999bd Privacy Policy — How We Handle Your Personal Data

This Privacy Policy explains how 999bd ("we", "us", "our", "Platform") — the online gaming platform operating at https://999bd.life — collects, uses, stores and protects the personal information of players who register and use our services from Pakistan. The policy applies to all activity on the platform, whether accessed via a desktop browser, mobile browser or any official 999bd application.

At 999bd, we recognise that handing over personal information requires trust — especially when financial transactions are involved. That trust is not something we take lightly. This document is written to be genuinely readable, not to confuse you with layers of legal language. If anything here is unclear, please reach out to our support team before providing any information.

By registering a 999bd account, making a deposit or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described. This policy is part of our broader Terms and Conditions, which govern the overall relationship between you and 999bd.

999bd collects personal data in three ways: information you provide directly during registration and use, information collected automatically as you use the platform and information received from third-party service providers such as payment processors. Below is a full breakdown.

We do not collect sensitive categories of personal data such as biometric identifiers, religious beliefs, ethnicity or health information. Where CNIC verification is required, we use the documents solely to confirm your identity and age and do not use them for any other purpose. Images submitted for identity verification are stored securely and are not shared with any party other than our KYC compliance partner.

999bd processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the services you have registered for — account operation, game provision, payment processing.
• Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering obligations and record-keeping requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security and ensuring fair play — where these interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit opt-in consent. Consent may be withdrawn at any time.

999bd does not sell, rent or trade your personal information to any third party. We share your data only with parties that are directly necessary to provide the 999bd service, and only to the extent required for that specific purpose. The categories of recipients are:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, banking partners and card payment gateways receive the financial data necessary to process your deposits and withdrawals. These parties operate under their own privacy frameworks and are bound by financial data security standards.
• Game Software Providers: The providers of specific games (such as Spribe, Pragmatic Play, Evolution and others) may receive a session token and anonymised player identifier to deliver game content. They do not receive your full personal profile.
• Identity Verification Partners: Where CNIC verification or liveness checks are required, a licensed KYC compliance partner processes the submitted documents. All KYC partners are contractually bound to strict data handling standards and cannot use your documents for any purpose other than identity verification on 999bd's behalf.
• Customer Support Infrastructure: Our live chat and ticketing system provider processes support interaction data in order to deliver support services.
• Analytics (Anonymised Only): Aggregated, anonymised usage statistics may be processed by platform analytics tools. No personally identifiable data is shared in this context.
• Law Enforcement and Regulators: Where 999bd receives a lawful request from a Pakistani court, law enforcement agency or regulatory body, we will disclose the minimum data necessary to comply with that specific legal obligation.

Data security is built into the 999bd platform at every layer. The following technical and organisational measures are in place to protect your personal information:

• TLS Encryption in Transit: All communications between your browser or app and 999bd servers are encrypted using TLS 1.2 or higher, ensuring data cannot be intercepted in transit.
• AES-256 Encryption at Rest: Sensitive stored data — including payment method identifiers and identity documents — is encrypted at rest using AES-256 industry-standard encryption.
• Access Controls: Personal data is accessible only to 999bd staff and authorised systems that have a direct need to process it. Role-based access controls are applied throughout the internal infrastructure.
• Two-Factor Authentication: Players are strongly encouraged — and in some cases required — to enable 2FA on their 999bd accounts to prevent unauthorised access.
• Fraud Detection Systems: Automated systems monitor login patterns, transaction behaviour and session activity to detect and flag suspicious behaviour in real time.
• Regular Security Reviews: The 999bd platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While we take every reasonable precaution, no digital system is completely immune to risk. In the unlikely event of a data breach that affects your personal information, 999bd will notify affected players promptly and take all appropriate remediation steps.

999bd retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The general retention schedule is:

• Active account data (name, contact details, gaming history): Retained for the duration of the account being open plus 5 years after account closure.
• Financial transaction records (deposit and withdrawal history): Retained for 7 years to comply with financial record-keeping requirements.
• Identity verification documents (CNIC images, selfies): Retained for the duration of the account plus 5 years after account closure, or for the period required by any applicable legal obligation.
• Support interaction records (chat logs, emails): Retained for 2 years from the date of the interaction.
• Marketing preference records: Retained for 2 years from the date of the last interaction, or until you withdraw consent — whichever comes first.
• Technical/log data (IP addresses, device info): Retained for 12 months from the date of collection.

When data reaches the end of its retention period, it is securely deleted or anonymised so it can no longer be linked back to you as an individual. You may request earlier deletion of your data subject to the exceptions described in Section 8 of this policy.

As a 999bd player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@999bd.life with the subject line "Privacy Request". We will respond within 30 days.

Where you have given consent for a specific processing activity (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of consent does not affect 999bd's ability to process data on other legal bases.

999bd uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how the site is used. Here is what you need to know about how cookies work on 999bd:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking essential cookies will affect the ability of the 999bd platform to function correctly — you may not be able to log in or process payments if essential cookies are disabled. Blocking analytics or marketing cookies will not affect your ability to play games or withdraw winnings.

999bd does not use cookies to collect personal information beyond what is described above. Cookie data is not combined with your personal profile in any way that would allow marketing profiling without your explicit consent.

999bd is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. All registration processes include a date-of-birth declaration, and identity verification checks are in place to confirm player age. If we discover that a minor has created a 999bd account, we will immediately close the account, delete all associated personal data and return any real-money balance to the payment method used for deposit.

If you are a parent or guardian and believe a minor has registered on 999bd, please contact us immediately at support@999bd.life. We take underage access extremely seriously and will act on any such report as a priority.

999bd will only send you marketing communications — promotional offers, bonus notifications, game release announcements, platform updates — if you have explicitly opted in to receive them during registration or in your account settings. We use the following channels for marketing:

• SMS to your registered Pakistani mobile number
• Email to your registered email address
• Push notifications via the 999bd app (if installed and enabled)
• In-platform notifications when you are logged in

You can opt out of marketing communications at any time by:

1. Clicking the unsubscribe link in any marketing email
2. Replying STOP to any marketing SMS
3. Updating your communication preferences in the Account Settings section of your 999bd dashboard
4. Contacting support at support@999bd.life with the subject "Unsubscribe"

Opting out of marketing does not affect your ability to receive transactional messages such as deposit confirmations, withdrawal notifications, security alerts or support responses. These operational communications will continue as long as you hold an active 999bd account.

999bd may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable legal requirements or improvements to the way we communicate our data practices. When we make a material change to this policy, we will notify registered players by email or via an in-platform notification at least 7 days before the change takes effect.

The most current version of this policy is always available at https://999bd.life/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Where a change requires your renewed consent — for example, a new use of your data for a purpose not covered by the current policy — we will seek that consent separately and will not proceed until it has been given.

Your continued use of 999bd after the effective date of any material change constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a privacy concern, please get in touch with the 999bd team through the following channels:

• Email: support@999bd.life — use subject line "Privacy Request" for data rights queries
• Live Chat: Available 24/7 inside your 999bd account dashboard
• In-Platform Support: Access the Help menu from any page after logging in

For data access, correction, deletion or portability requests, we aim to acknowledge receipt within 3 business days and to fully respond within 30 days. For complex requests, we may need up to 60 days — if this applies, we will notify you of the extension within the initial 30-day window.

For responsible gaming support and self-exclusion requests, please visit our dedicated Responsible Gaming page. For general platform questions, our FAQ page covers the most common queries from Pakistani players.