bx999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bx999 ("bx999", "we", "us", "our") — the online casino and sports betting platform accessible at bx999.biz — collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who register for, access, or use the bx999 platform and associated services ("Services").

This Policy applies to all personal data collected through the bx999 website, mobile-optimised browser interface, any future native applications, and all communications between bx999 and its registered players or prospective players. It applies regardless of whether you are based in Karachi, Lahore, Faisalabad, Islamabad, or any other location from which you access bx999.

By registering a bx999 account, using any of our Services, or otherwise providing us with personal data, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bx999 platform and should contact our support team to arrange closure of any existing account.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall legal framework governing your use of bx999 Services.

2 Personal Data We Collect

bx999 collects personal data in three principal ways: data you provide directly to us, data generated automatically through your use of the platform, and data we receive from third parties in connection with payment processing, identity verification, and fraud prevention. The categories of personal data we collect are set out in the table below.

We do not knowingly collect sensitive special-category personal data beyond what is strictly required for identity verification and age confirmation (e.g., CNIC scans). Where such data is collected, it is processed solely for the purpose of fulfilling our KYC obligations and is handled with the highest level of security and access control.

3 How We Use Your Personal Data

bx999 uses the personal data we collect for the following specific purposes. We do not use your personal data for any purpose that is incompatible with the purpose for which it was originally collected without your explicit consent or a valid legal basis to do so.

• Account Creation and Management: To register your bx999 account, verify your identity, process your KYC documentation, and maintain the ongoing administration of your account including password resets and account preferences.
• Service Delivery: To provide you with access to bx999 casino games, cricket betting markets, PSL and international match betting, slot games, live dealer tables, and all other features of the bx999 platform.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20, and to maintain accurate PKR transaction records for your account.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorised access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other legal or regulatory obligations to which bx999 is subject.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to apply responsible gaming tools or restrictions where appropriate.
• Marketing and Promotions: To send you information about bx999 promotions, bonuses, and new features via your preferred channel — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the performance, functionality, and user experience of the bx999 platform.

4 Legal Basis for Processing

bx999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and bx999, including account registration, payment processing, and service delivery. Without this processing, bx999 cannot provide its Services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML compliance, KYC verification, tax reporting obligations, and cooperation with regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out for bx999's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security monitoring, responsible gaming analysis, and internal reporting and analytics.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of direct marketing communications. You may withdraw your consent at any time; withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

bx999 does not sell or rent your personal data to any third party. We may share your personal data with third parties only in the following circumstances, and always subject to appropriate contractual safeguards:

• Payment Service Providers: We share financial data with payment processors including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely to the extent necessary to process your deposit and withdrawal transactions in PKR.
• Identity Verification Providers: We use regulated third-party KYC and identity verification services to verify your CNIC or NICOP documents. These providers process your identity data solely for verification purposes and are bound by strict data processing agreements.
• Game Software Providers: The game studios and RNG software providers whose games are available on the bx999 platform may receive anonymised session data for the purpose of game performance auditing. No personally identifiable data is shared with game providers beyond what is technically necessary.
• Fraud Prevention and AML Services: We may share transaction data and account information with specialist fraud prevention and AML screening services to identify and prevent financial crime. These services are contractually bound to use the data solely for this purpose.
• Regulatory and Law Enforcement Authorities: bx999 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction, or where disclosure is necessary to protect the rights, safety, or property of bx999 or its players.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of all or part of bx999's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer where required by applicable law.

In all cases where personal data is shared with third parties, bx999 requires those parties to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose for which it was shared.

6 Cookies & Tracking Technologies

bx999 uses cookies and similar tracking technologies to operate and improve the platform, maintain your session, and understand how players interact with our Services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bx999 platform to function correctly. They include session authentication cookies that keep you logged in during your gaming session and security cookies that help protect your account from CSRF attacks. You cannot opt out of strictly necessary cookies without losing access to the platform.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred payment method, responsible gaming limit settings, and display preferences. They improve your experience but are not essential for basic platform operation.
• Analytical Cookies: We use anonymised analytics cookies to understand aggregate user behaviour on the bx999 platform — such as which games are most popular, how players navigate between sections, and where technical errors are most frequently occurring. This data is used exclusively for internal platform improvement and is never shared with third-party advertisers.
• Security and Fraud Prevention Cookies: These cookies help bx999 identify suspicious login attempts, detect bot activity, and verify that a real human is interacting with the platform. They are a core component of our account security infrastructure.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain categories of cookies may impair the functionality of the bx999 platform, including the ability to remain logged in or to use certain features.

7 Data Security

bx999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• AES-256 encryption for all personal and financial data at rest.
• TLS 1.2 / 1.3 encryption for all data transmitted between your device and the bx999 platform.
• Multi-factor authentication requirements for administrative access to systems that store personal data.
• Role-based access controls ensuring that bx999 staff can only access personal data that is relevant to their specific job function.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• 24/7 automated intrusion detection and monitoring of all production systems.
• Secure, access-controlled data centres with physical security measures including biometric access, CCTV, and environmental controls.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bx999 will notify you without undue delay through your registered email address, and will take all reasonable steps to contain and remediate the breach.

You also have a role to play in protecting your data. We strongly encourage all bx999 players to use a strong, unique password for their account, to enable two-factor authentication where available, and to log out after each session — particularly when using shared or public devices.

8 Data Retention

bx999 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or contractual retention obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active bx999 account and for a minimum of five years following account closure, in accordance with AML and KYC regulatory retention requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations applicable to regulated gaming and payment operations.
• Gaming and Wagering History: Retained for a minimum of three years from the date of each gaming session or wager, and for longer periods where required by regulatory or dispute resolution obligations.
• Support Communications: Retained for three years from the date of the last communication in a support thread, or longer where the communication relates to a formal complaint or ongoing regulatory matter.
• Marketing Preferences and Consent Records: Retained for as long as your account remains active and for three years thereafter, to demonstrate compliance with applicable marketing consent requirements.
• Technical and Log Data: Server logs and technical access data are retained for up to 12 months for security monitoring and fraud prevention purposes, after which they are deleted or anonymised.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where retention is based on a legal obligation, data will not be deleted before the statutory minimum retention period has elapsed even if you request erasure.

9 Your Data Rights

As a bx999 player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or email at [email protected]. We will respond to all valid requests within a reasonable timeframe, typically within 30 days.

• Right of Access: You have the right to request a copy of all personal data that bx999 holds about you, together with information about how it is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate, incomplete, or out of date. For certain data such as your registered name or date of birth, rectification requests may require documentary evidence.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where the processing is unlawful. This right is subject to our legal obligation to retain certain data for AML and regulatory compliance purposes.
• Right to Restriction: You have the right to request that bx999 restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being verified following a rectification request.
• Right to Portability: Where processing is carried out by automated means on the basis of your consent or a contract, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you provided to bx999, and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of bx999's legitimate interests, including profiling for responsible gaming purposes. You may also withdraw your consent to direct marketing at any time, after which we will stop sending you promotional communications.
• Right Not to be Subject to Automated Decision-Making: bx999 does not make purely automated decisions that produce significant legal effects for players without human review. Where automated systems flag an account for investigation, a qualified member of our compliance team reviews the flagged matter before any action is taken.

10 Children & Minors

The bx999 platform is strictly intended for adults aged 21 years or over. bx999 does not knowingly collect, store, or process personal data relating to individuals who are under the age of 21. Age verification is a mandatory component of the bx999 KYC process, and accounts belonging to individuals who are found to be under the minimum age will be immediately suspended and all balances returned.

If you are a parent or guardian and you believe that a minor in your care has registered a bx999 account or provided personal information to bx999 without your knowledge, please contact our support team immediately via live chat or at [email protected]. We will investigate the matter promptly, close the account, return any deposits, and permanently delete any personal data associated with the minor's account.

11 International Data Transfers

bx999 operates a platform that is accessible to players based in Pakistan, and the majority of our data processing activities are conducted within the jurisdictions in which our servers and service providers are located. In some cases, personal data may be transferred to and processed in countries outside of Pakistan in connection with the delivery of our Services — for example, when using internationally operated game software providers, KYC verification platforms, or cloud infrastructure providers.

Where personal data is transferred internationally, bx999 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that applied within our core operations. These safeguards may include:

• Standard contractual clauses or data processing agreements that legally bind the recipient to maintain equivalent data protection standards.
• Transfers to jurisdictions that maintain data protection laws and regulatory frameworks that provide adequate protection for personal data.
• Binding corporate rules where data is transferred within a group of companies operating under a unified data governance framework.

You may request information about the specific safeguards in place for any international transfer of your personal data by contacting our support team.

12 Updates to This Privacy Policy

bx999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory obligations, or the features and Services offered on the platform. The effective date at the top of this Policy will be updated whenever a revision is made.

Where amendments are material — meaning they significantly change the way we collect, use, or share your personal data — bx999 will notify registered players via the email address on record and will display a prominent notice on the platform prior to the changes taking effect. For minor amendments such as typographical corrections or clarifications that do not alter the substantive meaning of any provision, notice may not be provided.

Your continued use of the bx999 platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should stop using the platform and contact our support team to request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how bx999 is protecting your personal data. The current version of this Policy is always the version published at bx999.biz/privacy-policy.

13 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which bx999 processes your personal data, please contact our support team using the details below. All privacy-related communications should be in English and should clearly reference "Privacy Policy" or "Data Rights" in the subject line.

• Live Chat: Available 24/7 inside your bx999 account — the fastest way to reach our support team for both general and privacy-related queries.
• Email: [email protected] — for formal data rights requests, privacy complaints, and documentation-related queries. We aim to respond within one business day and to resolve data rights requests within 30 days.
• Platform: bx999.biz — your account settings include tools to manage your marketing preferences, responsible gaming settings, and communication preferences directly, without the need to contact support.

This Privacy Policy was last reviewed and updated with an effective date of 1 January 2026. It supersedes all previous versions of the bx999 Privacy Policy.