weee9 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is issued by weee9 ("Company," "we," "us," "our") and applies to all personal data collected, processed, stored, or transferred in connection with your use of the weee9 website located at weee9.net and any associated mobile applications, games, services, or communications (collectively, the "Platform").

weee9 recognises that privacy is a fundamental right. We process personal data only where there is a lawful basis for doing so, we retain it only for as long as necessary, and we maintain robust technical and organisational safeguards to protect it against unauthorised access, loss, or misuse. This Policy is written to be clear and accessible — if any part is unclear, our support team is available 24/7 to answer questions.

This Policy should be read alongside the weee9 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the contractual relationship between you and weee9.

2 Data Controller Information

For the purposes of applicable data protection legislation, weee9 is the data controller in respect of all personal data collected through the Platform. As data controller, weee9 determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

weee9 operates under an international gaming licence issued by the relevant regulatory authority in its jurisdiction of incorporation. The Company maintains a dedicated Data Protection function responsible for overseeing compliance with this Policy and applicable data protection law.

3 Categories of Personal Data We Collect

weee9 collects personal data from you in several categories depending on the nature of your interaction with the Platform. The following table outlines the categories of data collected and the primary purpose of collection:

weee9 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data) except where this is strictly necessary for responsible gaming assessments and is carried out with your explicit consent.

4 How weee9 Collects Your Data

weee9 collects personal data through the following means:

• Direct Submission: Data you provide when registering your weee9 account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to surveys and promotions.
• Automated Collection: Technical and usage data collected automatically as you interact with the weee9 Platform, including through cookies, web beacons, log files, and similar tracking technologies described in Section 7.
• Third-Party Sources: Data received from payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) to confirm transactions; from identity verification providers to authenticate KYC documents; and from fraud prevention agencies where necessary.
• Publicly Available Sources: In limited circumstances where required for AML compliance or fraud investigation, weee9 may supplement your record with information from publicly available registers or databases.

5 Purpose of Processing and Legal Basis

weee9 processes your personal data only where there is a clear and lawful basis for doing so. The following table summarises the primary processing purposes and the corresponding legal basis under applicable data protection law:

• Contract Performance: Processing necessary to register your account, verify your identity, process deposits and withdrawals in PKR, deliver games and sports betting services, and manage your weee9 account. Legal basis: performance of a contract.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, age verification requirements, and reporting obligations to regulatory authorities. Legal basis: compliance with a legal obligation.
• Legitimate Interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, internal analytics, and quality assurance of customer support. Legal basis: legitimate interests of weee9, balanced against your rights.
• Consent: Processing for direct marketing communications (email, SMS), personalised promotional offers, and non-essential cookies. Legal basis: your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing of Personal Data

weee9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the financial data necessary to process your deposits and withdrawals. Each provider operates under their own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC and age verification specialists who assist weee9 in confirming the identity and eligibility of players, including for CNIC and document authentication services.
• Technology and Infrastructure Partners: Cloud hosting providers, game content providers, live dealer studio operators, and cybersecurity partners who process data on weee9's behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: weee9 will disclose personal data to regulatory bodies, government agencies, or law enforcement authorities where legally required to do so, including in the context of AML reporting, fraud investigations, or responses to lawful court orders.
• Fraud Prevention Agencies: weee9 may share data with licensed fraud prevention and credit reference agencies where necessary to detect and prevent financial crime affecting the Platform or its players.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of weee9's business, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7 Cookies and Tracking Technologies

The weee9 Platform uses cookies and similar technologies (including web beacons, pixel tags, and session storage) to provide core functionality, improve user experience, and support analytics and security operations. By using the Platform, you consent to the use of cookies as described below.

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, login authentication, and fraud detection. These cannot be disabled without impairing your ability to use weee9.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and game lobby configuration to personalise your weee9 experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and use the weee9 Platform, helping us identify performance issues and prioritise improvements. No individually identifiable data is shared with analytics providers.
• Marketing Cookies: Used only with your explicit consent to track the effectiveness of weee9 promotional campaigns. You may opt out of marketing cookies at any time through your browser settings or by contacting support.

You can manage cookie preferences through your browser settings. Blocking all cookies may impair the functionality of certain areas of the weee9 Platform, including the login process and game loading.

8 Data Retention

weee9 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active relationship with weee9, plus a post-closure period of at least five years to satisfy AML and regulatory record-keeping requirements.
• Transaction Records: Financial transaction data — including deposit and withdrawal records in PKR — is retained for a minimum of seven years from the date of the transaction in accordance with applicable financial regulation.
• KYC and Identity Documents: Retained for the duration of the account plus five years post-closure, or longer where required by AML legislation or ongoing regulatory investigations.
• Support and Communication Records: Live chat transcripts and email correspondence are retained for three years from the date of the interaction, or longer if the matter is subject to unresolved dispute or legal proceedings.
• Marketing Data: Retained until you withdraw consent to marketing communications. Withdrawal of marketing consent does not affect the retention of data held under other legal bases.
• Cookie and Analytics Data: Aggregated analytics data is retained for up to 26 months. Session-level technical data is generally retained for 13 months.

9 Security Measures

weee9 employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the weee9 Platform is encrypted using 256-bit SSL/TLS protocols. Sensitive data at rest — including financial records and identity documents — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. weee9 employees undergo data protection training and are subject to confidentiality obligations. Access is logged and audited regularly.
• Infrastructure Security: weee9's hosting infrastructure is maintained in ISO 27001-certified or equivalent data centres with physical access controls, redundant systems, and 24/7 monitoring.
• Penetration Testing: The weee9 Platform undergoes regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident Response: weee9 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, weee9 will notify affected players and relevant authorities in accordance with applicable law.
• Two-Factor Authentication: weee9 strongly recommends that all players enable 2FA on their account. This adds a critical additional layer of protection against unauthorised login attempts.

10 Your Data Subject Rights

Depending on the data protection laws applicable in your jurisdiction, you may hold some or all of the following rights in relation to the personal data weee9 holds about you. weee9 is committed to facilitating the exercise of these rights in a timely and transparent manner.

• Right of Access: You have the right to request confirmation of whether weee9 processes your personal data and, if so, to receive a copy of that data along with information about how it is used.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data that weee9 holds about you. Where possible, you may update certain information directly from your weee9 account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other lawful basis applies), or where you object to processing on legitimate interest grounds. Note that certain data must be retained by weee9 for legal and regulatory reasons and cannot be deleted on request.
• Right to Restrict Processing: You may request that weee9 temporarily restrict the processing of your data while a dispute regarding its accuracy or the lawfulness of processing is investigated.
• Right to Data Portability: Where processing is based on consent or contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where weee9 relies on legitimate interests as the legal basis. You also have the absolute right to object to processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

11 Minors and Age Verification

The weee9 Platform is strictly restricted to individuals aged 21 years and over. weee9 does not knowingly collect or process personal data relating to minors. The Platform employs age verification mechanisms at registration and reserves the right to request identity documents confirming a player's date of birth at any stage of their account lifecycle.

If weee9 becomes aware that personal data has been collected from a person under the age of 21 without appropriate verification, the account will be immediately suspended, all activity will be reviewed, and the data will be deleted or anonymised in accordance with applicable law. Any funds associated with the minor's account will be handled in accordance with weee9's Terms and Conditions and applicable regulatory requirements.

If you are a parent or guardian and believe that a minor in your care has registered an account on weee9, please contact our support team immediately at [email protected]. weee9 will investigate and take appropriate action promptly.

12 International Data Transfers

As an internationally operating platform, weee9 may transfer your personal data to, and process it in, countries outside Pakistan or the country in which you are located. These countries may have different data protection laws than your home jurisdiction.

Where weee9 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities.
• Transfers to countries that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.
• Binding corporate rules applicable across the weee9 group of companies where relevant.
• Other lawful transfer mechanisms applicable under the data protection legislation of the relevant jurisdiction.

13 Third-Party Links and Services

The weee9 Platform may contain references to or integrations with third-party services, including payment providers such as JazzCash and EasyPaisa, game providers, and live streaming platforms. When you interact with a third-party service from within the weee9 Platform, that third party's own privacy policy and data practices apply to any data you provide to or that is collected by them.

weee9 is not responsible for the privacy practices or content of third-party services. We recommend reviewing the privacy policies of any third-party services you interact with in connection with your use of the weee9 Platform. If a third-party provider's practices are not consistent with your expectations, you should avoid using that service and contact weee9 support to discuss alternative options where available.

14 Direct Marketing Communications

weee9 may send you direct marketing communications about new games, promotions, bonuses, PSL betting offers, and other weee9 Platform features by email or SMS, but only where you have provided explicit consent to receive such communications during or after account registration.

• You may opt out of all direct marketing communications at any time by clicking the "unsubscribe" link in any marketing email from weee9, by updating your communication preferences in your account settings, or by contacting support and requesting removal from marketing lists.
• Opting out of marketing communications will not affect the delivery of transactional and account-related messages, which are sent in fulfilment of weee9's contractual and regulatory obligations and cannot be unsubscribed from while your account is active.
• weee9 does not engage in unsolicited telephone marketing (cold calling) to its players.
• All marketing content sent by weee9 will be clearly identifiable as originating from weee9 and will include an unsubscribe mechanism compliant with applicable anti-spam legislation.

15 Policy Updates and Amendments

weee9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The effective date at the top of this document will be updated whenever material changes are made.

Where changes are material — for example, where weee9 begins processing personal data for a new purpose, or introduces a new category of data sharing — weee9 will notify registered players via email to the address associated with their weee9 account and/or via a prominent notice displayed on the Platform, with reasonable notice before the changes take effect.

Continued use of the weee9 Platform after an updated Privacy Policy becomes effective constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using weee9 and may request account closure in accordance with the Terms and Conditions.

16 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how weee9 handles your personal data, please contact us through the following channels:

• Privacy Requests: Email [email protected] with "Privacy Request" in the subject line. Please include your registered weee9 username and a description of your request to help us respond promptly.
• General Support: Use the 24/7 live chat available on the weee9 Platform. For privacy-specific matters, please ask the support agent to escalate your query to the Data Protection team.
• Response Times: weee9 aims to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 days. Where additional time is required due to complexity, weee9 will inform you of the expected timeline.