dune999 Privacy Policy —
How We Collect, Use &
Protect Your Personal Data

This Privacy Policy applies to all personal data collected and processed by dune999 in connection with the operation of the dune999 Platform at dune999.net. It covers:

• Registered dune999 Account holders who are residents of Pakistan.
• Individuals who visit dune999.net without registering an account (website visitors).
• Former dune999 Account holders whose data is retained in accordance with our retention obligations.
• Individuals who contact dune999 support via WhatsApp, Telegram, email, or live chat without being registered players.

This Policy does not apply to third-party websites, payment processors, or external services that Pakistan players may access via links from dune999.net. dune999 is not responsible for the privacy practices of those third parties and encourages players to review the privacy policies of any external service they use in connection with their dune999 Account — including Easypaisa, JazzCash, HBL, and UBL online banking portals.

dune999 collects the following categories of personal data from Pakistan players and website visitors:

Account Registration Data:

• Full legal name (as it appears on your Pakistan CNIC)
• Date of birth (for age verification — dune999 is strictly 18+ only)
• Email address
• Pakistan mobile telephone number
• Chosen username and encrypted password hash
• Residential address in Pakistan

KYC Identity Verification Data:

• Pakistan Computerised National Identity Card (CNIC) — front and back images
• Selfie photograph for liveness verification
• Proof of address — utility bill or Pakistan bank statement (HBL, UBL, MCB Bank, or equivalent)

Financial Transaction Data:

• Deposit and withdrawal records in PKR — amounts, dates, and payment methods used (Easypaisa, JazzCash, bank transfer)
• PKR Wallet balance history
• Partial payment instrument identifiers (e.g., last four digits of a bank account number) — dune999 does not store full payment credentials

Gaming Activity Data:

• Game sessions — games played, stake amounts in PKR, win/loss outcomes, timestamps
• Sports betting history — events wagered on, odds taken, settlement results
• Bonus usage — promotions claimed, wagering requirement progress, free spins used
• Responsible gaming settings — deposit limits, loss caps, session time limits, self-exclusion records

Technical and Device Data:

• IP address and approximate geolocation at time of dune999 Login
• Device type, operating system, and browser version
• Session duration and navigation patterns within dune999.net
• Cookie identifiers (see Section 9)

Communications Data:

• Support interactions — WhatsApp messages, Telegram communications, live chat transcripts, and email correspondence with the dune999 support team
• Complaint and dispute records

dune999 collects personal data through the following means:

• Directly from you — when you register your dune999 Account, complete KYC verification, make a PKR deposit or withdrawal, place a bet, contact dune999 support, or update your account settings.
• Automatically through your use of the Platform — technical data including IP address, device information, session logs, and cookie data is collected automatically when you visit dune999.net or use the dune999 mobile site or PWA.
• From payment processors — when you make a deposit via Easypaisa, JazzCash, or a Pakistan bank transfer, the payment processor confirms the transaction status and relevant payment reference information to dune999. Full payment credentials remain with the payment processor and are not transmitted to or stored by dune999.
• From identity verification services — dune999 works with authorised KYC verification partners to confirm the authenticity of CNIC documents submitted by Pakistan players. These partners process your document data solely for the purpose of identity verification on dune999's behalf.
• From fraud prevention and risk management systems — dune999 uses automated risk assessment tools that analyse account and transaction patterns to detect suspicious activity. These systems generate flags based on behavioural data rather than profiling by protected characteristics.

dune999 processes the personal data of Pakistan players for the following specific purposes:

• Account creation and management — to register your dune999 Account, authenticate your dune999 Login, and maintain your profile and PKR Wallet.
• Age and identity verification — to confirm that you are 18 years of age or older and that your identity matches the CNIC submitted, as required for a strictly 18+ platform.
• Payment processing — to process PKR deposits via Easypaisa, JazzCash, and Pakistan bank transfers; to execute PKR withdrawals; and to maintain accurate transaction records.
• Game provision and betting services — to deliver casino games, live dealer tables, sports betting, Cockfighting, Dota 2, and other dune999 products to your account.
• Bonus and promotions administration — to track wagering requirements, credit bonuses, and manage promotional eligibility.
• Responsible gaming — to enforce deposit limits, loss caps, session controls, and self-exclusion settings that you configure in your account; and to identify patterns that may indicate problematic gambling behaviour.
• Customer support — to respond to your queries, resolve complaints, and process account requests submitted via WhatsApp, Telegram, live chat, or email.
• Security and fraud prevention — to detect and prevent unauthorised access to dune999 Accounts, identify potential fraud patterns, and protect the financial integrity of the Platform.
• Anti-money laundering (AML) compliance — to monitor transactions for unusual patterns, conduct source of funds reviews, and comply with applicable financial crime prevention requirements.
• Platform improvement — to analyse aggregated, anonymised usage data for the purpose of improving the dune999 product, identifying technical issues, and understanding what Pakistan players value most on the Platform.
• Marketing communications — to send you promotional offers, bonus notifications, and product updates, where you have consented to receive such communications. You may opt out of marketing communications at any time through your dune999 account settings or by contacting support.

dune999 processes your personal data on the following legal bases:

• Contractual necessity — processing that is necessary to perform the dune999 Player Agreement (the Terms & Conditions you accepted at registration), including account creation, payment processing, game provision, and support services.
• Legal obligation — processing required by law, including KYC identity verification, age verification (18+ only), AML transaction monitoring, and record retention obligations.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where dune999's legitimate interests are not overridden by your rights and interests.
• Consent — marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

dune999 does not sell your personal data. We share personal data with third parties only in the following limited and controlled circumstances:

• Payment processors — Easypaisa, JazzCash, SadaPay, HBL, UBL, MCB Bank, and Raast receive the transaction data necessary to process your PKR deposits and withdrawals. Each processor operates under its own privacy framework and is independently responsible for the data it holds.
• KYC verification partners — dune999 uses authorised identity verification service providers to validate CNIC documents. These partners act as data processors under a contractual arrangement with dune999 and are not permitted to use your identity data for any purpose other than performing verification on dune999's behalf.
• Game providers — providers such as Evolution Gaming, Pragmatic Play, NetEnt, and Relax Gaming receive limited session data necessary to deliver their games to your dune999 Account. They do not receive your full personal profile.
• Fraud and security services — dune999 works with fraud detection and cybersecurity partners who process account behaviour data to identify threats. These partners operate under strict data processing agreements.
• Legal and regulatory authorities — dune999 may be required to disclose personal data to Pakistan law enforcement agencies, financial intelligence units, or regulatory bodies where compelled by law or court order. dune999 will notify affected players of such disclosures where legally permitted to do so.
• Business transfers — in the event that dune999 undergoes a merger, acquisition, or asset sale, personal data held by dune999 may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

dune999 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply:

• Active account data — retained for the lifetime of your dune999 Account and for a minimum of five (5) years after account closure, to comply with AML record-keeping requirements.
• KYC identity documents — retained for five (5) years from the date of submission or from account closure, whichever is later, to meet financial crime compliance obligations.
• PKR financial transaction records — retained for seven (7) years from the date of each transaction, consistent with standard financial record-keeping requirements.
• Support communications — retained for three (3) years from the date of the interaction, to support dispute resolution and quality improvement.
• Marketing consent records — retained until you withdraw consent, plus a reasonable period thereafter to evidence the consent history.
• Website visitor technical data (non-registered users) — anonymised after thirteen (13) months from collection.

After the applicable retention period expires, dune999 will securely delete or permanently anonymise your personal data so that it can no longer be attributed to you.

dune999 implements a layered approach to data security that combines technical controls, operational procedures, and personnel standards:

• Encryption in transit — all data transmitted between Pakistan players' devices and dune999.net is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest — sensitive personal data stored in dune999 databases — including KYC documents, payment records, and account profiles — is encrypted at rest using industry-standard algorithms.
• Access controls — dune999 operates a role-based access control framework. Staff members can access only the specific personal data required for their role. Access to sensitive categories of data (such as CNIC documents) is logged and audited.
• Password hashing — dune999 account passwords are stored only as cryptographic hashes. The original password is never stored and cannot be retrieved by any dune999 employee.
• Login security — the dune999 Login system includes account lockout after repeated failed attempts, two-factor authentication (2FA) for player accounts, and login location monitoring with alerts for unrecognised access.
• Regular security review — dune999 conducts regular security assessments of its platform infrastructure and data handling procedures to identify and address vulnerabilities proactively.
• Incident response — dune999 maintains a data breach response procedure. In the event of a security incident affecting personal data, dune999 will notify affected Pakistan players promptly in accordance with applicable notification obligations.

dune999 uses cookies and similar tracking technologies on dune999.net for the following purposes:

• Strictly necessary cookies — essential for the operation of the dune999 Platform. These include session authentication cookies (which keep you logged in during your dune999 session), security cookies (which support fraud prevention and CSRF protection), and load balancing cookies. These cookies cannot be disabled without preventing core Platform functionality from working.
• Functional cookies — remember your preferences on dune999.net, such as your chosen language (English), your game lobby layout preferences, and your responsible gaming settings display. These cookies improve your experience but are not strictly essential.
• Analytics cookies — collect anonymised data about how Pakistan players navigate dune999.net — which pages are visited most frequently, how long sessions last, and where players encounter issues. This data is used in aggregate form to improve the Platform and is not used to identify individual players. Analytics cookies require your consent.
• Marketing cookies — used to deliver dune999 promotional content relevant to your interest profile on the Platform. Marketing cookies require your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through the dune999 cookie settings panel, accessible from the footer of dune999.net. You may also configure your browser to block or delete cookies, although doing so may affect the functionality of the dune999 Platform.

dune999 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18 years. CNIC-based identity verification is employed as our primary technical control to prevent underage access to the dune999 Platform.

If dune999 discovers that a registered account belongs to a person under the age of 18, we will immediately close the account, delete all personal data associated with that account to the extent permitted by our legal obligations, and refund any deposited funds (net of any winnings, which will be forfeited) to the payment method used for deposit.

If you believe that a person under the age of 18 has registered a dune999 Account — whether using their own details or yours — please contact the dune999 support team immediately at support@dune999.net so that the matter can be investigated and the account closed without delay.

dune999 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, changes in applicable law, or changes in the products and services we offer to Pakistan players. Material changes to this Policy will be communicated to registered dune999 players via email to the address held on their account, and the updated Policy will be published at dune999.net/privacy-policy with a revised effective date.

Your continued use of the dune999 Platform following notification of a material change to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the updated Policy, you may request account closure by contacting the dune999 support team before the effective date of the changes.

For non-material clarifications and minor editorial corrections, dune999 may update this Policy without individual notification. The "Last Reviewed" date at the top of this Policy reflects the date of any change, material or otherwise.

If you have any question about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or want to raise a concern about how dune999 handles your personal data, please contact the dune999 data team through any of the following channels:

• Email: support@dune999.net (please include "Privacy Request" in the subject line)
• WhatsApp: dune999support — available 24 hours a day, 7 days a week
• Telegram: @dune999official — available 24 hours a day, 7 days a week
• Live Chat: Available within your dune999 Account dashboard after login

dune999 will acknowledge privacy-related requests within five (5) working days and will endeavour to resolve them within thirty (30) days. Complex requests — such as full data subject access requests — may take up to sixty (60) days where the volume of data involved requires additional processing time. You will be informed of any extension before the initial thirty-day period expires.

This Privacy Policy was last reviewed on 1 January 2026 and supersedes all previous versions. dune999 is an 18+ platform. Please gamble responsibly.