b9999 Privacy Policy – How We Protect Your Data in Pakistan

1. Who We Are

b9999 operates the online casino and sports betting platform available at b9999.world. References to "b9999", "we", "our", or "us" in this Privacy Policy refer to the operator of b9999.world in its capacity as the data controller responsible for your personal information.

This Privacy Policy applies to all Pakistani players who access, register on, or use any service provided through the b9999 platform, including casino games, PSL cricket betting, crash games, slots, Andar Bahar, live dealer tables, the referral programme, and all deposit and withdrawal services. By using b9999, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Personal Data We Collect

b9999 collects only the information necessary to provide you with a functioning, secure, and legally compliant service. The categories of personal data we collect are as follows:

b9999 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information, or biometric data beyond the face-match verification used for identity confirmation at withdrawal stage.

3. How We Use Your Personal Data

Every piece of data b9999 collects is used for a specific, defined purpose. We do not use your data for undisclosed purposes and we do not apply your data to automated decision-making that produces legal or similarly significant effects on you without your prior informed consent.

• Account operation: Registration data is used to create and maintain your b9999 account, authenticate your login, and communicate with you about your account activity.
• Payment processing: Payment data is used to process deposits and withdrawals in PKR. Full card numbers are not stored on b9999's servers; they are passed directly to our PCI-DSS-compliant payment processor.
• Identity verification and anti-money laundering compliance: Identity documents are used to verify minimum age (18+) and to comply with AML obligations under the laws governing b9999's operating licence. Identity data is not used for any marketing or profiling purpose.
• Responsible gaming monitoring: Gaming activity data is used to identify patterns that may indicate problematic play, allowing b9999's responsible gaming team to reach out with support where appropriate.
• Security and fraud prevention: Technical data (IP address, device fingerprint, login patterns) is used to detect and prevent unauthorised account access, fraud, and multi-accounting.
• Service improvement: Aggregated, anonymised usage data is used to improve the platform, prioritise features, and optimise game loading performance.
• Direct communications: If you have opted in, b9999 may send promotional communications about bonuses, new games, and PSL betting offers via email or SMS. You can unsubscribe at any time by contacting [email protected].
• Legal obligations: Transaction records and identity data are retained to meet regulatory and legal reporting requirements under the laws applicable to b9999's operations.

4. Legal Basis for Processing

b9999 processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to deliver the services you signed up for – account management, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with anti-money laundering regulations, age verification requirements, and financial record-keeping obligations under the laws governing b9999's operating licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement where our legitimate interest in operating a safe and reliable service does not override your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have specifically opted in. You may withdraw consent at any time without affecting the lawfulness of processing that took place before withdrawal.

5. Data Sharing and Third Parties

b9999 does not sell your personal data. Sharing of personal data with third parties occurs only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the minimum payment information required to process your transaction. These processors operate under their own data protection obligations.
• Identity verification providers: Third-party KYC and AML verification providers receive identity documents when verification is required. These providers are contractually bound to use data only for the verification purpose specified by b9999.
• Game providers: Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, BGaming, and other providers receive a session token and game-specific bet data necessary to run the games. These providers do not receive your name, contact details, or payment information.
• Legal authorities: b9999 will disclose personal data to law enforcement, regulatory bodies, or courts where required by a valid legal order. b9999 will notify you of such a disclosure where it is legally permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of b9999's business, player data may be transferred to the acquiring entity. Players will be notified in advance of any such transfer and provided with the option to close their account if they do not consent.

6. Data Retention

b9999 retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods required by law and regulation:

• Account and registration data: Retained for the duration of your account plus five years after account closure, to meet regulatory record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of seven years from the date of the transaction, as required by anti-money laundering regulations.
• Identity verification documents: Retained for five years from the date of verification or from account closure, whichever is later.
• Support communications: Retained for three years from the date of the final communication in a support thread.
• Gaming activity logs: Retained for three years from the date of the session, used for responsible gaming monitoring and dispute resolution.
• Technical and security logs: Retained for 12 months for security monitoring purposes, then deleted or anonymised.

After the applicable retention period, personal data is securely deleted or anonymised in a way that means it can no longer be linked back to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

7. Your Data Rights

As a b9999 player, you have the following rights in relation to your personal data. These rights can be exercised by contacting b9999 at [email protected]. We will respond within 48 hours for urgent data matters and within a maximum of 30 days for all other requests.

8. Cookies and Tracking Technologies

b9999 uses cookies and similar technologies to keep your session active, remember your preferences, and analyse how the platform is used so we can improve it. The cookies used on b9999 fall into the following categories:

You can manage optional cookie preferences from your browser settings at any time. Disabling optional cookies does not affect your ability to play on b9999, but may mean that your preferences are not saved between sessions. Note that disabling essential or security cookies will impair the core functionality of the platform.

9. Security Measures

b9999 takes the security of your personal data seriously and has implemented the following technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and b9999's servers.
• Hashed password storage using industry-standard cryptographic algorithms. b9999 staff cannot view your password in plaintext — not even database administrators.
• Role-based access controls ensuring that b9999 staff can only access the personal data they need to perform their specific job function.
• 24/7 security monitoring with automated alerting for anomalous activity patterns, failed login attempts, and unusual data access requests.
• PCI-DSS compliant card payment processing — full card numbers are never transmitted to or stored on b9999's own servers.
• Regular security audits and penetration testing conducted by independent third-party security firms.

In the event of a data breach that poses a risk to your rights and freedoms, b9999 will notify affected players within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in risk to individuals. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address it.

10. Children's Privacy

b9999 is strictly an adult platform. The minimum age to register and use b9999 is 18 years. We do not knowingly collect personal data from anyone under the age of 18. Age verification is performed during the registration process and at the withdrawal verification stage.

If b9999 becomes aware that personal data has been collected from a person under 18, that account will be suspended immediately, all deposits will be returned to the originating payment method, and the personal data will be deleted from our systems as promptly as possible. If you believe a minor has registered on b9999, please contact [email protected] immediately with the details so we can investigate and take action.

Parents and guardians are encouraged to use parental control tools available on mobile devices to restrict access to online gambling platforms. Details of available responsible gaming tools are also available on our Responsible Gaming page.

11. Third-Party Platform Links

The b9999 platform contains links to other b9999 pages (such as Terms and Conditions, Responsible Gaming, and FAQ) as well as the technical infrastructure required to deliver games from third-party providers. b9999 game providers operate their own data practices as described in Section 5 of this Policy.

b9999 does not include links to external third-party websites for commercial purposes. If you navigate away from b9999.world to any external site through your own action, b9999 has no responsibility for the privacy practices of that site and this Privacy Policy does not apply to information collected there.

12. Changes to This Privacy Policy

b9999 reviews this Privacy Policy regularly and updates it when our data practices change, when new legal requirements come into effect, or when we introduce new services that involve additional data processing. The date of the most recent update is displayed at the top of this page.

When changes are material – meaning they affect what data we collect, how we use it, or what rights you have – b9999 will notify all registered players via their registered email address at least 14 days before the changes take effect. For non-material updates (clarifications, formatting changes, corrections of typographical errors), b9999 may update this page without advance notice.

Continued use of the b9999 platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not agree with changes to this Policy, you may close your account by contacting [email protected].

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how b9999 handles your personal data, please contact our data protection team using the following details:

• Email: [email protected] (subject line: "Privacy Request" for data rights matters)
• Live Chat: Available within your b9999 account dashboard
• Response time: Within 48 hours for data rights requests; within 2 business hours for urgent security concerns

When submitting a data rights request by email, please include your registered b9999 username and a description of your request. We may ask you to verify your identity before processing the request, to ensure that we only disclose or delete data to the account holder themselves.