Privacy Policy — How bg999 Handles Your Personal Data

1 Who We Are

bg999 ("bg999", "we", "us", "our") operates the online casino and sports betting platform accessible at https://bg999.bar. bg999 is an internationally licensed gaming operator providing cricket betting, live dealer casino games, slots, and instant-win titles to registered players across Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, bg999 acts as the data controller in respect of personal data collected from players and visitors to the bg999 website. This means bg999 is responsible for determining the purposes and means by which your personal data is processed.

By registering for a bg999 account, visiting the bg999 website, or otherwise using any service provided by bg999, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the bg999 platform.

2 Personal Data We Collect

bg999 collects personal data from you in three primary ways: information you provide directly when registering or using the platform; information generated automatically through your use of the platform; and information obtained from authorised third parties such as KYC verification providers and payment processors.

3 How We Use Your Personal Data

bg999 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or establishing a separate lawful basis.

• Account registration and management: To create and administer your bg999 account, verify your identity, and maintain accurate player records in compliance with our licensing obligations.
• Service delivery: To provide you with access to cricket betting, live casino games, slots, and all other gaming products available on the bg999 platform.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, and BTC, including verifying the ownership of payment accounts linked to your bg999 profile.
• KYC and AML compliance: To verify your identity in accordance with know-your-customer and anti-money-laundering obligations imposed by our licensing framework. This includes checking your CNIC details and, where required, requesting source-of-funds documentation.
• Responsible gaming: To monitor your gaming behaviour for patterns that may indicate problem gambling, to enforce any limits or self-exclusion orders you have set, and to provide proactive responsible gaming interventions where appropriate.
• Customer support: To respond to your queries, complaints, and support requests via Live Chat and email.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited conduct on the bg999 platform.
• Platform improvement: To analyse aggregated usage data and identify opportunities to improve the bg999 platform's performance, user experience, and game selection.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You can opt out at any time via your account settings or by contacting support.
• Legal and regulatory obligations: To comply with applicable laws, regulations, court orders, and directions from regulatory or law enforcement authorities.

4 Legal Basis for Processing

bg999 processes your personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil the Terms & Conditions of your bg999 account — including delivering gaming services, processing payments, and managing your account — is carried out on the basis that it is necessary to perform the contract between you and bg999.
• Legal obligation: Processing required to comply with our obligations under applicable gaming regulations, AML legislation, and tax laws is carried out on the basis of legal obligation. bg999 cannot waive these processing activities even at your request.
• Legitimate interests: Processing carried out to protect the security and integrity of the bg999 platform, prevent fraud, conduct internal analytics, and improve our services is carried out on the basis of bg999's legitimate interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes, and any processing of sensitive data you voluntarily disclose, is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Personal Data

bg999 does not sell, rent, or otherwise commercially exploit your personal data. We share your data only in the following specific and controlled circumstances:

• KYC and identity verification providers: bg999 uses authorised third-party identity verification services to confirm your identity and age. These providers process your CNIC and other identity documents on bg999's behalf and are contractually bound to handle your data securely and in accordance with applicable data protection requirements.
• Payment processors: Your financial data is shared with the payment service providers that process your deposits and withdrawals — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank operators, and cryptocurrency processing services. Each of these providers operates under their own privacy policies and applicable financial regulations.
• Game providers: The third-party game studios and live dealer providers whose content is hosted on the bg999 platform may receive limited technical data (such as session tokens and bet references) necessary to deliver the gaming experience. They do not receive your full identity profile.
• Regulatory authorities: bg999 may be required to disclose player data to its licensing authority, financial intelligence units, or law enforcement agencies where required by law or in response to a valid legal order. bg999 will notify you of such disclosure where legally permitted to do so.
• Fraud prevention and security partners: bg999 may share data with specialist fraud prevention and cyber-security service providers to investigate and address security threats to the platform and its players.
• Group companies and successors: In the event of a business restructure, merger, or acquisition involving bg999, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections set out in this policy.

6 Cookies & Tracking Technologies

The bg999 website uses cookies and similar tracking technologies to operate correctly, improve user experience, and gather analytics data. A cookie is a small text file stored on your device when you visit a website. bg999 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the bg999 website to function. They enable core features such as maintaining your login session, remembering your game preferences, and ensuring secure navigation between pages. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised information about how visitors use the bg999 website — such as which pages are visited most frequently and whether any error messages are encountered. This data helps bg999 improve the platform experience. These cookies can be disabled via your browser settings.
• Functional cookies: These cookies allow the bg999 platform to remember your preferences — such as your preferred language, currency display, and responsible gaming settings — to provide a more personalised experience.
• Marketing cookies: If you have consented to receive marketing communications from bg999, these cookies may be used to ensure you receive relevant promotional content and to measure the effectiveness of bg999's marketing campaigns.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the bg999 platform, and some features may not work as expected. For detailed information on how to manage cookies in your specific browser, refer to your browser's help documentation.

7 Data Security

bg999 takes the security of your personal data extremely seriously. We implement a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure.

• 256-bit SSL/TLS encryption: All data in transit between your device and bg999 servers is encrypted using industry-standard TLS encryption. This includes your login credentials, payment information, and any other personal data you transmit via the platform.
• Password hashing: Your bg999 account password is never stored in plain text. Passwords are stored as salted cryptographic hashes using a strong one-way hashing algorithm, ensuring that even in the unlikely event of a data breach, your password cannot be recovered from stored data.
• Two-factor authentication (2FA): bg999 offers optional 2FA for all player accounts. Enabling 2FA significantly reduces the risk of unauthorised access to your account even if your password is compromised. bg999 strongly recommends that all Pakistani players enable 2FA.
• Access controls: Access to personal data held by bg999 is strictly limited to staff members and systems that require it to perform specific, authorised functions. All internal access is logged and subject to periodic review.
• Security monitoring: bg999's technical infrastructure is subject to continuous security monitoring to detect and respond to intrusion attempts, unusual access patterns, and other potential security incidents.

8 Data Retention

bg999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The following general retention principles apply:

• Active account data: Personal data associated with your bg999 account is retained for the full duration of your account's active status and for a period following account closure as required by our regulatory framework.
• Financial and transaction records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years following the relevant transaction date, in compliance with anti-money-laundering regulatory requirements applicable to licensed gaming operators.
• KYC documentation: Identity verification documents, including CNIC copies and proof of address, are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Customer support records: Live chat transcripts and support email records are retained for a period of two (2) years from the date of the relevant interaction.
• Marketing data: If you have opted in to receive marketing communications, your marketing preferences and associated data are retained until you opt out. Following an opt-out request, your marketing data is removed from active marketing lists within a reasonable operational period.
• Technical and usage data: Aggregated analytics data is retained indefinitely in anonymised form. Individual-level technical data is retained for up to twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted from bg999's live systems and backup infrastructure, or anonymised in such a way that it can no longer be associated with any individual player.

9 Your Privacy Rights

As a bg999 player, you have a number of rights in relation to the personal data bg999 holds about you. bg999 is committed to facilitating the exercise of these rights in a timely and transparent manner.

• Right of access: You have the right to request a copy of the personal data bg999 holds about you. bg999 will provide this information in a structured, commonly used format within 30 calendar days of receiving a valid request.
• Right to rectification: If any personal data held by bg999 about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly within the bg999 account settings page.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for continued processing. Please note that bg999's regulatory and legal obligations may require us to retain certain data even following a deletion request.
• Right to restriction: You have the right to request that bg999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a machine-readable format and to request its transfer to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where bg999 relies on legitimate interests as its legal basis, as described in Section 4 above.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

10 Children & Minors

The bg999 platform is strictly intended for adults aged 21 years and over. bg999 does not knowingly collect personal data from individuals under the age of 21, and does not permit players under 21 to register for or use the platform under any circumstances.

As part of the bg999 registration and KYC process, all players are required to verify their date of birth. Any account found to have been registered by an individual under the age of 21 will be immediately and permanently closed, all funds held in that account will be dealt with in accordance with applicable AML procedures, and the matter may be reported to relevant authorities.

11 International Data Transfers

bg999 operates an internationally licensed platform, and as a result, your personal data may be processed or stored on servers and systems located outside of Pakistan. This may include transfers to countries whose data protection laws differ from those applicable in Pakistan.

Where bg999 transfers personal data internationally, it applies appropriate safeguards to ensure that your data receives a level of protection equivalent to the standards described in this Privacy Policy. Such safeguards may include:

• Contractual data processing agreements with service providers that incorporate data protection obligations consistent with applicable international standards.
• Use of service providers located in jurisdictions recognised as providing an adequate level of data protection.
• Implementation of technical and organisational security measures at all locations where your data is processed.

By registering for a bg999 account, you acknowledge and consent to such international transfers of your personal data, subject to the safeguards described above.

12 Third-Party Services & Links

The bg999 platform integrates third-party services in order to function — including game content providers, live dealer studios, payment processors, and analytics tools. While bg999 carefully selects and vets its service providers, each third-party provider operates under its own privacy policy and data handling practices.

bg999 is not responsible for the privacy practices of third-party service providers. If you have concerns about how a specific third-party provider handles your data, you should refer directly to that provider's privacy policy. bg999 will, upon reasonable request, identify which third-party providers process your data in connection with your use of the bg999 platform.

Please note that the bg999 website does not include hyperlinks to external third-party websites for browsing purposes. All content and services accessible from the bg999 platform are part of the bg999 gaming ecosystem or its authorised service provider network.

13 Updates to This Privacy Policy

bg999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, our regulatory obligations, or our data handling practices. When material changes are made, bg999 will:

• Update the "Last updated" date displayed at the top of this Privacy Policy page.
• Notify registered players via the email address on file and/or via a prominent notice within the bg999 platform.
• Where required by applicable law, seek fresh consent from players before implementing material changes to data processing activities.

Your continued use of the bg999 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. bg999 recommends that all players bookmark this page and check it periodically for updates.

14 Contact Us & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how bg999 handles your personal data, please contact us using the details below:

• Live Chat: Available 24/7 via the Help Centre inside your bg999 account — this is the fastest way to reach the bg999 support team.
• Email: [email protected] — please include your registered username and a clear description of your query or complaint in your message.

bg999 will acknowledge all privacy-related enquiries within two (2) business days and will aim to resolve them fully within 30 calendar days. If you are not satisfied with bg999's response to a privacy complaint, you may escalate the matter to the relevant supervisory or regulatory authority under our licensing framework.