bi999 Privacy Policy

1 Who We Are

bi999 is an online casino and sports betting platform operated under an international gaming licence, providing PKR-denominated gaming services to members across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, and other cities. bi999 acts as the data controller in respect of all personal data collected through the bi999 Platform.

As data controller, bi999 determines the purposes for which personal data is processed and the manner in which it is processed. bi999 is responsible for ensuring that all data processing activities conducted on the bi999 Platform comply with applicable data protection standards and the requirements of its international gaming licence.

For all privacy-related queries, data subject access requests, or complaints, members may contact bi999's data compliance team via the contact details provided in Section 15 of this Policy.

2 Personal Data We Collect

bi999 collects the following categories of personal data from members and prospective members:

bi999 does not collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. bi999 does not request biometric data beyond a photograph for CNIC matching where required by its KYC process.

3 How We Collect Your Data

bi999 collects personal data through the following channels:

• Direct registration: Data you provide when creating your bi999 account, completing KYC verification, or updating your account profile;
• Platform use: Data generated automatically through your use of the bi999 Platform, including gaming activity records, login timestamps, and device information;
• Payment processors: Transaction reference data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers when you make deposits or receive withdrawals;
• Identity verification providers: Confirmation data received from regulated third-party KYC service providers engaged by bi999 to verify the authenticity of identity documents;
• Cookies and tracking technologies: Session and behavioural data collected through cookies and similar technologies as described in Section 7 of this Policy;
• Fraud prevention and risk services: Risk signals and device fingerprint data received from third-party fraud prevention tools that bi999 uses to protect the integrity of the platform.

bi999 does not purchase personal data lists from third-party data brokers or marketing organisations for the purpose of contacting individuals who have not registered with bi999.

4 Legal Basis for Processing

bi999 processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the bi999 member agreement, including account creation, deposit and withdrawal processing, game access, and customer support;
• Legal obligation: Processing required to comply with bi999's obligations under its international gaming licence, including KYC identity verification, anti-money laundering (AML) checks, and record-keeping requirements;
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and service improvement where such interests are not overridden by member privacy rights;
• Consent: Processing for optional marketing communications, where bi999 has obtained your explicit prior consent. You may withdraw marketing consent at any time by contacting bi999 support or using the unsubscribe option in any marketing communication.

5 How We Use Your Personal Data

bi999 uses the personal data it collects for the following purposes:

• To create and administer your bi999 member account, including processing PKR deposits and withdrawals via JazzCash, EasyPaisa, and supported banks;
• To verify your identity and age (21+ requirement) in compliance with bi999's KYC obligations under its gaming licence;
• To detect, investigate, and prevent fraud, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the bi999 Terms & Conditions;
• To monitor gaming activity for the purpose of identifying members who may be showing signs of problem gambling, and to offer or enforce responsible gaming tools including deposit limits and self-exclusion;
• To provide customer support through bi999's 24/7 live chat and email channels, and to maintain records of support interactions for quality and compliance purposes;
• To send transactional communications including deposit confirmations, withdrawal notifications, identity verification requests, and security alerts;
• To send promotional communications regarding bi999 bonuses, VIP programme updates, and special offers, where you have consented to receive such communications;
• To comply with requests from regulatory authorities, law enforcement agencies, or courts where bi999 is under a legal obligation to disclose member data.

6 Sharing Your Personal Data

bi999 does not sell your personal data. bi999 may share your personal data with the following categories of third parties strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other PKR payment providers receive the transaction data necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Regulated identity verification service providers receive identity document images and personal details for the purpose of verifying your CNIC or passport against official databases;
• Fraud prevention services: Third-party risk and fraud prevention platforms receive technical and behavioural data for the purpose of detecting suspicious activity on the bi999 Platform;
• Game software providers: Third-party casino game studios whose games are available on the bi999 Platform may receive the minimum session data necessary to operate their games within the bi999 environment;
• Regulatory and law enforcement authorities: bi999 will disclose member data to competent regulatory bodies, law enforcement agencies, or courts where required by law, court order, or its gaming licence obligations. Where legally permissible, bi999 will notify the relevant member of such a disclosure;
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bi999 may access limited member data on a confidential basis where necessary for the provision of their professional services.

All third parties with whom bi999 shares personal data are contractually required to process that data only for the specified purpose and to maintain security standards equivalent to those applied by bi999.

7 Cookies & Tracking Technologies

The bi999 Platform uses cookies and similar tracking technologies to ensure platform functionality, maintain session security, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for basic platform functions including login session management, account security tokens, and responsible gaming tool enforcement. These cannot be disabled without affecting platform functionality;
• Functional cookies: Store your language preferences, display settings, and previously used PKR amounts to improve your bi999 experience across sessions;
• Analytics cookies: Collect anonymised data about how members navigate the bi999 Platform, which pages are visited most frequently, and where sessions end. This data is used solely to improve the bi999 Platform;
• Security cookies: Detect anomalous login behaviour, device switching, and other signals associated with account takeover fraud.

bi999 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the bi999 Platform.

8 Data Retention

bi999 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Active account data: Retained for the full duration of your bi999 membership and for a period of five (5) years following permanent account closure;
• Financial and transaction records: Retained for a minimum of seven (7) years from the date of the relevant transaction, in compliance with bi999's anti-money laundering obligations under its gaming licence;
• KYC identity documents: Retained for five (5) years following account closure, or longer where required by regulatory direction;
• Support and communications records: Retained for three (3) years from the date of the relevant interaction, unless the interaction relates to an unresolved dispute, in which case records are retained until the dispute is fully resolved;
• Technical and log data: Retained for up to twelve (12) months from the date of collection, subject to ongoing fraud investigation requirements.

Where a member requests deletion of their personal data, bi999 will delete or anonymise all data that it is not legally required to retain. Data subject to regulatory retention obligations cannot be deleted ahead of the applicable minimum retention period regardless of a deletion request.

9 International Data Transfers

bi999 operates under an international gaming licence and may store and process personal data on servers located outside Pakistan. Where personal data is transferred internationally, bi999 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Pakistan.

Such safeguards may include contractual data processing agreements with receiving parties that impose binding data protection obligations, or reliance on the data protection framework of the receiving jurisdiction where that framework is recognised as providing adequate protection. bi999 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing supplementary technical and contractual safeguards.

10 Your Data Subject Rights

As a bi999 member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the bi999 data compliance team using the details in Section 15:

• Right of Access: You have the right to request a copy of all personal data bi999 holds about you, along with information about how that data is processed;
• Right of Rectification: You have the right to request correction of any inaccurate or incomplete personal data bi999 holds about you. Corrections to identity data may require re-submission of KYC documents;
• Right to Erasure: You have the right to request deletion of your personal data where bi999 no longer has a legal basis or regulatory obligation to retain it;
• Right to Restrict Processing: You have the right to request that bi999 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to a specific processing activity;
• Right to Data Portability: You have the right to request a structured, machine-readable copy of personal data you have provided to bi999, where technically feasible;
• Right to Object: You have the right to object to processing of your personal data for marketing purposes at any time. You may also object to processing based on bi999's legitimate interests, subject to bi999 demonstrating compelling grounds that override your interests.

bi999 will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, bi999 may extend this period by a further sixty (60) days, with prior notification to the requesting member.

11 Children & Minors

If you believe that bi999 has inadvertently collected personal data from a minor, please contact bi999's support team immediately using the contact details in Section 15. bi999 treats all such reports with the highest priority and will investigate and respond within 48 hours.

12 Security Measures

bi999 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• Encryption: All personal data transmitted between your device and the bi999 Platform is encrypted using TLS (Transport Layer Security). Data at rest is encrypted using AES-256 or equivalent standards;
• Access controls: Access to personal data within bi999's systems is restricted to authorised personnel on a strict role-based, need-to-know basis. All staff access is logged and audited;
• Two-factor authentication: bi999 offers two-factor authentication for member account logins and requires it for all internal staff access to systems containing personal data;
• Penetration testing: bi999's systems are subject to regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses;
• Incident response: bi999 maintains a documented data breach response procedure. In the event of a data breach affecting member personal data, bi999 will notify affected members and relevant regulatory authorities in accordance with applicable obligations.

Notwithstanding these measures, no digital platform can guarantee absolute security. Members are encouraged to protect their own account security by using strong, unique passwords, enabling two-factor authentication, and reporting any suspected unauthorised account activity to bi999's support team immediately.

13 Third-Party Links

The bi999 Platform may contain references to third-party payment processors or game software providers. bi999 is not responsible for the privacy practices of any third-party organisation. This Privacy Policy applies solely to data processed by bi999 in connection with the bi999 Platform. Members are encouraged to review the privacy policies of any third-party services they interact with independently of the bi999 Platform.

14 Updates to This Privacy Policy

bi999 reserves the right to update this Privacy Policy at any time to reflect changes in bi999's data processing activities, legal obligations, or regulatory requirements. Where changes are material, bi999 will notify registered members via the email address associated with their account prior to the updated Policy taking effect.

The current version of this Policy is always accessible on the bi999 Platform at bi999.ws/privacy-policy. The version number and effective date displayed at the top of this Policy confirm the currency of the document you are reading. Your continued use of the bi999 Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

15 Contact & Data Requests

For all privacy-related enquiries, data subject access requests, rectification requests, deletion requests, or complaints regarding bi999's data processing practices, please contact the bi999 data compliance team. The fastest channel for account-related data queries is the 24/7 live chat function on the bi999 Platform. For formal written data subject requests, please use the email address below. Note that the email is provided as plain text and is not a clickable link:

Data & Privacy Contact:  [email protected]

Please include your full registered name, bi999 account email address, and a clear description of your request when contacting bi999 regarding personal data matters. bi999 may require identity verification before processing any data subject request to ensure that personal data is not disclosed to an unauthorised third party.