bb999 Privacy Policy — How We Protect Every Pakistani Player's Personal Data

bb999 is an internationally licensed online casino and sports betting platform built to serve Pakistani players. As a licensed operator, bb999 is subject to data protection obligations imposed by the framework of our international gaming licence. These obligations require bb999 to handle Pakistani player personal data responsibly, transparently, and in accordance with principles that are broadly consistent with internationally recognised data protection standards.

This Privacy Policy is the definitive document governing bb999's approach to personal data. It is written in plain, readable English because bb999 believes that Pakistani players deserve to understand exactly how their information is handled — not to be given a document that is technically compliant but practically incomprehensible. If any provision of this Policy is unclear, Pakistani players are encouraged to contact bb999 support for clarification before submitting any personal data.

This Policy should be read in conjunction with bb999's Terms and Conditions, available at /terms-conditions. In the event of any inconsistency between this Policy and the Terms and Conditions on the specific subject of personal data processing, this Policy shall prevail.

For the purposes of this Privacy Policy, bb999 — operating the platform at bb999.today — is the data controller in respect of the personal data of all registered Pakistani players. As data controller, bb999 is responsible for determining the purposes for which Pakistani player personal data is processed and the means by which that processing takes place.

bb999 may engage third-party service providers who process personal data on bb999's behalf in their capacity as data processors. All such data processors are bound by contractual data processing agreements that restrict their use of Pakistani player personal data to the specific, documented purposes for which bb999 has engaged them, and that require them to implement security measures at least equivalent to those maintained by bb999 itself.

bb999 collects personal data from Pakistani players across several categories. The specific data collected at each stage of the player relationship is described below.

3.1 Registration Data

When a Pakistani player registers a bb999 account, we collect the following personal data:

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Pakistani residential address (city, province, and full postal address)
• Valid email address
• Pakistani mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with the Know Your Customer obligations of bb999's international gaming licence, we collect and process the following identity documents from Pakistani players prior to processing withdrawals above the applicable threshold:

• Copy of a valid Pakistani government-issued identity document (CNIC, Passport, or Driver's Licence)
• Proof of address document (utility bill, bank statement, or government correspondence dated within 90 days)
• Proof of payment method (screenshot or statement confirming ownership of the JazzCash account, EasyPaisa account, or bank account used for deposits)

3.3 Financial Transaction Data

bb999 processes and retains records of all financial transactions conducted on a Pakistani player's account, including:

• Deposit amounts, dates, times, and payment method identifiers (masked account numbers)
• Withdrawal amounts, dates, times, and payment method identifiers
• Bonus credits and wagering activity
• Running account balance history

3.4 Gaming Activity Data

bb999 maintains records of Pakistani player gaming activity on the platform, including games played, bet amounts, outcomes, session start and end times, and responsible gaming tool usage. This data is used for account management, regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

3.5 Technical and Device Data

When Pakistani players access bb999, our platform automatically collects certain technical data, including IP address, device type and operating system, browser type and version, session timestamps, and pages visited within the platform. This data is used for security monitoring, fraud prevention, and platform optimisation purposes.

bb999 collects Pakistani player personal data through the following means:

• Direct Collection: Data provided by the Player directly during registration, account verification, deposit and withdrawal requests, completion of responsible gaming tools, and any communications with bb999's support team.
• Automated Collection: Technical data collected automatically by bb999's platform systems when a Player accesses bb999.today, including server log data, session data, and device fingerprinting data used for security and fraud prevention purposes.
• Third-Party Sources: In limited circumstances, bb999 may receive personal data about Pakistani players from third-party sources, including payment processors confirming transaction details, identity verification service providers used during KYC, and fraud prevention databases used to screen new registrations.
• Cookies and Similar Technologies: bb999 uses cookies and similar tracking technologies to collect technical usage data, as described further in Section 8 of this Policy.

bb999 uses Pakistani player personal data for the following specific purposes:

• Creating, maintaining, and operating registered bb999 player accounts in PKR
• Verifying the identity and age of Pakistani players in compliance with our international gaming licence obligations
• Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank and processing PKR withdrawal requests to verified payment methods
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns of play that may indicate problem gambling behaviour
• Conducting anti-money laundering screening and transaction monitoring as required by our licensing obligations
• Detecting and preventing fraud, multi-accounting, bonus abuse, and other Prohibited Conduct as defined in bb999's Terms and Conditions
• Providing customer support to Pakistani players via live chat and email
• Resolving disputes between players and bb999 in accordance with the complaints procedure in our Terms and Conditions
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account security alerts
• Sending promotional communications to Pakistani players who have opted in to receive marketing emails from bb999
• Maintaining regulatory records required by the framework of bb999's international gaming licence
• Improving the bb999 platform and user experience based on aggregated, anonymised usage data

bb999 processes Pakistani player personal data on the following legal bases, which correspond to the processing purposes described in Section 5:

• Contractual Necessity: Processing required to perform bb999's obligations to Players under the Terms and Conditions — including account management, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with bb999's obligations under its international gaming licence — including KYC verification, AML monitoring, and regulatory record-keeping — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud prevention, security monitoring, and platform improvement is conducted on the basis of bb999's legitimate interests, balanced against Pakistani players' privacy interests. bb999 conducts balancing assessments to ensure that its legitimate interests do not override players' fundamental privacy rights.
• Consent: Processing for marketing communications is carried out only where Pakistani players have provided their express consent to receive such communications. Players may withdraw their marketing consent at any time without affecting the lawfulness of processing carried out before withdrawal of consent.

bb999 shares Pakistani player personal data with third parties only in the following specific, limited circumstances. In every case where data is shared with a third-party processor, that sharing is governed by a data processing agreement that restricts the processor's use of the data to the documented purpose for which it was shared.

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other approved Pakistani payment provider receive the transaction data necessary to process deposits and withdrawals. These providers receive only the minimum data required to complete the specific transaction.
• Identity Verification Providers: bb999 uses third-party KYC service providers to assist with the verification of Pakistani player identity documents. These providers receive copies of identity documents solely for the purpose of verification and are contractually prohibited from using them for any other purpose.
• Game Software Providers: Casino game and sports betting software providers who supply games to the bb999 platform may receive aggregated, anonymised game session data necessary to ensure proper game functioning and to resolve technical disputes. They do not receive personally identifiable Pakistani player data beyond what is technically necessary for game delivery.
• Fraud Prevention Services: bb999 uses third-party fraud prevention databases to screen new registrations and monitor ongoing account activity for patterns associated with fraud, multi-accounting, and money laundering. Data shared for this purpose is limited to the indicators required for screening.
• Regulatory Authorities: bb999 may be required to disclose Pakistani player personal data to regulatory authorities, law enforcement agencies, or judicial bodies where such disclosure is required by law, by the terms of our international gaming licence, or by a valid legal order. bb999 will notify Pakistani players of such disclosures where we are legally permitted to do so.

bb999 does not share Pakistani player personal data with any third party for that third party's own marketing purposes. bb999 does not sell Pakistani player personal data under any circumstances.

bb999 uses cookies and similar tracking technologies on the bb999.today platform. A cookie is a small text file placed on a Pakistani player's device when they visit bb999.today, which allows the platform to recognise the device on subsequent visits and to provide a more personalised and functional user experience.

8.1 Types of Cookies Used by bb999

• Strictly Necessary Cookies: These cookies are essential for the bb999 platform to function correctly. They maintain Pakistani player login sessions, remember responsible gaming settings, and enable core platform functionality. These cookies cannot be disabled without disrupting essential platform services.
• Performance and Analytics Cookies: These cookies collect anonymised data about how Pakistani players use the bb999 platform — which pages are visited, how long sessions last, and where technical errors occur. This data is used to improve platform performance and user experience. bb999 uses only first-party analytics processing for this purpose.
• Functional Cookies: These cookies remember Pakistani player preferences — such as preferred language settings and display preferences — so that players do not need to reset these preferences on every visit.
• Security Cookies: These cookies assist bb999's fraud detection and security monitoring systems by enabling device recognition and identifying unusual session patterns that may indicate unauthorised account access attempts.

8.2 Managing Cookie Preferences

Pakistani players can manage their cookie preferences through their browser settings. Most browsers allow users to view, manage, and delete cookies stored by individual websites. Please note that disabling strictly necessary cookies will impair the functionality of the bb999 platform, including the ability to maintain a login session. Detailed guidance on managing cookie settings in common Pakistani mobile browsers is available from bb999's support team upon request.

bb999 implements a comprehensive set of technical and organisational security measures to protect Pakistani player personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• 256-bit TLS encryption for all data in transit between Pakistani players and bb999's platform servers
• AES-256 encryption for all personal data stored at rest in bb999's secure data systems
• Multi-factor authentication options for all Pakistani player accounts
• Role-based access controls limiting internal access to Pakistani player personal data to bb999 team members whose specific roles require that access
• Continuous automated monitoring of platform systems for security anomalies and intrusion attempts
• Regular independent security audits of bb999's data processing infrastructure
• Secure, encrypted backup systems with access controls equivalent to those applied to primary data stores

In the event of a personal data breach affecting Pakistani player data, bb999 will notify affected players as promptly as possible and will take all reasonable steps to contain the breach and prevent further unauthorised access.

bb999 retains Pakistani player personal data for the periods described below, after which data is securely deleted or irreversibly anonymised:

Where a Pakistani player account is closed due to confirmed Prohibited Conduct, bb999 may retain relevant data for a longer period to the extent required for ongoing fraud prevention or legal proceedings.

Pakistani players whose personal data is held and processed by bb999 have the following privacy rights, which can be exercised by contacting bb999's data privacy team as described in Section 14:

• Right of Access: Pakistani players have the right to request confirmation of whether bb999 holds personal data about them, and to receive a copy of that data in a readable format within a reasonable timeframe.
• Right to Rectification: Pakistani players have the right to request correction of inaccurate or incomplete personal data held by bb999. Players who discover that their registration data is incorrect should contact support to initiate a correction.
• Right to Erasure: Pakistani players may request deletion of their personal data where it is no longer necessary for the purposes for which it was collected, and where bb999 is not subject to a legal obligation to retain it. Note that regulatory retention requirements (Section 10) may limit the scope of erasure requests for certain data categories.
• Right to Restrict Processing: Pakistani players may request that bb999 restrict the processing of their personal data in certain circumstances — for example, where the accuracy of the data is disputed pending verification.
• Right to Object: Pakistani players have the right to object to processing of their personal data that is carried out on the basis of bb999's legitimate interests, including profiling for fraud prevention purposes. bb999 will assess such objections on a case-by-case basis and will cease the relevant processing unless compelling legitimate grounds exist that override the player's interests.
• Right to Withdraw Marketing Consent: Pakistani players who have opted in to marketing communications may withdraw that consent at any time by contacting bb999 support or by using the unsubscribe mechanism included in all bb999 marketing emails. Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal.

bb999 will respond to all validated privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, bb999 may extend this period by a further thirty (30) days with prior notice to the requesting Pakistani player.

bb999 is strictly restricted to adults aged 21 years and above. The bb999 platform does not knowingly collect personal data from any individual who is below the age of 21. If bb999 discovers or is notified that personal data has been collected from an individual who is under the age of 21, that data will be immediately deleted and the associated account will be permanently closed.

Pakistani parents and guardians who believe that a minor in their household may have registered a bb999 account should contact bb999 support immediately via live chat so that the account can be reviewed and closed. bb999 treats all reports of potential underage registrations as urgent and processes them as a matter of priority.

bb999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable regulations, or changes in the requirements of our international gaming licence. The effective date of the current version of the Policy is stated at the top of the document.

Material changes to this Privacy Policy — meaning changes that materially affect Pakistani players' rights or the way in which their data is processed — will be communicated to registered players via their registered email address and via a notice displayed upon login to the bb999 platform, no fewer than fourteen (14) days before the change takes effect.

Continued use of bb999 following the effective date of any revised Privacy Policy constitutes acceptance of the revised Policy. Pakistani players who do not accept the revised Policy should cease using bb999 and request account closure before the revised Policy's effective date. The most current version of this Privacy Policy is always available at bb999.today/privacy-policy.

Pakistani players who have questions about this Privacy Policy, who wish to exercise any of the privacy rights described in Section 11, or who have concerns about bb999's data processing practices may contact bb999's data privacy team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the bb999 platform. Live chat is the fastest channel for urgent privacy concerns, including suspected unauthorised account access.
• Email: [email protected] — for formal written privacy rights requests and detailed data enquiries. Please mark the subject line "Privacy Request" to ensure your message is directed to the appropriate team. bb999 aims to acknowledge all privacy-related emails within two (2) business days.

When submitting a formal privacy rights request, Pakistani players should include their registered bb999 username and a clear description of the data or processing to which their request relates. bb999 may need to verify the identity of the requestor before processing access or erasure requests, to ensure that player data is not disclosed to or deleted at the request of unauthorised third parties.