bc999 Privacy
Policy — Your Data,
Your Rights

1.1 This Privacy Policy is published by bc999 ("bc999," "we," "us," "our"), the operator of the online gaming platform accessible at bc999.site. bc999 acts as the data controller in respect of personal information collected from players and visitors through the bc999 platform.

1.2 bc999 has operated continuously since 2017 and serves millions of active players across Pakistan, including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and all other regions. This Privacy Policy applies uniformly to all bc999 players regardless of location within Pakistan.

1.3 bc999 operates under internationally recognised gaming licence frameworks. Our data handling obligations include compliance with the data protection conditions imposed by our gaming licence authority, in addition to applicable national and international data protection principles.

1.4 For all privacy-related enquiries, contact our Data Protection team at [email protected] or via Live Chat, marking your query "Privacy Request."

2.1 bc999 collects the following categories of personal data from players and platform visitors. The specific data collected depends on the nature of your interaction with bc999 — browsing without an account results in far less data collection than full account registration and active play.

3.1 bc999 collects personal data through the following mechanisms:

• Direct Submission: Information you provide actively during account registration, identity verification, payment method setup, customer support contact, or promotional opt-in processes;
• Automated Technical Collection: Data automatically gathered by bc999's platform infrastructure when you access the website — including IP addresses, session identifiers, device fingerprints, and usage logs;
• Cookies and Tracking Technologies: Data collected through browser cookies, web beacons, and similar technologies as described in Section 7 of this Policy;
• Third-Party Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, Raast, 1LINK, and banking partners when you make deposits or receive withdrawals — bc999 receives confirmation and reference data, not full payment credentials;
• Identity Verification Partners: Data returned by third-party KYC verification services when bc999 processes your identity documents for age and identity confirmation;
• Gaming Software Providers: Game session data transmitted from third-party game providers (Pragmatic Play, Evolution Gaming, etc.) to bc999 as required for account balance management and dispute resolution.

4.1 bc999 uses personal data for the following purposes:

• Account Management: Creating and maintaining your bc999 account, processing login authentication, managing account settings and preferences, and responding to your account-related queries;
• Service Delivery: Enabling access to casino games, sportsbook betting, live dealer tables, and all other bc999 platform features you are eligible to use;
• Payment Processing: Processing PKR deposits via JazzCash, EasyPaisa, Raast, and bank transfers; processing withdrawal requests to your registered payment methods; maintaining transaction records;
• Identity and Age Verification: Confirming that you are who you say you are and that you meet bc999's minimum age requirement of 21 years, as required by our gaming licence conditions;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent account activity, multiple account registration, bonus abuse, money laundering, and other prohibited conduct as defined in bc999's Terms and Conditions;
• Regulatory Compliance: Complying with obligations imposed by bc999's gaming licence authority, including record-keeping, responsible gaming requirements, and anti-money laundering reporting;
• Responsible Gaming: Monitoring gaming activity patterns to identify potential problem gambling indicators and reaching out proactively where appropriate; administering player-set limits and exclusions;
• Platform Improvement: Analysing anonymised usage data to improve bc999's website performance, game selection, payment user experience, and customer support quality;
• Customer Support: Providing Live Chat, email, and complaint handling support; maintaining records of support interactions for quality assurance and dispute resolution;
• Personalisation: Tailoring your bc999 experience — including game recommendations and promotional offers — based on your demonstrated preferences and play history, where you have not opted out of such personalisation;
• Marketing Communications: Sending promotional emails and SMS notifications about bc999 bonuses, PSL betting promotions, new games, and other relevant offers, where you have provided consent or where legitimate interest applies as described in Section 5.

5.1 bc999 processes your personal data under the following legal bases, depending on the purpose for which the data is used:

• Contractual Necessity: Processing required to provide the services you have contracted for by registering a bc999 account — including account management, game access, payment processing, and withdrawal services. Without this processing, bc999 cannot provide its services to you;
• Legal Obligation: Processing required to comply with applicable gaming licence conditions, anti-money laundering regulations, age verification requirements, and regulatory reporting obligations. bc999 cannot opt out of this processing regardless of your preferences;
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, service improvement, and responsible gaming monitoring where bc999's legitimate business interests do not override your privacy rights;
• Consent: Processing for direct marketing communications (promotional emails, SMS, push notifications) where we have obtained your explicit consent. You may withdraw this consent at any time as described in Section 11.

6.1 bc999 does not sell your personal data to third parties for commercial marketing purposes. Period. Data sharing is limited to the following categories of recipients and solely for the purposes described:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and our card processing partners receive the minimum data required to process your deposit and withdrawal transactions — primarily your account reference and transaction amount;
• Identity Verification Partners: Third-party KYC and age verification providers receive your identity document data for the sole purpose of verifying your eligibility to hold a bc999 account;
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, and other certified game studios receive your session identifier and wager data as technically required to run game rounds and return results to bc999's platform;
• IT and Infrastructure Providers: Hosting providers, content delivery networks, and cybersecurity vendors who process data solely under bc999's instruction and are contractually bound to data protection obligations;
• Regulatory and Law Enforcement Authorities: bc999 is legally required to share data with gaming regulators, financial intelligence units, and law enforcement agencies where required by applicable law or gaming licence conditions. Such sharing may occur without prior notice to you where legally mandated;
• Responsible Gaming Organisations: Where you request self-exclusion or where bc999 identifies serious responsible gaming concerns, limited data may be shared with recognised responsible gaming bodies to facilitate cross-operator exclusion;
• Professional Advisers: Legal counsel, auditors, and compliance consultants operating under strict confidentiality obligations may access limited player data during audits or legal proceedings.

7.1 bc999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, prevent fraud, and understand how Pakistani players use our services. A cookie is a small text file stored on your device by your web browser.

7.2 The following types of cookies are used on bc999.site:

8.1 bc999 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and bc999's servers is encrypted using the same standard employed by Pakistan's major commercial banks for online banking transactions;
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial data, is stored in encrypted form on bc999's secure server infrastructure;
• Access Controls: Personal data is accessible only to bc999 staff and systems with a defined, documented need for that access. All staff access to player data is logged and auditable;
• Two-Factor Authentication: bc999's internal administrative systems require two-factor authentication for all staff accessing player data environments;
• Regular Security Audits: bc999 commissions regular independent security audits and penetration tests of our platform infrastructure, with findings actioned within defined remediation timelines;
• Intrusion Detection: bc999 operates continuous automated monitoring of its network for anomalous access patterns, with immediate alerting to our security team;
• Breach Response Plan: bc999 maintains a documented data breach response plan. In the event of a breach affecting your personal data, affected players will be notified within 72 hours of discovery.

8.2 Despite these measures, no system is perfectly secure. bc999 cannot guarantee absolute security of data transmitted over the internet. You also have a responsibility to protect your bc999 account credentials — use a strong, unique password and enable two-factor authentication.

9.1 bc999 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any overriding legal or regulatory retention obligations. Key retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active bc999 account plus a minimum of 5 years after account closure, as required by anti-money laundering regulations and gaming licence conditions;
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, as required by applicable financial record-keeping regulations;
• Gaming Activity Records: Retained for a minimum of 5 years from the date of activity — required for dispute resolution and regulatory audit purposes;
• Customer Support Records: Retained for 3 years from the date of the support interaction, unless related to an unresolved dispute or regulatory matter;
• KYC Documentation: Identity verification documents retained for 5 years post-account closure in compliance with anti-money laundering obligations;
• Technical Logs: Server access logs, security logs, and fraud detection data retained for 12 months from the date of generation;
• Marketing Consent Records: Records of marketing consent and opt-out requests retained for 3 years from the date of consent change, to demonstrate compliance.

9.2 When retention periods expire, bc999 securely destroys or anonymises the relevant personal data using industry-standard methods, including cryptographic erasure of encrypted data and physical destruction of any storage media where applicable.

10.1 As a bc999 player, you have the following rights in relation to your personal data. bc999 will respond to valid privacy rights requests within 30 days of receipt, and within 72 hours for urgent responsible gaming-related requests.

11.1 bc999 may send you marketing communications about our services — including PSL betting promotions, bonus offers, new game announcements, and weekly reload offers — by email and SMS to your registered Pakistani mobile number. We send such communications only where:

• You have provided explicit consent during registration or subsequently through your Account Settings; or
• bc999 has a legitimate interest in contacting you as an existing player about directly relevant offers, and you have not opted out.

11.2 Opting Out: You may withdraw consent or opt out of marketing communications at any time through any of the following methods:

• Click the "Unsubscribe" link in any bc999 marketing email;
• Reply "STOP" to any bc999 SMS marketing message;
• Update your communication preferences in bc999 Account Settings → Notifications;
• Contact bc999 Live Chat or email support requesting removal from marketing communications.

11.3 Opting out of marketing communications does not affect your receipt of transactional messages — bc999 will continue to send essential account communications such as deposit confirmations, withdrawal notifications, and security alerts regardless of marketing preferences.

11.4 bc999 will not send marketing communications to players who are under an active self-exclusion order or who have set their deposit limit to the minimum available threshold.

12.1 bc999 is strictly an adult gaming platform. Our services are available exclusively to individuals who are 21 years of age or older. bc999 does not knowingly collect personal data from any person under the age of 21.

12.2 If bc999 discovers or is notified that an Account has been created by a person under 21, we will immediately close the Account, delete all personal data associated with that Account (subject to mandatory retention obligations), and return any deposits where technically feasible.

12.3 bc999 recommends that parents and guardians install parental control software on devices that minors may access to prevent exposure to gambling content. If you believe a minor has registered on bc999, contact our support team immediately via Live Chat.

13.1 bc999 may transfer your personal data to countries outside Pakistan where our service providers, data processors, or game software providers operate. This includes transfers to jurisdictions where bc999 holds its gaming licence and where our server infrastructure is hosted.

13.2 Where personal data is transferred internationally, bc999 implements the following safeguards:

• Data processing agreements with all recipients incorporating data protection obligations equivalent to those applicable to bc999;
• Transfer only to jurisdictions with adequate data protection frameworks or to processors committed to equivalent protection standards;
• Minimisation of transferred data — only the data strictly required for the specific processing purpose is transferred internationally.

13.3 Game session data transferred to software providers (Pragmatic Play, Evolution Gaming, etc.) is limited to anonymised session identifiers and wager amounts — personal identity data is not shared with game providers beyond what is technically required for jackpot verification.

14.1 bc999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory requirements, or gaming licence conditions.

14.2 Material changes to this Privacy Policy — such as new categories of data collected, new sharing arrangements, or changes to your rights — will be communicated to active players via email to their registered address at least 14 days before the changes take effect.

14.3 Minor changes — such as clarifications, corrections, or updates to reflect technical changes already in place — may be made without advance notice but will be reflected in the "Last Updated" date at the top of this document.

14.4 The current version of this Privacy Policy is always the version published at bc999.site/privacy-policy. We recommend reviewing this page periodically, particularly before making any significant account activity such as large deposits or withdrawal requests.

15.1 For all privacy-related queries, data rights requests, or concerns about how bc999 handles your personal data, contact us through:

• Live Chat: Available 24/7 on bc999.site — mark your query "Privacy Request" for routing to our Data Protection team;
• Email: [email protected] — use subject line "Privacy Policy — [Your Request Type]";
• Response Time: bc999 will acknowledge all privacy requests within 48 hours and provide a substantive response within 30 days.

15.2 If you are dissatisfied with bc999's handling of your personal data or privacy rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing bc999's gaming licence.

15.3 bc999 takes all privacy complaints seriously and will investigate all concerns thoroughly. We commit to responding in good faith and resolving legitimate privacy concerns promptly. Urdu-language support is available through our Live Chat channel for all privacy matters.