SK999 Privacy Policy – How We Protect Your Data

This Privacy Policy describes how SK999 ("we", "us", "our", "the platform"), operator of sk999.wine, collects, stores, uses and protects the personal information of players and visitors ("you", "the user") who access or use our online gaming services.

We understand that handing over personal details to any platform — especially one handling financial transactions — requires trust. That trust isn't something we take lightly. SK999 has designed its data practices around one principle: collect what's genuinely necessary, protect it properly, and give players full visibility and control over what we hold.

This policy applies to all personal data processed by SK999 in connection with your use of sk999.wine, including account registration, deposits, withdrawals, game play, customer support interactions and use of our mobile platform. By creating an SK999 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is incorporated by reference into SK999's Terms and Conditions. If you have questions about either document, our support team is available around the clock at support@sk999.wine.

SK999 collects personal data across three categories: data you provide directly, data generated through your use of the platform and data received from third parties necessary for account verification or payment processing.

We do not collect sensitive categories of data such as health information, religious beliefs, political opinions or biometric data unless legally required for a specific compliance purpose, in which case you will be informed separately.

SK999 collects personal data through the following channels:

• Direct submission: When you register, complete your profile, make a deposit, submit a withdrawal request, contact support or respond to a verification request, you provide data directly to SK999.
• Automated platform data: When you use sk999.wine, our servers automatically log technical data including your IP address, device information and session activity. This happens for every visit, including before registration.
• Cookies and tracking technologies: SK999 uses cookies and similar technologies on its platform. See Section 6 for full details on what cookies we use and how to manage your preferences.
• Payment processors: When you transact via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, the payment provider confirms transaction success and provides reference data to SK999. Payment providers do not share your full financial account details with us — we receive only what is necessary to match the transaction to your SK999 account.
• Identity verification services: Where SK999 uses a third-party verification partner to confirm your identity (e.g., CNIC verification), that partner may confirm verification status to SK999 without sharing the full document details.

SK999 uses your personal data for the following specific purposes. We process data only where we have a lawful basis to do so — either because it is necessary to fulfil our contract with you, because we have a legal obligation, or in limited cases because it is in our legitimate interest in a way that does not override your rights.

• Account management: Creating, operating and maintaining your SK999 account, including login authentication and profile management.
• Payment processing: Facilitating deposits and withdrawals in PKR via your chosen payment method. Your payment identifier is retained to ensure withdrawals are returned to the correct source.
• Identity verification: Confirming that you meet SK999's eligibility requirements — specifically age (18+) and account ownership — in compliance with our obligations to prevent underage gambling and fraud.
• Anti-fraud and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, account takeover attempts and other security threats. This includes automated pattern analysis on account and transaction activity.
• Regulatory compliance: Meeting legal obligations including anti-money laundering (AML) requirements, record-keeping obligations and responses to lawful requests from regulatory authorities.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and to operate the deposit limits, session controls and self-exclusion tools that SK999 provides under its responsible gaming commitment.
• Customer support: Responding to your enquiries, resolving complaints and improving our support processes using records of previous interactions.
• Platform improvement: Using aggregated, anonymised analytics data to understand how players use SK999, identify usability issues and prioritise improvements. This analysis does not identify individuals.
• Communications: Sending account-related notifications — deposit confirmations, withdrawal updates, security alerts, terms change notifications. SK999 does not send unsolicited marketing messages without your explicit consent.

SK999 does not sell, rent or trade your personal data. We share data only with the following categories of recipients, and only to the extent necessary for each stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank partners and card networks. Data shared is limited to what is required to authorise and settle each transaction.
• Identity verification providers: Third-party services used to confirm CNIC validity and age. These providers confirm verification status to SK999 under confidentiality agreements and may not use the data for any other purpose.
• Technology infrastructure providers: Cloud hosting, database management and security monitoring services. These providers process data on SK999's behalf under strict data processing agreements and are not permitted to use it independently.
• Regulatory and law enforcement authorities: SK999 will disclose personal data to Pakistani authorities or other competent bodies where required by law — for example, in response to a court order or a lawful AML investigation. We will notify you of any such disclosure where legally permitted to do so.
• Responsible gaming support organisations: In limited circumstances, anonymised data may be shared with problem gambling support organisations to improve the effectiveness of responsible gaming programmes. This is done at an aggregate level and does not identify individual players.

All third parties with whom SK999 shares personal data are required to maintain appropriate security standards and to process data only for the specified purpose. SK999 does not transfer personal data outside of the regions covered by applicable data protection frameworks without appropriate safeguards in place.

SK999 uses cookies and similar browser-based technologies on sk999.wine. A cookie is a small text file stored on your device when you visit a website. SK999 uses the following types:

SK999 does not use third-party advertising or retargeting cookies. You can manage cookie preferences in your browser settings at any time. Most browsers allow you to block non-essential cookies, clear existing cookies or receive alerts before a cookie is stored. Disabling essential cookies will prevent you from using SK999.

SK999 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure or destruction:

• TLS/SSL encryption: All data transmitted between your device and SK999's servers is encrypted using industry-standard TLS protocols. The padlock in your browser confirms this is active.
• Encryption at rest: Sensitive data — including identity documents, CNIC numbers and payment identifiers — is stored in encrypted form in SK999's databases. The encryption keys are managed separately from the data itself.
• Access controls: SK999 staff access to player data is role-based and strictly limited. Only personnel with a verified operational need can access personal data, and all access is logged and auditable.
• Two-factor authentication: SK999 strongly recommends enabling 2FA on your account. This adds a second verification step at login, making unauthorised access significantly harder even if your password is compromised.
• Regular security audits: SK999 conducts periodic security reviews and penetration testing on its platform and data storage infrastructure. Identified vulnerabilities are addressed on a prioritised timeline.
• Incident response: SK999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you promptly and take immediate steps to contain the incident and prevent recurrence.

SK999 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your SK999 account plus a post-closure period of five years, in compliance with financial record-keeping obligations.
• Transaction records: Deposits, withdrawals and gameplay records are retained for a minimum of five years from the date of each transaction, as required for AML compliance.
• Identity verification documents: CNIC copies and related verification documents are retained for five years following account closure. They are stored in encrypted form with access strictly limited.
• Support communications: Support conversation records are retained for three years to support complaint resolution, quality improvement and regulatory review.
• Technical logs: Server and access logs are retained for 90 days for security monitoring purposes, after which they are automatically purged.
• Marketing consent records: If you have given consent to receive marketing communications, this consent record is retained until you withdraw consent plus one year thereafter.

When data reaches the end of its retention period, SK999 securely deletes or anonymises it. Secure deletion means the data is rendered irrecoverable rather than simply marked as inactive.

As an SK999 player, you have the following rights regarding your personal data. To exercise any of these rights, contact SK999 support with your request. We will respond within 48 hours to confirm receipt and within a further 28 days to complete the request.

SK999 is an online gaming platform strictly intended for adults. We do not knowingly collect personal data from any individual under the age of 18. Our registration process includes date-of-birth verification and SK999 conducts age checks on accounts where underage use is suspected.

If SK999 becomes aware that an account has been created by or on behalf of someone under 18, the account will be immediately closed and any deposited funds returned to the originating payment source. All gameplay records associated with the account will be voided.

If you have reason to believe that a minor has registered on SK999, please contact our support team immediately with relevant details. We take underage protection seriously and will investigate all such reports as a priority matter.

SK999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When changes are made, the "Last Updated" date at the top of this page will be revised. For material changes — those that meaningfully affect how your personal data is used — SK999 will notify registered players by email and via an on-platform notification before the changes take effect.

Your continued use of SK999 after a Privacy Policy update constitutes your acceptance of the revised policy. If you do not agree with any changes, please discontinue using SK999 and contact support if you wish to close your account or request deletion of your data.

Previous versions of this Privacy Policy are available on request from support@sk999.wine for reference purposes.

If you have any questions, concerns or requests related to this Privacy Policy or to how SK999 handles your personal data, please reach out through any of the following channels. Our compliance team handles all privacy-related enquiries separately from general support to ensure they receive appropriate attention.

• Email: support@sk999.wine — use subject line "Privacy Enquiry" for fastest routing
• Response time: All privacy enquiries receive an acknowledgement within 48 hours. Full responses are provided within 28 days of receiving a complete request.
• Data Rights requests (access, deletion, correction, portability): use subject line "Data Rights Request" and include your registered mobile number.

SK999 is committed to resolving all privacy concerns fairly and promptly. If you feel your concern has not been adequately addressed, you retain the right to raise the matter with the relevant data protection authority.