Last Updated: 1 January 2026
|
This Privacy Policy applies to all wc99 accounts and supersedes all prior versions.
01 Introduction
wc99 ("we", "our", "us") is committed to protecting the privacy and personal data of every player who uses the wc99 platform at wc99.bio. This Privacy Policy describes how we collect, use, store, share, and safeguard your personal information when you register for an account, deposit funds, place bets, play casino games, or otherwise interact with any part of the wc99 platform.
This policy has been written in plain English so that players across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — can clearly understand their rights and our responsibilities. We follow internationally recognised data protection principles and align our practices with the General Data Protection Regulation (GDPR) framework as a baseline standard, even where local law does not strictly require it.
By using wc99: You acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.
This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and wc99. All three documents are accessible from the footer of every page on this site.
02 Data Controller
wc99 acts as the data controller in respect of all personal data collected through the wc99 platform. As data controller, wc99 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.
If you have any questions about how wc99 processes your personal data, or wish to exercise any of the rights described in this policy, you may contact our Data Protection team at any time:
- Email: [email protected]
- Live Chat: Available 24/7 directly on the wc99 platform — average response time 3–5 minutes.
Note: All data-related requests will be acknowledged within 48 hours and responded to within 30 calendar days of receipt. Complex requests may require additional time, in which case we will inform you of the extended timeline.
03 Data We Collect
wc99 collects personal data from you in several ways: directly when you provide it (e.g., during registration or KYC verification), automatically when you use the platform (e.g., through cookies and server logs), and from trusted third parties (e.g., identity verification providers). The categories of data we collect are set out in the table below.
| Category |
Examples |
Source |
| Identity Data |
Full name, date of birth, CNIC number, photograph |
You (registration / KYC submission) |
| Contact Data |
Email address, mobile number, city of residence |
You (registration form) |
| Financial Data |
JazzCash / EasyPaisa account reference, HBL / UBL / Meezan bank account details, USDT TRC20 wallet address, deposit and withdrawal history |
You (deposit / withdrawal requests) |
| Gaming Data |
Bets placed, games played, wagering history, bonus usage, win/loss records |
Automatically generated by platform activity |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps |
Automatically collected via cookies and server logs |
| Communications Data |
Live chat transcripts, email correspondence, support ticket history |
You (when contacting support) |
| Verification Data |
KYC document scans, selfie images, address proof documents |
You (KYC verification process) |
Special Category Data: wc99 does not intentionally collect sensitive personal data such as racial origin, religious beliefs, or health information. If you voluntarily share such information (e.g., when requesting responsible gaming support), it will be used solely for the stated purpose and handled with the highest level of care.
04 How We Use Your Data
wc99 uses your personal data only for legitimate, clearly defined purposes. We do not sell, rent, or trade your personal data to any commercial third party under any circumstances. The primary purposes for which we process your data are:
- Account Management: Creating and maintaining your wc99 account, processing login requests, applying account settings, and managing your profile information.
- Identity Verification (KYC): Verifying your identity, age (21+), and address in accordance with our anti-money laundering obligations and responsible gaming commitments. This includes reviewing CNIC documents and cross-referencing with third-party identity verification services.
- Payment Processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and maintaining accurate records of all financial transactions on your account.
- Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised account access. Technical and gaming data play a key role in our fraud detection systems.
- Responsible Gaming: Monitoring gaming behaviour to identify potential signs of problem gambling, applying deposit limits and self-exclusion requests, and contacting players where we have responsible gaming concerns.
- Customer Support: Responding to queries, complaints, and support requests through our live chat and email channels, and maintaining records of interactions for training and quality purposes.
- Legal & Regulatory Compliance: Meeting our obligations under applicable gaming regulations, anti-money laundering laws, and responding to lawful requests from regulatory or law enforcement authorities.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve the performance, design, and game offering of the wc99 platform.
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have given your consent at registration or subsequently opted in. You may opt out at any time.
05 Legal Basis for Processing
wc99 processes your personal data on one or more of the following legal bases, in accordance with internationally recognised data protection principles:
- Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account creation, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with anti-money laundering laws, gaming regulations, and lawful orders from regulatory or law enforcement bodies.
- Legitimate Interests: Processing carried out to further wc99's legitimate business interests — such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your own rights and interests.
- Consent: Processing for marketing communications and optional analytics, carried out only where you have given free, specific, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Withdrawing Consent: To withdraw marketing consent or opt out of non-essential data processing, contact our support team via live chat or email at
[email protected]. Withdrawal of consent for essential processing (e.g., KYC) may result in account suspension as we cannot fulfil our legal obligations without it.
06 Data Sharing & Disclosure
wc99 does not sell, rent, or commercially share your personal data with third parties. However, to operate the platform and meet our legal obligations, we share specific categories of data with the following trusted parties under strict data processing agreements:
- Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 providers receive the minimum financial data necessary to process your transactions. Each is bound by their own regulatory and data protection obligations.
- Identity Verification Providers: Licensed KYC and AML service providers who verify your CNIC, age, and address as part of our onboarding and ongoing compliance obligations.
- IT & Infrastructure Providers: Secure cloud hosting and server infrastructure providers who store platform data under strict confidentiality and security agreements.
- Fraud Prevention Services: Third-party fraud detection systems that analyse behavioural and technical data to identify suspicious activity patterns. Data shared is encrypted and pseudonymised where possible.
- Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or gaming regulatory authority, wc99 will disclose personal data to the relevant body. We will notify you of such disclosures where legally permitted to do so.
- Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations, where necessary for wc99 to seek legal or regulatory advice.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you in advance of any such transfer and provide information on your options at that time.
07 Cookies & Tracking Technologies
wc99 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the platform, remember your preferences, maintain session security, and analyse how players use the site. By continuing to use wc99 after being presented with our cookie notice, you consent to our use of cookies as described below.
| Cookie Type |
Purpose |
Can Be Disabled? |
| Essential |
Maintain your login session, remember language preference, enforce security measures |
No — required for platform functionality |
| Functional |
Remember your deposit method preference, game lobby filters, and responsible gaming settings |
Yes — disabling may reduce personalisation |
| Analytics |
Aggregate, anonymised data on page visits, feature usage, and performance metrics to improve the platform |
Yes — opt out via support contact |
| Fraud Prevention |
Device fingerprinting and behavioural signals used to detect suspicious login attempts and bonus abuse |
No — required for platform security |
You may manage or delete cookies through your browser settings at any time. Please note that disabling essential or fraud prevention cookies may prevent you from accessing certain features of the wc99 platform or result in your session being terminated for security reasons.
08 Data Retention
wc99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
- Account & Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
- Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping standards.
- Gaming History: Retained for the duration of your active account and for 2 years following account closure, used for dispute resolution and responsible gaming monitoring purposes.
- Customer Support Records: Live chat transcripts and email correspondence retained for 2 years from the date of the last interaction.
- Marketing Data: Retained until you withdraw consent or opt out of marketing communications, plus a reasonable period to action the request.
- Technical & Log Data: Server logs and IP address records retained for up to 12 months for security monitoring purposes.
Data Deletion: Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you. Anonymised, aggregate data may be retained indefinitely for statistical and platform improvement purposes.
09 Data Security
wc99 takes the security of your personal and financial data extremely seriously. We implement a layered, defence-in-depth approach to data security, incorporating both technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure.
- SSL/TLS Encryption: All data transmitted between your device and the wc99 platform is encrypted using industry-standard SSL/TLS protocols. Never enter your wc99 credentials on any site that does not display a valid HTTPS certificate.
- Data Encryption at Rest: Sensitive data fields — including CNIC numbers, financial account references, and KYC documents — are encrypted at rest using AES-256 encryption on our secure server infrastructure.
- Access Controls: Access to personal data within the wc99 organisation is strictly limited to personnel who require it to perform their job functions. All internal access is logged and audited regularly.
- Two-Factor Authentication: We strongly encourage all wc99 players to enable two-factor authentication (2FA) on their accounts as an additional layer of login security.
- Penetration Testing & Security Audits: wc99 commissions periodic security assessments and penetration tests to identify and address vulnerabilities in the platform infrastructure.
Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, wc99 will notify affected players without undue delay and will take immediate steps to contain and remediate the breach. We will also notify relevant regulatory authorities where required by law.
10 Your Rights
As a wc99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will respond to all valid requests within 30 calendar days.
- Right of Access: You have the right to request a copy of all personal data wc99 holds about you, together with information about how it is used and with whom it is shared (a "Subject Access Request").
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that retention obligations under AML regulations may limit full erasure.
- Right to Restriction of Processing: You have the right to request that wc99 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
- Right to Data Portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that occurred prior to the withdrawal.
Identity Verification: To protect your privacy, wc99 may ask you to verify your identity before processing any data rights request. This ensures that personal data is only disclosed to or amended at the request of the account holder themselves.
11 Children & Minors
wc99 is strictly an adults-only platform. The minimum age to register and use the wc99 platform is 21 years. We do not knowingly collect personal data from any individual under the age of 21, and we actively employ age verification measures — including CNIC verification — to prevent minors from accessing the platform.
If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the wc99 platform, please contact us immediately at [email protected] so that we can investigate and act swiftly.
21+ Only: By registering on wc99, you confirm that you are aged 21 or above and are legally permitted to participate in online gaming in your jurisdiction. Providing false age information is a serious breach of our Terms & Conditions and may result in permanent account closure and forfeiture of any balances.
12 International Data Transfers
wc99 operates internationally and your personal data may be processed on servers located outside Pakistan. Where data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, wc99 takes appropriate safeguards to ensure your data remains protected to the standard described in this Privacy Policy.
Safeguards used for international data transfers include:
- Standard Contractual Clauses (SCCs) approved by recognised data protection authorities, incorporated into agreements with all data processors who receive personal data outside Pakistan.
- Adequacy assessments to ensure that recipient countries or organisations maintain data protection standards equivalent to those described in this policy.
- Data minimisation practices — ensuring only the minimum necessary data is transferred to third-party processors for any given purpose.
Questions about transfers: If you would like more information about the specific safeguards applied to the international transfer of your personal data, contact our support team at
[email protected] and we will provide further details upon request.
13 Changes to This Privacy Policy
wc99 reserves the right to update or amend this Privacy Policy at any time, for example to reflect changes in applicable law, our data practices, or the services we offer. When we make material changes to this policy, we will notify you via email and/or a prominent notice on the wc99 platform at least 14 days before the changes take effect.
Your continued use of the wc99 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should cease using the platform and contact us to close your account prior to the effective date.
Version History: The current version of this Privacy Policy was last updated on 1 January 2026. Previous versions of this policy are archived and available upon request by contacting our support team.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way wc99 handles your personal data, please do not hesitate to get in touch. Our dedicated Data Protection and Privacy team is available to assist you:
- Email: [email protected]
- Live Chat: Available 24/7 on the wc99 platform — average response time 3–5 minutes.
- Serving: Players across Karachi, Lahore, Islamabad, Faisalabad, Peshawar, Multan, and all of Pakistan.
We take every privacy enquiry seriously and are committed to resolving any concerns you may have promptly and transparently. All formal data rights requests will receive a written response within 30 calendar days of receipt.