999bv Privacy Policy —
How We Handle Your Personal Data

01 Who We Are

999bv is an internationally licensed online gaming and sports betting platform accessible at 999bv.bet. The platform offers a full range of betting and casino products to registered players, including live dealer casino games, PSL cricket betting markets, slot games, and crash game titles — all processed in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, 999bv acts as the data controller in respect of all personal data collected from players who register and use the 999bv platform. As data controller, 999bv determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and in accordance with applicable data protection standards.

If you have any questions about how 999bv processes your personal data, you may contact our data support team directly by emailing [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

02 Data We Collect

999bv collects personal data from players across several categories, depending on the nature of the interaction. The following table provides a structured overview of the types of data we collect and the context in which each type arises:

03 How We Collect Your Data

999bv collects personal data through a combination of direct interactions, automated technical systems, and — in limited circumstances — third-party verification services. The primary collection methods are as follows:

• Direct Registration: When you create a 999bv account, you provide identity and contact data directly through the registration form, including your name, date of birth, mobile number, and email address.
• KYC Submission: When you submit documents for identity verification before your first withdrawal, 999bv collects copies of government-issued ID, proof of address, and payment method confirmation.
• Transactional Activity: Every deposit and withdrawal made through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard generates a transaction record that 999bv retains for compliance purposes.
• Platform Usage: As you navigate the 999bv platform — browsing cricket betting markets, playing live casino tables, or spinning slot reels — our servers automatically log technical data including your IP address, device identifiers, and session timestamps.
• Cookies & Tracking Technologies: 999bv uses first-party cookies and similar technologies to maintain your login session, remember preferences, and track aggregate usage patterns for platform improvement purposes.
• Third-Party KYC Providers: In some cases, 999bv may use regulated third-party identity verification services to cross-check document authenticity. These providers operate under strict data processing agreements with 999bv.
• Customer Support Interactions: When you contact 999bv support via live chat or email, the content of those communications is logged and retained as part of your account record.

04 How We Use Your Data

999bv processes your personal data for specific, legitimate purposes directly related to the operation of the platform and the fulfilment of our legal obligations. We do not process your data for any purpose incompatible with those stated below:

• Account Management: To create, maintain, and administer your 999bv player account, process your 999bv Login sessions, and provide access to all platform features.
• Identity Verification (KYC): To verify your identity and age in compliance with international anti-money laundering (AML) requirements before processing withdrawal requests.
• Payment Processing: To process PKR deposits and withdrawals via your registered payment methods (JazzCash, EasyPaisa, bank transfers, and card payments) and to maintain accurate transaction records.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and any other conduct that violates our Terms & Conditions.
• Responsible Gaming Monitoring: To monitor gaming patterns for signs of problem gambling behaviour and to administer the deposit limits, session timers, and self-exclusion tools that you set up in your account.
• Customer Support: To respond to your queries, process complaints, and maintain a record of your support history to provide consistent assistance over time.
• Legal & Regulatory Compliance: To fulfil reporting obligations to relevant regulatory authorities, respond to lawful requests from law enforcement, and maintain records as required under international gaming licence conditions.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the 999bv platform's performance, features, and user experience for Pakistani players.
• Service Communications: To send you transactional communications related to your account (deposit confirmations, withdrawal updates, security alerts). These are not optional marketing messages and are sent only when operationally necessary.

05 Legal Basis for Processing

Every data processing activity carried out by 999bv is grounded in one or more of the following recognised legal bases:

• Contractual Necessity: Processing required to fulfil the contract between you and 999bv — i.e., to operate your account, process transactions, and deliver the gaming and betting services you have signed up for.
• Legal Obligation: Processing required by applicable law and regulation, including AML compliance, KYC identity verification, transaction record-keeping, and responding to regulatory or law enforcement requests.
• Legitimate Interests: Processing that serves 999bv's legitimate business interests — including fraud detection, security monitoring, platform analytics, and responsible gaming oversight — where those interests are not overridden by your privacy rights.
• Consent: For processing activities that go beyond operational necessity — such as sending optional promotional communications — 999bv will request your explicit consent and you may withdraw that consent at any time by contacting [email protected].

06 Data Sharing & Disclosure

999bv does not sell, rent, or trade your personal data. Disclosure of your personal data to third parties occurs only in the following limited and controlled circumstances:

• Payment Processors: Transaction data is shared with payment partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks — strictly to the extent necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents may be processed by regulated third-party KYC providers operating under binding data processing agreements that meet 999bv's security standards.
• Game Software Providers: Game providers whose titles are featured on the 999bv platform may receive pseudonymised session data necessary to operate game rounds. No directly identifiable personal data (name, CNIC, mobile number) is shared with game providers.
• Regulatory Authorities & Law Enforcement: 999bv will disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required by law, court order, or in connection with an active investigation.
• Professional Advisers: Legal, audit, and compliance advisers engaged by 999bv may access personal data on a need-to-know basis under strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of 999bv's platform assets, player data may be transferred to the acquiring entity subject to equivalent privacy protections. Affected players will be notified in advance.

07 Cookies & Tracking Technologies

999bv uses cookies and similar browser-based technologies to enable core platform functionality, maintain security, and gather anonymised performance analytics. A cookie is a small text file stored on your device when you visit the 999bv website. The types of cookies used by 999bv are described below:

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your 999bv account. 999bv does not use third-party advertising cookies or cross-site tracking pixels.

08 Data Security

999bv implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 999bv's servers is encrypted in transit using industry-standard SSL/TLS protocols, visible in your browser's padlock indicator.
• Encrypted Data Storage: Sensitive data fields — including CNIC numbers, financial account references, and password hashes — are stored with encryption at rest. Passwords are never stored in plain text.
• Access Controls: Access to personal data within 999bv's internal systems is restricted on a need-to-know basis using role-based access controls. All staff access is logged and audited.
• Two-Factor Authentication: 999bv supports 2FA on player accounts and requires it for internal administrative access. Players are strongly encouraged to enable 2FA via their 999bv account settings.
• Penetration Testing: 999bv's platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to player rights, 999bv will notify affected players and relevant authorities within the timeframe required by applicable data protection regulations.

09 Data Retention

999bv retains your personal data only for as long as it is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. The general retention schedule applied by 999bv is as follows:

• Account & Identity Data: Retained for the lifetime of your active account, plus a minimum of 5 years following account closure, in compliance with international AML record-keeping requirements.
• Transaction Records: Deposit and withdrawal records, including JazzCash, EasyPaisa, and bank transfer logs, are retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Identity verification documents are retained for the duration of the account plus 5 years post-closure. Physical copies are not retained — documents are stored digitally in an encrypted vault.
• Gaming Activity Logs: Bet history, game session records, and wagering data are retained for 5 years and may be used in dispute resolution or regulatory reporting during that period.
• Support Communications: Customer support chat transcripts and email records are retained for 3 years from the date of the final communication in each case.
• Cookie & Analytics Data: Anonymised analytics data derived from cookies is retained in aggregated, non-identifiable form for up to 24 months for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using processes that prevent reconstruction of identifiable information. Requests for early deletion are handled in accordance with Section 10 (Your Rights) below.

10 Your Rights Over Your Data

As a 999bv player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include your account username and registered mobile number for verification purposes. 999bv will respond within 30 days.

• Right of Access: You may request a copy of all personal data 999bv holds about you, including your account details, transaction history, KYC records, and gaming activity logs.
• Right to Rectification: If any personal data held by 999bv is inaccurate or incomplete, you have the right to request correction. Account details can also be updated through your 999bv account settings panel.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no legal retention obligation applies. Erasure requests are processed after account closure and following expiry of mandatory AML retention periods.
• Right to Restriction: You may request that 999bv restrict processing of your data in certain circumstances — for example, while a data accuracy dispute is being investigated.
• Right to Data Portability: You may request a structured, machine-readable export of personal data you have provided directly to 999bv, such as your account profile and transaction history.
• Right to Object: You may object to processing of your personal data where that processing is based on legitimate interests. 999bv will assess the objection and cease processing unless compelling legitimate grounds override your rights.
• Right to Withdraw Consent: Where 999bv processes your data based on consent (e.g., optional promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Minors & Age Verification

999bv strictly prohibits the use of its platform by any person under the age of 21. The 999bv platform is designed for adults only and is not directed at, marketed to, or intended for use by minors. In line with our commitment to responsible gaming, 999bv implements the following age-related safeguards:

• All new players are required to declare their date of birth during registration. Providing a false date of birth to gain access to 999bv constitutes a material breach of the Terms & Conditions and will result in account closure and forfeiture of balances.
• KYC verification requires a government-issued ID confirming the player's date of birth. Accounts that cannot confirm a minimum age of 21 will not be permitted to process withdrawals.
• If 999bv reasonably suspects that an account is being operated by or on behalf of a minor, the account will be suspended immediately pending age verification. Any deposits made by a verified minor will be returned via the original payment method.
• If you believe a minor has gained access to a 999bv account, contact [email protected] immediately. 999bv will investigate and act within 24 hours of receiving the report.

If you are a parent or guardian in Pakistan and are concerned about underage gambling access, 999bv recommends installing third-party parental control software on shared devices and keeping 999bv Login credentials strictly private.

12 International Data Transfers

As an internationally licensed gaming platform, 999bv may process and store player data on servers located outside Pakistan. Where personal data is transferred to jurisdictions that do not have data protection laws equivalent to those in your home jurisdiction, 999bv ensures appropriate safeguards are in place, including:

• Binding contractual data protection clauses with all data processors and sub-processors located outside Pakistan.
• Technical security measures — including encryption at rest and in transit — that apply regardless of the jurisdiction in which data is stored.
• Regular reviews of third-party data processor compliance to ensure ongoing adherence to 999bv's data protection standards.

13 Updates to This Privacy Policy

999bv reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or the evolution of the 999bv platform. When material changes are made, 999bv will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Send a notification to your registered email address at least 7 days before the revised policy takes effect, summarising the key changes.
• Display a prominent in-platform notice for logged-in players when they next access 999bv after a material policy update.

Your continued use of the 999bv platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you should cease using the platform and request account closure by contacting [email protected].

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or 999bv's handling of your personal data, please use the following contact details:

• Email (Data & Privacy): [email protected] — use the subject line "Privacy Policy Enquiry" for the fastest routing to our data team.
• Live Chat: Available within your logged-in 999bv account for real-time support queries.
• Response Time: 999bv aims to respond to all privacy-related correspondence within 5 business days of receipt.

We take all data privacy concerns raised by Pakistani players seriously. Whether you have a question about how your CNIC data is stored, want to exercise your right of access, or wish to report a suspected data incident, our support team is here to help.