bs999 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy ("Policy") is issued by bs999 ("bs999", "the Platform", "we", "us", "our") and applies to all personal data processed in connection with your use of the bs999 online gaming and betting platform, accessible at bs999.cam, and all associated mobile interfaces, features, and services (collectively, "the Service").

This Policy should be read alongside the bs999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Together, these documents form the complete legal framework governing your relationship with bs999.

By accessing the bs999 platform, registering an account, or using any feature of the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, you must discontinue use of the bs999 Service immediately.

bs999 is an online gaming and cricket betting platform operating under an international gaming license. As the operator of the bs999 Service, bs999 acts as the Data Controller in respect of all personal data collected from users of the platform. As Data Controller, bs999 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

bs999 operates internationally, serving players predominantly from Pakistan. Our operations are governed by the requirements of our international gaming license, which mandates specific data protection standards, anti-money laundering (AML) compliance procedures, and Know Your Customer (KYC) verification protocols.

For all privacy-related inquiries, data subject requests, or complaints regarding the handling of your personal data, you may contact bs999 through the live chat support channel available on the platform or by writing to [email protected] (note: this is a plain text address — not a clickable link).

bs999 collects personal data across several categories. The table below sets out the specific types of data collected and the primary reason for collection:

bs999 collects personal data through the following channels:

• Account registration form (name, mobile number, date of birth, email)
• KYC verification process (identity documents, selfie)
• Payment method setup (JazzCash, EasyPaisa, bank account details)
• Responsible gaming tool configuration (deposit limits, session limits)
• Customer support interactions via live chat or email
• Promotional opt-in forms and bonus claim requests

• IP address and approximate geographic location at login
• Device identifiers (device type, operating system, browser version)
• Session data including login timestamps, session duration, and pages visited
• Betting and gaming activity records generated as you use the platform
• Cookies and similar tracking technologies (see Section 8)

• Payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan, Raast): Transaction confirmation data, payment status, and account reference information
• KYC verification partners: Document authenticity confirmation, facial match results
• Fraud detection services: Risk scores, device fingerprinting data, fraud alerts
• Sports data providers: Event results used to settle bets (no personal data involved)

bs999 processes your personal data on the following legal grounds, depending on the specific purpose of processing:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered bs999 player — including account management, payment processing, bet settlement, and customer support.
• Legal Obligation: Processing required by our international gaming license, anti-money laundering (AML) regulations, Know Your Customer (KYC) mandates, and any applicable legal requirements. This includes identity verification, age verification, and financial crime reporting obligations.
• Legitimate Interests: Processing necessary for bs999's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided that our interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. Where processing is based on consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

bs999 uses your personal data for the following specific purposes:

• Account creation and management: Setting up and maintaining your bs999 account, verifying your identity, and managing account preferences
• Payment processing: Processing deposits and withdrawals via your chosen Pakistani payment methods (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast)
• Regulatory compliance: Meeting KYC requirements, AML obligations, and reporting duties imposed by our international gaming license
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and prohibited conduct
• Bet and game management: Processing bets, settling outcomes, generating transaction histories, and resolving disputes
• Responsible gaming: Monitoring gaming behaviour patterns to identify potential problem gambling indicators and delivering responsible gaming interventions or tools where appropriate
• Customer support: Responding to queries, complaints, and account-related requests through live chat and email channels
• Platform improvement: Analysing aggregated usage data to improve game selection, interface design, and overall platform performance
• Legal defence: Maintaining records necessary to defend bs999 in the event of legal proceedings, regulatory inquiries, or player disputes
• Marketing (consent-based only): Sending promotional offers, bonus notifications, and platform updates to players who have specifically opted in to receive such communications

bs999 does not sell your personal data to any third party. We share your data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast — to facilitate transaction processing. These providers receive only the data needed to process your specific payment transaction.
• KYC/identity verification providers: Third-party services used to authenticate identity documents and perform facial recognition matching as part of our regulatory compliance obligations.
• Fraud detection and cybersecurity providers: Services that analyse technical data to identify fraudulent activity, account compromise attempts, and security threats.
• Cloud infrastructure providers: Companies that provide the secure server and data storage infrastructure on which the bs999 platform runs. Access to personal data is strictly controlled and governed by Data Processing Agreements.
• Customer support technology providers: Live chat and helpdesk platforms used to deliver 24/7 player support.

bs999 may disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or courts of law where we are legally required to do so or where disclosure is necessary to prevent or report criminal activity including money laundering, fraud, or match-fixing.

In the event of a merger, acquisition, sale of assets, or corporate restructuring involving bs999, your personal data may be transferred to the acquiring or successor entity. You will be notified in advance of any such transfer and advised of any changes to this Privacy Policy that may result.

bs999 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver a functional and personalised experience. The types of cookies used on bs999 are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These cookies maintain your login session, remember your preferences, and enable core features like the shopping basket for multi-bet accumulators. These cannot be disabled.
• Performance and Analytics Cookies: Collect anonymised data about how players use the platform — which pages are visited most, where errors occur, and how load times are distributed. This data is used solely to improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and responsible gaming display options, to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including account takeover attempts and automated bot activity. These operate invisibly and do not affect your experience.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bs999 platform. bs999 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of displaying targeted advertisements on external websites.

bs999 retains your personal data for only as long as necessary for the purposes for which it was collected, or as required by our international gaming license and applicable law. The following retention periods apply:

• Account data and KYC documents: Retained for the duration of your active account relationship plus a minimum of 5 years following account closure, as required by AML regulations and gaming license conditions.
• Financial transaction records: Retained for a minimum of 7 years from the date of transaction, in compliance with financial record-keeping requirements.
• Betting and gaming activity records: Retained for the duration of your account plus 5 years, for dispute resolution and regulatory reporting purposes.
• Customer support communications: Retained for 3 years from the date of last communication unless the subject matter requires longer retention.
• Technical and security logs: Retained for 12 months, after which they are anonymised or deleted unless a security investigation requires retention.
• Marketing consent records: Retained for as long as you remain opted in, plus 3 years following opt-out to evidence the consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Data that has been anonymised may be retained indefinitely for statistical and analytical purposes.

bs999 employs robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bs999 platform is encrypted using industry-standard Transport Layer Security (TLS) protocol. The padlock icon in your browser confirms this protection is active.
• Encrypted Data Storage: Sensitive data at rest — including identity documents, financial information, and account credentials — is encrypted using AES-256 encryption in our secure cloud infrastructure.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing. bs999 staff cannot view your password in plain text at any time.
• Two-Factor Authentication (2FA): bs999 offers and recommends 2FA for account access as an additional layer of identity protection.
• Access Controls: Personal data is accessible internally only to staff whose job function genuinely requires it. All staff with data access are bound by confidentiality obligations and undergo data protection training.
• Intrusion Detection and Monitoring: bs999's infrastructure is continuously monitored for suspicious activity, unusual access patterns, and potential security incidents. Incident response procedures are in place and tested regularly.
• Regular Security Audits: bs999 conducts periodic security assessments as required by our international gaming license to identify and remediate vulnerabilities.

As a bs999 player, you hold the following rights in respect of your personal data. All requests can be submitted through the bs999 live chat support channel or by email to [email protected]. bs999 will respond to valid requests within a reasonable timeframe, typically within 30 days.

• Right of Access: You may request a copy of the personal data that bs999 holds about you, along with information about how it is being used.
• Right to Rectification: If your personal data is inaccurate or incomplete, you may request that it be corrected. Note that certain data (such as your legal name and CNIC number) can only be amended upon provision of supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations. Note that data we are required to retain by gaming license or AML law cannot be deleted before the applicable retention period expires.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of your data is being verified, or where you have objected to processing.
• Right to Data Portability: Where processing is based on consent or contract, you may request that your data be provided to you in a structured, machine-readable format so that it can be transferred to another service if you choose.
• Right to Object: You may object to processing based on bs999's legitimate interests, and to direct marketing at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

bs999 is an internationally operating platform. Your personal data may be transferred to, and stored on, servers located in jurisdictions outside Pakistan. Where such transfers occur, bs999 ensures that appropriate safeguards are in place to protect your personal data to standards equivalent to those required by our international gaming license.

These safeguards may include contractual data protection clauses (standard contractual clauses) imposed on the recipients of the data, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. We will not transfer your personal data internationally in a manner that would place it at greater risk than it faces when processed within our primary infrastructure.

The bs999 Service is strictly intended for persons aged 21 years and above. bs999 does not knowingly collect, process, or retain personal data relating to persons below this age. Age verification is a mandatory step in the bs999 account registration process and is enforced through KYC document checks.

If bs999 discovers or is notified that personal data has been collected from a person below the minimum age of 21, the account will be immediately suspended and all associated personal data will be deleted as soon as practicable, subject to any legal obligations that require temporary retention. Any deposits made by an underage player will be reviewed and handled in accordance with our Terms and Conditions and applicable legal requirements.

bs999 may send promotional communications — including bonus offers, PSL season promotions, free bet notifications, and platform updates — to players who have specifically opted in to receive such communications. We will not send unsolicited marketing to players who have not opted in.

You may withdraw your consent to marketing communications at any time through either of the following methods:

• Updating your communication preferences in your bs999 account notification settings
• Contacting bs999 customer support via live chat and requesting to opt out

Following an opt-out request, bs999 will process the withdrawal of consent within 5 business days. You may continue to receive transactional communications (account security alerts, withdrawal confirmations, KYC status notifications) even after opting out of marketing, as these are necessary for account management and cannot be disabled.

bs999 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, business operations, or data processing practices. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Notify registered players via their registered email address or mobile number
• Display a prominent notice on the bs999 platform for a period following the change

Your continued use of the bs999 Service following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to remain informed of how bs999 is protecting your data. If you disagree with any change to this Policy, you must cease using the Service and may request account closure.

For all privacy-related matters — including data subject rights requests, questions about this Policy, or complaints about how your personal data has been handled — please contact bs999 through the following channels:

• Live Chat: Available 24/7 directly on the bs999 platform — recommended for fastest response
• Email: [email protected] — for formal written privacy requests (plain text, not a clickable link)

bs999 will acknowledge all privacy requests within 2 business days and provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with bs999's response to a privacy complaint, you may have recourse to the relevant regulatory authority associated with our international gaming license. Details of the applicable regulatory authority's complaints process are available on request from our support team.