Privacy Policy

1 Introduction

SH999 ("SH999", "we", "us", "our") operates the online entertainment platform accessible at sh999.cam (the "Platform"). This Privacy Policy ("Policy") describes how SH999 collects, uses, discloses, stores and protects the personal information of individuals ("User", "you", "your") who access or use the Platform.

This Policy applies to all personal data collected by SH999 through the Platform, including data provided during account registration, identity verification, deposits and withdrawals, customer support interactions and general use of the website. It should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.

SH999 primarily serves users located in Pakistan. Where payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah are mentioned in the context of data processing, they are referenced as payment processor categories only. Their inclusion does not imply endorsement of this Platform by those providers.

2 Definitions

The following terms carry the meanings below throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, IP address, financial account details and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, deletion and any other handling.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, SH999 acts as Data Controller in respect of User data collected through the Platform.
• "Data Processor" — a third party that processes Personal Data on behalf of SH999 under a contractual data processing agreement.
• "KYC" — Know Your Customer; the identity verification process applied to User accounts before withdrawals and at other points deemed necessary for platform security.
• "Consent" — freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their Personal Data for a defined purpose.
• "Cookies" — small text files placed on a User's device by the Platform to store preference and session information.

3 Data We Collect

SH999 collects Personal Data through several channels. The categories of data collected and the circumstances of collection are described below.

3.1 Data Provided by You

3.2 Data Collected Automatically

SH999 does not knowingly collect sensitive personal data beyond what is required for KYC and fraud prevention. Where a User voluntarily discloses sensitive information in a support context, it will be treated with the highest level of confidentiality.

4 Legal Basis for Processing

SH999 processes Personal Data only where a lawful basis exists. The bases relied upon for different categories of processing are as follows:

• Contractual Necessity: Processing required to provide the Platform to you, including account management, deposit and withdrawal processing, game delivery and customer support.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering obligations, KYC requirements and fraud-prevention mandates.
• Legitimate Interests: Processing necessary for SH999's legitimate business interests, including platform security monitoring, fraud detection, responsible-gambling compliance and internal analytics, where those interests are not overridden by your rights.
• Consent: Processing for which your specific consent has been obtained, including the sending of direct marketing communications. You may withdraw consent for consent-based processing at any time without affecting processing conducted prior to withdrawal.

5 How We Use Your Data

SH999 uses collected Personal Data for the purposes described below:

5.1 Platform Operation

To create and manage your Account; to process deposits and withdrawals; to provide access to sports betting, casino, slot and instant game services; and to verify your identity and age in compliance with our Terms & Conditions.

5.2 Responsible Gambling

To monitor usage patterns for indicators of problem gambling behaviour; to apply limit settings you have established on your Account; to enforce self-exclusion requests; and to contact you proactively where platform data indicates a potential responsible gambling concern.

5.3 Security & Fraud Prevention

To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering and other prohibited conduct as defined in the Terms & Conditions. This includes automated profiling of session and transaction data for risk assessment purposes.

5.4 Customer Support

To respond to queries, complaints and account requests received via Live Chat, email or the Help Centre. Support correspondence is retained for quality assurance and audit purposes.

5.5 Legal Compliance

To comply with applicable regulatory requirements, respond to lawful requests from competent authorities and maintain records required for legal or audit purposes.

5.6 Marketing Communications

Where you have provided explicit consent, to send promotional offers, bonus notifications and platform updates by email or in-platform message. You may withdraw this consent at any time via your Account settings.

5.7 Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving Platform performance, user experience and product development. Aggregated analytics data does not identify individual users.

6 Data Sharing & Disclosure

SH999 does not sell your Personal Data. Data may be shared in the following circumstances:

6.1 Service Providers (Data Processors)

SH999 engages third-party service providers to assist in Platform operations. These providers act as Data Processors and are contractually bound to process Personal Data only in accordance with SH999's instructions and applicable data protection standards. Categories of processor include:

• Payment processing providers (handling transaction data for deposit and withdrawal facilitation);
• Identity verification and KYC service providers;
• Fraud detection and anti-money-laundering screening providers;
• Customer support platform providers;
• Cloud hosting and infrastructure providers;
• Analytics and platform performance monitoring tools.

6.2 Legal & Regulatory Disclosure

SH999 may disclose Personal Data where required to do so by applicable law, court order, regulatory instruction or in response to a lawful request from a competent governmental or law enforcement authority. SH999 will endeavour to notify affected users of such disclosures where legally permissible to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of SH999's business or assets, Personal Data held by SH999 may form part of the transferred assets. Users will be notified of any such transfer and any material change to the applicable privacy policy prior to transfer completion.

7 Cookies & Tracking Technologies

SH999 uses cookies, web beacons and similar tracking technologies on the Platform. The categories of cookies used and their purposes are set out below.

7.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain session state, remember login status and enable core functionality. They cannot be disabled without impairing Platform performance. No consent is required for strictly necessary cookies.

7.2 Functional Cookies

These cookies store user preferences such as language selection and responsible gambling limit display settings. Disabling them may affect personalised features.

7.3 Analytical Cookies

These cookies collect anonymised or aggregated usage data — such as pages visited, session duration and error reports — to help SH999 understand how the Platform is used and identify areas for improvement. Data collected by analytical cookies does not identify individual users in marketing or advertising contexts.

7.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to refuse, delete or selectively accept cookies. Please refer to your browser's help documentation for instructions. Note that disabling certain cookies may affect your ability to use some features of the Platform.

8 Data Retention

SH999 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligation. The general retention principles applied by SH999 are as follows:

• Account and identity data: Retained for the duration of the Account and for a minimum period of five (5) years following Account closure, or such longer period as required by applicable anti-money-laundering or regulatory obligations.
• Transaction data: Retained for a minimum of five (5) years from the date of each transaction for audit, fraud-prevention and legal compliance purposes.
• KYC documents: Retained for the period required by the operator's license jurisdiction, typically a minimum of five (5) years following the cessation of the business relationship.
• Support correspondence: Retained for a period of three (3) years from the date of the interaction, unless a dispute or legal obligation requires longer retention.
• Marketing consent records: Retained for as long as marketing activity is conducted and for a period sufficient to demonstrate consent history.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with SH999's data disposal procedures.

9 Data Security

SH999 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction and alteration. These measures include:

• TLS encryption for all data transmitted between the Platform and Users;
• Encryption of Personal Data at rest using industry-standard algorithms;
• Role-based access controls limiting Personal Data access to authorised personnel;
• Regular security monitoring and vulnerability assessment;
• Staff training on data protection and information security obligations.

Notwithstanding these measures, no method of electronic storage or transmission over the internet is entirely secure. SH999 cannot provide an absolute guarantee of security but commits to maintaining appropriate measures proportionate to the risk presented by the data processed.

In the event of a data breach that is likely to result in risk to User rights and freedoms, SH999 will notify affected Users and, where required, relevant supervisory authorities without undue delay.

10 International Data Transfers

SH999 operates globally and may transfer Personal Data to service providers or infrastructure located outside your country of residence, including outside Pakistan. Such transfers occur only where:

• The destination country provides an adequate level of data protection as determined by the operator's applicable regulatory framework; or
• Appropriate safeguards have been implemented, such as contractual data processing agreements incorporating standard data protection clauses; or
• The transfer is necessary for the performance of the contract between you and SH999 (e.g., processing a payment through an international payment processor).

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions outside Pakistan. SH999 takes reasonable steps to ensure that any such transfer complies with applicable data protection standards.

11 Your Rights

Subject to applicable law and any overriding legal obligations, you hold the following rights in respect of your Personal Data held by SH999. To exercise any of these rights, please contact SH999 using the details provided in Section 15.

SH999 will respond to rights requests within thirty (30) days where practicable. We may ask you to verify your identity before processing any rights request. Where a request is refused, SH999 will provide written reasons.

12 Children & Minors

The SH999 Platform is strictly restricted to adults aged eighteen (18) years or older, or the higher minimum age required by the operator's license jurisdiction. SH999 does not knowingly collect Personal Data from persons under the applicable minimum age.

If SH999 becomes aware that Personal Data has been collected from a minor, it will take immediate steps to delete that data, close the associated Account and, where applicable, report the matter in accordance with its responsible gambling obligations.

If you believe a minor has registered an Account on the Platform, please contact SH999 Support immediately via the channels described in Section 15.

13 Third-Party Links

The SH999 Platform does not currently include links to external third-party websites other than those required for platform functionality. Should the Platform in future include links to third-party sites, SH999 is not responsible for the privacy practices of those sites. Users are encouraged to review the privacy policy of any third-party site they visit independently of SH999.

14 Policy Amendments

SH999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. The version date displayed at the top of this page indicates when the Policy was most recently reviewed.

Where amendments are material, SH999 will endeavour to notify Users through a platform notification or email to the registered address. Your continued use of the Platform following publication of an amended Policy constitutes acceptance of the revised terms. If you do not agree to any amendment, you should cease use of the Platform and request Account closure pursuant to the Terms & Conditions.

15 Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your Personal Data, please contact SH999 through the following channels:

• Live Chat: Available via the Platform Help Centre after login — the fastest route for urgent data queries.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" to ensure prompt routing.
• Help Centre: Accessible after login for self-service data guides, rights-request forms and support ticket submission.

When submitting a rights request, please include your registered username, the nature of your request and sufficient information to verify your identity. SH999 will not action rights requests where we cannot adequately verify the identity of the requesting individual.