Privacy Policy

1Introduction

This Privacy Policy (hereinafter referred to as "the Policy") sets out the basis on which ST999 (hereinafter referred to as "ST999", "we", "us" or "our") collects, processes, stores, shares and protects the personal data of users (hereinafter referred to as "you", "your" or "the User") who access or use the ST999 platform at https://st999.cam and all associated pages and content (collectively, "the Platform").

ST999 is an English-language online betting and casino information platform serving users across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. ST999 is an information publisher only — we do not operate gambling services, process financial transactions on behalf of users, or hold a Pakistani gambling licence.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, please discontinue your use of the Platform immediately.

2Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and usage data.
• "Processing" means any operation or set of operations performed on personal data, including collection, storage, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, ST999.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a written agreement.
• "Cookies" means small text files placed on a user's device by a website for the purpose of recording browsing activity and preferences.
• "Consent" means any freely given, specific, informed and unambiguous indication of a user's agreement to the processing of their personal data.
• "User" means any individual who accesses or uses the Platform in any manner, whether or not they have a registered account.

3Data Controller

ST999 is the Data Controller responsible for your personal data collected through the Platform. All enquiries relating to data protection, privacy rights or this Policy should be directed to the ST999 support team using the contact details provided in Section 17 of this Policy.

ST999 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. Where we engage third-party Data Processors to assist in platform operations, we require them to process personal data only on our documented instructions and to implement appropriate security measures.

4Data We Collect

Depending on how you interact with the Platform, ST999 may collect the following categories of personal data:

4.1 Account Registration Data

• Full name and preferred display name;
• Email address;
• Date of birth (for age verification purposes);
• City or region of residence (e.g., Karachi, Lahore, Islamabad);
• Password (stored in encrypted form — ST999 cannot retrieve your password in plain text).

4.2 Usage and Technical Data

• IP address and approximate geographic location;
• Browser type, version and language settings;
• Device type, operating system and screen resolution;
• Pages visited, time spent on each page and navigation paths;
• Referring URL (the page or link that directed you to ST999);
• Session timestamps and frequency of visits.

4.3 Communications Data

• Content of support requests, feedback submissions or enquiries you send to ST999;
• Your email address when you contact us directly;
• Records of correspondence for quality assurance and dispute resolution purposes.

4.4 Cookie and Tracking Data

Data collected through cookies and similar technologies as described in Section 9 of this Policy, including session identifiers, preference settings and analytics data.

ST999 does not collect sensitive special-category data such as national identity card numbers, biometric data, financial account credentials, or health information. We do not collect payment card details — all financial transactions occur directly between users and third-party gambling operators.

5How We Collect Your Data

ST999 collects personal data through the following means:

• Directly from you — when you register an account, complete a form, send us an email or otherwise voluntarily provide information;
• Automatically — when you browse the Platform, through server logs, cookies and analytics tools that record technical and behavioural data;
• From third-party analytics providers — we may use trusted analytics services to aggregate and analyse usage patterns across the Platform. Such providers act as Data Processors under our instructions.

6Legal Basis for Processing

ST999 processes personal data only where a lawful basis exists. The applicable bases are set out in the table below:

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact us using the details in Section 17.

7How We Use Your Data

ST999 uses the personal data we collect for the following purposes:

• To create, manage and maintain your ST999 account;
• To verify that you meet the minimum age requirement of 18 years, or such higher minimum as required by the relevant operator's licensing jurisdiction;
• To respond to your support requests, feedback and correspondence;
• To monitor, analyse and improve the performance, functionality and editorial content of the Platform;
• To detect, investigate and prevent fraudulent activity, unauthorised access and other security incidents;
• To send you service-related notifications such as account confirmations and policy updates;
• To send you optional marketing communications about ST999 content and features — only where you have provided explicit consent;
• To comply with applicable legal obligations, including responding to lawful requests from competent authorities;
• To enforce our Terms & Conditions and other platform policies.

ST999 does not use your personal data for automated decision-making or profiling that produces significant legal or similarly significant effects on you without your explicit consent.

8Data Sharing & Disclosure

ST999 does not sell, rent or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

8.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in the operation of the Platform, including hosting providers, analytics platforms, email delivery services and security monitoring tools. These providers act as Data Processors and are contractually required to process personal data only on ST999's instructions and to maintain appropriate security standards.

8.2 Legal Compliance and Law Enforcement

ST999 may disclose personal data where required to do so by law, court order, or lawful request from a competent authority, including regulatory bodies or law enforcement agencies. We will, where legally permissible, notify you of any such disclosure request.

8.3 Business Transfers

In the event of a merger, acquisition, asset sale or restructuring involving ST999, your personal data may be transferred to the successor entity as part of that transaction. We will provide reasonable notice of any such transfer and the applicable privacy arrangements.

8.4 With Your Consent

ST999 will not share your personal data with third-party gambling operators or any other party for their own marketing or commercial purposes without your explicit prior consent.

References in ST999's content to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for informational context only. ST999 does not share user data with any of these institutions and does not imply any affiliation or endorsement by them.

9Cookies & Tracking Technologies

ST999 uses cookies and similar technologies — including local storage, pixel tags and session identifiers — to operate and improve the Platform. The categories of cookies we use are described below:

You can control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. Disabling analytics or marketing cookies will not affect your ability to browse ST999's content.

10Data Retention

ST999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are:

• Account data — retained for the duration of your active account plus a period of up to 24 months after account closure, to facilitate dispute resolution and comply with legal obligations;
• Usage and technical data — retained for up to 26 months from the date of collection for analytics and security purposes;
• Support correspondence — retained for up to 36 months to maintain a record of interactions and support quality assurance;
• Cookie and tracking data — retained in accordance with the duration periods specified in Section 9.

When personal data is no longer required, ST999 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data, which can no longer be attributed to any individual, may be retained indefinitely for statistical and research purposes.

11International Data Transfers

ST999 operates internationally and may store or process your personal data on servers located outside Pakistan. If your data is transferred to a jurisdiction that does not provide the same level of data protection as your home jurisdiction, ST999 will implement appropriate safeguards to protect your data, which may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Data processing agreements imposing security and confidentiality obligations on recipients;
• Transfer only to jurisdictions recognised as providing an adequate level of data protection.

By using the Platform from Pakistan or any other jurisdiction, you acknowledge that your data may be transferred to and processed in countries outside your own.

12Data Security

ST999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols;
• Encryption of passwords and sensitive fields at rest using industry-standard hashing algorithms;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and vulnerability monitoring of platform infrastructure;
• Incident response procedures to detect, report and address data security breaches promptly.

Despite these measures, no method of data transmission over the internet or electronic storage is entirely secure. ST999 cannot guarantee absolute security and will not be liable for any breach that occurs despite reasonable precautions. If you suspect that your ST999 account has been compromised, please contact us immediately using the details in Section 17.

13Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by ST999:

• Right of Access — you may request a copy of the personal data ST999 holds about you;
• Right to Rectification — you may request that inaccurate or incomplete personal data be corrected;
• Right to Erasure — you may request that ST999 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations;
• Right to Restriction — you may request that ST999 restrict the processing of your personal data in certain circumstances;
• Right to Data Portability — you may request a copy of your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to Object — you may object to processing based on legitimate interests, including for direct marketing purposes;
• Right to Withdraw Consent — where processing is based on your consent, you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, please contact ST999 using the details set out in Section 17. We will respond to all valid requests within 30 calendar days. We may need to verify your identity before actioning a request. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

14Children's Privacy

The ST999 Platform is strictly intended for adults aged 18 years or older, or such higher minimum age as required by the relevant operator's licensing jurisdiction. ST999 does not knowingly collect personal data from any person under the age of 18.

If ST999 becomes aware that personal data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data from our systems. If you believe that a minor has provided personal data to ST999, please contact us immediately using the details in Section 17.

15Third-Party Links & Platforms

ST999's editorial content may reference or describe third-party gambling operators, sports leagues including PSL, T20 tournaments and ICC events, and payment services such as Easypaisa, JazzCash and Raast. Such references are for informational context only. ST999 does not control the privacy practices of any third-party platform, and this Privacy Policy does not apply to any third-party website, application or service.

We strongly encourage you to review the privacy policy of any third-party platform you visit or engage with before providing your personal data to them. ST999 accepts no responsibility for the privacy practices or data handling of third parties.

16Amendments to This Policy

ST999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law or platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

We may provide additional notice of significant changes through the Platform. Your continued use of the Platform following any amendment constitutes your acceptance of the revised Policy. If you do not agree with any change, you must discontinue your use of the Platform and may request deletion of your data in accordance with Section 13.

17Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ST999 handles your personal data, please contact our support team. All privacy-related requests are handled confidentially and responded to within 30 calendar days.

Support email: [email protected] — displayed as plain text only. Please copy and paste this address into your email client. Do not click — there is no clickable link.