bn999 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Information

This Privacy Policy governs the collection, storage, use, disclosure, and protection of personal data by bn999 in connection with the operation of the online casino and sports betting platform at https://bn999.lat (the "Platform"). It applies to all users of the Platform, including registered players, visitors who browse without registering, and individuals who contact bn999 through any support channel.

bn999 is committed to handling personal data responsibly, lawfully, and in accordance with applicable privacy and data protection standards. This policy is intended to give every player — particularly those accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan — a clear and honest account of what happens to their personal information when they use the bn999 platform.

This policy should be read alongside the bn999 Terms and Conditions and Responsible Gaming Policy, both of which contain provisions that interact with data processing activities described in this document.

For the purposes of this Privacy Policy, the data controller — the entity that determines the purposes and means of processing personal data collected through the bn999 platform — is the bn999 operating entity holding the international gaming license under which the platform operates.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a data-related concern, you may contact the bn999 Data Protection team via the contact details set out in Section 16 of this policy.

bn999 collects the following categories of personal data in connection with the operation and use of the Platform. All data collected has a specific, defined purpose as set out in Section 6 of this policy.

bn999 collects personal data through the following channels and mechanisms:

• Direct Collection: Data you voluntarily provide when registering an account, completing identity verification, submitting a deposit or withdrawal request, contacting support via live chat or email, or updating your account settings.
• Automated Technical Collection: Data collected automatically when you visit or use the Platform, including IP address, device information, session data, and interaction logs. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 10.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Nayapay, and other payment partners when you make deposits or receive withdrawals. bn999 receives only the minimum transaction data necessary to credit or debit your account balance.
• Identity Verification Services: Where bn999 uses third-party identity verification providers to conduct KYC checks, those providers may return verification results and document authentication data to bn999 in connection with a specific verification request.
• Fraud Prevention Tools: Automated fraud detection systems may generate risk scores and flagging data based on your usage patterns. This data is used internally for fraud prevention and is not shared externally except as required by law.

Every data processing activity conducted by bn999 is carried out on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and bn999 — including operating your account, processing deposits and withdrawals, providing access to games and betting markets, and delivering customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering (AML) requirements, age verification obligations under the gaming license, and obligations to retain financial records for specified periods.
• Legitimate Interests: Processing carried out in the legitimate interests of bn999 that do not override your rights, including fraud detection and prevention, platform security, responsible gaming monitoring, service improvement analytics, and internal reporting.
• Consent: Where bn999 relies on your consent as a lawful basis — primarily for marketing communications and non-essential cookie placement — that consent will be sought explicitly and separately, and you may withdraw it at any time without affecting the lawfulness of prior processing.

bn999 uses the personal data we collect for the following specific purposes:

• Account Creation and Management: Registering and maintaining your bn999 player account, authenticating your identity at login, and managing account settings and preferences.
• Service Delivery: Providing access to casino games, live betting markets, slot games, cricket and PSL betting, table tennis markets, and all other Platform services.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported methods; processing withdrawal requests to your verified payment accounts; maintaining accurate transaction records.
• Identity Verification (KYC): Verifying your identity and age to comply with licensing obligations and prevent underage gambling. This is not optional — it is a legal requirement of bn999's operating license.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and account security breaches.
• Responsible Gaming: Monitoring gaming activity for signs of problem gambling, enforcing player-set limits, facilitating self-exclusion, and complying with responsible gaming obligations under the license.
• Customer Support: Responding to queries, resolving complaints, and providing technical assistance via live chat and email in Urdu and English.
• Legal and Regulatory Compliance: Meeting obligations under the gaming license, anti-money laundering regulations, and other applicable laws — including the retention of records for legally specified periods.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform, identify technical issues, and enhance the player experience for Pakistani users.
• Marketing (consent-based only): Sending promotional communications about bn999 bonuses, promotions, and new features — but only where you have provided explicit, separate consent and only through the channels you have authorised.

bn999 does not sell personal data to third parties. We share personal data with third parties only where necessary, and only in the following categories of circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Nayapay, and other payment partners receive the minimum transaction data required to process deposits and withdrawals. These partners operate under their own privacy policies and are regulated financial institutions.
• Game Providers: Casino game and sports betting content providers (such as live casino studios and slot software developers) may receive your session identifier and game-related data necessary to deliver game content and settle results. They do not receive your full identity or payment data.
• Identity Verification Providers: Third-party KYC and AML service providers used to verify identity documents and conduct age and identity checks as required by the gaming license.
• Fraud Prevention Services: Specialist fraud detection and risk scoring providers that help bn999 identify potentially fraudulent account or transaction activity.
• Regulatory and Law Enforcement Authorities: Where bn999 is required by law, court order, or regulatory obligation to disclose personal data — including disclosures required in connection with AML investigations or responses to lawful authority requests.
• Professional Advisers: Legal, audit, and financial advisers engaged by bn999, subject to professional confidentiality obligations.

All third parties with whom bn999 shares personal data are required to process that data only for the purposes specified, to maintain appropriate security standards, and to comply with applicable data protection requirements. bn999 does not permit any third party to use your personal data for their own marketing purposes.

As bn999 operates on an international gaming platform infrastructure, personal data may be transferred to, stored in, or processed in countries outside Pakistan. This may include the country in which bn999's gaming license is held and the locations of data centre infrastructure used to operate the Platform.

Where personal data is transferred internationally, bn999 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to or exceeding the protections described in this policy. Such safeguards may include:

• Standard contractual clauses binding the receiving party to applicable data protection obligations.
• Data processing agreements with third-party service providers that impose equivalent privacy and security standards.
• Transfers to jurisdictions that maintain data protection standards recognised as adequate for the purposes of international data transfers.

bn999 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes in a form that cannot identify any individual.

bn999 uses cookies and similar tracking technologies to operate the Platform effectively and improve the player experience for Pakistani users across all devices and mobile networks. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your bn999 account, security cookies that help prevent fraud, and load-balancing cookies that ensure the Platform remains stable across high-traffic periods. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as your language setting, your responsible gaming limits display, and whether you prefer the live casino or sports betting lobby on login. These cookies improve your experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect aggregated data about how players interact with the bn999 Platform — which sections are visited most, where technical issues occur, and how the mobile experience performs on Pakistani networks. This data is used to improve the Platform and is not linked to individual player profiles for marketing purposes.
• Marketing Cookies: Used to deliver promotional content relevant to your interests, where you have provided consent. These cookies may record the fact that you visited the Platform in connection with serving you relevant promotional reminders. Marketing cookies will only be placed with your explicit consent.

You may control cookie settings via your browser's privacy settings. Blocking strictly necessary cookies will impair your ability to use the Platform. Blocking other cookie categories will not prevent you from using the Platform but may affect the quality of your experience.

bn999 may send you marketing communications about promotions, bonuses, new games, PSL betting offers, and other Platform news — but only where you have provided explicit, separate consent to receive such communications at the time of registration or subsequently via your account settings.

Marketing communications may be sent via SMS to your registered Pakistani mobile number and/or via email to your registered address. You may withdraw your marketing consent at any time by:

• Updating your notification preferences in your bn999 account settings dashboard.
• Clicking the "unsubscribe" or "opt out" link included in every marketing email.
• Contacting bn999 support via live chat or email and requesting removal from marketing communications.

Withdrawal of marketing consent will not affect your ability to use the Platform or receive service-related communications (such as transaction confirmations, security alerts, and support responses) which are sent on the basis of contractual necessity, not consent.

The bn999 Platform is strictly intended for adults aged 21 years and over. bn999 does not knowingly collect, store, or process personal data of any person under 21 years of age.

Age verification is a mandatory element of the bn999 registration and ongoing account management process. Where bn999 becomes aware — through age verification checks, identity document review, or any other means — that an account has been registered by or operated on behalf of a person under 21, the following will occur:

• The account will be immediately suspended pending investigation.
• All gaming activity associated with the account will be reviewed.
• Any personal data collected in connection with the underage account will be deleted in accordance with applicable data protection requirements, except where retention is required for legal or regulatory purposes.
• Deposit funds will be returned subject to the review process and any applicable regulatory requirements.

If you have reason to believe that a person under 21 has registered an account on the bn999 platform, please contact bn999 support immediately via live chat or at [email protected].

You have the following rights in relation to the personal data held by bn999. These rights are not absolute — some are subject to exceptions — but bn999 is committed to fulfilling each right within a reasonable timeframe, typically 30 days of receipt of a valid request.

To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Privacy Rights Request", or via live chat with our support team (available in Urdu and English, 24/7). bn999 will acknowledge receipt of your request within 5 business days and provide a substantive response within 30 days. Where a request is complex, the response period may be extended by a further 30 days with notice.

bn999 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and bn999 servers — including login credentials, payment data, and personal information — is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored on bn999 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within the bn999 organisation is restricted strictly on a need-to-know basis, with role-based access controls and comprehensive access audit logging.
• Multi-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication.
• Regular Security Audits: bn999 conducts regular internal and third-party security assessments of its data processing infrastructure.
• Staff Training: All bn999 staff with access to personal data receive regular training on data protection obligations and security practices.
• Data Breach Response: bn999 maintains a documented data breach response procedure. In the event of a breach that poses a risk to affected individuals, bn999 will notify the relevant regulatory authority and affected players in accordance with applicable notification obligations.

bn999 reviews and updates this Privacy Policy periodically to reflect changes in the Platform, applicable laws, regulatory requirements, or our data processing practices. When material changes are made, bn999 will notify registered players via email or in-platform notification with reasonable advance notice prior to the changes taking effect.

Non-material changes — such as typographical corrections or clarifications that do not alter the substance of how data is processed — may take effect immediately upon publication to the Platform. The effective date displayed at the top of this document reflects the date of the most recent revision.

We encourage you to review this Privacy Policy periodically. Your continued use of the bn999 Platform following the publication of an updated Privacy Policy constitutes acceptance of the changes described therein. If you do not accept the updated policy, you should cease use of the Platform and contact support to discuss the options available to you.

For all privacy-related enquiries, data subject rights requests, or concerns about how bn999 handles your personal data, please contact the bn999 Data Protection team using the following details:

• Email: [email protected] — please include "Privacy Request" or "Data Protection" in the subject line of your message. Email addresses are displayed as plain text only and are not clickable links.
• Live Chat: Available 24 hours a day, 7 days a week in Urdu and English via the live chat function on the bn999 Platform. For complex privacy requests, email is preferred to ensure a full written record of your request.

bn999 is committed to addressing all privacy-related enquiries and requests fairly, transparently, and within the timeframes set out in this policy. If you are not satisfied with the response you receive to a privacy concern, you may have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction applicable to bn999's operating license, or to seek independent dispute resolution. Details of these escalation routes are available from the bn999 support team upon request.