b99999 Privacy Policy —
How We Handle Your Personal Data

Scope and Application of This Policy

This Privacy Policy applies to all personal data collected, processed, and stored by b99999 in connection with:

• The registration and management of b99999 player accounts;
• The processing of deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported payment channels;
• The delivery of casino games, sports betting, and all other entertainment services on the b99999 Platform;
• Customer support interactions, including live chat, email correspondence, and any records thereof;
• Compliance with applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations;
• Marketing communications where the Account Holder has provided valid consent.

This Policy does not apply to websites, platforms, or services operated by third parties that may be referenced or linked to from the b99999 Platform. b99999 is not responsible for the privacy practices of any third party.

Personal Data We Collect

b99999 collects personal data across several categories, as detailed in the table below. Data collection is proportionate to the purpose for which each category of data is required.

How We Collect Personal Data

b99999 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering your b99999 account, completing KYC verification, initiating deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automatically through your use of the Platform: Technical data collected via cookies, server logs, and analytics tools when you visit b99999.asia or use any feature of the Platform.
• From third-party payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or any other payment provider used to facilitate your deposit or withdrawal.
• From identity verification service providers: Confirmation of identity document authenticity, where third-party KYC verification services are used as part of our compliance procedures.
• From fraud prevention and AML screening tools: Risk signals and screening results from services used to detect prohibited activities, including those required under applicable AML frameworks.

Purposes for Which b99999 Processes Your Data

b99999 processes personal data for the following specific and documented purposes:

1. Account registration and management: To create, maintain, and administer your b99999 player account, including authentication and account security.
2. Payment processing: To process deposits and withdrawals in PKR, verify the ownership of payment methods, and maintain accurate transaction records.
3. Identity verification (KYC): To verify the identity and age of players before processing withdrawals, in compliance with applicable AML and responsible gaming standards.
4. Platform delivery and improvement: To deliver casino games, sports betting, live dealer tables, and all other Platform services, and to diagnose and resolve technical issues.
5. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct.
6. Responsible gaming compliance: To implement and monitor player-requested responsible gaming restrictions including deposit limits, self-exclusion, and session timers.
7. Legal and regulatory compliance: To fulfil b99999's obligations under applicable AML regulations, data retention requirements, and any lawful requests from competent authorities.
8. Marketing communications: To send promotional communications to Account Holders who have opted in to receive such communications, including information about new games, bonuses, and seasonal promotions at b99999.
9. Customer support: To record, manage, and resolve support interactions, disputes, and account queries submitted by players.

Legal Basis for Data Processing

b99999 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil b99999's obligations to you under the Terms and Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable AML legislation, KYC requirements, data retention laws, and any lawful regulatory or governmental directive.
• Legitimate interests: Processing for fraud prevention, platform security, and improvement of services, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and non-essential cookie deployment, where you have provided freely given, specific, and informed consent. You may withdraw consent at any time.

How b99999 Shares Your Personal Data

b99999 does not sell, rent, or commercially transfer your personal data to third parties. Data sharing occurs only in the following limited and necessary circumstances:

• Payment processors: Financial data necessary to process deposits and withdrawals is shared with the relevant payment service provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). These providers operate under their own privacy policies and are contractually bound to protect the data they receive.
• Identity verification providers: CNIC and identity document data shared with third-party KYC verification service providers for the purpose of completing mandatory identity verification checks.
• Game software providers: Session data (such as game stake amounts and results) is shared with the relevant game software provider in the course of game delivery. Personal identity data is not shared with game providers beyond what is technically necessary.
• Fraud prevention and AML service providers: Technical and transaction data shared with fraud screening tools and AML compliance services to fulfil b99999's regulatory obligations.
• Legal and regulatory authorities: Data disclosed in response to valid legal orders, court directives, regulatory requests, or law enforcement demands, where b99999 is legally obligated to comply.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by b99999, subject to confidentiality obligations, where access to player data is necessary for the provision of professional services.

Security Measures Protecting Your Data

b99999 implements a layered security framework to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• Transport Layer Security (TLS) / SSL encryption: All data transmitted between your browser or device and b99999's servers is encrypted using 256-bit TLS encryption, preventing interception of data in transit.
• Encrypted data storage: Sensitive personal data stored on b99999 servers is encrypted at rest. Password hashes are generated using one-way cryptographic hashing functions — passwords cannot be reversed or retrieved from stored hash values.
• Access control: Access to personal data within b99999's systems is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed periodically.
• Two-factor authentication (2FA): b99999 supports optional 2FA for all player accounts, providing an additional authentication layer beyond username and password.
• Session management: b99999 sessions expire automatically after periods of inactivity, reducing the risk of unauthorised access via unattended logged-in devices.
• Security monitoring: b99999 employs automated monitoring tools to detect anomalous login patterns, suspicious transactions, and potential data security incidents.

While b99999 applies comprehensive security measures, no digital system can guarantee absolute security against all possible threats. b99999 is not liable for data loss or breach resulting from circumstances beyond its reasonable control, including attacks on infrastructure components operated by third-party providers.

Data Retention Periods

b99999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Cookies and Tracking Technologies

b99999 uses cookies and similar tracking technologies (including browser local storage and session storage) to enhance Platform performance and deliver a personalised user experience. The following categories of cookies are used by b99999:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They enable core functions including session management, login authentication, and security features. No consent is required for these cookies as they are technically necessary.
• Functional Cookies: These cookies remember your preferences and settings (such as language or game lobby filters) to personalise your experience on b99999. They are enabled by default but can be disabled via your browser settings, though doing so may affect Platform functionality.
• Analytics Cookies: These cookies collect aggregate, anonymised data about how users interact with the b99999 Platform, enabling us to identify areas for improvement. Analytics cookies are not activated without your consent.
• Security Cookies: Used to detect fraudulent login attempts, session hijacking, and other security threats. These are classified as technically necessary and cannot be disabled.

You can manage cookie preferences through your browser settings. Instructions for managing cookies in major browsers (Chrome, Safari, Firefox) are available in each browser's help documentation. Note that disabling certain cookies may impair b99999 Platform functionality.

Your Data Rights as a b99999 Player

As a b99999 Account Holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or by email at [email protected]. b99999 will respond substantively within 30 days of receiving a verified request:

• Right of Access: You may request a copy of the personal data b99999 holds about you, including the categories of data, purposes of processing, and recipients of your data.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For most account details, you can also update information directly in your Account Settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restriction of Processing: You may request that b99999 temporarily restrict processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: You may request that b99999 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing of your personal data based on b99999's legitimate interests, including profiling for marketing purposes. Marketing-related objections will be acted upon immediately.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Children, Minors, and Under-Age Protection

b99999 operates an absolute prohibition on the collection or processing of personal data from individuals under the age of 21. This applies regardless of any consent purportedly given by a minor or by a parent or guardian on behalf of a minor.

b99999 employs the following safeguards to prevent underage individuals from accessing the Platform:

• Date-of-birth field at registration used to identify apparent underage applicants;
• CNIC-based identity verification (which includes date of birth) required prior to first withdrawal;
• Automated flagging of account profiles where transaction patterns suggest potential underage usage;
• Age verification checks at the point of bonus activation where applicable.

If b99999 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account, void any accumulated balance derived from gameplay, and permanently delete the personal data of the minor, except where retention is required by law.

Marketing Communications and Opt-Out

With your consent, b99999 may send you marketing communications including information about new games, seasonal promotions, reload bonuses, free spin offers, and PSL/cricket betting specials relevant to Pakistani players. Marketing communications are sent via the Pakistani mobile number or email address associated with your Account.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the Account Settings section of the b99999 Platform;
• Clicking the "Unsubscribe" or "Opt Out" link included in any marketing email sent by b99999;
• Contacting b99999 live chat support and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect your ability to receive essential service communications from b99999, such as transaction confirmations, account security alerts, KYC verification requests, and responsible gaming notifications. These are considered necessary service communications and are sent regardless of marketing preferences.

Third-Party Links and External Services

The b99999 Platform may contain references to or links toward third-party websites and services, including game software provider documentation, payment provider support pages, and responsible gaming information resources. b99999 is not responsible for the privacy practices, security measures, or content of any third-party website or service.

This Privacy Policy applies solely to data processed by b99999 in connection with the b99999 Platform. When you navigate to a third-party website — even one accessible via a link on b99999 — you are subject to that website's own privacy policy and terms of service. b99999 encourages all players to review the privacy practices of any third-party services they interact with.

Cross-Border Data Transfers

In operating an international online gaming platform serving Pakistani players, b99999 may process or store personal data on servers located outside of Pakistan. Such international data transfers may occur where b99999's hosting infrastructure, game software providers, or third-party service partners are based in other jurisdictions.

Where personal data is transferred internationally, b99999 ensures that appropriate safeguards are in place to protect the data to standards equivalent to those described in this Policy. Such safeguards may include:

• Contractual data processing agreements with third-party processors requiring adherence to applicable data protection standards;
• Transfers to jurisdictions recognised as providing adequate data protection standards by relevant international frameworks;
• Technical and organisational security measures applied uniformly regardless of data storage location.

Amendments to This Privacy Policy

b99999 reserves the right to amend this Privacy Policy at any time. Amendments may be made in response to changes in applicable law, regulatory guidance, b99999's data processing practices, or the services offered on the Platform.

When material changes are made to this Policy, b99999 will:

• Update the "Last Updated" date at the top of this document;
• Where practicable and where the change materially affects active players, notify Account Holders via their registered Pakistani mobile number, registered email address, or via an in-platform notification displayed on next login to b99999.

The most current version of this Privacy Policy is always available at b99999.asia/privacy-policy. We recommend bookmarking this page and reviewing it periodically.

How to Contact b99999 About Your Privacy

For all privacy-related enquiries — including data access requests, rectification requests, erasure requests, objections to processing, marketing opt-outs, and data breach notifications — b99999 can be reached via the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the b99999 Platform. Average first response time: under 2 minutes. For privacy requests, please indicate "Data Privacy Request" when initiating the chat.
• Email: [email protected] — include "Privacy Request" in your subject line. Responses within 2 hours during active support hours; all formal data subject access requests acknowledged within 3 business days and completed within 30 calendar days.

When submitting a privacy request, you will be required to verify your identity before b99999 can process the request. This verification step is in place to protect your data from unauthorised third-party access requests and is a standard data protection safeguard.