bd999 Privacy
Policy

1.1 This Privacy Policy ("Policy") describes how bd999 ("we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals ("you", "your") who access or use the bd999 platform at bd999.cam, including all betting, casino, and gaming services made available through that platform.

1.2 By registering an account with bd999, making a deposit, or otherwise using any part of our platform, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein.

1.3 bd999 is committed to handling personal data in accordance with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

2.1 For the purposes of this Policy, bd999 (operating through its licensed entity under its international gaming licence) acts as the data controller with respect to personal data collected from platform users.

2.2 As the data controller, bd999 determines the purposes for which and the means by which personal data is processed. Where bd999 engages third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to process data only in accordance with bd999's instructions and this Policy.

2.3 All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our support team at [email protected].

3.1 bd999 collects personal data through several channels, including account registration, platform usage, and interactions with our support team. The categories of personal data we collect are set out below:

3.2 bd999 does not collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) unless explicitly required by a specific regulatory obligation and disclosed to you at the point of collection.

4.1 bd999 uses personal data collected from players for the following purposes:

• Account management: To create, maintain, and operate your bd999 account, including processing login authentication and account security measures.
• Service delivery: To process deposits and withdrawals, settle bets, credit winnings, and deliver all gaming and betting services accessible through the platform.
• Identity verification (KYC): To verify your age, identity, and payment method ownership in compliance with anti-money-laundering (AML) and know-your-customer (KYC) requirements under our gaming licence obligations.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-accounting, and other conduct prohibited under our Terms & Conditions.
• Responsible gaming: To monitor player behaviour for signs of problem gambling and to administer self-exclusion, deposit limit, and cooling-off requests.
• Platform improvement: To analyse usage patterns, improve platform performance, and develop new features and game offerings relevant to Pakistani players.
• Customer support: To respond to queries, resolve disputes, and process complaints efficiently.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
• Legal compliance: To fulfil our obligations under applicable gaming regulations, tax laws, and law enforcement requests where legally required.

5.1 bd999 processes personal data on the following legal grounds, depending on the specific purpose of processing:

• Contractual necessity: Processing necessary to perform the contract between bd999 and a registered player — including account creation, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including KYC verification, AML reporting obligations, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing necessary for bd999's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given consent, primarily for optional marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

6.1 bd999 does not sell, rent, or trade personal data to third-party marketers. We share personal data only in the following circumstances and only with parties who are subject to appropriate data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transactional data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable Pakistani financial regulations.
• Identity verification providers: Third-party KYC and document verification services receive identity data necessary to complete regulatory verification checks.
• Gaming software providers: Game providers receive session and game-specific data necessary to deliver and audit individual game rounds. This does not include full identity data.
• Analytics and security providers: Technical service providers engaged to monitor platform performance, detect fraud, and manage cybersecurity infrastructure may process technical and behavioural data under strict data processing agreements.
• Regulatory authorities: bd999 will disclose personal data to our gaming regulatory authority, financial intelligence units, law enforcement agencies, and courts where required to do so by law or valid legal process.

6.2 Where personal data is transferred to third-party processors, bd999 ensures such transfers are governed by written data processing agreements that impose confidentiality, security, and purpose-limitation obligations on those processors.

7.1 bd999 handles financial data with particular care given its sensitivity. Full payment card numbers are never stored on bd999 servers. Where bank account or mobile wallet identifiers are retained, they are stored in an encrypted format accessible only to authorised personnel for withdrawal processing purposes.

7.2 All financial transactions on bd999 are processed in Pakistani Rupees (PKR) through our approved local payment partners. bd999 maintains transaction logs for a minimum of five years to satisfy AML regulatory record-keeping requirements.

7.3 Under our AML obligations, bd999 may be required to report certain transactions to relevant financial intelligence authorities. Players whose transactions trigger reporting thresholds will not necessarily be notified of such reports, as this could constitute a "tipping off" offence under applicable law.

8.1 bd999 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function, including maintaining your logged-in session, processing transactions, and delivering game content. These cannot be disabled.
• Performance cookies: Collect anonymised data on how players interact with the platform, which pages are visited most frequently, and where errors occur. Used solely to improve platform performance.
• Functionality cookies: Remember your preferences such as language settings, display preferences, and notification choices to provide a personalised experience.
• Analytics cookies: Allow bd999 to measure aggregate platform usage patterns using third-party analytics tools. Data collected is aggregated and anonymised.

8.2 You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may limit the functionality of specific platform features.

9.1 bd999 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, and in any event for no longer than required by applicable law or regulatory obligation. The following general retention periods apply:

• Active account data: Retained for the duration of your active account registration with bd999.
• Closed account data: Following account closure, bd999 retains identity and financial records for a minimum of five years to fulfil AML and gaming regulatory record-keeping obligations.
• Transaction records: Minimum five years from the date of the transaction, in line with AML requirements.
• Support communications: Retained for a minimum of two years from the date of the final communication in a support thread.
• Technical and log data: Retained for up to twelve months for security monitoring and fraud detection purposes.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10.1 bd999 implements a layered technical and organisational security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data in transit between user devices and bd999 servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments of the bd999 platform infrastructure.
• Multi-factor authentication requirements for internal staff accessing player data systems.
• Continuous automated monitoring for anomalous access patterns and potential data breaches.

10.2 In the event of a personal data breach that poses a risk to affected individuals, bd999 will take immediate steps to contain the breach, assess its impact, notify relevant regulatory authorities as required, and where appropriate, inform affected players without undue delay.

11.1 As a bd999 player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected]:

12.1 The bd999 platform is strictly restricted to individuals aged 21 and above. bd999 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, that account will be immediately closed, all funds returned to the payment source, and the associated personal data deleted.

12.2 If you believe that a minor has registered a bd999 account, please notify us immediately at [email protected] so that we can take immediate action. bd999 takes the protection of minors extremely seriously and maintains robust age verification controls as part of our KYC process.

13.1 bd999 operates under an international gaming licence, and some of our service providers, technology infrastructure, and game suppliers may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

13.2 Where such international transfers occur, bd999 ensures that appropriate safeguards are in place to protect your personal data, including: the use of standard contractual clauses with receiving entities; transfer to jurisdictions with adequate data protection frameworks; and strict contractual data processing obligations imposed on all international service providers.

13.3 By using the bd999 platform, you consent to the transfer of your personal data as described in this section.

14.1 bd999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. The updated Policy will always be published at bd999.cam/privacy-policy with a revised effective date.

14.2 For material changes to this Policy, bd999 will notify registered players through an in-platform notification or email communication prior to the change taking effect. Continued use of the platform following the publication of an updated Policy constitutes acceptance of the revised terms.

15.1 For all privacy-related enquiries, including data access requests, correction requests, deletion requests, and marketing opt-out requests, please contact our support team:

Email: [email protected]

Support Hours: 9:00 AM – 2:00 AM (PKT), seven days a week.

15.2 bd999 will respond to data subject requests within a reasonable timeframe and in any event within thirty (30) calendar days of receipt. Where a request is complex or there is a high volume of requests, this period may be extended by a further thirty days, in which case we will notify you of the extension.

15.3 For information about the terms that govern your use of the bd999 platform, please review our Terms & Conditions. For information about responsible gaming tools and player protections, please visit our Responsible Gaming page.