999bv Privacy Policy

This Privacy Policy ("Policy") describes how 999bv ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "User", "Player") who access or use the 999bv website located at https://999bv.pro, including all associated games, betting markets, promotions, support services, and account features.

999bv is committed to handling your personal information responsibly and in accordance with internationally recognised data protection standards. While Pakistan does not yet have a comprehensive data protection law equivalent to the EU's General Data Protection Regulation (GDPR), 999bv voluntarily aligns its data handling practices with GDPR principles as the global benchmark for user privacy rights.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. By registering an account or continuing to use the 999bv platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Policy, 999bv acts as the Data Controller in respect of personal data collected directly through the 999bv platform. The Data Controller is the entity that determines the purposes and means of processing personal data.

Where 999bv engages third-party service providers — such as game studios, payment processors, KYC verification providers, or customer support platforms — those parties act as Data Processors operating under contractual data processing agreements that require them to process your data only on 999bv's instructions and in accordance with applicable data protection standards.

For all data-related queries, requests, or concerns, you may contact our Data Protection Officer at:

999bv collects the following categories of personal data in the course of providing its services:

Identity & Registration Data

• Full legal name (as per CNIC or passport)
• Date of birth (for age verification — 21+ policy strictly enforced)
• Gender (optional, collected for personalisation purposes)
• Nationality and country of residence
• Government-issued identification document number and scanned copy (for KYC)

Contact & Communication Data

• Email address (primary communication channel)
• Mobile number (for OTP verification and two-factor authentication)
• City and province of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Live chat and email support conversation records

Financial & Transaction Data

• JazzCash and EasyPaisa mobile wallet identifiers
• HBL, UBL, and Meezan Bank account details (sort code and last 4 digits only)
• SadaPay and USDT wallet addresses
• Deposit amounts, withdrawal amounts, and transaction timestamps
• Bonus claims, wagering activity, and promotional participation history

Technical & Device Data

• IP address and approximate geolocation data
• Browser type, version, and operating system
• Device type, screen resolution, and unique device identifiers
• Session start/end times and duration
• Pages visited, game sessions played, and in-platform navigation path

Behavioural & Gaming Data

• Betting history across all sports markets (including PSL, cricket, football, kabaddi)
• Casino game history (slots, live dealer, crash games, fish shooting)
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session timers)
• Bonus and promotion interactions

999bv collects personal data through the following channels and methods:

• Direct Registration: Information you provide when creating your 999bv account, including your name, email, date of birth, and mobile number.
• KYC Verification Process: Identity and address documents submitted during the account verification stage, including CNIC, passport scans, and utility bills.
• Payment Transactions: Financial data associated with deposits and withdrawals processed via JazzCash, EasyPaisa, HBL, UBL, SadaPay, or USDT.
• Platform Usage: Automatically collected technical data including IP addresses, device identifiers, session data, and in-platform behaviour via server logs and analytics tools.
• Cookies & Tracking Technologies: Data collected via cookies, web beacons, and similar tracking technologies as described in Section 11 of this Policy.
• Customer Support: Information you provide when contacting 999bv through live chat, email, or any other support channel.
• Third-Party Verification Providers: Data received from KYC and AML service providers during identity and fraud screening processes.

999bv uses your personal data for the following purposes:

999bv does not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or notifying you of the new purpose and providing an opportunity to object.

999bv processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to fulfil the contract between you and 999bv — including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing carried out for 999bv's legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applicable to marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

999bv does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where strictly necessary:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT processors receive transaction data strictly necessary for payment processing and fraud prevention.
• KYC & AML Verification Providers: Third-party identity verification and AML screening services receive identity documents to perform regulatory compliance checks on 999bv's behalf.
• Game Content Providers: Licensed game studios receive anonymised session data (not personal identity data) necessary for game delivery, fairness auditing, and RNG certification.
• Customer Support Platforms: Live chat and helpdesk platforms may process your contact and communication data to facilitate support ticket management.
• Regulatory Authorities: 999bv may disclose personal data to relevant regulatory bodies, financial intelligence units, or law enforcement agencies where legally required to do so, or where disclosure is necessary to prevent or investigate criminal activity including money laundering or fraud.
• Legal Advisors: In the event of a legal dispute, claim, or regulatory investigation, relevant data may be shared with legal counsel on a strictly need-to-know basis under confidentiality obligations.

As an internationally operating platform, 999bv may transfer your personal data to servers, processors, or service providers located outside Pakistan. Where such transfers occur, 999bv ensures that appropriate safeguards are in place to protect your data to an equivalent standard as required under this Policy.

Safeguards used for international transfers include:

• Standard Contractual Clauses (SCCs) incorporated into data processing agreements with international service providers
• Transfers only to jurisdictions or organisations that maintain data protection standards substantially equivalent to internationally recognised norms
• Encryption of data in transit using TLS 1.3 for all cross-border data flows

You may request further information about the specific safeguards applied to any international transfer of your data by contacting our Data Protection Officer at [email protected].

999bv retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be linked to any identifiable individual.

999bv implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption at Rest: All stored personal and financial data is encrypted using AES-256 symmetric encryption. Encryption keys are managed using a hardware security module (HSM) with strict access controls.
• Encryption in Transit: All data transmitted between your browser or device and 999bv servers is protected by TLS 1.3 SSL encryption. HTTP connections are automatically redirected to HTTPS.
• Access Controls: Access to personal data within 999bv is granted on a strict need-to-know basis. All staff with access to personal data undergo background screening and receive regular data protection training.
• Two-Factor Authentication: Internal administrative access to production systems requires multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts.
• Penetration Testing: 999bv engages third-party security specialists to conduct regular penetration testing and vulnerability assessments of the platform.
• Incident Response: 999bv maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to affected individuals, 999bv will notify affected players and relevant authorities within the timeframes required by applicable law.

999bv uses cookies and similar tracking technologies to operate the platform, improve user experience, and — where you have consented — deliver relevant promotional content. The following cookie categories are in use:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and game lobby layout. These are not strictly necessary but improve your experience significantly.
• Analytics Cookies: Collect anonymised data about how players use the platform — which games are most popular, where users encounter difficulties, and how navigation flows are used. This data helps 999bv improve the platform over time.
• Marketing Cookies: Used only where you have explicitly consented. These enable 999bv to show relevant promotional offers based on your stated preferences and past activity on the platform.

You can manage your cookie preferences at any time via the Cookie Settings panel accessible in your account settings. You may also control cookies through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform.

999bv respects your rights over your own personal data. The following rights are available to all 999bv players:

• Right of Access: You have the right to request a copy of all personal data held about you by 999bv, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right is subject to overriding legal retention obligations — for example, transaction data required for AML compliance cannot be deleted on request alone.
• Right to Restriction: You have the right to request that processing of your data is restricted in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing of your data based on legitimate interests or for direct marketing purposes. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". 999bv will respond within 30 calendar days. We may need to verify your identity before processing the request.

999bv operates a strict 21+ age policy across all services. The platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

During registration, all players are required to confirm they are 21 years of age or older. 999bv further validates this through its KYC age verification process, which requires submission of a government-issued photo ID showing date of birth. Any account where age cannot be verified will be suspended until compliant documentation is provided.

If you believe that a minor may have accessed or registered on the 999bv platform, please report this immediately to [email protected] so that we can investigate and take immediate action.

999bv will only send you marketing communications — including promotional offers, bonus announcements, PSL cricket betting promotions, and platform news — where you have explicitly opted in to receive them during registration or via your account settings.

Marketing communications from 999bv may be delivered via email, SMS, or in-platform notification. You can opt out of any or all marketing channels at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email
• Updating your communication preferences in the Notifications section of your account settings panel
• Contacting support at [email protected] and requesting removal from all marketing lists

Opting out of marketing communications will not affect transactional communications that are necessary for your account — such as deposit confirmations, withdrawal notifications, security alerts, and KYC status updates. These will continue to be sent regardless of your marketing preferences.

999bv reserves the right to update or amend this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, platform functionality, or our data processing practices. All updates will be published on this page with a revised "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how we process your personal data or your rights in relation to it — 999bv will provide advance notice via email to your registered address and/or a prominent in-platform notification at least 14 days before the changes take effect. Your continued use of the 999bv platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 999bv handles your personal data, please contact our Data Protection Officer in the first instance:

999bv takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days, investigate thoroughly, and provide a substantive response within 30 calendar days. Where an extension is required due to the complexity of the matter, we will notify you within the initial 30-day window and provide a revised response timeline.

If you are not satisfied with 999bv's response to your complaint, or if you believe your data protection rights have been violated, you may escalate the matter to the relevant data protection authority or regulatory body in your jurisdiction. 999bv will cooperate fully with any such regulatory investigation.