vk899 Privacy Policy —
How We Collect, Use, and
Protect Your Personal Data

Scope and Controller Identity

This Privacy Policy applies to all personal data collected and processed by vk899 in connection with the use of the vk899 platform, accessible at vk899.net, its mobile applications, and any related services ("Platform").

For the purposes of this Privacy Policy, vk899 acts as the data controller — meaning vk899 determines the purposes and methods of processing your personal data. All queries, requests to exercise your rights, or complaints relating to your data should be directed to the vk899 Data Privacy contact listed in Section 13 of this policy.

This Privacy Policy applies to all registered members of vk899 who are resident in or physically located in Pakistan, including all provinces and territories: Sindh, Punjab, Khyber Pakhtunkhwa, Balochistan, Gilgit-Baltistan, Azad Jammu & Kashmir, and Islamabad Capital Territory.

What Data We Collect

vk899 collects personal data from you in the following categories:

Registration Data — Information you provide when creating your vk899 account:

• Full legal name (as it appears on your Pakistani National Identity Card);
• Date of birth (used for age verification — 18+ requirement);
• Email address;
• Pakistani mobile number (used for two-factor authentication and transaction alerts);
• Preferred username and password (password stored in encrypted, non-reversible hash format).

Identity Verification (KYC) Data — Collected when you request a withdrawal, when a bonus is claimed, or when fraud prevention processes are triggered:

• Copy of Pakistani National Identity Card (CNIC) front and back;
• Proof of address (utility bill or bank statement issued within the last 90 days);
• Screenshot or confirmation of the payment account used for deposits (Easypaisa, JazzCash, or bank account).

Transaction Data — Records of all financial activity on your vk899 account:

• Deposit amounts, dates, payment method, and transaction reference numbers in PKR;
• Withdrawal amounts, dates, destination payment account, and processing status;
• Bonus credits, wagering history, and promotional redemption records.

Technical and Device Data — Collected automatically when you access the Platform:

• IP address and approximate geolocation (city-level, not precise GPS coordinates);
• Device type, operating system version, and browser type;
• Session timestamps, login history, and pages accessed;
• Crash logs and performance data (anonymised where possible).

Communication Data — Records of communications between you and vk899:

• Live chat transcripts, support ticket content, and email correspondence;
• Feedback, surveys, and complaint submissions.

How We Use Your Data

The following table summarises the primary purposes for which vk899 uses your personal data:

Legal Bases for Processing

vk899 processes your personal data under one or more of the following legal bases:

• Contract Performance: Processing necessary to provide the vk899 service you have contracted for — including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and financial record-keeping obligations.
• Legitimate Interest: Processing where vk899 has a genuine business interest that does not override your fundamental privacy rights — including fraud detection, platform security, and responsible gaming monitoring.
• Consent: Processing for which you have provided explicit, freely given, specific, and informed consent — such as receiving promotional emails about new vk899 games, bonuses, or offers. You may withdraw consent at any time by updating your communication preferences in your vk899 account settings or by contacting support.

Cookies and Tracking Technologies

The vk899 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — these enable your vk899 Login session to remain active, maintain your language preferences, and ensure security tokens work correctly. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Anonymised data about how members use the Platform — which pages load slowly, where errors occur, and how navigation flows are used. This data is used solely to improve the Platform experience.
• Functionality Cookies: Remember your preferences such as your last-used game category, display settings, or notification preferences across vk899 sessions.
• Analytics Cookies: Aggregate usage statistics (using anonymised data) that help vk899 understand which features are most valued by Pakistani players and where improvements should be prioritised.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in to your vk899 account or using core Platform features.

Data Sharing and Third Parties

vk899 does not sell your personal data. We may share your data with trusted third parties only in the following defined circumstances:

• Payment Processors: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, and MCB Bank receive the transaction data necessary to process your PKR deposits and withdrawals. These providers are contractually bound to protect your data and may only use it for the specific transaction purpose.
• KYC and Identity Verification Providers: Regulated third-party identity verification services may process your CNIC and biometric data to complete age and identity checks. These providers operate under strict data processing agreements.
• Fraud Detection and AML Compliance Services: Specialised platforms that analyse transaction patterns for signs of fraud or money laundering. Data shared is the minimum necessary for the analysis and is protected under contractual obligations.
• Game Technology Providers: Providers such as Pragmatic Play, NetEnt, and Microgaming may receive anonymised session data (not personally identifiable information) necessary to serve game content and calculate outcomes on their certified RNG platforms.
• Legal and Regulatory Authorities: vk899 may disclose personal data to Pakistani law enforcement agencies, financial regulators, or courts of law where required to do so by a valid legal order or obligation.

International Data Transfers

Some of vk899's technology partners and service providers operate servers or infrastructure outside of Pakistan. Where your personal data is transferred outside Pakistan, vk899 ensures that:

• The transfer is made only to countries or organisations that provide an adequate level of data protection;
• Appropriate contractual safeguards — including standard data protection clauses — are in place between vk899 and the recipient organisation;
• The transfer is limited to the minimum data necessary for the specific service purpose.

vk899 prioritises the use of Pakistan-based or South Asia-region infrastructure where available and technically appropriate to minimise the volume of cross-border data transfers.

Data Retention

vk899 retains personal data for the following periods:

• Active account data: Retained for the full duration your vk899 account remains open and active;
• Transaction records (PKR deposits, withdrawals, wagers): Retained for a minimum of 5 years from the date of the transaction, as required by anti-money laundering regulations;
• KYC documents (CNIC copies, proof of address): Retained for a minimum of 5 years after account closure;
• Support communications: Retained for 2 years from the date of the last communication in each thread;
• Technical and device data (IP logs, session records): Retained for 12 months from the date of collection, then securely deleted or anonymised;
• Self-exclusion records: Retained indefinitely to prevent re-registration in violation of an active self-exclusion.

When data is no longer required for the purposes for which it was collected, vk899 will securely delete or irreversibly anonymise it in accordance with our internal data disposal procedures.

Your Rights and How to Exercise Them

As a vk899 member, you have the following rights in relation to your personal data. To exercise any of these rights, contact vk899's Data Privacy contact via the details in Section 13. We will respond to all verified requests within 30 days.

• Right of Access: Request a complete copy of all personal data vk899 holds about you, along with information about how it is being used;
• Right to Rectification: Request correction of any inaccurate or incomplete personal data in your vk899 account — you may also update most information directly through your account settings;
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no longer a legitimate legal or contractual basis for its retention. Note: transaction records and KYC data may need to be retained for the periods described in Section 8 regardless of an erasure request;
• Right to Restrict Processing: Ask vk899 to pause the processing of your data while a complaint or correction request is being resolved;
• Right to Data Portability: Request a machine-readable copy of the personal data you provided to vk899, suitable for transfer to another service provider;
• Right to Object: Object to vk899 processing your data based on legitimate interests, particularly for direct marketing communications — in which case processing for that purpose will stop immediately upon receipt of your objection;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Security Measures

vk899 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and vk899's servers is encrypted using industry-standard TLS 1.3 — the same protocol used by Pakistan's major banks for internet banking;
• Encrypted Data Storage: Sensitive fields — including passwords (stored as bcrypt hashes), CNIC numbers, and payment account details — are encrypted at rest using AES-256 encryption;
• Two-Factor Authentication (2FA): Available on all vk899 accounts and strongly recommended. 2FA adds an additional layer of protection beyond the password during vk899 Login;
• Access Controls: vk899 employee access to member data is governed by role-based permissions — staff can only access the data necessary for their specific job function;
• Security Audits: vk899's systems undergo regular penetration testing and security audits by independent third-party security professionals;
• Incident Response: vk899 maintains a documented data breach response plan. In the event of a breach that poses a risk to member data, affected members will be notified within 72 hours of vk899 becoming aware of the incident.

Minors and Age Verification

The vk899 Platform is strictly for adults aged 18 years or older. vk899 does not knowingly collect or process personal data from individuals under the age of 18.

Age verification is conducted as part of the registration process. Where vk899 has reasonable grounds to suspect that an account is held by or on behalf of a person under 18, the account will be immediately suspended and all personal data associated with it will be reviewed. If the account is confirmed to belong to a minor, the data will be securely deleted after completing any legally required reporting.

Changes to This Privacy Policy

vk899 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, Platform features, payment methods, applicable law, or regulatory requirements. All historical versions of this Privacy Policy are retained and can be provided on request to any registered vk899 member.

When vk899 makes material changes to this Privacy Policy — meaning changes that substantively affect your rights or how your data is used — we will notify all registered Pakistani members by:

• Email to the address registered on your vk899 account, sent no fewer than 14 days before the revised policy takes effect; and
• A prominent notice displayed on the vk899 Platform for the same 14-day period, visible to all logged-in members.

Minor, non-material changes (such as correcting a typographical error or updating contact details) may be made without advance notice but will be reflected in the "Last Updated" date at the top of this policy.

How to Contact Us

For all privacy-related queries — including requests to exercise your data rights, questions about how your data is used, or to report a data security concern — please contact the vk899 Privacy team through the following channels:

• Privacy Email: [email protected] (include "Privacy Request" in your subject line for fastest routing — plain text address, not a link)
• Live Chat: Available 24/7 inside the vk899 Platform — identify your query as a "Privacy Request" to your support agent
• WhatsApp: @vk899support (plain text — not a link)
• Telegram: @vk899official (plain text — not a link)

vk899 commits to acknowledging all privacy requests within 48 hours and providing a full response within 30 calendar days of receiving a verified request. Where a request is complex or involves a large volume of data, we may extend the response period by an additional 30 days and will notify you of this extension in writing.

If you are unsatisfied with vk899's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body with jurisdiction over your location in Pakistan.