Privacy Policy — 999bv Platform

This Privacy Policy ("Policy") describes how 999bv ("the Platform", "we", "us", "our"), operating at 999bv.cam, collects, processes, stores and protects the personal data of users ("you", "your") who access or use our services. It applies to all personal data collected through your use of the 999bv website, account registration, payment transactions, customer support interactions and any other touchpoint between you and the Platform.

999bv is an English-language online sports betting and casino information platform targeting Pakistani users. We recognise that data privacy is a fundamental right, and we are committed to handling your personal information with transparency, integrity and care. This Policy has been drafted in alignment with generally accepted international data-protection principles, including those reflected in the European Union's General Data Protection Regulation (GDPR) and other applicable data-protection frameworks.

By registering an account with 999bv or otherwise using our Service, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Service.

In this Policy, the following terms carry the meanings set out below:

For the purposes of applicable data-protection law, 999bv is the Data Controller in respect of the Personal Data collected through the Platform. As Data Controller, 999bv determines the purposes for which your Personal Data is collected and the means by which it is processed.

Any enquiries relating to this Policy or the processing of your Personal Data should be directed to our support team using the contact details set out in Clause 15 of this Policy. We will make every reasonable effort to respond to data-related enquiries within 30 days of receipt.

We collect Personal Data in the following categories, depending on how you interact with the 999bv platform:

4.1 Registration & Identity Data

• Full legal name, username and password (stored in hashed form);
• Date of birth (for age verification purposes);
• Email address and, where provided, mobile phone number;
• Residential address and country of residence.

4.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., CNIC, passport, driving licence);
• Proof of address documentation (e.g., utility bill, bank statement);
• Payment method verification documents where required by AML obligations.

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps and payment method references;
• Betting history, account balance records and wagering activity logs;
• Partial payment card details or mobile wallet reference numbers where provided (full card numbers are never stored by 999bv — they are processed directly by our payment service providers).

4.4 Technical & Device Data

• IP address and approximate geolocation data derived from it;
• Device type, operating system, browser type and version;
• Session identifiers and login timestamps;
• Referral source URL (where applicable).

4.5 Behavioural & Usage Data

• Pages visited, features used and time spent on different sections of the platform;
• Betting patterns, game preferences and in-play activity data used for responsible gambling monitoring;
• Search queries and filter selections within the platform.

4.6 Support & Communication Data

• Records of live chat conversations, email correspondence and support tickets;
• Complaint records and their resolution history;
• Responsible gambling tool requests and self-exclusion records.

999bv processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

999bv uses your Personal Data for the following specific purposes:

• Account Management: Creating, maintaining and administering your 999bv account, including processing deposits, withdrawals and betting transactions;
• Identity & Age Verification: Confirming that you meet the minimum age requirement (18+, or the higher minimum required by the applicable jurisdiction) and that your identity is genuine, as required by KYC obligations;
• AML & Fraud Prevention: Monitoring transactions and account activity to detect and prevent money laundering, fraud, underage gambling and other prohibited activities;
• Responsible Gambling: Monitoring behavioural data to identify potential problem gambling patterns and to administer voluntary tools such as deposit limits, session reminders and self-exclusion requests;
• Customer Support: Responding to your enquiries, complaints and account requests, including responsible gambling support requests;
• Platform Improvement: Analysing anonymised or aggregated usage data to improve the functionality, performance and user experience of the 999bv platform;
• Legal Compliance: Meeting our obligations under applicable laws, regulations, licensing requirements and court orders;
• Marketing Communications (Consent-Based): Where you have specifically opted in, sending you information about promotions, bonuses and platform updates. You may opt out at any time by contacting our support team.

We do not use your Personal Data to make solely automated decisions that produce significant legal effects on you, without providing you with an opportunity to request human review.

999bv uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit our website. They help us remember your session preferences, maintain your logged-in state, analyse platform usage and detect suspicious activity.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in. You cannot opt out of these cookies without stopping your use of the Service.
• Performance & Analytics Cookies: Collect anonymised data about how users navigate the platform, which pages are visited most frequently and where errors occur. Used to improve platform performance. Deployed only with your consent.
• Functional Cookies: Remember your preferences such as language settings, display options and responsible gambling tool configurations.
• Security Cookies: Used for fraud detection and to verify that requests to the platform originate from legitimate, active user sessions.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some platform features. You may also update your cookie consent preferences directly within the platform settings.

999bv shares your Personal Data only where strictly necessary and only with parties who are contractually bound to handle it in accordance with equivalent data-protection standards. We do not sell, rent, license or trade your Personal Data to any third party for commercial gain.

The categories of third parties with whom we may share data include:

• KYC / Identity Verification Providers: Third-party identity verification services used to confirm your identity and age as part of the KYC process. These providers process identity document data under strict data-processing agreements;
• Payment Service Providers: Payment processors and gateway operators who handle deposit and withdrawal transactions. These providers receive only the data necessary to process the transaction and are subject to their own payment-industry security obligations;
• Fraud Prevention & AML Services: Third-party services used to screen transactions and account activity for indicators of financial crime, fraud or suspicious activity;
• Platform Hosting & Infrastructure Providers: Cloud hosting and content delivery providers on whose infrastructure the 999bv platform operates. These providers do not access your Personal Data for their own purposes;
• Legal & Regulatory Authorities: We may be required to disclose your Personal Data to law enforcement authorities, regulators or courts where compelled to do so by applicable law or a valid legal order.

As an online platform operating across international markets, some of the third-party service providers engaged by 999bv may be located in countries outside your country of residence, including outside the European Economic Area. Where Personal Data is transferred to a country that does not provide a level of data protection equivalent to that of your home jurisdiction, 999bv will implement appropriate safeguards to protect the transferred data.

Such safeguards may include standard contractual clauses approved by competent data-protection authorities, adequacy decisions where applicable, or binding corporate rules where relevant. If you would like more information about the specific mechanisms used to protect Personal Data in connection with any international transfer, please contact our support team.

999bv retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting and reporting obligations.

The following retention principles apply:

• Active Account Data: Retained for the duration of your account's active period plus any post-closure period required by applicable law;
• Transaction & KYC Records: Retained for a minimum of five (5) years following account closure, or longer if required by applicable AML or financial regulation;
• Support & Communication Records: Retained for a minimum of three (3) years from the date of the communication, or longer where a complaint is unresolved;
• Self-Exclusion Records: Retained indefinitely to prevent a previously self-excluded user from being re-admitted to the platform in circumvention of their exclusion request;
• Marketing Consent Records: Retained for the duration of your consent plus a reasonable period to evidence that consent was validly obtained.

When Personal Data is no longer required for any of the above purposes, it will be securely deleted, destroyed or anonymised in accordance with our internal data deletion procedures. Anonymised or aggregated data that can no longer identify any individual may be retained indefinitely for statistical and analytics purposes.

Subject to applicable data-protection law and certain exceptions, you have the following rights in relation to your Personal Data held by 999bv. To exercise any of these rights, please contact our support team as described in Clause 15. We will respond to all valid rights requests within 30 days, and will notify you if an extension is required.

Please note that certain rights may be limited where we are required by law to retain or continue processing data — for example, where a legal hold applies to transaction or KYC records. We will always explain the reason if a right cannot be fully exercised in a given case.

999bv implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures are regularly reviewed and updated in line with industry best practices and include:

• Encryption in Transit: All data exchanged between your browser and our servers is encrypted using HTTPS/TLS protocols, preventing interception during transmission;
• Encryption at Rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using industry-standard algorithms;
• Access Controls: Access to personal data is restricted to authorised staff on a strictly need-to-know basis, enforced through role-based access control systems and multi-factor authentication;
• Password Security: User passwords are never stored in plaintext. They are hashed using industry-standard one-way hashing algorithms with appropriate salting;
• Intrusion Detection: The platform is monitored for suspicious activity and potential security incidents through automated monitoring systems and regular security reviews;
• Staff Training: All staff with access to personal data receive regular data-protection and security training.

The 999bv platform is strictly intended for adults aged 18 years and over, or the higher minimum age required by the operator/licence jurisdiction. We do not knowingly collect or process Personal Data relating to children or minors.

If we become aware that Personal Data has been collected from a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on 999bv or that we have inadvertently collected data from a minor, please contact us immediately via the details in Clause 15 so that we can take appropriate action without delay.

999bv reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, legal obligations, regulatory guidance or platform functionality. When we make material changes to this Policy — that is, changes that may significantly affect how we process your Personal Data — we will notify active users through a visible notice on the platform or by direct communication.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version came into effect. We encourage you to review this Policy periodically to stay informed of how 999bv protects your data. Your continued use of the platform following the effective date of an updated Policy constitutes your acknowledgement of the revised terms.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by 999bv, please contact our support team using the details below. Our team is available 24 hours a day, 7 days a week, and handles data enquiries in both English and Urdu.

• Email: [email protected]
• Subject Line: For privacy and data-rights requests, please use the subject line "Data Privacy Request" to ensure your message is routed to the correct team;
• Live Chat: Available via the platform interface, 24/7;
• Response Timeframe: We aim to acknowledge all data-related requests within 5 business days and to provide a substantive response within 30 calendar days of receipt. We will notify you if a statutory extension applies.

For further information about your rights as a user of the 999bv platform, please also review our Terms & Conditions and our Responsible Gambling page.