bg999 Privacy Policy — Your Data, Your Rights

1 Who We Are and How to Contact Us

1.1 — This Privacy Policy is published by bg999 ("the Operator", "we", "us", "our"), the entity that owns and operates the online gaming platform accessible at bg999.bio, including all associated services, games, and features offered through the platform.

1.2 — bg999 operates under an internationally recognised gaming license, which imposes mandatory data protection, identity verification, and record-keeping obligations on the Operator. This Privacy Policy is designed to satisfy and exceed those obligations.

1.3 — If you have any questions, concerns, or requests relating to your personal data and how bg999 handles it, you may contact the bg999 Data Protection team through the 24/7 live chat support channel available on the platform. All privacy-related enquiries are handled by our compliance personnel and will receive a substantive response within fourteen (14) days of receipt.

2 Data We Collect and the Legal Basis for Collection

2.1 — bg999 collects personal data under the following legal bases: (a) performance of a contract — data required to create and operate your gaming account; (b) legal obligation — data required by our gaming license KYC and anti-money laundering (AML) requirements; (c) legitimate interests — data used to protect the platform from fraud, abuse, and security threats; and (d) consent — data used for optional marketing communications, where you have explicitly opted in.

2.2 — Registration Data. When you create a bg999 account, we collect: your full legal name, date of birth, residential address within Pakistan, registered mobile number, and a username of your choosing. This data is required to establish your account and is held for the duration of the account lifecycle.

2.3 — Identity Verification Data. To comply with our licensing KYC obligations, bg999 may collect a copy of a government-issued photo identification document — typically a Pakistani CNIC — along with a confirmation that the registered mobile number is held in your legal name. This data is stored securely in an encrypted document management system accessible only to authorised compliance personnel.

2.4 — Transaction Data. bg999 records the details of every financial transaction conducted on the platform, including deposits, withdrawals, wagers placed, winnings credited, and bonus amounts. Transaction data includes timestamps, amounts in PKR, payment method identifiers (e.g. JazzCash account reference), and game or market identifiers.

2.5 — Device and Technical Data. bg999 automatically collects certain technical information when you access the platform, including: IP address, device type, operating system, browser type and version, session start and end times, and pages or game sections accessed during each session. This data is collected via server logs and is used to maintain platform security and diagnose technical issues.

2.6 — Communications Data. If you contact bg999 support via live chat, or if you respond to an SMS notification or promotional communication, we retain a record of that communication for quality assurance, dispute resolution, and compliance purposes.

3 How We Use Your Personal Data

bg999 uses collected personal data strictly for the following purposes:

• To create, maintain, and operate your bg999 gaming account and provide access to all platform features.
• To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency, and to process withdrawal requests to your verified payment method.
• To verify your identity (KYC) in compliance with the requirements of bg999's international gaming license and applicable AML regulations.
• To settle wagers, allocate bonuses, process promotions, and maintain an accurate record of your gaming activity and account balance.
• To detect, investigate, and prevent fraud, account abuse, multi-accounting, money laundering, and any other activity that violates these Terms or applicable law.
• To send you transactional communications via SMS — including deposit confirmations, withdrawal notifications, OTP codes, and account security alerts. These communications are not optional as they form part of the account service.
• To send you optional promotional communications about bg999 bonuses, new games, and special offers — but only where you have opted in to receiving such communications. You may opt out at any time by contacting bg999 support.
• To comply with any legal obligation to which bg999 is subject, including requests from regulatory or law enforcement authorities made in accordance with applicable law.

bg999 does not use automated decision-making or profiling in a manner that produces legal effects for players or similarly significantly affects them, without human review being available upon request.

4 Cookies and Tracking Technologies

4.1 — bg999 uses cookies and similar tracking technologies on the bg999.bio website to provide a functional, personalised, and secure gaming experience. Cookies are small data files stored on your device by your browser when you visit the platform.

4.2 — bg999 uses the following categories of cookies:

• Strictly Necessary — Required for core platform functionality, including maintaining your logged-in session, remembering your account preferences, and enabling secure payment flows. These cannot be disabled without affecting platform functionality.
• Functional — Used to remember your language preferences, display settings, and game history within a session. These enhance your experience but are not essential.
• Analytical — Used to understand how players interact with the bg999 platform, which pages or games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players.
• Security — Used to detect and prevent fraudulent login attempts, bot activity, and suspicious behaviour on the platform.

4.3 — You may adjust your browser settings to refuse or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging in to your bg999 account and using core platform features. bg999 does not place third-party advertising cookies on the platform.

5 Payment Data and Financial Information

5.1 — bg999 processes all deposits and withdrawals in Pakistani Rupees (PKR) through third-party payment providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency networks. bg999 does not store full bank account numbers, card numbers, or mobile wallet PINs on its own servers.

5.2 — When you initiate a JazzCash or EasyPaisa deposit, the transaction is processed directly by the respective mobile financial service provider. bg999 receives only a transaction reference number and confirmation of the PKR amount deposited — sufficient to credit your bg999 wallet without bg999 holding the underlying payment credentials.

5.3 — bg999 retains records of all transaction amounts, dates, times, and payment method identifiers for a minimum period of five (5) years in compliance with anti-money laundering record-keeping requirements applicable to licensed gaming operators.

6 Sharing Your Data with Third Parties

6.1 — bg999 does not sell, rent, or disclose your personal data to third parties for commercial purposes. Personal data may be shared with the following categories of third parties only to the extent strictly necessary:

• Payment Processors: JazzCash, EasyPaisa, and banking partners receive transaction data necessary to process your deposits and withdrawals. Each processor operates under its own data protection obligations.
• Game Content Providers: bg999 integrates games from licensed third-party providers. These providers may receive session data (player ID, game session duration, wager amounts) to facilitate game operation. They do not receive your name, contact details, or identity documents.
• KYC Verification Services: bg999 may use a licensed third-party identity verification service to assist with document authentication. Such services receive only the information required to verify the specific document submitted and are bound by strict data processing agreements.
• Regulatory and Law Enforcement Authorities: bg999 may disclose personal data to governmental, regulatory, or law enforcement agencies where required to do so by applicable law, court order, or formal regulatory request. bg999 will notify the affected player of such a disclosure where legally permitted to do so.
• Fraud Prevention and Security Partners: bg999 may share technical data (IP addresses, device identifiers, session logs) with fraud prevention services to identify and block fraudulent activity on the platform.

6.2 — All third parties with whom bg999 shares personal data are required to maintain appropriate technical and organisational security measures and to process the data only for the purpose for which it was shared.

7 International Data Transfers

7.1 — bg999 is operated under an international gaming license, and some of the platform's technical infrastructure and third-party service providers may be located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent standard of data protection, bg999 implements contractual safeguards — such as standard data protection clauses — to ensure that your personal data receives a level of protection consistent with internationally recognised privacy standards.

7.2 — By registering a bg999 account, you acknowledge and consent to the transfer of your personal data to the server infrastructure and service providers necessary to operate the platform, which may be located in jurisdictions outside Pakistan.

8 Your Rights as a Data Subject

As a registered bg999 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact bg999 support via 24/7 live chat. All verified requests will be actioned within thirty (30) days.

bg999 may be required to retain certain personal data — particularly transaction records and KYC documents — for a minimum period prescribed by our gaming license and applicable AML regulations, notwithstanding a deletion request. Where this is the case, we will inform you of the specific retention obligation that prevents immediate deletion.

9 Data Retention Periods

9.1 — bg999 retains different categories of personal data for different periods, based on the legal and operational requirements applicable to each data type:

• Account Registration Data: Retained for the duration of account activity, plus a minimum of five (5) years following account closure, to satisfy AML record-keeping obligations.
• KYC Documents (CNIC and equivalent): Retained for a minimum of five (5) years from the date of submission, in compliance with licensing requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Communications Data (support chat transcripts, SMS logs): Retained for two (2) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Device and Technical Logs: Retained for twelve (12) months from the date of generation, unless a security investigation requires extended retention.

9.2 — Following the expiry of applicable retention periods, personal data is securely and irreversibly deleted or anonymised in accordance with bg999's internal data lifecycle management procedures.

10 Children and Minors

10.1 — The bg999 platform is strictly for individuals who are twenty-one (21) years of age or older. bg999 does not knowingly collect personal data from any individual under the age of twenty-one (21).

10.2 — In the event that bg999 determines, following KYC verification or any other means, that a registered account is held by a person under the age of twenty-one (21), bg999 will immediately close the account, void all associated wagers, and return deposited funds to the original payment method. All personal data collected during the minor's interaction with the platform will be deleted within thirty (30) days of the account closure.

10.3 — If you are a parent or guardian and believe that a minor has accessed or registered on the bg999 platform, please contact bg999 support immediately via live chat so that appropriate action can be taken without delay.

11 Security Measures

11.1 — bg999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between the player's device and bg999 servers.
• Encryption of sensitive data at rest, including identity documents and payment reference data stored in bg999 databases.
• Strict access controls and role-based permissions ensuring that only authorised bg999 personnel — and only those whose job function requires it — can access any category of personal data.
• Automated intrusion detection and real-time security monitoring of all platform infrastructure.
• Regular penetration testing and security audits conducted by independent security specialists.
• Account-level security features available to players, including login notifications and session management.

11.2 — Despite these measures, no data transmission over the internet or electronic storage system is guaranteed to be one hundred percent secure. In the event of a data breach that poses a risk to player rights and interests, bg999 will notify affected players and the relevant regulatory authority within the timeframe required by applicable law.

12 Amendments to This Privacy Policy

12.1 — bg999 may update this Privacy Policy from time to time to reflect changes in applicable law, our licensing obligations, the data we collect, or the ways in which we process it. Material changes to this policy will be communicated to registered players via SMS notification or a prominent notice displayed on the bg999 platform at least seven (7) days prior to the change taking effect.

12.2 — The "Last Updated" date at the top of this document indicates when the current version of the Privacy Policy became effective. Continued use of the bg999 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with any material change, you may close your account and withdraw your remaining balance before the change takes effect.

12.3 — All previous versions of the bg999 Privacy Policy are archived and available upon request from the bg999 compliance team.