bn999 Privacy Policy

This Privacy Policy ("Policy") describes how bn999 ("Company", "we", "us", "our"), operator of the online gaming platform at bn999.biz, collects, uses, stores, shares, and protects the personal data of registered users and visitors ("you", "your") in connection with access to and use of the bn999 platform, its services, and associated communications.

By registering a bn999 account or accessing the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the bn999 platform. If you do not agree with any part of this Policy, you should not use the bn999 platform.

1. Who We Are

bn999 is an online gaming and sports betting platform operated under applicable international gaming regulations and designed specifically for the Pakistani market. The platform offers cricket betting, live casino games, slots, and other wagering products, with all transactions conducted in Pakistani Rupees (PKR) via local payment methods including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

For all data-related enquiries, bn999 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Our designated point of contact for privacy matters is our support team, reachable via live chat or at [email protected].

2. Data We Collect

bn999 collects personal data that you provide directly, data generated through your use of the platform, and data received from third-party verification and payment services. The categories of data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless required by a specific regulatory obligation, in which case you will be notified separately.

3. How We Collect Your Data

bn999 collects your personal data through the following channels:

• Direct Provision: Information you submit when registering your account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a promotion.
• Automated Technologies: Technical and usage data collected automatically when you access the platform, including via cookies, server logs, and session tracking tools embedded in the platform interface.
• Third-Party KYC Partners: Identity verification data returned by authorised KYC service providers when they process your submitted documents against national databases.
• Payment Processors: Transaction metadata — such as confirmation status, timestamps, and masked payment method identifiers — returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank upon processing your deposit or withdrawal requests.
• Fraud & Risk Systems: Risk signals and device fingerprint data supplied by third-party fraud prevention services that bn999 uses to protect the integrity of user accounts and the platform as a whole.

4. Why We Use Your Data

bn999 processes your personal data for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent:

• Account Registration & Management: To create, verify, and administer your bn999 account, including processing your KYC documentation to confirm your identity and age eligibility (21+).
• Payment Processing: To facilitate deposits and withdrawals in PKR, verify that payment methods are registered in your name, and maintain accurate transaction records.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, counter-terrorism financing (CTF) requirements, and licensing conditions, including mandatory record-keeping and reporting obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gameplay patterns and account activity for indicators of problem gambling behaviour, and to administer deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: To respond to your queries, process complaints, and maintain records of our communications for quality assurance and dispute resolution purposes.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and product updates via SMS or email, where you have provided explicit consent. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and overall user experience.

5. Legal Basis for Processing

bn999 processes your personal data only where a valid legal basis exists. Depending on the purpose of processing, the applicable legal basis is one of the following:

• Contractual Necessity: Processing required to perform the contract between you and bn999 — that is, to provide you with access to the platform, process your transactions, and administer your account.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, age verification mandates, and licensing conditions.
• Legitimate Interests: Processing carried out for purposes that are in the legitimate interests of bn999, such as fraud prevention, platform security, and business analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes — primarily marketing communications — where you have freely given specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Data

bn999 does not sell your personal data. We share your data with third parties only to the extent necessary for the legitimate operation of the platform, under contractual obligations that require those parties to protect your data to at least the same standard as bn999. Third parties with whom we may share your data include:

• KYC & Identity Verification Providers: Authorised verification partners who process your identity documents to confirm your eligibility to hold a bn999 account.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and associated payment gateway operators, who receive transaction data necessary to process your deposits and withdrawals.
• Fraud & Risk Management Services: Third-party providers who supply device fingerprinting, IP intelligence, and behavioural risk scoring to protect the integrity of user accounts.
• Game Providers: Licensed casino game and sports data providers whose software is integrated into the bn999 platform. These providers receive only the minimum technical data necessary to deliver their services.
• Regulatory Authorities: Government bodies, financial intelligence units, or licensing regulators to whom bn999 is legally obligated to disclose information in connection with AML, CTF, or licensing compliance.
• Law Enforcement: Where bn999 is compelled by a lawful court order, warrant, or equivalent legal process to disclose personal data to law enforcement or investigative authorities.

All third-party data processors engaged by bn999 are bound by data processing agreements that restrict their use of your data to the specific purpose for which it was shared, prohibit onward transfer without our authorisation, and require appropriate technical and organisational security measures.

7. Cookies & Tracking Technologies

bn999 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bn999.biz. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect your account from cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming limit configurations so you do not have to reset them on each visit.
• Analytical Cookies: Collect anonymised data on how users navigate the platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is used purely to improve platform performance and user experience.
• Fraud Detection Cookies: Used by our risk management systems to detect suspicious login patterns, account sharing, and automated bot activity.

You may manage non-essential cookies through your browser settings. Please be aware that disabling functional or analytical cookies may affect the quality of your experience on the bn999 platform. Strictly necessary and fraud detection cookies cannot be disabled as they are essential to the security of your account.

8. Data Retention

bn999 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulation. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with bn999 plus a period of five (5) years following account closure, in compliance with applicable AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial regulation obligations.
• KYC Documents: Retained for five (5) years following the end of the account relationship, or longer if required by a regulatory investigation or legal hold.
• Support Communications: Retained for three (3) years from the date of the most recent communication, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus two (2) years, as evidence of valid consent.
• Technical & Usage Logs: Retained for thirteen (13) months on a rolling basis for security monitoring and platform analytics, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9. Your Privacy Rights

Subject to applicable law, you have the following rights in relation to the personal data bn999 holds about you:

• Right of Access: You may request a copy of the personal data bn999 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your bn999 account.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to any overriding legal retention obligations — for example, transaction records required for AML compliance cannot be deleted on request.
• Right to Restrict Processing: You may request that bn999 limit the processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring or direct marketing communications.
• Right to Data Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact bn999 support via live chat or at [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. We may request proof of identity before processing a rights request to protect your data from unauthorised access.

10. Children's Privacy

The bn999 platform is strictly intended for users aged 21 years and above. bn999 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. If we become aware that a minor has provided personal data in connection with a bn999 account, we will immediately suspend the account, delete the relevant data, and void any transactions or balances associated with that account.

If you are a parent or guardian and believe that your child has registered a bn999 account without your knowledge, please contact our support team immediately. We take underage access extremely seriously and will act without delay upon receiving a verified report. We also encourage parents to use parental control software to restrict access to online gambling platforms on shared or family devices.

11. Security Measures

bn999 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• AES-256 encryption for all personal data stored in our databases.
• TLS 1.3 encryption for all data transmitted between your device and the bn999 platform.
• Multi-factor authentication options for user accounts to reduce the risk of credential-based account takeover.
• Role-based access controls ensuring that internal staff can only access user data to the extent required by their specific job function.
• Regular third-party security audits and penetration testing of the bn999 platform infrastructure.
• Real-time intrusion detection and anomaly monitoring systems that alert our security team to suspicious activity.
• Strict vendor security assessments before any third-party processor is granted access to user data.

While bn999 applies rigorous security measures, no online platform can guarantee absolute security. You also play a role in protecting your account — please use a strong, unique password and never share your login credentials with anyone.

12. Third-Party Services

The bn999 platform integrates with third-party game providers, payment gateways, and analytics services to deliver its full range of features. While bn999 takes care to select reputable, contractually bound service providers, each of these third parties operates under their own independent privacy policies in relation to data they independently collect.

bn999 is not responsible for the privacy practices of third-party game providers or payment networks beyond the data processing agreements we hold with them. When a transaction is processed through JazzCash, EasyPaisa, or a banking partner, the processing of payment data within that provider's own systems is governed by the provider's own privacy policy. We encourage you to review the privacy policies of the payment methods you use.

13. Changes to This Policy

bn999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made — meaning changes that significantly affect your rights or how your data is processed — we will publish a prominent notice on the bn999 platform at least seven (7) days before the changes take effect and update the "Last Updated" date at the top of this Policy.

For minor updates such as clarifications of existing language or corrections of typographical errors, we may update the Policy without prior notice. We encourage you to review this Privacy Policy periodically to stay informed about how bn999 protects your data. Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bn999 handles your personal data, please reach out to us through any of the following channels:

• Live Chat: Available 24/7 in Urdu and English directly through the bn999 platform.
• Support Email: [email protected]

When contacting us regarding a privacy matter, please include your registered account username and a clear description of your request or concern. Our team will acknowledge your message within 24 hours and aim to provide a full response within 30 calendar days. For rights requests, we may ask you to verify your identity before we proceed.