Privacy Policy — lg99

Welcome to the lg99 Privacy Policy. lg99 ("we", "us", "our", or "lg99") operates the online gaming and sports betting platform accessible at https://lg99.ws (the "Platform"). This Privacy Policy describes how lg99 collects, processes, stores, shares, and protects personal data in connection with your use of the Platform and its associated services.

We are committed to handling your personal information with transparency, integrity, and in full compliance with applicable data protection standards. We understand that players across Pakistan — from Karachi and Lahore to Islamabad, Faisalabad, and beyond — trust us with sensitive personal and financial data, and we take that responsibility with the utmost seriousness.

By registering for a lg99 account, accessing the Platform, or submitting any personal information to us, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact us to request account closure.

For the purposes of applicable data protection law, lg99 is the data controller responsible for the personal data collected through the Platform. As data controller, lg99 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

All data protection queries, subject access requests, and complaints relating to the processing of your personal data should be directed to the lg99 data protection team. Contact details are provided in Section 14 of this Policy.

lg99 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from trusted third-party sources where permitted by law. The categories of personal data we may collect include the following:

• Full legal name as it appears on your official identity document
• Date of birth (to verify you meet the 21-year minimum age requirement)
• National identity card (CNIC) number or passport number
• Residential address including city (e.g., Karachi, Lahore, Islamabad)
• Email address and Pakistani mobile phone number
• Username and encrypted password

• Deposit and withdrawal history, transaction amounts, and timestamps
• Payment method details including JazzCash wallet numbers, EasyPaisa account references, HBL, UBL, or Meezan Bank account details, Raast IDs, and 1LINK transaction references
• Account balance information and bonus transaction records
• PKR amounts wagered, won, and lost across all gaming and betting activity

• Game sessions played, wager amounts, game outcomes, and return-to-player records
• Sports betting selections, markets accessed, odds taken, and settlement results
• Bonus promotions claimed, wagering progress, and promotion participation history
• Responsible gaming preferences including deposit limits, session limits, and self-exclusion status

• IP address, device type, operating system, and browser type
• Login timestamps, session duration, and pages visited on the Platform
• Geolocation data (country and city level) derived from IP address
• Cookie identifiers and tracking pixel data (see Section 9)

• Support chat transcripts, email correspondence, and complaint records
• Responses to surveys, feedback forms, or promotional communications
• Marketing preferences and opt-in / opt-out records

lg99 processes your personal data only for specific, legitimate purposes. We do not sell your personal data to third parties for their own marketing purposes under any circumstances. The table below summarises the primary purposes for which your data is used:

We will not use your data for any purpose that is incompatible with those described above without first providing notice and, where required, obtaining your consent.

lg99 processes personal data in reliance on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to provide the services you have signed up for, including account management, payment processing, and delivery of gaming and betting services.
• Legal obligation: Processing required to comply with applicable law, including KYC identity verification, AML obligations, and regulatory reporting requirements.
• Legitimate interests: Processing necessary to pursue lg99's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and business analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in relation to direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

lg99 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent strictly necessary for the purposes described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, for the purpose of processing your deposits and withdrawals in PKR.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and date of birth in compliance with regulatory requirements.
• Gaming content providers: Game studios and live dealer operators whose content is hosted on the lg99 Platform, to the extent necessary to deliver game sessions and settle outcomes.
• Fraud prevention and AML services: Specialist providers who assist lg99 in detecting and preventing fraudulent activity, money laundering, and other financial crimes.
• IT infrastructure and hosting providers: Cloud and server infrastructure partners who store and process Platform data on behalf of lg99 under contractual data processing agreements.
• Regulatory authorities and law enforcement: Where lg99 is required by applicable law, court order, or regulatory direction to disclose personal data.

lg99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with lg99, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction in accordance with financial record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support and communications records: Retained for three (3) years from the date of last communication, unless a longer period is required to resolve an ongoing complaint or legal matter.
• Marketing consent and opt-out records: Retained indefinitely to demonstrate the history of consent and withdrawal for compliance purposes.
• Technical and usage logs: Retained for up to twelve (12) months for security and operational purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with lg99's data destruction procedures.

lg99 employs a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the lg99 Platform
• AES-256 encryption at rest for all sensitive account and financial data stored on lg99 servers
• Multi-factor authentication options available for all player accounts
• Role-based access controls limiting employee access to personal data to those with a strictly defined operational need
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Intrusion detection systems and real-time security monitoring of Platform infrastructure
• Staff data protection training and regular review of internal data handling procedures

Notwithstanding these measures, no method of electronic transmission or storage is entirely secure. lg99 cannot guarantee the absolute security of your data, but we commit to notifying you and the relevant authorities of any data breach that poses a risk to your rights and freedoms, in accordance with applicable legal obligations.

lg99 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and gather analytics data. A cookie is a small text file stored on your device when you visit the Platform. The following categories of cookies are used:

You may manage your cookie preferences through the lg99 cookie consent banner displayed on your first visit to the Platform, or through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features.

Subject to applicable law, you have the following rights in relation to your personal data held by lg99. To exercise any of these rights, please contact us at [email protected] with your account details and a description of your request. lg99 will respond within a reasonable timeframe and in any event within thirty (30) calendar days of receiving a verifiable request.

• Right of access: You have the right to request a copy of the personal data lg99 holds about you and information about how it is being processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data be corrected or completed.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction of processing: You may request that processing of your data be restricted in certain circumstances, such as while a dispute about accuracy is resolved.
• Right to data portability: Where processing is based on consent or contract, and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, and you have an absolute right to object to direct marketing processing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

lg99 will not discriminate against you for exercising any of your data rights. Certain rights are subject to limitations where, for example, complying with your request would conflict with legal or regulatory obligations, or would adversely affect the rights of a third party.

The lg99 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age verification steps, and we may request supporting documentation — such as a CNIC or passport — to confirm that any player meets the minimum age requirement.

If lg99 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account and permanently delete all associated personal data, including transaction records and gaming history, without compensation or prior notice.

In order to provide the lg99 Platform and associated services to players across Pakistan, your personal data may be transferred to, stored in, and processed in countries outside Pakistan. This may include transfers to jurisdictions where the applicable data protection standards differ from those in your home country.

Where such transfers take place, lg99 implements appropriate safeguards to ensure that your data continues to receive a level of protection consistent with this Privacy Policy. These safeguards may include standard contractual clauses, binding corporate rules, adequacy decisions, or other legally recognised transfer mechanisms as appropriate.

By using the lg99 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data on the basis described above.

lg99 reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy, we will notify you by email to your registered address or by posting a prominent notice on the Platform prior to the changes taking effect. The "Last Revised" date at the top of this Policy will be updated accordingly.

Your continued use of the Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and contact us to close your account.

We recommend reviewing this Policy periodically to stay informed of how lg99 protects and handles your personal data. Archived versions of previous Privacy Policies are available upon request by contacting [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lg99 processes your personal data, please get in touch with our team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the lg99 Platform
• Data Rights Requests: Submit your request via email to [email protected] with the subject line "Data Rights Request"
• Responsible Gaming: lg99 Responsible Gaming page

lg99 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.