999bc Privacy Policy

999bc is the operator of the online casino and sports betting platform accessible at 999bc.im (the "Platform"). 999bc operates under an international gaming license and is the data controller responsible for the personal data of all registered players and website visitors processed through the Platform.

For the purposes of this Privacy Policy, references to "999bc", "we", "us", or "our" refer to the licensed operator of the 999bc Platform. References to "you" or "your" refer to any individual who registers an account, visits the Platform, or otherwise interacts with 999bc in any capacity.

999bc collects personal data across several categories, depending on your interaction with the Platform. The following table sets out the categories of data collected, the source, and the context in which collection occurs:

999bc does not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance. We do not collect political opinions, religious beliefs, or biometric data beyond facial comparison photographs used in KYC identity verification.

999bc processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to register your account, execute deposits and withdrawals, operate your game sessions, and fulfil the service obligations of the 999bc Terms & Conditions.
• Legal Obligation: Processing required to comply with 999bc's international gaming license conditions, including KYC identity verification, anti-money laundering record-keeping, responsible gaming monitoring, and regulatory reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security monitoring, abuse detection, and internal analytics — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and non-essential cookie functions — only where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

999bc uses personal data collected from players and visitors for the following specific purposes:

• Account Management: Creating, maintaining, and securing your 999bc account, verifying identity, and processing login authentication.
• Payment Processing: Executing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 — and processing withdrawal requests to your registered payment method.
• KYC Compliance: Verifying your identity and age (21+) as required under 999bc's international gaming license. This is a mandatory condition of platform operation and cannot be waived.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, administering player-set deposit limits and loss limits, and processing self-exclusion requests.
• Fraud Prevention & Security: Detecting unauthorised account access, payment fraud, bonus abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions.
• Customer Support: Responding to enquiries, processing formal complaints, and resolving account disputes.
• Regulatory Compliance: Fulfilling reporting obligations to 999bc's licensing authority, responding to lawful requests from regulatory bodies, and maintaining records as required by anti-money laundering regulations.
• Platform Improvement: Aggregated, anonymised analytics for understanding player behaviour trends, improving game selection, and optimising platform performance. Individual identifiers are removed before analytics processing.
• Marketing (with consent only): Sending promotional offers, bonus notifications, and relevant platform updates to players who have opted into marketing communications.

999bc shares personal data with third parties only to the extent strictly necessary for the legitimate operation of the Platform, and only with parties who are bound by appropriate data protection obligations. The categories of third parties with whom data may be shared are as follows:

999bc does not sell, rent, lease, or trade your personal data to any third party for marketing, profiling, or commercial purposes. Any third-party data processor engaged by 999bc is contractually prohibited from using your data for any purpose other than the specific service they provide to 999bc.

KYC (Know Your Customer) identity verification is a mandatory requirement under 999bc's international gaming license and is non-negotiable. All accounts must complete KYC verification before the first withdrawal is processed. KYC serves three primary functions at 999bc: age verification (21+ confirmation), identity confirmation, and anti-money laundering compliance.

The KYC process at 999bc requires submission of:

• A legible photographic copy of your Pakistani Computerised National Identity Card (CNIC) — both front and back sides
• A clear selfie photograph for facial comparison against the CNIC photograph
• Proof of payment method ownership where required (e.g., a screenshot of your JazzCash account clearly showing your registered mobile number)

KYC documents are reviewed by trained verification staff or automated verification systems contracted by 999bc. Results are typically returned within 24 hours of complete document submission during business hours.

KYC data — particularly CNIC images and selfie photographs — is handled with the highest level of data security. These files are encrypted at rest, access is restricted to authorised personnel and contracted KYC providers only, and they are retained only for the minimum period required under licensing and anti-money laundering regulations.

The 999bc Platform uses cookies and similar technologies to operate correctly, protect account security, and understand how the platform is used. The following categories of cookies are in use:

999bc does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking tags on the Platform. Your browsing activity on 999bc is not shared with advertising networks.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent the Platform from functioning. Blocking performance and preference cookies will not prevent platform access but may affect your experience.

999bc implements a layered approach to data security that covers data in transit, data at rest, and access controls. Key security measures in place include:

• In-Transit Encryption: All data exchanged between your browser or device and 999bc servers is protected by TLS 1.2 or higher encryption. Connection downgrade attacks are actively blocked.
• At-Rest Encryption: Personal data stored in 999bc databases — including KYC documents, payment references, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Password Security: Account passwords are never stored in plaintext. They are processed through a one-way cryptographic hashing function with appropriate salting before storage.
• Access Controls: Access to personal data within 999bc's operational systems is restricted on a need-to-know basis. Staff access is logged and reviewed. External service providers are granted only the minimum access required for their specific function.
• Intrusion Monitoring: 999bc operates continuous monitoring for unauthorised access attempts, anomalous account behaviour, and potential data breach indicators.
• Two-Factor Authentication: New device login events trigger SMS-based verification to the mobile number registered on your account. This is an automated security measure that cannot be disabled.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in risk to the rights and freedoms of affected individuals, 999bc will notify affected account holders as required under its gaming license obligations.

You are responsible for maintaining the security of your 999bc account credentials. Do not share your password with anyone. 999bc support staff will never ask for your password. If you suspect your account has been compromised, contact the 999bc support team immediately via live chat.

999bc retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to extended retention where required by legal or regulatory obligation. The following retention principles apply:

• Active Accounts: Personal data associated with an active 999bc account is retained for the duration of the account relationship and for a defined period following account closure, as required under anti-money laundering regulations and gaming license obligations.
• KYC Documents: Identity documents and verification photographs are retained for the minimum period mandated under 999bc's international gaming license and applicable anti-money laundering regulations. This period is typically five (5) years from the date of last account activity or account closure, whichever is later.
• Transaction Records: Financial transaction records — deposits, withdrawals, bet history — are retained for a minimum of five (5) years to satisfy anti-money laundering regulatory requirements.
• Support Communications: Live chat transcripts and email correspondence are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: Data processed on the basis of consent for marketing purposes is deleted promptly following withdrawal of consent, subject to retention of a record confirming that consent was given and subsequently withdrawn.
• Anonymised Analytics: Anonymised, non-identifiable analytics data may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified or identifiable individual.

As a 999bc account holder or platform visitor, you have the following rights with respect to the personal data we hold about you. These rights can be exercised by contacting the 999bc support team as described in Section 15.

999bc will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, 999bc may extend this period by a further 60 days, with notice provided within the initial 30-day window. 999bc reserves the right to decline requests that are manifestly unfounded or excessive in nature, or where fulfilling the request would conflict with legal retention obligations.

The 999bc Platform is strictly intended for persons aged 21 years and above. 999bc does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the KYC process, and all accounts are subject to CNIC-based identity verification before withdrawal privileges are activated.

If 999bc becomes aware that personal data has been collected from a person under the age of 21, all data associated with that account will be permanently deleted, the account will be closed, and any deposited funds will be handled in accordance with applicable regulations and 999bc's Terms & Conditions.

If you believe that a person under the age of 21 has registered an account on the 999bc Platform, please contact the 999bc support team immediately via live chat or at the email address provided in Section 15. 999bc takes underage access seriously and investigates all such reports on a priority basis.

As a platform operating under an international gaming license, 999bc's infrastructure, contracted service providers, and licensing authority may be located in jurisdictions outside Pakistan. Personal data may therefore be transferred to, stored in, or processed in countries other than Pakistan in the course of normal platform operations.

Where personal data is transferred internationally — for example, to KYC verification providers or game software studios — 999bc ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual data processing agreements requiring the recipient to maintain data protection standards consistent with 999bc's licensing obligations
• Transfers only to service providers who are themselves subject to appropriate regulatory oversight in their home jurisdiction
• Minimisation of data transferred internationally to only what is strictly necessary for the specific service being provided

999bc may send marketing communications — including bonus offers, promotional notifications, and platform updates — to registered players who have opted into receiving such communications. Marketing communications are sent via SMS to your registered mobile number and/or via email to your registered email address.

Consent to marketing communications is optional and separate from consent to these Privacy Policy terms. You may opt into marketing communications during registration or at any time through your account settings. You may withdraw consent and unsubscribe from marketing communications at any time by:

• Updating your communication preferences in the notifications section of your account settings
• Clicking the unsubscribe link included in any marketing email sent by 999bc
• Contacting the 999bc support team via live chat and requesting removal from marketing lists

Withdrawal from marketing communications will be processed within 5 business days. You may continue to receive transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — regardless of your marketing preference settings. These transactional messages are necessary for account management and cannot be unsubscribed from while your account remains active.

999bc reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, data processing practices, legal obligations, or gaming license requirements. The current version of this Privacy Policy is always available at 999bc.im/privacy-policy, and the effective date at the top of this page indicates when the current version came into force.

Where updates to this Privacy Policy are material — that is, where they significantly affect how your personal data is collected, used, or shared — 999bc will notify registered account holders via the contact details on file prior to the changes taking effect. For non-material updates, the revised policy will be published without individual notice.

Continued use of the 999bc Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Privacy Policy, you may request account closure in accordance with the Terms & Conditions.

For all privacy-related enquiries, data rights requests, or concerns regarding 999bc's data processing practices, please use the following contact methods:

This Privacy Policy was last reviewed and updated in January 2026. All previous versions of the 999bc Privacy Policy are superseded by this document with effect from the date stated at the top of this page.