The td99 Privacy Policy —
How We Collect, Use, and Protect Your Data

1 Scope & Applicability

This Privacy Policy applies to all personal data collected by td99 in connection with the operation of the td99 online gaming and betting platform accessible at td99.bid. It applies to all registered Users, including Pakistan players who access the platform via web browser on mobile or desktop devices.

This policy covers data collected through: the td99 registration and login process, deposit and withdrawal transactions (including JazzCash, Easypaisa, Raast, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, and USDT channels), gameplay and betting activity, customer support interactions, and technical data generated during platform use.

This policy does not apply to third-party websites or services that may be referenced in td99 communications. td99 is not responsible for the privacy practices of third parties.

2 Data Controller

For the purposes of this Privacy Policy, td99 acts as the data controller in respect of personal data collected through the td99 platform. The data controller is responsible for determining the purposes and means by which personal data is processed.

All data-related requests, including access requests, correction requests, and deletion requests, should be directed to the td99 data protection contact: [email protected]. Please include "Privacy Request" in the subject line of your email to ensure prompt handling by the relevant team.

3 Personal Data We Collect

The following table summarises the categories of personal data td99 collects from Pakistan players and the primary purpose of each category:

4 How We Collect Your Data

td99 collects personal data through the following channels:

• Direct registration: When you create a td99 account, you provide your Pakistan mobile number, chosen username, and date of birth directly.
• Transaction processing: When you deposit or withdraw via JazzCash, Easypaisa, or bank transfer, payment reference data is automatically captured as part of the transaction record.
• Platform activity: As you use td99 — placing bets, playing slots, navigating the game lobby — your activity is automatically recorded in account logs for account management and security purposes.
• Customer support: When you contact td99 support, the content of your communication, including any documents or screenshots you send, is retained as part of your support case record.
• Technical collection: Standard technical data (IP address, device identifiers, browser type) is collected automatically when you connect to the td99 platform, as is common practice across all web-based services.
• Identity verification requests: Where td99 requests identity documents in connection with a withdrawal or account review, you provide those documents directly to td99 via the designated secure channel communicated by support.

5 Legal Basis for Processing

td99 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between td99 and the User — including account management, payment processing, and game provision — is carried out on the basis of contractual necessity.
• Legitimate interests: Technical data collection for fraud prevention, platform security, and service improvement is carried out on the basis of td99's legitimate interests in maintaining a secure and functional platform, balanced against Users' privacy interests.
• Legal obligation: Identity verification data and financial transaction records are processed to comply with anti-money-laundering and know-your-customer obligations that apply to online financial service providers.
• Consent: Where td99 collects data for optional purposes — such as sending promotional communications — we obtain your explicit consent and you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Personal Data

td99 uses the personal data collected from Pakistan players for the following purposes:

• Creating and managing your td99 account, including authentication and session management.
• Processing PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfers, and USDT channels.
• Verifying your age and identity to ensure compliance with the 18+ age restriction that applies to all td99 accounts.
• Calculating and applying VIP tier benefits, cashback credits, and promotional eligibility.
• Monitoring account activity for signs of fraudulent, abusive, or prohibited behaviour as defined in the td99 Terms & Conditions.
• Operating responsible gaming tools including deposit limits, session time caps, cooling-off periods, and self-exclusion.
• Responding to support requests, resolving disputes, and managing complaint investigations.
• Improving the td99 platform through analysis of aggregated, anonymised usage patterns.
• Sending you account-related communications including transaction confirmations, security alerts, and OTP codes.
• Sending promotional communications where you have given explicit consent to receive them.

7 Payment Data and PKR Transactions

Given that td99 processes PKR transactions via Pakistan-specific payment channels, the following specific provisions apply to payment data:

• JazzCash and Easypaisa mobile wallet references (account numbers and transaction IDs) are retained as part of your td99 transaction record for the purpose of reconciliation, dispute resolution, and anti-money-laundering record-keeping.
• Full bank account numbers are not stored by td99. Where bank transfer details are provided for a withdrawal, only the last four digits and the bank name (e.g., HBL, MCB Bank, Meezan Bank) are retained in the transaction record after processing.
• USDT wallet addresses used for cryptocurrency deposits are retained in the transaction log for blockchain reconciliation purposes.
• td99 does not store CVV codes, full debit card numbers, or complete online banking credentials at any point in the transaction process.
• Payment data may be shared with Pakistan-based payment processors solely for the purpose of completing the specific transaction requested. These processors are bound by confidentiality obligations and may not use your data for any other purpose.

8 Sharing Personal Data with Third Parties

td99 does not sell, rent, or commercially transfer your personal data to third parties. Data sharing is limited to the following categories of recipients and circumstances:

• Payment processors: Pakistan-based payment gateway providers (JazzCash, Easypaisa, bank partners) receive transaction data necessary to process your specific deposit or withdrawal request.
• Game software providers: Third-party game studios whose titles are available on td99 may receive anonymised session and outcome data for the purpose of game audit and RNG certification. They do not receive personally identifiable information.
• Fraud prevention services: IP address and device fingerprint data may be shared with fraud detection services to identify and block abusive account behaviour.
• Legal and regulatory disclosure: td99 may be required to disclose personal data to law enforcement, regulatory authorities, or courts where legally compelled to do so. td99 will notify the relevant User of such a disclosure request where legally permitted to do so.
• Business transfer: In the event of a merger, acquisition, or sale of td99 assets, personal data may be transferred to the successor entity, subject to the same privacy obligations set out in this policy.

All third parties with whom td99 shares personal data are bound by contractual data processing agreements that restrict their use of the data to the specified purpose only.

9 Cookies and Tracking Technologies

td99 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly necessary cookies: Session management cookies that keep you logged in to your td99 account during an active session. These cannot be disabled without preventing the platform from functioning correctly.
• Security cookies: Tokens used to detect and prevent cross-site request forgery and session hijacking attempts.
• Preference cookies: Cookies that remember your platform settings between sessions — such as your preferred game category or display language — so you do not need to reconfigure them each time you log in.
• Analytics cookies: Anonymised data about how Pakistan players navigate the td99 platform, used to identify usability issues and improve the layout and performance of game lobbies and account management screens. This data is not linked to individual User identities.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the td99 platform. Disabling analytics cookies will not affect your platform experience.

10 Data Security Measures

td99 implements the following technical and organisational measures to protect the personal data of Pakistan players:

• All data transmitted between your device and td99 servers travels over SSL/TLS encrypted connections. The connection is verified by a valid digital certificate.
• Passwords are hashed using industry-standard cryptographic algorithms with unique per-account salts before storage. td99 systems cannot retrieve your original password — only verify it.
• Payment data is tokenised at the point of capture. The full payment reference is replaced with a token that can be used only within the td99 system for the specific transaction context.
• Access to personal data within td99's operational systems is restricted to authorised personnel on a need-to-know basis and is logged for audit purposes.
• td99 actively monitors platform traffic for unusual patterns that may indicate a data security incident and has an incident response procedure in place to address and notify affected Users promptly where required.

No data transmission over the internet is entirely risk-free. While td99 applies industry-standard protections, we cannot guarantee absolute security against all possible attack vectors. You play an important role in your own account security by keeping your td99 credentials confidential and reporting suspected compromise promptly.

11 Data Retention Periods

td99 retains personal data for the following periods:

• Account data: Retained for the duration of your active td99 account and for a period of 5 years following account closure, to satisfy financial record-keeping obligations applicable to online payment service providers.
• Transaction records: PKR deposit and withdrawal records are retained for 7 years from the date of the transaction in compliance with standard financial record-keeping requirements.
• Game history: Betting and gameplay records are retained for 2 years from the date of the relevant session for dispute resolution purposes, after which they are anonymised.
• Support communications: Customer support transcripts are retained for 2 years from the date of resolution of the relevant support case.
• Identity documents: KYC documents are retained for 5 years from the date of verification or account closure, whichever is later.
• Responsible gaming records: Self-exclusion history and limit-setting records are retained permanently to ensure td99 can honour prior exclusion requests if a User attempts to re-register.

12 Your Data Rights

As a td99 User, you have the following rights in relation to the personal data td99 holds about you:

• Right of access: You may request a copy of the personal data td99 holds about your account. td99 will respond to verified access requests within 30 days.
• Right to rectification: If your personal data held by td99 is inaccurate or incomplete, you may request that it be corrected. Name and date of birth corrections require supporting documentation.
• Right to erasure: You may request deletion of your personal data where td99 no longer has a legal basis for retaining it. This right is subject to exceptions for financial record-keeping obligations — td99 may not be able to delete transaction records during the mandatory retention period even if your account is closed.
• Right to restrict processing: You may request that td99 restrict the processing of your personal data to storage only, pending resolution of a data accuracy dispute or a legitimate interests objection.
• Right to object: You may object to td99 processing your personal data on the basis of legitimate interests, including profiling for game recommendation purposes. td99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where td99 processes your data on the basis of consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact td99 at [email protected] with "Privacy Request" in the subject line, including your account username and a description of the right you wish to exercise. td99 will respond within 30 days and may require identity verification before actioning the request.

13 Minors and Underage Access

If you believe a minor has registered a td99 account, please notify td99 immediately at [email protected]. td99 will investigate and act on all such reports promptly.

14 Responsible Gaming Data

Personal data related to your responsible gaming tool usage on td99 — including deposit limits you have set, cooling-off periods you have requested, and self-exclusion status — is treated with a higher level of protection than standard account data. This data is:

• Used only for the purpose of enforcing the responsible gaming measures you have put in place and for td99's obligations to monitor for problem gambling indicators.
• Not used for profiling, marketing segmentation, or any commercial purpose.
• Retained permanently in the case of self-exclusion, to ensure that td99 can honour the exclusion even if you attempt to re-register under a different mobile number or identity.
• Not shared with third parties except where required for legal compliance or where you have explicitly consented to sharing in connection with a referral to an external support organisation.

For more information about td99's responsible gaming tools and resources available to Pakistan players, please visit the Responsible Gaming page.

15 Updates to This Privacy Policy

td99 may update this Privacy Policy from time to time to reflect changes in platform functionality, applicable legal requirements, or data processing practices. The effective date at the top of this document indicates when the current version came into force.

Material changes to this Privacy Policy — specifically changes that affect how td99 uses your personal data in ways that differ from what was communicated at the time of collection — will be communicated to you via your registered Pakistan mobile number or by a prominent notice on the td99 platform before the changes take effect. Minor clarifications and corrections may be made without advance notice.

Your continued use of the td99 platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

16 Contact Us About Privacy

For all privacy-related queries, data subject rights requests, or concerns about how td99 handles your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Include "Privacy Request" or "Data Request" for priority routing
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 30 days for data rights requests; within 48 hours for general privacy queries
• Language: English

td99 takes all privacy concerns seriously. If you are not satisfied with td99's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.