Effective Date: 1 January 2026
Section 01
1. Introduction
This Privacy Policy ("Policy") describes how sh999 ("sh999", "we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "your", "Player") who access or use the sh999 online gaming platform available at sh999.bio, including all associated sub-domains, mobile interfaces, and related services (collectively, the "Platform").
sh999 is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. We understand that Pakistani players trust us with sensitive financial and personal information every time they register, deposit, or place a bet — and we take that responsibility seriously.
By registering an account on sh999, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the sh999 Platform.
This Policy should be read together with sh999's Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.
Section 02
2. Data We Collect
sh999 collects the following categories of personal data about you:
| Category |
Examples |
Purpose |
| Identity Data |
Full name, date of birth, CNIC / passport number, gender |
KYC verification, age confirmation (21+), account registration |
| Contact Data |
Email address, mobile number, residential address (city, province) |
Account communication, support, regulatory correspondence |
| Financial Data |
JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, transaction history |
Processing deposits and withdrawals in PKR, anti-money laundering checks |
| Account Data |
Username, hashed password, account preferences, session history, bet records, game history |
Platform operation, customer support, responsible gaming monitoring |
| Technical Data |
IP address, device type, browser type and version, operating system, time zone |
Security, fraud prevention, geolocation compliance |
| Usage Data |
Pages visited, features used, session duration, click paths, game sessions played |
Platform improvement, personalisation, responsible gaming analysis |
| Marketing Data |
Promotional preferences, opt-in/opt-out status, bonus redemption history |
Sending relevant offers and updates (only with your consent) |
sh999 does not collect special categories of sensitive personal data (such as health data, biometric data, religious beliefs, or political opinions) unless legally required for responsible gaming purposes (e.g., self-exclusion or problem gambling identification).
Section 03
3. How We Collect Your Data
sh999 collects personal data through the following channels:
- Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion on the sh999 Platform.
- Automated technologies: As you use the Platform, we automatically collect technical and usage data via cookies, server logs, pixel tags, and similar tracking technologies. See Section 7 (Cookies & Tracking) for full details.
- Third-party identity verification providers: When you complete KYC (Know Your Customer) checks, our identity verification partners may share the results of those checks with us, including document verification outcomes and watchlist screening results.
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank provide transaction confirmation data to sh999 to verify deposits and process withdrawals accurately.
- Fraud prevention and AML screening services: We may receive data from third-party fraud detection or anti-money laundering screening providers to protect the integrity of the sh999 Platform.
Section 04
4. How We Use Your Data
sh999 uses your personal data for the following purposes:
- Account management: Creating, maintaining, and securing your sh999 player account, including password reset, account recovery, and login security.
- Platform operation: Enabling you to place bets on cricket (PSL, international fixtures), access live casino games, play slots, and use all features of the sh999 Platform.
- Payment processing: Processing your PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank quickly and accurately.
- Identity verification: Conducting KYC checks as required by our licensing obligations to confirm your identity and age (21+ only).
- Responsible gaming: Monitoring your gaming patterns to identify indicators of problem gambling and providing appropriate interventions, deposit limit tools, and self-exclusion options where needed.
- Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
- Customer support: Responding to your queries, resolving disputes, and providing 24/7 live chat support in relation to your sh999 account.
- Legal compliance: Fulfilling our obligations under applicable gaming regulations, anti-money laundering laws, and any lawful regulatory authority requests.
- Marketing communications: Sending you relevant sh999 promotions, PSL season bonuses, new game announcements, and platform updates — but only where you have given your consent to receive such communications. You may withdraw consent at any time.
- Platform improvement: Analysing aggregated usage data to improve the sh999 platform experience, fix bugs, and develop new features for Pakistani players.
sh999 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human oversight. Responsible gaming monitoring involves algorithmic flagging, but all intervention decisions are reviewed by a human member of our player safety team.
Section 05
5. Legal Basis for Processing
sh999 processes your personal data on the following legal bases, depending on the nature of the processing activity:
- Contractual necessity: Processing required to perform our contract with you — specifically, to operate your sh999 account, accept bets, process payments, and provide customer support.
- Legal obligation: Processing required to comply with our obligations under applicable gaming licensing requirements, anti-money laundering regulations, and lawful regulatory authority requests, including KYC identity verification.
- Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time via your account settings or by contacting support.
Section 06
6. Sharing Your Data
sh999 does not sell, rent, or trade your personal data. We share your information only in the following limited circumstances:
- Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the minimum necessary financial data to process your transactions in PKR. These processors are contractually bound to handle your data securely and solely for the purpose of processing payments on our behalf.
- Identity verification providers: Third-party KYC partners receive identity documents and verification data solely to perform the identity and age verification checks required by our licensing obligations.
- Fraud prevention and AML service providers: Specialist screening services may receive transaction and identity data for the purpose of detecting fraud, money laundering, or other prohibited activities.
- Game content providers: Software providers whose games are hosted on sh999 may receive limited session data (such as player ID and bet amounts) strictly necessary for the operation of their games. These providers do not receive your personal contact or financial details.
- Regulatory and legal authorities: sh999 will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts of law when legally required to do so — for example, in connection with anti-money laundering investigations or gaming licence audit requirements.
- Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of sh999's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
All third-party data processors engaged by sh999 are bound by data processing agreements that require them to process your data only on sh999's documented instructions, maintain appropriate security measures, and not engage in further sub-processing without our written approval.
Section 07
7. Cookies & Tracking Technologies
sh999 uses cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:
- Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled as they are required for basic Platform operation.
- Functional cookies: Remember your preferences such as language settings, odds format, and responsible gaming limit configurations so you do not need to re-enter them each visit.
- Analytics cookies: Collect aggregated information about how players use sh999 — which pages are visited most, where users drop off, and how features are used. This data helps us improve the Platform. Analytics cookies are only set with your consent.
- Marketing cookies: Track your visits to sh999 to help us deliver relevant promotional content about sh999 bonuses, PSL betting markets, and new game releases. Marketing cookies are only set with your explicit consent.
You can manage your cookie preferences through the cookie consent banner displayed when you first visit sh999.bio, or at any time via your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
sh999 does not use third-party advertising networks that track your behaviour across other websites for the purpose of targeted advertising outside of the sh999 Platform.
Section 08
8. Data Retention
sh999 retains your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by applicable law and our licensing obligations.
- Active account data: Retained for the duration of your active account relationship with sh999.
- Identity verification and KYC records: Retained for a minimum of five (5) years following account closure, in line with standard anti-money laundering regulatory requirements applicable to internationally licensed gaming operators.
- Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction.
- Responsible gaming records (self-exclusion, limit history): Retained for a minimum of five (5) years to ensure self-exclusion obligations are respected if a player attempts to re-register.
- Customer support records: Retained for three (3) years following the resolution of the query or complaint.
- Marketing consent records: Retained for as long as you hold an active account, and for three (3) years following account closure.
When personal data is no longer required, sh999 securely deletes or anonymises it in accordance with our internal data destruction procedures.
Section 09
9. Data Security
sh999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:
- Encryption: All personal data is encrypted at rest (AES-256) and in transit (TLS 1.3). Passwords are stored as salted cryptographic hashes and are never stored in plain text.
- Access controls: Access to personal data within sh999 is restricted to personnel who have a legitimate operational need. Role-based access controls and multi-factor authentication are enforced for all internal systems.
- Network security: The Platform is protected by firewalls, intrusion detection systems, and regular vulnerability assessments conducted by our security team.
- Third-party security audits: sh999 engages independent security professionals to conduct periodic penetration testing and security reviews of the Platform infrastructure.
- Incident response: sh999 maintains a formal data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players and the relevant regulatory authority as required by applicable law.
While sh999 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for protecting your own sh999 login credentials. Never share your username or password with anyone, and contact sh999 support immediately if you suspect your account has been compromised.
Section 10
10. Your Privacy Rights
As a sh999 player, you have the following rights in relation to your personal data held by sh999. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:
- Right of access: You may request a copy of the personal data sh999 holds about you, along with information about how it is being used.
- Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 8).
- Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, such as while a correction request is being resolved.
- Right to data portability: You may request a copy of personal data you have provided to sh999 in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
- Right to object: You may object to processing of your personal data where sh999 relies on legitimate interests as the legal basis, unless sh999 can demonstrate compelling legitimate grounds that override your interests.
sh999 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days with prior notification to you explaining the reason for the delay.
Section 11
11. Minors & Age Verification
The sh999 Platform is strictly intended for individuals aged 21 years and above. sh999 does not knowingly collect personal data from individuals under the age of 21.
As part of our registration and ongoing KYC process, sh999 conducts age verification checks to confirm that all players meet the minimum age requirement. Where sh999 has reasonable grounds to believe that a player is under 21, the account will be immediately suspended pending investigation, and if the suspicion is confirmed, the account will be permanently closed.
If you are a parent or guardian and believe that a minor has created an account on sh999, please contact our support team immediately via live chat or email. We will investigate and take prompt action to close the account and return any real-money balance to the verified payment method where possible.
sh999 actively supports parental control measures. We recommend that parents and guardians use parental control software to restrict access to online gambling platforms by minors sharing a household device.
Section 12
12. International Data Transfers
sh999 operates as an internationally licensed online gaming platform. Your personal data may be processed and stored on servers located outside of Pakistan, including in jurisdictions where data protection laws may differ from those in your home country.
Where sh999 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data, including:
- Transfers to countries recognised as providing an adequate level of data protection by the relevant licensing authority.
- Standard contractual clauses or equivalent contractual protections with data processors in third countries.
- Binding corporate rules where applicable within our group of companies.
If you would like further information about the international transfer safeguards applicable to your data, please contact our support team.
Section 13
13. Changes to This Privacy Policy
sh999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform functionality. When material changes are made, sh999 will notify registered players via email or an on-platform notification prior to the changes taking effect.
The "Last Updated" and "Effective Date" shown at the top of this Policy reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how sh999 handles your personal data.
Your continued use of the sh999 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should cease using the Platform and request account closure.