gh999 Privacy Policy

This Privacy Policy is published by gh999, the operator of the online casino and sports betting platform accessible at https://gh999.vu. It applies to all personal data collected from individuals who visit, register on, or use any service provided through the gh999 platform, including Pakistani players accessing the platform from Karachi, Lahore, Islamabad, Faisalabad, and all other locations.

By creating an account on gh999 or by continuing to use the gh999 platform after this Privacy Policy has been made available to you, you confirm that you have read and understood how your personal data will be processed in accordance with this policy.

This policy is intended to be read alongside the gh999 Terms & Conditions. Where any conflict arises between this Privacy Policy and the Terms & Conditions in relation to data processing matters, this Privacy Policy shall take precedence.

gh999 collects personal data from you in several ways — directly when you provide it to us, automatically when you use our platform, and from third parties where permitted. The specific categories of data we collect are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where such data is incidentally included in identity documents submitted during the KYC process. Such data is not processed for any purpose other than identity verification.

gh999 uses your personal data for the following specific purposes. Each purpose is linked to a legal basis, which is explained in Section 4 below.

• Account creation and management: We use your identity and contact data to create and maintain your gh999 account, authenticate your login sessions, and manage your account preferences and settings.
• Identity verification (KYC): We use your identity documents and personal details to verify that you meet the age requirement (21+) and to confirm that your account information is accurate and legitimate, as required under our international gaming license obligations.
• Payment processing: We use your financial data to process deposits to and withdrawals from your gh999 account via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
• Fraud prevention and anti-money laundering: We analyse usage data, financial data, and technical data to detect and prevent fraudulent activity, bonus abuse, money laundering, and any other prohibited conduct described in our Terms & Conditions.
• Platform personalisation: We use usage data to personalise your gh999 experience — including game recommendations, promotional offers relevant to your preferences, and interface optimisations based on your device type.
• Responsible gaming monitoring: We analyse your gaming activity data to identify patterns that may indicate problematic gambling behaviour. Where such patterns are identified, we may proactively apply responsible gaming measures to your account, as provided in our Terms & Conditions and our Responsible Gaming policy.
• Customer support: We use your contact data and communications data to respond to your support enquiries, process complaints, and maintain a record of all support interactions for quality assurance purposes.
• Legal and regulatory compliance: We use your data as required to comply with our obligations under international gaming license regulations, anti-money laundering laws, and any other applicable legal requirements.
• Marketing communications: With your consent, we use your contact data to send you promotional offers, bonus announcements, and platform updates via SMS, email, or in-platform notifications. You may withdraw consent at any time as described in Section 12.

gh999 processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing your account data, financial data, and identity data is necessary for us to perform our contract with you — that is, to provide you with access to gh999 gaming and betting services.
• Legal obligation: Processing your KYC documents and certain financial transaction data is required by the anti-money laundering and player verification obligations that apply to gh999 under its international gaming license.
• Legitimate interests: Processing usage data and technical data for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of gh999's legitimate interests in operating a safe, secure, and fair gaming platform. These interests do not override your fundamental rights and freedoms as a data subject.
• Consent: Processing your contact data for the purpose of sending marketing communications is done on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gh999 shares personal data only in the following limited and controlled circumstances:

• Payment processors: We share financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and our cryptocurrency processing partner as necessary to process your deposit and withdrawal transactions. These processors are contractually bound to handle your data securely and may not use it for any other purpose.
• Game software providers: We share session data with licensed game studios and live casino providers whose content is available on the gh999 platform. This sharing is limited to what is necessary to deliver and record the outcome of your gaming sessions.
• Identity verification services: We share identity document data with regulated KYC verification service providers to authenticate the identity documents you submit. These providers operate under strict data processing agreements.
• Fraud detection partners: We share technical data and usage data with fraud detection and anti-money laundering technology providers. This data is processed in aggregated or pseudonymised form where possible.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by applicable law, court order, or in connection with our obligations under international gaming license regulations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gh999's business, personal data held by gh999 may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer in advance where practicable.

All third parties with whom gh999 shares personal data are required to implement and maintain appropriate technical and organisational security measures, and are prohibited from processing your data for any purpose other than the specific purpose for which it was shared.

gh999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on gh999:

• Essential cookies: These are necessary for the gh999 platform to function correctly. They manage your login session, remember your language and currency preferences, and ensure the security of your account. These cookies cannot be disabled without affecting core platform functionality.
• Performance cookies: These collect anonymised data about how players use the gh999 platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps us improve platform performance and fix issues faster.
• Functional cookies: These remember your platform preferences such as your preferred game category, notification settings, and responsible gaming configuration, so you do not need to reset them each time you log in.

gh999 does not deploy third-party advertising cookies or retargeting pixels. Your on-platform activity is not shared with any advertising network for the purpose of displaying ads to you on other websites.

You can control cookie preferences through your browser settings. Blocking essential cookies will impact your ability to log in and use core features. Blocking performance and functional cookies will not prevent you from accessing games or placing bets but may result in a less personalised experience.

gh999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our regulatory obligations. The following general retention periods apply:

• Account data and transaction records: Retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements under our international gaming license.
• KYC documents: Retained for a minimum of 5 years following the completion of the verification process or account closure, whichever is later.
• Game history and betting records: Retained for a minimum of 3 years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for 2 years following the resolution of the relevant support case.
• Marketing consent records: Retained until you withdraw your consent, plus an additional 12 months as evidence of the consent previously given.
• Technical and usage data: Aggregated and anonymised after 12 months. Identifiable technical logs are retained for up to 6 months for fraud detection purposes.

Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised in a manner that prevents its reconstruction or re-identification.

gh999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 encryption on all data transmitted between your device and gh999 servers.
• AES-256 encryption for all personal data and financial records stored on gh999 servers.
• Two-factor authentication (2FA) available for all player accounts and mandatory for all gh999 administrative accounts.
• Access controls ensuring that only authorised gh999 personnel with a documented business need can access personal data, and only to the extent necessary for their specific role.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that require gh999 to notify affected players of any data breach that poses a risk to their rights and freedoms within 72 hours of discovery.

As a data subject whose personal data is processed by gh999, you have the following rights. To exercise any of these rights, contact our support team at [email protected] with your account details and a description of your request.

gh999 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the account registration and KYC process precisely to prevent minors from accessing the gh999 platform.

If gh999 discovers that personal data has been collected from an individual who was under 21 years of age at the time of collection, we will immediately close the relevant account, void any transactions associated with that account, return any real-money funds remaining in the account to the deposit source following a verification process, and permanently delete all personal data associated with the account.

If you have reason to believe that a minor has registered an account on gh999, please contact our support team immediately at [email protected].

gh999 is operated under an international gaming license, and some of the third-party service providers we use — including KYC verification providers, fraud detection systems, and game software studios — may process your personal data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, gh999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under this Privacy Policy. These safeguards may include:

• Data processing agreements with standard contractual clauses requiring recipient organisations to maintain appropriate data protection standards.
• Transfers to jurisdictions that maintain data protection frameworks recognised as providing adequate protection for personal data.
• Technical measures including encryption and pseudonymisation applied to data before transfer where additional risk mitigation is appropriate.

You may request details of the specific safeguards applicable to any international transfer of your personal data by contacting our support team.

gh999 may send you promotional communications about new games, bonuses, PSL cricket betting offers, seasonal promotions, and platform updates via SMS, email, or in-platform notifications, where you have provided your consent to receive such communications.

You can manage your marketing communication preferences at any time through the following channels:

• Account Settings: The Notifications section of your gh999 account dashboard allows you to enable or disable specific types of marketing communications.
• Unsubscribe link: All gh999 marketing emails include a clearly visible unsubscribe link that immediately removes you from the relevant mailing list upon clicking.
• Support request: You may contact our support team at [email protected] to opt out of all marketing communications across all channels.

Please note that opting out of marketing communications does not affect transactional communications — we will continue to send you important account notifications such as deposit confirmations, withdrawal status updates, KYC requests, and security alerts regardless of your marketing preferences, as these are necessary for the operation of your account.

gh999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes to applicable law and regulatory requirements, and improvements to our platform and services. The "Effective Date" displayed at the top of this page always reflects the date of the most recent revision.

Where a material change is made to this Privacy Policy — particularly any change that affects the purpose for which your data is processed, the categories of third parties with whom it is shared, or your rights as a data subject — gh999 will take reasonable steps to notify you in advance via the email address registered to your account or via a prominent notice displayed upon your next login.

Your continued use of the gh999 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of those changes. If you do not agree with a material change to this policy, you may close your account by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gh999 processes your personal data, please contact our support team using the following details:

• Live Chat: Available 24/7 directly from the gh999 platform. Our agents are fluent in both Urdu and English and can assist with privacy enquiries in real time. Average response time: 3–5 minutes.
• Support Email: [email protected]
• General Inquiries: [email protected]

For formal data rights requests — including access requests, erasure requests, and objections to processing — please contact us in writing via email with your full name, registered mobile number, and a clear description of your request. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. By continuing to use the gh999 platform, you confirm your acknowledgement of this Privacy Policy in its current form.