Privacy Policy — u789 Platform

01 Who We Are and How to Contact Us

u789 is an internationally licensed online gaming platform operating the website at https://u789.im. The platform offers sports betting (including PSL and international cricket), live casino games, RNG slot titles, and other gaming products denominated in Pakistani Rupees (PKR) and accessible to English-speaking players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.

u789 acts as the data controller in respect of the personal data of all registered account holders and website visitors. For any privacy-related queries, requests, or complaints, you may contact the u789 Data Protection team via:

• Live Chat — available 24 hours a day, 7 days a week directly from the u789 platform.
• Email — [email protected] (plain text — this is not a clickable link).

u789 will acknowledge all data-related requests within 5 business days and aims to provide a full written response within 30 days of receipt, in line with standard data protection obligations applicable to internationally licensed gaming operators.

02 What Personal Data We Collect

u789 collects personal data across several categories depending on your interaction with the platform. The table below summarises the categories of personal data collected, the source of that data, and the primary purpose for which it is used.

03 Lawful Basis for Processing

u789 processes your personal data only where a valid lawful basis exists for doing so. The following lawful bases apply to u789's data processing activities:

• Contractual Necessity — processing required to open and manage your u789 account, process deposits and withdrawals in PKR, and deliver the gaming services you have requested. Without this processing, u789 cannot provide its services to you.
• Legal Obligation — processing required to comply with u789's obligations under its international gaming licence, including anti-money-laundering (AML) checks, age verification (21+ enforcement), Know Your Customer (KYC) procedures, and record-keeping mandates.
• Legitimate Interests — processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where u789's interests in maintaining a safe and fair platform are not overridden by your data protection rights.
• Consent — processing for optional marketing communications (promotional emails, bonus offers, event notifications), which you may opt into during registration or via your account settings, and may withdraw at any time without affecting the continued operation of your account.

04 How We Use Your Data

The personal data collected by u789 is used for the following clearly defined purposes:

• To register and maintain your u789 account, including enforcing the 21+ age requirement and processing your CNIC-based identity verification.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels.
• To deliver sports betting markets (PSL, international cricket, football, UFC), live casino games (baccarat, Teen Patti, blackjack, roulette), and RNG slot titles to your account.
• To apply responsible gaming tools — including deposit limits, cooling-off periods, and self-exclusion — and to monitor your gaming activity for signs of problem gambling behaviour.
• To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other activities that violate our Terms & Conditions.
• To respond to your customer support queries, live chat conversations, and formal complaints.
• To send you account-related communications such as deposit confirmations, withdrawal notifications, security alerts, and policy update notices.
• To send you optional marketing communications regarding bonuses, promotions, and new features — only where you have provided explicit consent and have not subsequently withdrawn it.
• To comply with record-keeping and reporting obligations imposed on u789 by its international gaming licence authority.

05 Cookies and Tracking Technologies

The u789 platform uses cookies and similar tracking technologies to deliver core platform functionality, maintain your session while you are logged in, and improve your overall experience. The following categories of cookies are used by u789:

• Strictly Necessary Cookies — required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core platform functionality.
• Functional Cookies — store your preferences such as preferred language, display settings, and responsible gaming tool configurations so that they persist across sessions.
• Analytical Cookies — used internally by u789 to understand aggregate user behaviour, identify platform performance issues, and improve navigation flows. These cookies do not identify you personally.
• Marketing Cookies — used only where you have consented to receive personalised promotional content. These cookies track whether you have engaged with specific promotions or bonus offers so that u789 can avoid showing you the same offer repeatedly.

You can manage your cookie preferences at any time via the Cookie Settings option in your account settings or by adjusting your browser's cookie controls. Please note that disabling strictly necessary cookies will impair your ability to log in and use the u789 platform.

06 Data Sharing and Third Parties

u789 does not sell, rent, or trade your personal data to any third party for commercial gain. Data sharing is limited to the categories of recipients listed below, in each case only to the extent necessary to fulfil the stated purpose:

• Payment Processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network processors receive the minimum financial data required to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC / Identity Verification Providers — third-party identity verification services may receive copies of your CNIC and proof-of-address documents for the purpose of completing automated or manual identity verification checks. These providers are bound by strict data processing agreements with u789.
• Game Technology Providers — RNG slot and live casino game providers may receive your account identifier and game session data for the purpose of delivering their games to your account and resolving game-level disputes. These providers do not receive your full identity or financial data.
• Licensing and Regulatory Authorities — u789's gaming licence authority may require u789 to submit player activity reports, AML reports, or individual account data as part of its regulatory oversight function. u789 is legally obligated to comply with such requests.
• Law Enforcement and Courts — where u789 is required by a valid legal order, court order, or law enforcement request to disclose personal data, we will do so to the extent required by that order and will notify the affected account holder where legally permitted.

07 International Data Transfers

As an internationally licensed gaming platform, u789 may process and store your personal data on servers located outside of Pakistan. Where such international transfers occur, u789 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to, or higher than, the protections applicable under u789's licensing jurisdiction.

Safeguards used for international data transfers include:

• Standard Contractual Clauses (SCCs) incorporated into data processing agreements with relevant service providers.
• Processing restricted to service providers whose data centres are certified under internationally recognised security standards such as ISO 27001 or SOC 2 Type II.
• Encryption of data in transit and at rest for all cross-border data flows involving personal data of u789 account holders.

08 Data Retention

u789 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by our licensing authority's regulatory obligations. The following general retention guidelines apply:

• Account Data (Identity, Contact) — retained for the duration of your active account plus a minimum of 5 years following account closure, in line with standard AML record-keeping requirements applicable to licensed gaming operators.
• Financial Transaction Records — retained for a minimum of 5 years from the date of each transaction, as required by anti-money-laundering regulations applicable to our licensing jurisdiction.
• KYC / Verification Documents — retained for the duration of your active account plus a minimum of 5 years following account closure, or longer if required by a specific regulatory instruction.
• Gaming Activity Logs — retained for a minimum of 3 years to support dispute resolution, responsible gaming monitoring, and any retrospective compliance reviews.
• Communications (Live Chat / Email) — retained for a minimum of 2 years for quality assurance and dispute resolution purposes.
• Marketing Consent Records — retained for as long as your consent remains active, plus 2 years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual account holder.

09 Your Data Protection Rights

As a user of the u789 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact u789 via live chat or email as described in Section 1 of this Policy:

• Right of Access — you have the right to request a copy of all personal data that u789 holds about you. u789 will provide this in a structured, readable format within 30 days of a valid request.
• Right to Rectification — if any personal data u789 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For changes to core identity data (name, date of birth), updated verification documentation may be required.
• Right to Erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that u789 may be unable to fulfil erasure requests where retention is required by its licensing authority's regulatory obligations.
• Right to Restrict Processing — you may request that u789 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of u789's legitimate grounds.
• Right to Data Portability — where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a machine-readable format and to have it transmitted to another controller at your request.
• Right to Object — you have the right to object to processing of your personal data carried out on the basis of u789's legitimate interests. u789 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent — where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Security Measures

u789 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and u789 servers.
• AES-256 encryption for sensitive personal and financial data stored in u789 databases.
• Role-based access controls ensuring that internal u789 staff can only access personal data to the extent required for their specific job function.
• Two-factor authentication (2FA) available to all account holders and mandatory for u789 internal administrative accounts.
• Continuous intrusion detection and monitoring of platform infrastructure for anomalous activity patterns.
• Regular penetration testing and security audits conducted by independent third-party cybersecurity firms.
• Dedicated incident response procedures to identify, contain, and report data security incidents in line with applicable regulatory requirements.

While u789 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your u789 account, enable 2FA, and notify support immediately if you suspect any unauthorised activity on your account.

11 Children and Minors

The u789 platform is strictly restricted to individuals aged 21 and above. u789 does not knowingly collect, process, or retain personal data of anyone under the age of 21. The platform employs age verification checks at the point of registration, and additional identity verification may be required prior to the processing of withdrawal requests.

If u789 becomes aware that it has inadvertently collected personal data from a person under the age of 21, the affected account will be closed immediately, all deposits will be returned to the original payment source where technically possible, and no winnings generated during the period of underage use will be paid out. All personal data associated with the underage account will be securely deleted, subject to any minimum retention obligations required by u789's licensing authority for compliance audit purposes.

If you believe that a person under the age of 21 has registered an account on u789, please contact the support team immediately via live chat so that the account can be reviewed and closed as a priority.

12 Marketing Communications and Opt-Out

Where you have provided explicit consent during registration or via your account settings, u789 may send you marketing communications relating to bonuses and promotions, new game releases, PSL and cricket betting events, and platform updates. These communications may be delivered via email or SMS to the contact details registered on your u789 account.

You may opt out of marketing communications at any time by:

• Visiting the Communication Preferences section of your u789 account settings and disabling marketing communications.
• Clicking the "Unsubscribe" link included in the footer of any u789 marketing email.
• Contacting u789 support via live chat or email and requesting that your marketing preferences be updated.

Opting out of marketing communications does not affect the delivery of transactional messages (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contractual necessity and cannot be disabled while your account remains active.

13 Responsible Gaming and Data

u789 uses gaming activity data — including betting history, session lengths, wagering frequency, and deposit patterns — for responsible gaming monitoring purposes. This processing is carried out on the basis of u789's legitimate interest in identifying players who may be exhibiting signs of problem gambling and intervening appropriately to protect their wellbeing.

Where u789's responsible gaming systems flag an account for review, a member of the responsible gaming team may contact the account holder via the registered email address or live chat to offer support, suggest the use of responsible gaming tools (deposit limits, cooling-off periods, or self-exclusion), or to apply safeguards to the account as required by u789's licensing obligations.

Responsible gaming data — including the existence of any self-exclusion, deposit limit, or cooling-off period on your account — is treated with the highest level of confidentiality and is not shared with any third party except as required by u789's licensing authority for regulatory audit purposes. For more information on the responsible gaming tools available to you, please visit the u789 Responsible Gaming page.

14 Changes to This Privacy Policy

u789 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, or the way in which we operate the platform. Where changes are material — for example, where a new category of data is collected or a new third-party sharing arrangement is introduced — u789 will provide advance notice to registered account holders via the email address on file or via a prominent notice on the platform.

The "Last Updated" date displayed at the top of this page reflects the most recent revision. Your continued use of the u789 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revised Policy, you must cease using the platform and may request account closure via the support team.

15 Contact and Complaints

If you have any questions, concerns, or complaints regarding the way in which u789 processes your personal data, please contact the u789 Data Protection team in the first instance using the contact details provided in Section 1 of this Policy. We will acknowledge your query within 5 business days and aim to resolve it within 30 days.

If you are not satisfied with u789's response to your data protection complaint, you have the right to escalate your complaint to the data protection supervisory authority in u789's licensing jurisdiction. Details of the relevant supervisory authority will be provided upon request by the u789 Data Protection team.

For responsible gaming-related concerns, including requests for self-exclusion or deposit limit adjustments, please visit the Responsible Gaming page or contact the support team directly via live chat, which is available 24 hours a day, 7 days a week.