bi999 Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") sets out how bi999 (hereinafter referred to as "bi999", "we", "us" or "the Platform") collects, processes, stores, uses, shares and protects the personal data of individuals (hereinafter referred to as "User", "you" or "Data Subject") who access or register with the bi999 online platform at https://bi999.cam.

bi999 is committed to handling personal data responsibly and transparently. This Policy is intended to give you a clear, complete picture of our data practices — written in accessible language, not just technical compliance language. We believe you have a right to understand what happens to your information, and we aim to make that as easy as possible.

By accessing the bi999 platform, creating an Account or otherwise providing us with personal information, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the bi999 Terms & Conditions.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:

• "Account" — the registered user account maintained by a Player on the bi999 platform.
• "Cookies" — small data files placed on your device by the bi999 platform for session, preference and analytics purposes.
• "Data Controller" — bi999, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" — any third party that processes personal data on behalf of bi999 under contractual instruction (e.g., payment processors, identity verification providers).
• "KYC" — Know Your Customer; the identity and age-verification process required by the operator for compliance and fraud-prevention purposes.
• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, device identifiers and payment details.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, deletion or transfer.
• "Sensitive Data" — a subset of personal data that warrants enhanced protection, including identity documents (such as CNIC or passport details) and financial account information.

3 Data We Collect

bi999 collects the following categories of personal data in the course of operating the platform:

bi999 does not intentionally collect special-category sensitive personal data (such as racial or ethnic origin, health data, religious beliefs or biometric data for identification purposes) beyond what may be incidentally visible in submitted identity documents. Where identity documents contain such information, it is used only for identity and age verification and is not separately stored or processed for any other purpose.

4 How Data is Collected

bi999 collects personal data through the following mechanisms:

4.1 Direct Collection

Data you provide directly during account registration, KYC submission, deposit and withdrawal processes, contact form submissions, live chat interactions and any other direct interaction with the platform or its support team.

4.2 Automated Technical Collection

Data collected automatically as you interact with the platform, including server logs (IP address, access timestamps), browser and device information, session activity and cookie-based data. This data is collected automatically to maintain platform security, detect unusual access patterns and ensure the integrity of each session.

4.3 Third-Party Sources

In certain circumstances, bi999 may receive data about you from authorised third-party service providers — for example, identity verification partners who confirm the authenticity of submitted documents, or payment processors who confirm transaction status. Data received from third parties is used only for its stated purpose and is not used to build additional profiles.

5 Legal Basis for Processing

bi999 processes personal data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform the bi999 Terms & Conditions — including account operation, payment processing and support — is necessary for the performance of our contract with you.
• Legal Obligation: Certain processing activities — particularly KYC, age verification and AML controls — are carried out to fulfil legal obligations imposed on the operator by its applicable license jurisdiction.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gambling monitoring and platform analytics is carried out on the basis of bi999's legitimate interests in operating a secure and compliant gaming environment, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications is carried out on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 How We Use Your Data

Personal data collected by bi999 is used for the following purposes:

• Creating, maintaining and securing your bi999 Account.
• Verifying your identity and age as required under the operator's KYC obligations.
• Processing deposits, withdrawals and other financial transactions associated with your Account.
• Detecting, investigating and preventing fraudulent activity, money laundering, multi-accounting and other prohibited conduct.
• Monitoring gameplay patterns and account activity in connection with responsible gambling obligations — including identifying behaviour that may indicate problem gambling and enabling appropriate interventions where required.
• Providing customer support, including responding to queries, resolving disputes and handling complaints.
• Sending transactional communications — such as deposit confirmations, withdrawal notifications and security alerts — that are necessary for account management. These are not marketing messages and are sent regardless of marketing opt-out status.
• Sending promotional communications — where you have provided explicit consent to receive marketing messages about offers, bonuses and platform updates.
• Analysing aggregated, anonymised usage data to improve platform performance, user experience and product development.
• Meeting legal, regulatory and compliance obligations as required by the operator's license jurisdiction.

7 Data Sharing & Disclosure

bi999 does not sell, rent or trade your personal data to any third party for commercial purposes. Your data may be shared with the following categories of recipient only in the circumstances described:

7.1 Payment Service Providers

Financial transaction data is shared with payment processors, mobile wallet operators and banking partners as necessary to process your deposits and withdrawals. For Pakistani users, this may include intermediary references to mobile payment channels such as Easypaisa, JazzCash, Raast or bank transfer channels at institutions such as HBL, UBL, Meezan Bank and Bank Alfalah. Data shared with payment processors is used solely for transaction processing and does not imply that any listed institution endorses or is affiliated with bi999.

7.2 Identity Verification Providers

KYC document data — including CNIC or passport information and liveness check results — is shared with authorised third-party identity verification partners engaged by the operator. These partners act as data processors under contractual obligations that restrict their use of your data to the identity verification function only.

7.3 Regulatory and Legal Authorities

bi999 may be required to disclose personal data to regulators, law enforcement agencies, courts or other governmental authorities in response to lawful requests, court orders or legal proceedings. Such disclosures are limited to the minimum data required to satisfy the legal obligation.

7.4 Corporate Transactions

In the event of a merger, acquisition, reorganisation or sale of assets involving bi999, personal data may be transferred as part of that transaction. Users will be notified of any such transfer and of any material changes to how their data is processed as a result.

8 Third-Party Services

The bi999 platform may integrate with third-party service providers — including game studios, live dealer content providers, analytics tools and infrastructure partners. These providers may process limited technical and usage data as part of delivering their services within the platform. All such providers are required to maintain adequate data protection standards as a condition of their engagement.

bi999 is not responsible for the privacy practices of third-party websites or services that are not part of the bi999 platform. This Policy does not govern data processing by third-party sites, and users are encouraged to review the privacy policies of any external services they use independently of bi999.

9 Cookies & Tracking Technologies

bi999 uses cookies and similar tracking technologies — including session tokens, local storage and analytics scripts — to operate the platform. The categories of cookies used are described below:

bi999 does not use third-party advertising cookies or cross-site tracking pixels to serve targeted advertising based on your browsing activity outside the bi999 platform.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent account access.

10 Data Retention

bi999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the full duration of your Account's active status and for a period following closure as required by the operator's license conditions (typically a minimum of five years for AML compliance purposes).
• KYC and Identity Documents: Retained for the period required by applicable AML and regulatory obligations in the license jurisdiction, typically five years from the date of submission or account closure, whichever is later.
• Transaction Records: Financial records are retained for the minimum period required by the applicable license jurisdiction for regulatory and audit purposes.
• Support and Communications Data: Retained for a reasonable period following resolution of the relevant interaction, typically not exceeding three years unless relevant to an ongoing dispute or investigation.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is suppressed (retained as a record of opt-out rather than deleted, to prevent future unsolicited contact).

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bi999's internal data disposal procedures.

11 Data Security

bi999 applies a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and the bi999 platform.
• Encrypted storage of sensitive personal data and identity documents at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security assessments and monitoring for unusual access patterns or data incidents.
• Secure disposal procedures for data that has passed its retention period.

While bi999 takes reasonable and appropriate steps to protect personal data, no internet-based platform can guarantee absolute security. Users are encouraged to take their own precautions — including using strong, unique passwords and keeping account credentials confidential. You must notify bi999 support immediately if you suspect unauthorised access to your Account.

12 Your Rights

Depending on your location and the applicable data-protection framework, you may hold some or all of the following rights in relation to personal data bi999 holds about you. Requests to exercise any of these rights should be submitted to the bi999 support team via live chat or at the email address listed in Section 16.

bi999 will respond to all verifiable data rights requests within a reasonable timeframe — typically within 30 days of receipt. Requests may require identity verification before they can be actioned.

13 Minors & Age Policy

bi999 does not knowingly collect personal data from individuals under the age of 18 — or the higher minimum age required by the operator's applicable license jurisdiction. The platform is strictly an adults-only service.

Age verification is a mandatory component of the KYC process applied to all accounts. Where bi999 discovers — through KYC review or other means — that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be immediately closed, all associated data will be handled in accordance with applicable legal requirements, and any balance may be returned to the deposit source (net of any bonuses) subject to verification.

Parents and guardians who believe a minor may have created an account on bi999 should contact support immediately via live chat or the email address in Section 16.

14 International Data Transfers

As an online platform serving users across multiple regions, bi999 may transfer personal data to, or process it in, countries other than the country in which you reside. This may include transfers to the jurisdiction in which the operator's license is held and countries where third-party service providers (such as identity verification or payment processing partners) are located.

Where such transfers involve personal data of users from jurisdictions with specific transfer restrictions, bi999 applies appropriate safeguards — such as contractual data-protection clauses or equivalent protections — to ensure that your data continues to be handled in accordance with the standards described in this Policy regardless of where it is processed.

15 Changes to This Policy

bi999 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law or regulatory requirements. Where material changes are made, bi999 will endeavour to notify registered users via a platform notification or an email to the registered address.

The "Last Updated" date displayed at the top of this page will be revised with each update. We encourage you to review this page periodically. Continued use of the platform following publication of an updated Policy constitutes acceptance of the revised terms.

16 Contact Us

For any questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact the bi999 team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week within the bi999 platform. This is the fastest route for account-level privacy queries.
• Email: [email protected] — for formal written privacy requests, data-subject access requests and erasure requests. Please include your registered username and a clear description of your request. Support is available in English and Urdu.

We aim to respond to all privacy-related requests within 30 calendar days of receipt. Complex requests may take longer, in which case we will acknowledge receipt and provide a revised timeline.