ST999 protects the data of every Pakistani player — from Lahore to Karachi and everywhere in between — with the same rigorous security standards.
At ST999, we take your privacy seriously. This Privacy Policy explains exactly what personal information we collect from Pakistani players, why we collect it, how we protect it, and what rights you have over it. We have written this in plain English — no legal jargon walls — because you deserve to understand what happens to your data.
ST999 protects the data of every Pakistani player — from Lahore to Karachi and everywhere in between — with the same rigorous security standards.
This Privacy Policy applies to all users of the ST999 Platform at st999.biz, including the website, any mobile-optimised version, and all associated services. "ST999", "we", "us", or "our" refers to the operator of this Platform. "You" or "Player" means any registered or browsing user. This Policy forms part of the ST999 Terms and Conditions. By using the ST999 Platform, you acknowledge that you have read and understood this Privacy Policy.
Privacy is not a tick-box exercise at ST999. Pakistani players are increasingly aware of how their data is used online, and rightly so. You share real personal information with us — your name, your CNIC number, your Easypaisa account, your mobile number — and you deserve a straight answer about what we do with it.
The short version of this Privacy Policy is this: ST999 collects the minimum personal data necessary to run the Platform, process your PKR payments securely, verify your identity, and keep your account safe. We do not sell your data to advertisers. We do not share it with people who do not need it. We protect it with the same encryption standards used by Pakistan's major financial institutions. And we give you clear tools to see, correct, or delete your data when you want to.
The full version — which follows below — goes into the legal and technical detail. But if you ever want to understand the "why" behind any of it, our support team at support@st999.biz is available 24/7 to explain in plain terms.
ST999 collects personal data in three ways: information you provide directly when registering or using the Platform, information generated automatically by your use of the Platform, and information received from third parties during verification processes. Here is a breakdown of each category:
Information you provide directly:
Information collected automatically:
Information from third parties:
Every piece of data ST999 collects has a specific, documented purpose. We do not collect data speculatively or "because it might be useful later." Below is a table mapping each data category to the reason we collect it:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Name, DOB, CNIC | Account creation, age & identity verification | Contractual necessity |
| Mobile number, email | Account communication, security alerts, support | Contractual necessity |
| Address | Identity verification, fraud prevention | Legal obligation |
| Payment details | Processing PKR deposits & withdrawals | Contractual necessity |
| Gaming activity logs | Account management, responsible gaming monitoring | Legitimate interest |
| IP address / device data | Security, fraud detection, platform optimisation | Legitimate interest |
| Support correspondence | Resolving your queries, service improvement | Contractual necessity |
| Marketing preferences | Sending you relevant promotions (if opted in) | Consent |
When we process your data on the basis of "legitimate interest," we have carried out a balancing test to confirm that our interest does not override your privacy rights. You may request a copy of that balancing assessment by contacting support.
From football to cricket — every ST999 player in Pakistan has the same privacy rights and the same high standard of data protection.
Because all ST999 transactions are in Pakistani Rupees and processed via Pakistani payment methods, the payment data involved is Pakistan-specific. When you deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or a Pakistani bank card, ST999 receives only a transaction reference and confirmation of success — not your full payment credentials.
Specifically, ST999 does not store your Easypaisa PIN, your JazzCash password, your bank account number in full, or your full card number. This data is processed directly and exclusively by the payment provider and is never transmitted to or stored on ST999 servers. What ST999 records is:
This minimum data set is necessary to confirm your deposits, process your withdrawals, resolve any payment disputes, and comply with our anti-money-laundering obligations. All payment data is stored in encrypted form and access is restricted to personnel directly involved in payment operations.
ST999 uses cookies and similar technologies on the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies are not viruses or spyware — they are standard web technology used by virtually every website in the world, including Pakistani banking apps and e-commerce platforms.
Here is what the different types of cookies on ST999 do:
ST999 does not use third-party advertising cookies that track you across other websites. Analytics data collected by ST999 is aggregated and anonymised — it tells us that a certain number of players visited the slots page on a given day, not that a specific named player did so.
You can control cookie preferences through your browser settings. Disabling essential cookies will prevent the ST999 Platform from functioning correctly — login and game play depend on session cookies.
ST999 does not sell your personal data to anyone. Full stop. The following is the complete list of parties with whom ST999 shares player data, along with the reason for each:
In every case of data sharing, ST999 applies the principle of data minimisation — only sharing the specific fields that the third party needs for the specific purpose, nothing more.
ST999 PSL cricket betting from Skardu to Sindh — player data across all of Pakistan is protected by the same security infrastructure.
Data security at ST999 is not just a policy document — it is an active, ongoing technical commitment. Here are the specific security measures protecting your data on the ST999 Platform:
ST999 keeps your personal data for as long as your account is active and for a defined period after account closure. The retention periods below are the standard ST999 data retention schedule:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | Legal / regulatory obligation |
| Identity verification documents | Duration of account + 5 years | Anti-money-laundering requirements |
| Transaction records (PKR) | Duration of account + 7 years | Financial records obligation |
| Gaming activity logs | Duration of account + 3 years | Responsible gaming, dispute resolution |
| Support correspondence | 3 years from last interaction | Service quality, dispute resolution |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Technical/security logs | 12 months | Security incident investigation |
After the relevant retention period expires, your data is securely deleted or anonymised (converted to aggregate statistics that cannot be linked back to you). Extended retention may apply in specific circumstances, such as an ongoing legal dispute or a regulatory investigation.
You have the following rights over your personal data held by ST999. You can exercise any of these rights by contacting us at support@st999.biz with the subject line "Privacy Rights Request":
ST999 will never charge you a fee to exercise your privacy rights. All requests are handled by our privacy team and responded to within 30 calendar days, or 60 days for complex or high-volume requests (with advance notice given to you).
The ST999 Platform is intended exclusively for adults aged 18 and over. ST999 does not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use the ST999 Platform, register an account, or provide any personal information.
During registration, all players must confirm that they are 18 or over. ST999 verifies this through document-based KYC checks. If ST999 discovers or has reason to believe that personal data has been collected from a minor, the account will be immediately suspended and the data will be deleted as soon as practicable, in accordance with our regulatory obligations.
If you are a parent or guardian and believe your child has accessed or registered on ST999, please contact us immediately at support@st999.biz. We will investigate and take prompt action.
ST999 may send you promotional communications — bonus offers, seasonal promotions, PSL betting specials, new game announcements — by SMS and email if you have opted in to receive marketing at the time of registration or subsequently through your account settings.
Opting in to marketing is completely voluntary. Refusing or withdrawing marketing consent has no effect on your ability to use the ST999 Platform, access games, or receive service communications (such as deposit confirmations, withdrawal notifications, and security alerts — these are sent regardless of marketing preference as they are part of the service).
You can withdraw your marketing consent at any time by:
ST999 will never send marketing communications to players on the self-exclusion list, players who have activated cooling-off periods, or players who have clearly indicated they do not wish to receive marketing. Responsible gaming takes precedence over promotional activity.
ST999 may update this Privacy Policy from time to time to reflect changes in our data practices, in the Platform's functionality, or in applicable law. When we make changes, we will update the "Last Updated" date at the top of this page.
For significant changes that affect your rights or how we use your data in a materially different way, ST999 will notify registered players by email at least 14 days before the changes take effect. For minor clarifications or non-material updates, the updated policy will be published without advance notice.
Your continued use of the ST999 Platform following a policy update constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure and the return of your PKR balance by contacting support before the changes take effect.
For any questions, requests, or concerns related to your personal data and this Privacy Policy, please get in touch with the ST999 privacy team. We respond to all privacy-related enquiries within 48 hours and complete all formal rights requests within 30 calendar days.
When submitting a privacy rights request, please include your registered mobile number or username so we can locate your account. You may also be asked to provide identity verification before we can action certain requests — this is to protect your data from being disclosed or deleted as a result of a request made by someone other than you.
These are concrete, verifiable protections — not promises that disappear in the fine print.
Exercise any of these rights by emailing support@st999.biz with "Privacy Rights Request" in the subject line.
Gambling is entertainment — never let it become a source of financial or personal stress. ST999 provides deposit limits, loss limits, session controls, and self-exclusion tools directly in your account settings. For support resources available in Pakistan, visit Responsible Gaming. Full rules in our Terms and Conditions. 18+ only.