ft999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") applies to all personal data processed by ft999 in connection with your use of the ft999.club website and any related mobile-optimised interfaces, applications, and services (collectively, the "Platform"). It covers data collected from registered players, visitors who browse ft999.club without registering, and individuals who contact ft999 through any support channel.

By accessing ft999.club or registering an ft999 account, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the ft999 Platform.

This Policy must be read in conjunction with the ft999 Terms & Conditions, which govern your use of the Platform as a whole. Defined terms used in this Policy carry the same meaning as in the Terms & Conditions unless otherwise stated.

---

2 Data Controller

For the purposes of applicable data protection legislation, ft999 acts as the data controller in respect of all personal data processed through the ft999 Platform. As data controller, ft999 determines the purposes and means by which your personal data is processed and takes full responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about how ft999 handles your personal data, or if you wish to exercise any of your data rights as described in Section 11 of this Policy, you may contact the ft999 Data Privacy team using the contact details provided in Section 15.

---

3 Data We Collect

ft999 collects personal data in several categories depending on the nature of your interaction with the Platform. The table below summarises the categories of personal data we collect and examples of specific data points within each category:

ft999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or health data, except where strictly required for responsible gaming interventions or problem gambling assessments and only with your explicit consent.

---

4 How We Collect Your Data

ft999 collects your personal data through the following channels:

• Direct submission: Data you provide when registering an ft999 account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Data collected automatically when you access ft999.club, including cookies, web beacons, server logs, and device fingerprinting technologies. See Section 8 for full details on our use of cookies.
• Payment processors: Transaction confirmation data and payment status information received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and SadaPay when you conduct a deposit or withdrawal on the Platform.
• KYC and identity verification providers: Identity and age verification data returned by our third-party KYC partners when you submit identity documents for account verification.
• Fraud detection services: Risk scoring data and device reputation signals provided by anti-fraud technology partners to protect the integrity of the ft999 Platform.
• Publicly available sources: In limited circumstances, ft999 may supplement account data with publicly available information to fulfil AML compliance obligations.

---

5 How We Use Your Data

ft999 uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your ft999 account, verifying your identity and age (21+), processing your PKR deposits and withdrawals, and providing you with access to all Platform features.
• Service delivery: Enabling you to place bets on cricket (PSL, international matches, T20Is), play casino games and slots, access live dealer tables, and claim bonuses and promotions.
• KYC and regulatory compliance: Verifying your identity in accordance with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, and maintaining records as required by our international gaming licence conditions.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in the ft999 Terms & Conditions.
• Responsible gaming: Monitoring your gaming patterns to identify potential problem gambling behaviours, applying deposit limits and self-exclusion requests you have set, and contacting you proactively where we identify concerning activity.
• Customer support: Responding to your queries, resolving disputes, and improving the quality of ft999 support interactions.
• Platform improvement: Analysing usage data in aggregated, anonymised form to understand how players interact with ft999 and to improve the Platform's features, performance, and content.
• Marketing communications: Sending you promotional offers, bonus notifications, PSL betting alerts, and new game announcements — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: Responding to court orders, regulatory inquiries, law enforcement requests, and legal proceedings where ft999 is required or permitted by law to disclose personal data.

---

6 Legal Bases for Processing

ft999 processes your personal data on one or more of the following legal bases:

• Performance of a contract: Processing is necessary to provide you with the ft999 service you have contracted for — including account registration, gaming access, and PKR transaction processing.
• Legal obligation: Processing is required to comply with applicable AML, KYC, responsible gaming, and data retention obligations imposed by ft999's international gaming licence and relevant legislation.
• Legitimate interests: Processing is necessary for ft999's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Where ft999 relies on consent as the legal basis — primarily for optional marketing communications and non-essential cookies — you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing.

---

7 Data Sharing & Third Parties

ft999 does not sell, rent, or trade your personal data to third parties for commercial purposes. ft999 may share your personal data with the following categories of third-party recipients only to the extent necessary for the specified purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and SadaPay receive the minimum financial data required to process your PKR deposit or withdrawal transaction securely.
• KYC and identity verification partners: Third-party identity verification services receive your identity document data and date of birth for the sole purpose of age and identity verification.
• Anti-fraud and security providers: Risk management technology providers receive technical and usage data (such as IP address, device fingerprint, and session behaviour) to assess transaction risk and prevent fraudulent activity.
• Game content providers: Slot, table game, and live casino software providers may receive anonymised session data (such as game round IDs and bet amounts) to facilitate game integrity and audit trails. No personally identifiable information is shared with game providers.
• Regulatory authorities and law enforcement: ft999 will disclose personal data to licensing authorities, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where legally required to do so.
• Professional advisors: Lawyers, auditors, and accountants engaged by ft999 may have access to personal data on a confidential basis and strictly limited to their professional mandate.

All third-party data processors engaged by ft999 are contractually required to maintain appropriate technical and organisational security measures, process data only on ft999's documented instructions, and not sub-process data without prior written authorisation from ft999.

---

8 Cookies & Tracking Technologies

ft999.club uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how you use ft999. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and ensure security features operate correctly. They cannot be disabled without breaking core Platform functionality.
• Functional cookies: These cookies remember your in-Platform settings — such as your preferred game lobby layout, currency display, and notification preferences — to personalise your ft999 experience.
• Analytics cookies: ft999 uses anonymised analytics data to understand which features of the Platform are most popular, identify technical issues, and improve the overall user experience for Pakistani players.
• Marketing cookies: Where you have consented, ft999 may use marketing cookies to display relevant promotional content about ft999 games, PSL betting markets, and bonus offers within the Platform.

You may manage your cookie preferences at any time through your ft999 account settings or by adjusting your browser's cookie controls. Disabling strictly necessary cookies will impair your ability to use the Platform. All other cookie categories are optional and will only be activated with your consent.

---

9 Data Retention

ft999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our international gaming licence obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your ft999 account and for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial regulatory requirements applicable to our licensing jurisdiction.
• KYC identity documents: Retained for the duration of your account plus five (5) years from account closure, or longer where required by law.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, to assist with dispute resolution and service quality management.
• Marketing preference records: Retained until you withdraw consent, plus a further three (3) years to evidence compliance with opt-in requirements.
• Technical and usage data (server logs): Retained for up to twelve (12) months from the date of collection, unless required for longer periods in connection with an active fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, ft999 will securely delete or anonymise your personal data so that it can no longer be associated with your identity.

---

10 Data Security

ft999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and ft999.club is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted data storage: Sensitive personal data — including identity document images, financial account details, and authentication credentials — is stored in encrypted form at rest.
• Access controls: Access to personal data within ft999's internal systems is restricted on a strict need-to-know basis, governed by role-based access controls and two-factor authentication for all administrative personnel.
• Payment tokenisation: ft999 does not store raw card numbers or full JazzCash / EasyPaisa wallet credentials. Payment data is tokenised by the relevant payment processor and only a secure token is retained by ft999.
• Regular security audits: ft999's technical infrastructure is subject to periodic penetration testing and vulnerability assessments by independent security professionals.
• Incident response: ft999 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, ft999 will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

---

11 Your Data Rights

Subject to applicable data protection law and the conditions of ft999's international gaming licence, you hold the following rights in respect of your personal data processed by ft999:

• Right of access: You may request a copy of all personal data ft999 holds about you. ft999 will respond to access requests within 30 days of receipt.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data ft999 holds about you. You may also update certain account details directly through your ft999 account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ft999's legal retention obligations. Note that data subject to mandatory AML retention periods cannot be deleted before the applicable period expires.
• Right to restrict processing: You may request that ft999 temporarily restricts the processing of your personal data while a rectification or objection request is being assessed.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to ft999, to the extent technically feasible, for transfer to another service provider.
• Right to object: You may object to ft999's processing of your personal data where that processing is based on ft999's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes.
• Right to withdraw consent: Where ft999 relies on your consent as the legal basis for processing (e.g., marketing emails, optional analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the ft999 Data Privacy team using the contact details in Section 15. ft999 will not charge a fee for responding to data rights requests, except in cases of manifestly unfounded or excessive repeat requests, where a reasonable administrative fee may apply.

---

12 Children & Minors

ft999 takes its obligations with respect to the protection of minors extremely seriously. Age verification is conducted as part of the KYC process for all new accounts. If you believe that a minor has registered an ft999 account or that a minor may be accessing the Platform, please contact ft999 support immediately via live chat or the support email address in Section 15.

Parents and guardians are encouraged to make use of internet filtering software and parental control tools to prevent minors from accessing online gambling platforms. ft999 supports responsible gaming initiatives and cooperates with any verified parental request to block access to the Platform.

---

13 Marketing Communications

ft999 will only send you direct marketing communications — including emails about new bonuses, PSL betting promotions, slot tournament announcements, and personalised offers — where you have expressly opted in to receive such communications at the time of registration or through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by ft999.
• Updating your communication preferences in your ft999 account dashboard under Settings > Notifications.
• Contacting ft999 customer support via live chat and requesting removal from all marketing lists.

Opting out of marketing communications will not affect your receipt of essential service communications — such as transaction confirmations, security alerts, KYC verification requests, and responsible gaming notifications — which are sent on the basis of contractual necessity and cannot be disabled while your account is active.

---

14 Changes to This Policy

ft999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the features and services available on the Platform. When material changes are made, ft999 will notify registered players by email and display a prominent notice on ft999.club for a minimum of 30 days prior to the revised Policy taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the ft999 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue your use of the Platform and contact ft999 support to initiate account closure.

---

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or ft999's handling of your personal data, please contact the ft999 Data Privacy team through any of the following channels:

• Live Chat: Available within the ft999 Platform after logging in — the fastest way to reach a support agent, available 24/7 in Urdu and English.
• Support Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line for faster routing.
• Response Time: ft999 aims to acknowledge all privacy-related enquiries within 48 hours and to resolve data rights requests within 30 calendar days of receipt.

If you are not satisfied with ft999's response to your privacy concern, you have the right to escalate your complaint to the data protection authority or gaming regulatory body in the jurisdiction applicable to your account. Details of the relevant supervisory authority are available in your ft999 account documentation.