bk999 Privacy Policy

bk999 ("bk999," "we," "us," or "the Platform") is committed to protecting the privacy and personal data of all individuals who use our online gaming platform at bk999.lol, including registered players, visitors who browse without registering, and individuals who contact our support team ("you" or "the Data Subject").

This Privacy Policy explains the types of personal data bk999 collects, the purposes for which it is processed, the legal bases that authorise that processing, how long we retain data, who we share it with, the international transfer safeguards we apply, and the rights available to you in respect of your personal data.

bk999 operates under an international gaming license that imposes mandatory data protection, Know Your Customer (KYC), and Anti-Money Laundering (AML) obligations. Some data collection and processing described in this Policy is carried out to fulfil these regulatory obligations, not merely for operational convenience.

For the purposes of applicable data protection law, the Data Controller responsible for the personal data of bk999 players and visitors is the bk999 entity holding the international gaming license under which the platform operates.

As a platform built specifically for and directed at Pakistani players, bk999 takes Pakistani player data rights seriously and applies internationally recognised data protection principles — including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality — regardless of the specific national legal framework that applies in any given context.

For all data protection enquiries, rights requests, and complaints, contact details are provided in Section 15 of this Policy.

bk999 collects personal data in the following categories, depending on your relationship with the platform:

bk999 does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data unless this is explicitly required by regulatory obligation and disclosed to you at the point of collection.

bk999 collects personal data through the following channels and mechanisms:

• Direct provision: When you register a bk999 account, complete KYC verification, submit a deposit or withdrawal request, contact bk999 support, or respond to a survey or promotion;
• Automated technical collection: When you access bk999.lol, our servers automatically log your IP address, browser information, device identifiers, session duration, pages visited, and referral source;
• Payment processors: When you transact via JazzCash, EasyPaisa, or other payment providers, those providers transmit transaction confirmation data to bk999 sufficient for us to credit your PKR wallet and reconcile accounts;
• Third-party identity verification services: Where bk999 uses automated CNIC verification tools to confirm identity data submitted during KYC, those tools may return data matching or discrepancy reports;
• Gaming software providers: Game round results, session durations, and RTP data are transmitted to bk999 by the third-party game providers whose software runs within the bk999 platform;
• Cookies and similar technologies: As described in Section 10 of this Policy.

bk999 processes your personal data for the following defined and specific purposes only:

• Account management: Creating, maintaining, and securing your bk999 player account;
• Identity and age verification: Confirming that you are aged 21 or over and that you are who you say you are — a legal obligation under our gaming license;
• Anti-Money Laundering (AML) compliance: Monitoring transactions and activity patterns for indicators of money laundering, fraud, or terrorist financing, as required by our international gaming license;
• Payment processing: Crediting deposits and processing withdrawal requests to your verified JazzCash, EasyPaisa, or bank account in PKR;
• Gaming delivery: Providing access to bk999 sports betting, live casino, slot, jackpot, and bingo products and recording game outcomes in your account;
• Responsible gaming: Monitoring gaming behaviour for signs of problem gambling and applying player-requested or operator-initiated account controls including deposit limits, session timers, and self-exclusion;
• Customer support: Responding to your queries, complaints, disputes, and technical issues through live chat, email, or phone in Urdu and English;
• Fraud prevention and security: Detecting and preventing account compromise, bonus abuse, multi-accounting, payment fraud, and other prohibited conduct;
• Marketing communications: Sending promotional materials and bonus offers to opted-in players — including PSL betting promotions, casino bonuses, and jackpot alerts — via your registered contact details;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

Each processing activity at bk999 rests on one of the following recognised legal bases:

• Contractual necessity: Processing required to deliver the bk999 gaming services you have contracted for — including account creation, game delivery, deposit and withdrawal processing;
• Legal obligation: Processing required to comply with gaming license requirements, KYC/AML regulations, and any applicable data retention obligations imposed by regulatory authorities;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform abuse detection, and aggregated analytics — where bk999's legitimate interests do not override your rights and freedoms;
• Consent: Processing for direct marketing communications, optional cookies beyond strictly necessary categories, and any other processing activities where consent is the most appropriate legal basis. You may withdraw consent for marketing at any time via your bk999 account settings or by contacting support.

bk999 does not sell your personal data to third parties. We share personal data with external parties only in the following specific circumstances and only to the extent necessary for the stated purpose:

• Payment providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and GrabPay receive transaction-level data necessary to process your deposits and withdrawals in PKR;
• Identity verification services: Third-party KYC providers receive identity documents and data for CNIC verification purposes under our gaming license obligations;
• Game software providers: Game studios and live casino operators receive session-level game data necessary to deliver certified gaming outcomes to your account;
• Gaming licensing authority: Our international gaming license regulator may request player data as part of regulatory oversight, audit, or investigation;
• Fraud prevention services: Shared fraud intelligence networks may receive anonymised or pseudonymised indicators of fraudulent behaviour to protect the broader ecosystem;
• Legal and law enforcement: bk999 will disclose personal data to law enforcement agencies, financial intelligence authorities, or courts when required by legally valid order, subpoena, or regulatory demand.

All third parties with whom bk999 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

bk999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by the applicable regulatory framework. The following retention guidelines apply:

• Account and KYC data: Retained for the full duration of your bk999 account lifecycle plus a minimum of 5 years following permanent account closure. This retention is required by gaming license AML obligations;
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with anti-money laundering regulations;
• Gaming activity records: Retained for 3 years from the date of activity, with summarised statistical records retained for longer periods for regulatory audit purposes;
• Customer support communications: Retained for 2 years from the date of the interaction, or longer if the communication relates to an unresolved dispute;
• Marketing consent records: Retained for the duration of the marketing relationship plus 1 year after consent withdrawal, as evidence of the lawfulness of any communications sent during the consent period;
• Technical log data: Retained for 12 months from collection, or longer if associated with a security incident under investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

bk999 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security measures include:

• Encryption in transit: All data transmitted between your device and bk999 servers is encrypted using TLS 1.3 with 256-bit SSL certificates — the same standard used by major international banks;
• Encryption at rest: Personal data stored in bk999 databases, including CNIC documents and financial data, is encrypted using industry-standard AES-256 encryption;
• Access controls: Access to personal data within bk999 is restricted on a strict need-to-know basis. Staff who do not require access to specific data categories for their role do not have that access;
• Two-factor authentication: Optional SMS-based two-factor authentication is available to all bk999 players for additional account protection;
• Security monitoring: bk999 operates continuous automated monitoring of platform infrastructure for intrusion attempts, anomalous access patterns, and data exfiltration indicators;
• Penetration testing: bk999 platforms undergo periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

bk999 uses cookies and similar browser-based technologies on bk999.lol to enable core platform functionality, improve user experience, and — where you have provided consent — to deliver targeted communications.

Categories of cookies used by bk999:

• Strictly necessary cookies: Required for the platform to function — including session authentication tokens that keep you logged in during your bk999 session, CSRF protection tokens, and load balancing cookies. These do not require your consent and cannot be disabled without breaking platform functionality;
• Functional cookies: Remember your preferences including language selection (Urdu / English), preferred bk999 lobby section, and display settings. These require consent and are enabled by default only where you have accepted functional cookies;
• Analytics cookies: Used to collect anonymised data about how players use bk999.lol — which pages are visited most, where sessions begin and end, and which game categories receive most traffic. This data is aggregated and not linked back to individual identities;
• Marketing cookies: Used to track which bk999 promotional offers a player has seen and whether they have converted, enabling bk999 to send more relevant bonus communications. These require your explicit consent.

You can manage your cookie preferences at any time through the bk999 Cookie Settings panel accessible from the footer of bk999.lol. Note that refusing strictly necessary cookies will prevent the bk999 platform from operating correctly in your browser.

bk999 does not knowingly collect personal data from individuals under the age of 21. All bk999 gaming products — including sports betting, live casino, slot games, jackpots, and bingo — are strictly restricted to players who are 21 years of age or older.

If bk999 becomes aware or has reasonable grounds to suspect that personal data belonging to an individual under 21 has been collected — whether through age misrepresentation at registration, third-party report, or data review — the following steps will be taken:

• The relevant bk999 account will be suspended immediately pending investigation;
• Any gaming winnings accumulated during the period of underage use will be forfeited;
• The personal data of the minor will be deleted from bk999 systems as soon as practically possible following the conclusion of any regulatory reporting obligations;
• Where legally required, the incident will be reported to the relevant gaming licensing authority.

As a bk999 player or visitor, you hold a number of rights in respect of your personal data. bk999 is committed to honouring these rights within the legally prescribed timeframes. To exercise any of these rights, contact bk999's data privacy team at [email protected] with the subject line "Privacy Rights Request" and your registered mobile number for identity verification.

As an online gaming platform operating under an international gaming license, bk999 may transfer personal data across international borders — for example, to KYC verification providers, game software servers, or licensing authority infrastructure located outside Pakistan.

Where personal data is transferred internationally, bk999 ensures that such transfers are subject to appropriate safeguards to maintain the protection of your data, including:

• Standard contractual clauses or equivalent mechanisms approved by the relevant data protection authority;
• Contractual requirements that the recipient applies information security standards equivalent to those maintained by bk999;
• Transfer to jurisdictions that offer adequate data protection frameworks under internationally recognised standards.

You may request information about the specific safeguards applied to any particular international transfer involving your data by contacting bk999's data privacy team.

bk999 reviews and updates this Privacy Policy periodically to reflect changes in our data processing activities, applicable regulatory requirements, or platform capabilities. The "Last Updated" date at the top of this Policy indicates when the most recent review took place.

Where changes to this Policy are material — meaning they affect the nature of data collected, the purposes for which it is processed, or the rights available to you — bk999 will notify registered players via their contact details on file not less than 14 days before the changes take effect. For minor non-material updates, the revised Policy will be published on bk999.lol without advance individual notification.

Continued use of bk999 following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. The current version of this Policy is always the version published at bk999.lol/privacy-policy.

For all privacy-related matters — including data access requests, correction requests, erasure requests, marketing opt-outs, cookie consent withdrawals, or complaints about how bk999 has handled your personal data — please contact us through the following channels:

• Email: [email protected] (subject line: "Privacy Rights Request" for data rights; "Privacy Complaint" for complaints)
• Live Chat: Available 24/7 in Urdu and English — identify the query as a privacy matter and our team will route it appropriately
• Response timeframe: Privacy rights requests are acknowledged within 5 business days and substantively responded to within 30 calendar days of receipt of a verified request

If you believe bk999 has not adequately addressed your privacy concern following a formal complaint, you have the right to escalate to the data protection supervisory authority applicable in the relevant jurisdiction, or to the bk999 licensing authority's player protection division.