We know privacy matters to Pakistani players. This policy explains clearly what information M 999 collects, why we collect it, how we protect it, and what rights you have over your own data. No legal jargon, just plain English.
Six things M 999 commits to on data privacy — before you read the full policy below.
All personal data and payment information transmitted to and from M 999 is encrypted using industry-standard TLS protocols. Your CNIC details, payment method information and account credentials are never stored or transmitted in plain text.
M 999 does not sell, rent or trade your personal information to any third party for marketing purposes. Your data is used only for the purposes described in this policy — running your account, processing payments, and keeping the platform secure.
M 999 only collects the data that is genuinely necessary to operate your account, verify your identity, process payments and comply with legal obligations. We do not collect information beyond what is needed for these specific purposes.
You have the right to access, correct, and in certain circumstances request deletion of the personal data M 999 holds about you. These rights can be exercised by contacting M 999 support at any time. Requests are handled within a reasonable timeframe and without charge.
The only third parties with whom M 999 shares your personal data are those directly necessary to operate the platform — payment processors, identity verification providers and fraud prevention services. All such parties are contractually required to maintain the confidentiality and security of your data.
In the unlikely event of a data security incident that affects your personal information, M 999 will notify affected players promptly via email and through an on-screen notice when you next log in. We will also take immediate steps to contain and investigate the incident.
This Privacy Policy describes how M 999 — operating through m999-khelo.com — collects, uses, stores and protects the personal information of players who register and use the platform. It applies to all services offered on M 999, including the online casino, sports betting, live dealer games, crash games and all promotional activities.
Privacy is something M 999 takes seriously. When you hand over personal information to create an account or make a deposit, you're trusting us to handle it responsibly. This policy explains exactly what that means in practice — what we collect, why we collect it, who might see it, how long we keep it, and what you can do about it.
By registering on M 999 and using any part of the platform, you confirm that you have read this Privacy Policy and understand how your personal data is processed. If you are not comfortable with any part of this policy, you should not create an account or continue using M 999. If you have questions about any specific aspect, contact M 999 support directly — the team is available around the clock via live chat.
Plain English summary: This policy is about your data and your privacy. We've written it to be readable, not to hide anything. If something isn't clear, ask us. We would rather answer a question upfront than have a player feel uncertain about where their information goes.
M 999 is an online gaming platform operating at m999-khelo.com, serving registered players in Pakistan. When this policy refers to "M 999", "we", "us" or "our", it means the operator of m999-khelo.com in its capacity as the data controller responsible for the personal information collected through the platform.
As the data controller, M 999 is responsible for deciding how and why your personal data is processed. We are accountable for ensuring that processing is lawful, fair and transparent, and that adequate technical and organisational measures are in place to protect the security of your information.
If you need to raise a data-related query, concern or request, you can contact the M 999 data team at support@m999-khelo.com. All privacy-related requests are handled with priority and will receive a substantive response within five business days.
M 999 collects personal data through several channels — directly from you during registration and account management, automatically through your use of the platform, and in some cases from third-party verification services. Below is a full breakdown of the categories of data collected.
Note on payment data: M 999 does not store your full card number, CVV or banking passwords. Payment transactions are processed through encrypted third-party payment gateways. M 999 receives a transaction reference and masked account identifiers only — sufficient to reconcile your account but not to process an independent transaction.
The table below sets out each purpose for which M 999 processes personal data and the type of data involved. M 999 does not use your personal data for any purpose not listed here without first obtaining your explicit consent.
M 999 does not use automated decision-making or profiling in a way that produces legal or significantly negative effects on players. Fraud monitoring is automated but any account suspension resulting from it is reviewed by a human member of the M 999 security team before being enforced.
M 999 processes personal data on the following legal bases depending on the nature of the processing activity:
M 999 does not sell, rent or exchange your personal data with any third party for their own marketing or commercial purposes. The only circumstances under which M 999 shares your personal data with third parties are described below.
To process your deposits and withdrawals, M 999 shares necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking networks, or card processing networks. These providers receive only the data necessary to complete the specific transaction and are bound by their own privacy and security obligations as financial service providers operating in Pakistan.
Where M 999 uses a third-party service to verify your identity documents — such as CNIC verification — your identity data is shared with that provider solely for verification purposes. These providers are contractually restricted from using your data for any other purpose and are required to maintain appropriate security standards.
The games on M 999's platform are supplied by third-party game developers. When you launch a game, basic session data — including your player identifier and bet amounts — is transmitted to the game provider's servers to run the game. Game providers do not receive your name, CNIC or payment details. All game providers used by M 999 are required to meet data protection standards as part of their licensing arrangements.
M 999 uses third-party fraud prevention tools that analyse device and behavioural data to identify suspicious account activity. These services process data on M 999's behalf under strict data processing agreements and do not retain your personal data beyond the period necessary for analysis.
M 999 may disclose personal data to law enforcement, regulatory authorities or other legal bodies where required to do so by applicable law, court order or legal process. M 999 will notify affected players of such disclosures where legally permissible to do so.
Our commitment: Every third party that receives M 999 player data for operational purposes is bound by a data processing agreement that prohibits them from using that data for their own commercial purposes, sharing it further without authorisation, or retaining it beyond the period necessary for the specific task.
M 999 uses cookies and similar technologies on m999-khelo.com to enable essential platform functionality, improve your experience, and understand how the platform is being used. A cookie is a small text file placed on your device when you visit the site.
Essential cookies are required for the M 999 platform to function. They manage your login session, remember your language preferences, maintain your account security state, and enable core features like the game lobby and deposit interface. These cookies cannot be disabled without breaking core platform functionality.
M 999 uses analytics tools to understand how players navigate the platform — which pages are most visited, where players encounter problems, and how game loading performance compares across different devices and networks. This data is collected in aggregate and is used to improve the M 999 experience for Pakistani players. You can opt out of analytics cookies by adjusting your browser settings.
Certain cookies are used specifically for fraud detection and account security — for example, to identify whether a login is being attempted from an unusual device or location. These security cookies are part of M 999's commitment to keeping your account safe and cannot be disabled.
You can manage most cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your ability to use certain M 999 features. Disabling essential cookies will prevent you from staying logged in to your M 999 account.
M 999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:
When personal data reaches the end of its retention period, M 999 securely deletes or anonymises it. Secure deletion means the data cannot be recovered or reconstructed. Where deletion is not technically possible for certain data types, M 999 ensures the data is isolated and no longer actively processed.
As a M 999 player, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of them, contact M 999 support via live chat or email support@m999-khelo.com. Requests are handled within five business days and there is no charge for exercising these rights.
You can request a copy of all personal data M 999 holds about you. We'll provide it in a readable format within five business days.
If any data M 999 holds about you is inaccurate or incomplete, you have the right to have it corrected. Update minor details directly in your account settings or contact support for larger corrections.
In certain circumstances, you can request that M 999 delete your personal data. This right applies where the data is no longer necessary, where consent has been withdrawn and no other basis exists, or where processing has been unlawful. Note that legal retention obligations may prevent full deletion.
You can ask M 999 to restrict processing of your data in certain circumstances — for example, while the accuracy of data you've disputed is being verified. Restricted data is retained but not actively processed.
Where processing is based on your consent or on contract performance, you can request that M 999 provide your data in a structured, machine-readable format so you can transfer it to another service if you wish.
You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have an absolute right to object to direct marketing, which M 999 will action immediately upon request with no questions asked.
How to exercise your rights: Contact M 999 support via live chat on m999-khelo.com or email support@m999-khelo.com. Please provide your registered email address and a brief description of your request. We may need to verify your identity before actioning the request — this is to protect your data from unauthorised access.
M 999 implements a layered approach to data security, combining technical and organisational controls to protect your personal information against unauthorised access, alteration, disclosure or destruction.
While M 999 takes all reasonable precautions, no online system can guarantee absolute security. Players also have a role in protecting their own accounts — use a strong, unique password, enable any two-factor authentication options available, and never share your login credentials with anyone.
M 999 is strictly an adult platform and is not directed at anyone under the age of 18. M 999 does not knowingly collect personal data from individuals under 18 years of age. If you are under 18, you are not permitted to register or use M 999 under any circumstances.
If M 999 becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, the data will be deleted, and any deposits will be returned. Parents or guardians who believe a minor may have registered on M 999 should contact support immediately at support@m999-khelo.com so the account can be closed and data removed promptly.
M 999 may send you promotional communications about new games, upcoming offers, VIP programme updates and seasonal promotions. These communications are sent only where you have given explicit opt-in consent, either during registration or through your account settings.
You can unsubscribe from M 999 marketing communications at any time by clicking the unsubscribe link in any email, replying "STOP" to any SMS communication, or adjusting your communication preferences in your M 999 account settings. Unsubscription is processed immediately for email and within 24 hours for SMS. Transactional communications — such as withdrawal confirmations, account verification messages and security alerts — are not subject to marketing opt-out as they relate directly to your account.
M 999 does not share your contact details with third parties for their own marketing purposes. Promotional communications are sent by M 999 directly, or by service providers acting on M 999's behalf, and will always be clearly identified as coming from M 999.
M 999 reviews this Privacy Policy periodically and may update it to reflect changes in data processing practices, regulatory requirements, or platform features. When material changes are made — meaning changes that affect how your personal data is used or your rights in relation to it — M 999 will notify you via email to your registered address and/or via an on-screen notification when you next log in.
Minor updates — such as clarifications to existing practices, corrections of typographical errors, or editorial changes that don't alter the substance of the policy — may be made without advance notice. The "last updated" date at the top of this page will be revised in all cases.
If you disagree with material changes to this Privacy Policy, you may close your M 999 account before the changes take effect. Continued use of the M 999 platform after the stated effective date of an amendment constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how M 999 has handled your personal information, please get in touch. M 999's privacy and support team is available to help.
M 999 commits to responding to all privacy-related queries within five business days and to actioning data rights requests within a reasonable timeframe. There is no cost to submitting a privacy request. Where a request is particularly complex or where a large volume of requests has been received simultaneously, M 999 may extend the response period and will notify you of this.
We're here to help: Privacy queries are handled with the same priority as account or payment issues. If something in this policy isn't clear, or if you want to know specifically what M 999 holds about you, just ask. We'd rather you feel fully informed about your data than remain uncertain.
Register your free M 999 account and play with confidence — your personal data is protected, your payments are secure, and your privacy is respected at every step. Deposit via Easypaisa or JazzCash, all in PKR.