute resolution purposes.
- Delivering games and services: Gaming activity data is used to run game sessions, settle bets, apply bonuses and maintain accurate account balances.
- Fraud prevention and security: Technical and gaming activity data is used to detect unusual patterns, prevent account takeover, identify bonus abuse and investigate suspected prohibited conduct as described in the Terms and Conditions.
- Anti-money laundering (AML) compliance: Transaction and identity data is monitored for patterns consistent with money laundering or financial crime. wc99 is obligated to file reports with relevant authorities where suspicious activity is identified.
- Responsible gaming monitoring: Gaming activity data is used to identify patterns that may indicate problem gambling, enabling wc99 to proactively reach out with support information or apply protective measures.
- Customer support: Communication data is used to respond to your queries and resolve disputes. Support interactions may be reviewed for quality assurance purposes.
- Platform improvement: Anonymised usage and technical data is analysed to improve the performance, design and functionality of the wc99 platform. This analysis does not involve your personal identity.
- Marketing communications: Where you have opted in to marketing, wc99 may send you promotional emails or SMS messages about new games, bonuses and platform updates. You can opt out at any time from your account settings or by contacting support.
Legal Basis for Processing
wc99 processes your personal data on one or more of the following legal bases depending on the specific purpose:
- Contractual necessity: Processing required to deliver the wc99 service you have signed up for — including account management, payment processing and game delivery — is carried out because it is necessary to fulfil our contract with you.
- Legal obligation: Age verification, AML monitoring and record-keeping are carried out because wc99 has a legal obligation to do so under applicable law and its licensing requirements.
- Legitimate interests: Fraud detection, security monitoring and platform improvement are carried out on the basis of wc99's legitimate interest in operating a safe, fair and reliable platform, provided this does not override your fundamental privacy rights.
- Consent: Marketing communications and any data processing that is not strictly necessary to deliver the service are carried out only where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Data Sharing and Third Parties
wc99 does not sell your personal data to third parties. We share your data only in the following limited circumstances:
- Payment processors: When you make a deposit or withdrawal, relevant financial data is shared with the applicable payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processing bank or Visa/Mastercard network). Each provider has its own privacy policy and is responsible for data it processes independently.
- Game providers: When you play a live dealer game, your player identifier (not your full personal details) is transmitted to the game studio to facilitate the session. Game providers are under contractual obligation to handle this data in accordance with wc99's instructions.
- Verification services: CNIC data may be shared with identity verification services to confirm the authenticity of documents provided during the KYC process.
- Regulatory and law enforcement authorities: wc99 will disclose personal data to relevant authorities where required to do so by law, court order or where we have a good-faith belief that disclosure is necessary to investigate suspected criminal activity, including fraud and money laundering.
- Business transfers: In the event of a merger, acquisition or sale of wc99's assets, player data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.
All third-party data processors engaged by wc99 are bound by data processing agreements that require them to maintain confidentiality, process data only as instructed by wc99, implement appropriate security measures and delete or return data upon the termination of the relationship.
Data Retention
wc99 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity and KYC data | 7 years after account closure | Legal and regulatory compliance |
| Transaction records | 7 years from transaction date | AML regulations and dispute resolution |
| Gaming activity logs | 5 years from last activity | Dispute resolution and regulatory audits |
| Support communications | 3 years from last interaction | Quality assurance and dispute evidence |
| Technical and usage data | 13 months on a rolling basis | Platform performance analysis |
| Marketing preferences | Until opt-out or account closure | To honour communication preferences |
After the applicable retention period, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and research purposes.
Security Measures
wc99 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These include:
- 256-bit TLS/SSL encryption for all data transmitted between your device and wc99 servers. Your browser will show a padlock icon confirming the encrypted connection.
- Encrypted storage for sensitive fields including CNIC numbers, financial references and authentication credentials. Passwords are hashed using a strong one-way algorithm — wc99 staff cannot read your password.
- Access controls that restrict internal access to personal data on a strict need-to-know basis. Support staff have access only to the data fields necessary to handle your specific query.
- Two-factor authentication (2FA) available for player accounts, adding an additional layer of protection beyond your password.
- Regular security audits and penetration testing of the wc99 platform infrastructure carried out by independent security specialists.
- Payment card data isolation: Full card numbers are never transmitted to or stored on wc99 infrastructure. Card payments are routed through a PCI-DSS compliant payment gateway.
Despite these measures, no internet-based service is completely immune to security risks. In the event of a data breach that poses a significant risk to your rights and freedoms, wc99 will notify affected players and relevant authorities within 72 hours of becoming aware of the incident where practically possible.
Cookies and Tracking Technologies
wc99 uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it so that we can improve their experience. We do not use cookies to build advertising profiles or to sell data to advertisers.
The types of cookies used on wc99 are as follows:
- Strictly necessary cookies: Required for the wc99 platform to function. These include session authentication cookies, security tokens and load-balancing cookies. You cannot opt out of these without stopping use of the platform.
- Performance and analytics cookies: Used to collect anonymised data about how players navigate and use wc99. This helps us identify which pages load slowly, which features are most used and where players encounter difficulties. No personal identity is involved in this analysis.
- Functional cookies: Remember your preferences such as language setting, preferred game lobby view and notification settings. These improve your experience but are not essential to platform operation.
You can manage cookie preferences through your browser settings. Blocking performance or functional cookies will not prevent you from using wc99 but may affect some non-essential features. A cookie consent prompt is displayed on your first visit to the platform.
Your Data Rights
As a wc99 player you have meaningful rights over your personal data. These rights are genuine and exercisable — not just listed for legal compliance. Here is what you can ask wc99 to do:
Right of Access
Request a copy of all personal data wc99 holds about you. We will provide this within 30 days.
Right to Rectification
Ask us to correct inaccurate or incomplete personal data held in your wc99 account.
Right to Erasure
Request deletion of your personal data where we no longer have a legal basis to retain it. Some data must be kept for legal compliance purposes and cannot be deleted on request.
Right to Restriction
Ask wc99 to pause processing your data in specific circumstances — for example while a correction request is being reviewed.
Right to Portability
Receive your personal data in a structured, machine-readable format. Applies to data you provided directly to wc99 and that we process by automated means.
Right to Object
Object to wc99 processing your data for marketing communications or on the basis of legitimate interests. Marketing opt-out is immediate.
To exercise any of these rights, contact wc99 via live chat or email at [email protected]. We will acknowledge your request within one business day and complete it within 30 days. Identity verification may be required before actioning certain requests to prevent unauthorised data disclosure.
Children's Privacy
wc99 does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults and all players are required to verify their age through CNIC submission before any withdrawal is processed.
If wc99 discovers that personal data has been collected from a player who is under 18, the account will be immediately closed, any deposits will be refunded in full and all data relating to that individual will be deleted within 30 days. If you are a parent or guardian and believe your child has registered on wc99, please contact [email protected] immediately.
Third-Party Links and Services
The wc99 platform does not contain links to external third-party websites in its main navigation or content areas. Game studios whose titles are hosted on wc99 operate their own software environments and may collect technical session data as described in Section 6. This data collection is governed by those providers' own privacy policies, which wc99 has reviewed as part of its due diligence before onboarding each provider.
wc99 is not responsible for the privacy practices of any third-party service provider beyond the contractual obligations described in this policy. If you have concerns about how a specific game provider handles data, please contact wc99 support and we will facilitate the appropriate communication.
Changes to This Privacy Policy
wc99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When changes are made:
- The "Last updated" date at the top of this page will be revised.
- Material changes — those that significantly affect how we use your data or your data rights — will be notified to registered players by SMS to the registered mobile number and/or by a notice displayed on the wc99 platform for a minimum of 14 days before the change takes effect.
- Minor clarifications and corrections may be made without formal notice.
- Continued use of the wc99 platform after the effective date of a change constitutes acceptance of the updated policy.
We encourage you to review this Privacy Policy periodically. The current version is always available at wc99.im/privacy-policy.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights or have a concern about how wc99 is handling your personal data, please get in touch:
- Live chat: Available 24/7 on the wc99 platform. Typical response time under two minutes.
- Email: [email protected] — responses within two business days for privacy-related queries.
- Language: You may contact us in English or Urdu and we will respond in the same language.
Privacy complaints are handled separately from general support queries and are escalated to a senior team member with data protection responsibilities. We take every privacy concern seriously and will keep you updated on the progress of your query throughout.