Privacy Policy — 999bv Pakistan

999bv is an online entertainment platform built specifically for Pakistani players, offering sports betting, casino games, live casino, and related features. To operate the platform — and to give you a personalised, secure experience — we need to collect and process certain personal information about you.

This policy sets out what that information is, why we need it, and how we handle it responsibly. We do not collect data for its own sake. Everything we gather serves a specific purpose: either keeping your account secure, processing your PKR transactions correctly, improving the platform based on how people actually use it, or meeting our legal obligations.

We do not sell personal data to advertisers. We do not share your information with third parties beyond what is necessary to provide the service. And we give you tools to understand and manage your own data at any time.

The personal data we collect falls into several categories depending on how you interact with the platform. Below is a clear summary of the main data types, what they include, and why they are collected:

We only collect the minimum data needed for each purpose listed above. Where optional data is requested — such as a profile photo or preferred language setting — you are free to skip it without affecting your core account functionality.

Every piece of data we collect is used for one or more of the following purposes. We do not use your data in ways that are inconsistent with what is described here.

• Account Operation: Creating, maintaining and securing your 999bv account, including login authentication and session management.
• Payment Processing: Handling PKR deposits via JazzCash, Easypaisa, Raast, Bank Transfer and other supported methods, and processing withdrawal requests back to your original payment method.
• Identity Verification (KYC): Confirming that you are who you say you are, that you are at least 18 years old, and that your payment methods belong to you. This is a standard requirement for any financial platform.
• Fraud and Security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, multiple account creation, and other violations of our Terms and Conditions.
• Bonuses and Promotions: Determining whether you are eligible for specific offers — such as the welcome bonus, PSL season promotions, weekly cashback or VIP-tier rewards — and crediting them accurately.
• Customer Support: Responding to your queries, investigating complaints, resolving payment issues and providing account assistance through live chat and email.
• Responsible Gaming: Monitoring account activity to identify potentially problematic patterns, applying deposit limits or self-exclusion settings you have activated, and sending responsible gaming reminders where appropriate.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use the platform — which sports markets are most popular, which casino games get the most play during PSL season — so we can prioritise improvements that matter.
• Legal Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and fulfilling anti-money-laundering (AML) obligations.
• Communications: Sending you important account notifications, security alerts, and — where you have opted in — promotional communications about relevant offers. You can manage your communication preferences from your account settings at any time.

We do not sell your personal data. We do not share it with advertisers or data brokers. The only circumstances under which your data is shared with third parties are the following:

• Payment Processors: When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast, Bank Transfer or another supported method, the relevant payment provider receives the financial data necessary to complete that transaction. Each payment provider operates under its own privacy and data security standards.
• Identity Verification Providers: Where KYC checks require third-party verification tools — such as document authentication services — we share the necessary identity data with those providers for verification purposes only.
• Game Suppliers: Casino game providers receive session data necessary to run their games correctly, such as bet amounts and game results. They do not receive your full personal profile.
• Technical Service Providers: Hosting, cloud infrastructure, analytics and customer support tools that help us operate the platform may process certain data. All such providers are bound by data processing agreements that restrict how they can use your information.
• Legal and Regulatory Authorities: Where we are required by law to disclose information — for example, in response to a valid court order or a regulatory request — we will comply. We will notify you where legally permitted to do so.

Any third party that receives your data in connection with 999bv operations is required to handle it with appropriate security measures and use it only for the stated purpose. We do not authorise third parties to use your data for their own marketing or unrelated purposes.

The 999bv website and app use cookies and similar tracking technologies to improve your experience, keep your session active, and understand how the platform is being used. Here is a plain-English breakdown of the cookie types in use:

• Essential Cookies: Required for the platform to function. These handle login sessions, security tokens and your account preferences. You cannot opt out of essential cookies without losing access to your account.
• Analytics Cookies: Help us understand how players navigate the platform — which pages get the most visits, how long sessions last, where people drop off. This data is aggregated and does not identify you personally.
• Functional Cookies: Remember your preferences such as language settings, odds format preferences and display choices so you do not have to set them on every visit.
• Performance Cookies: Track platform load times, error rates and API response times so our technical team can identify and fix issues that affect your experience.

You can manage cookie preferences through your browser settings. Blocking certain cookie categories may affect platform functionality. The 999bv app uses equivalent local storage mechanisms for the same purposes.

Protecting your personal data and account funds is a core responsibility we take seriously. The 999bv platform applies multiple layers of technical and operational security measures to keep your information safe.

• Encryption in Transit: All data exchanged between your device and the 999bv servers is encrypted using TLS (Transport Layer Security). This applies to every page, every login, and every financial transaction.
• Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial records and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Password Security: Passwords are never stored in plain text. They are hashed using secure, one-way hashing functions. This means that even internal team members cannot view your password.
• Two-Factor Authentication (2FA): 2FA is available for all accounts and is strongly recommended. When enabled, logging in requires both your password and a time-sensitive verification code sent to your registered contact method.
• Access Controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Only authorised personnel who require access to perform their job function can view account data.
• Fraud Monitoring: Automated systems monitor account activity in real time for patterns consistent with unauthorised access, unusual transaction behaviour or bonus abuse, and flag these for review.

While we maintain strong security practices, no digital platform can guarantee absolute security against all threats. You are also responsible for keeping your account credentials safe — do not share your password with anyone, and use a strong, unique password for your 999bv account. If you ever suspect your account has been compromised, contact our support team immediately.

We retain your personal data for as long as your account is active and for a defined period after account closure. The retention period depends on the type of data and the reason it was collected.

• Account and Identity Data: Retained for the lifetime of your account plus a minimum of five years after closure. This is required for anti-money-laundering record-keeping obligations.
• Transaction Records: Deposit and withdrawal records, bet history and bonus activity are retained for a minimum of five years to meet financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five years following the completion of verification, or five years after account closure — whichever is later.
• Support Communications: Chat logs and email correspondence with our support team are retained for up to three years to allow for complaint resolution and quality assurance.
• Technical Logs: Server logs, IP address records and session data are typically retained for up to 12 months for security and fraud investigation purposes.

Once the applicable retention period has expired, your data is securely deleted or anonymised. Anonymised, aggregated data — where it is no longer possible to identify you as an individual — may be retained indefinitely for statistical and analytical purposes.

You have meaningful rights over your personal data. The following rights apply to all registered 999bv users:

• Right to Access: You can request a copy of the personal data we hold about you at any time. We will provide this in a clear, readable format within a reasonable timeframe.
• Right to Correction: If any of your personal data is inaccurate or out of date, you can request that we correct it. You can update basic account information directly from your account settings page.
• Right to Deletion: You can request that we delete your personal data. Where we are legally permitted to do so — and where deletion does not conflict with our AML, financial record-keeping or security obligations — we will action your request.
• Right to Restrict Processing: In certain circumstances, you can ask us to pause how we use your data — for example, while a dispute is being resolved — without requiring deletion of the data itself.
• Right to Data Portability: You can request a copy of certain personal data in a machine-readable format, allowing you to transfer it to another service if you choose.
• Right to Object to Marketing: You can opt out of promotional communications at any time via your account notification settings. Opting out of marketing does not affect essential account communications.

999bv is strictly an adults-only platform. We do not knowingly collect personal data from anyone under 18 years of age. The platform requires age confirmation during registration, and age verification checks are conducted on accounts where there is any doubt about the user's age.

If we discover that a user under the age of 18 has registered an account, we will immediately close that account, void all associated activity, return any deposited funds to the original payment method where possible, and permanently delete the account data beyond what is legally required to be retained for fraud records.

If you are a parent or guardian and believe a minor has used the 999bv platform, please contact our support team immediately so we can investigate and take appropriate action.

The 999bv platform integrates with a number of third-party services to deliver the full range of features available to players. These include casino game providers, live casino streaming services, payment processors, customer support software, and analytics tools.

Each third-party service operates under its own privacy policy and data practices. While 999bv selects partners carefully and requires contractual commitments to data security, we are not responsible for the privacy practices of these third parties beyond our own platform boundary.

Specifically in the context of Pakistani players:

• JazzCash, Easypaisa, Raast and any bank you use for deposits or withdrawals operate under their own terms and privacy policies. Your interaction with those payment systems is governed by those policies.
• Casino game software providers — whose titles appear in the 999bv casino and live casino — process minimum game-session data necessary to run their titles. They do not have access to your full 999bv profile.

The 999bv website and app do not embed social media tracking pixels, and we do not use external advertising networks that track you across the web.

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered users via their account email or through an in-platform notification.

The updated policy will always be available at /privacy-policy with a revised effective date shown at the top of the page. We encourage you to review this page periodically so you stay informed about how we handle your data.

Your continued use of the 999bv platform after a revised Privacy Policy comes into effect constitutes your acceptance of the updated terms. If you disagree with any changes, you may close your account and request withdrawal of your remaining balance by contacting our support team.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out to our support team. You can contact us through the live chat feature available in your account, or by writing to us from your registered email address.

If you need help with your account outside of privacy matters — such as a deposit issue, a withdrawal question, or a bonus query — visit our FAQ page for quick answers, or reach the support team via live chat.