we9 Privacy Policy – How We Handle Your Data

1. About This Policy

1.1 This Privacy Policy ("Policy") describes how we9.club collects, processes, stores and shares personal information in connection with the we9 online gaming platform, including the sports betting, live casino, slots, Fruit Shop and any other products accessible via we9.club.

1.2 By registering an account or using the we9 platform, you acknowledge that you have read and understood this Policy. This Policy forms part of the overall agreement between you and we9, alongside the Terms & Conditions.

1.3 we9 is the data controller in respect of personal data collected through we9.club.

2. Data We Collect

we9 collects personal data in the following categories:

2.1 we9 does not collect sensitive categories of personal data (such as medical information, religious beliefs or political opinions) except where strictly required for responsible gaming interventions, and only with your knowledge.

3. How We Use Your Data

we9 uses collected personal data for the following purposes:

• To create and manage your we9 account, verify your identity and process your PKR wallet transactions;
• To provide the gaming services you access, including cricket betting, live casino, slots and Fruit Shop games;
• To process deposits and withdrawals via JazzCash, Easypaisa, bank transfer and other supported channels;
• To comply with applicable anti-money-laundering (AML) and Know Your Customer (KYC) obligations;
• To detect, prevent and investigate fraudulent activity, account abuse, multiple account registration, and other prohibited conduct;
• To provide and improve customer support services;
• To enforce the we9 Terms & Conditions and Responsible Gaming Policy, including applying account restrictions, cooling-off periods and self-exclusion where applicable;
• To send transactional communications — including deposit confirmations, withdrawal status updates and security alerts — to your registered mobile number;
• To send promotional communications, subject to your marketing preferences (see Section 12);
• To analyse aggregate platform usage for product improvement purposes.

4. Legal Basis for Processing

4.1 we9 processes your personal data on the following legal bases:

• Contractual necessity – Processing required to perform our obligations under the we9 Terms & Conditions, including account management and payment processing;
• Legal obligation – Processing required to comply with applicable AML, KYC, age verification and regulatory requirements;
• Legitimate interests – Processing for fraud prevention, platform security, abuse detection and aggregate analytics;
• Consent – Processing for marketing communications, where you have provided explicit opt-in consent.

5. Data Sharing

5.1 we9 does not sell, rent or trade personal data to third parties for their own marketing purposes.

5.2 we9 may share personal data with the following categories of third party, strictly on a need-to-know basis:

• Payment processors – JazzCash, Easypaisa and banking partners for the purpose of processing PKR deposits and withdrawals;
• KYC and identity verification providers – Contracted third-party services that assist with CNIC verification and age confirmation;
• Game content providers – Software suppliers whose casino and slot games are accessible on the we9 platform may receive session and bet data for game integrity purposes;
• Fraud prevention services – Risk management tools that assess transaction and account activity for signs of fraudulent or prohibited conduct;
• Legal and regulatory authorities – we9 will disclose personal data to law enforcement or regulatory bodies where required by a valid legal obligation or court order.

5.3 All third parties with whom we9 shares personal data are contractually required to process that data only for the specified purpose, to maintain appropriate security standards, and not to use it for any other purpose.

6. Payments, KYC & Financial Data

6.1 When you deposit or withdraw via JazzCash or Easypaisa, we9 records the mobile wallet number associated with the transaction. This number is used to verify that payments are made by and returned to the account holder, in compliance with anti-money-laundering requirements.

6.2 Bank account details provided for bank transfer withdrawals (HBL, UBL, Meezan Bank, Bank Alfalah) are stored securely and used solely for the purpose of processing the withdrawal instruction you have submitted.

6.3 we9 does not store full card numbers or full mobile wallet PINs. Payment tokenisation and secure gateway protocols are used to minimise the financial data handled directly by we9 systems.

6.4 KYC documents (CNIC copy, selfie) submitted for identity verification are stored securely and retained for the period required by applicable AML regulations. Access is restricted to compliance personnel only.

7. Cookies & Tracking Technologies

7.1 we9 uses cookies and similar technologies (including local storage and session tokens) for the following purposes:

• Essential cookies – Required for the platform to function, including maintaining your login session and remembering your PKR wallet preferences;
• Analytics cookies – Used to collect aggregate, anonymised data about how users navigate we9, which pages are most visited and where errors occur. This data is used to improve the platform;
• Preference cookies – Used to remember settings such as game filters and cashier display preferences between sessions.

7.2 You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may affect your ability to use the we9 platform correctly.

8. Data Retention

8.1 we9 retains personal data for as long as your account is active and for a minimum period of five years after account closure, in compliance with applicable AML and financial record-keeping obligations.

8.2 Transaction records, bet histories and KYC documentation are subject to the same minimum five-year retention period for regulatory compliance purposes.

8.3 Data held solely for marketing purposes (email and mobile preferences) is deleted within 30 days of you withdrawing marketing consent.

9. Security

9.1 we9 implements technical and organisational security measures appropriate to the risk presented by the data processed, including HTTPS/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls and audit logging for systems handling personal data, and regular security assessments.

9.2 While we9 takes significant steps to protect personal data, no online system can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication via SMS OTP in their we9 account settings.

9.3 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we9 will notify affected users without undue delay in accordance with applicable obligations.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by we9:

• Access – You may request a copy of the personal data we9 holds about you;
• Rectification – You may request correction of inaccurate or incomplete personal data;
• Erasure – You may request deletion of your personal data, subject to we9's legal retention obligations;
• Restriction – You may request that we9 restrict processing of your data in certain circumstances;
• Objection – You may object to processing carried out on the basis of legitimate interests;
• Portability – You may request your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact we9 support. we9 will respond to all data rights requests within 30 days of receipt.

11. Children & Minors

11.1 we9 is strictly an 18+ platform. 18+ we9 does not knowingly collect personal data from individuals under the age of 18. If we9 determines that an account was registered by a person under 18, the account will be closed immediately, any balance will be returned to the payment source (if possible) and all associated personal data will be deleted except where retention is required by law.

11.2 If you have reason to believe that a minor has registered on we9, please contact support immediately so we9 can take appropriate action.

12. Marketing Communications

12.1 we9 may send promotional messages — including bonus offers, slot promotions and cricket betting specials — via SMS to your registered mobile number, subject to your explicit opt-in consent provided during registration or subsequently updated in your account preferences.

12.2 You may withdraw marketing consent at any time by updating your preferences in Account Settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

12.3 Transactional communications — including deposit confirmations, withdrawal notifications and security alerts — are not marketing communications and will be sent regardless of your marketing preferences, as they are operationally necessary.

13. Changes to This Policy

13.1 we9 may update this Privacy Policy from time to time to reflect changes in applicable law, operational practices or the services we offer. When material changes are made, we9 will notify registered users via in-platform notification at least 14 days before the revised policy takes effect.

13.2 The current version of this Policy is always available at we9.club/privacy-policy. The "Last updated" date at the top of this page reflects the date of the most recent revision.

14. Contact & Data Enquiries

If you have questions about this Privacy Policy, wish to exercise a data right, or want to report a concern about we9's data handling practices, please contact the we9 support team. Contact details are available in the footer of every page at we9.club. we9 aims to acknowledge all privacy enquiries within 5 business days and to resolve them within 30 days.