This Privacy Policy explains how bd999 collects, uses, stores, and protects the personal information of players on the bd999 platform. We take data privacy seriously — your information is used exclusively to operate and improve your bd999 experience, never sold to third parties.
Six core commitments that shape every data-handling decision made across the bd999 platform.
All personal data transmitted to and from bd999 is protected by TLS 1.3 encryption. Stored data is secured using AES-256 encryption at rest. Your credentials and payment details are never stored in plain text on any bd999 system.
bd999 collects only the personal data necessary for account operation, identity verification, and regulatory compliance. Data collection beyond these purposes requires your explicit consent, which you may withdraw at any time.
bd999 does not sell, rent, or commercially share your personal data with third parties for marketing or advertising purposes — ever. Data shared with service providers is governed by strict contractual data-processing agreements.
As a bd999 player, you have the right to access, correct, export, and request deletion of your personal data, subject to legal retention requirements. All data rights requests are handled within 30 calendar days.
bd999 retains player data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory and anti-money laundering obligations. Data is securely deleted or anonymised at expiry.
bd999's data practices are designed to comply with applicable international data protection standards and the requirements of its gaming license authority. Our data processing is subject to independent oversight review.
bd999 ("we," "us," "our," or "bd999") is committed to protecting the privacy and personal data of all individuals who use the bd999 platform at bd999.games ("Platform"). This Privacy Policy sets out in plain, legal-grade terms how bd999 collects personal data from registered players and website visitors, the purposes for which that data is used, the conditions under which it may be shared with third parties, and the rights available to you as a data subject.
This Policy applies to all players registered on bd999, including those based in Pakistan accessing the Platform through desktop browsers, mobile browsers, or the bd999 native application. By registering an account on bd999 or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
Summary: bd999 collects your data to run your account, process payments in PKR, verify your identity, prevent fraud, comply with gaming license obligations, and — where you have consented — to send relevant promotions. We do not sell your data. We protect it with industry-standard encryption. You can request access to, correction of, or deletion of your data at any time.
This Privacy Policy should be read alongside bd999's Terms & Conditions, which govern your overall use of the Platform. Both documents together form the complete agreement between you and bd999 in relation to your account and data.
bd999 collects personal data across several categories, depending on how you interact with the Platform. The following table sets out the categories of data collected and the primary sources from which each category is obtained.
| Data Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, nationality | Provided by you at registration or KYC |
| Contact Data | Pakistani mobile number, email address, correspondence address | Provided by you at registration |
| Financial Data | JazzCash / EasyPaisa account references, bank account details (HBL, UBL, Meezan), card last-4 digits, transaction history | Provided by you during deposits/withdrawals |
| KYC Documents | CNIC scan, proof of payment method ownership, source of funds documentation where required | Uploaded by you upon request |
| Gaming Activity Data | Bets placed, game sessions, wagers, wins, losses, bonus usage, cricket betting history, slot session logs | Automatically generated by Platform |
| Technical Data | IP address, device identifiers, browser type and version, operating system, session timestamps, login history | Automatically collected via Platform |
| Communication Data | Live chat transcripts, email correspondence, support ticket history | Generated during player–support interactions |
| Preference Data | Marketing consent status, communication preferences, language and display settings | Set by you in account preferences |
bd999 does not collect full payment card numbers, CVV codes, or full JazzCash / EasyPaisa PINs at any point. Payment authentication is handled via the relevant payment provider's own secure interface — bd999 receives only anonymised transaction confirmation references and last-4 identifiers for record-keeping purposes.
bd999 uses the personal data it collects for the following specific, documented purposes:
bd999 processes your personal data on the following legal bases, as applicable to each processing activity:
Note: Where bd999 relies on legitimate interests as the legal basis for processing, a balancing assessment has been conducted to ensure that such interests do not override your fundamental data protection rights and freedoms. You may request details of that assessment from bd999's support team.
bd999 does not sell your personal data. bd999 shares your personal data only in the specific circumstances described below, and only with parties who are bound by appropriate data protection obligations:
bd999 engages trusted third-party service providers to assist in operating the Platform. These include payment processors (JazzCash, EasyPaisa, card processors), KYC verification providers, cloud infrastructure providers, game studios, fraud detection vendors, and customer support software providers. All such providers are subject to contractual data processing agreements restricting the use of your data to the specific service being provided.
bd999 may disclose personal data to regulatory authorities, gaming license bodies, law enforcement agencies, or courts where required by applicable law, valid legal process, or the requirements of bd999's gaming license. Such disclosures are made in good faith and in accordance with the minimum necessary standard — bd999 discloses only the data specifically required by the requesting authority.
In the event of a merger, acquisition, or sale of all or part of bd999's business, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bd999 will notify affected players in advance and ensure that the receiving entity is bound by data protection obligations no less protective than those in this Policy.
bd999 uses cookies and similar tracking technologies on the Platform to provide core functionality, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used:
You can manage your cookie preferences through your bd999 account settings or through your browser's standard cookie management controls. Disabling essential cookies will affect Platform functionality. Disabling marketing cookies will not affect your ability to use any Gaming Services.
bd999 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include, but are not limited to:
⚠ Your Responsibilities: While bd999 takes extensive steps to protect your data, you are responsible for keeping your account password and any 2FA codes confidential. bd999 will never ask for your password via email, live chat, SMS, or any other channel. Treat any such request as fraudulent and contact support immediately.
bd999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention required by law or regulation. The following retention schedule applies to the primary categories of player data:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / regulatory compliance |
| KYC Documents (CNIC) | Duration of account + 5 years post-closure | Gaming license obligation |
| Transaction Records | 7 years from date of transaction | AML / financial regulation |
| Gaming Activity Logs | 5 years from date of activity | Dispute resolution / license |
| Support Communications | 3 years from last interaction | Legitimate interest / disputes |
| Marketing Preferences | Until consent withdrawn + 1 year | Consent-based processing |
| Technical / Log Data | 13 months from collection | Security & analytics |
Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be associated with an identifiable individual. Anonymised data may be retained indefinitely for aggregate analytics purposes.
As a bd999 player, you have the following rights in relation to your personal data. These rights may be subject to limitations or conditions under applicable law, including regulatory retention obligations.
Request a copy of all personal data bd999 holds about you, along with information about how it is being used.
Request correction of inaccurate or incomplete personal data held on your bd999 account.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Request that bd999 limits how your data is used while a data accuracy dispute or objection is being resolved.
Request a machine-readable export of your personal data for transfer to another service provider.
Object to processing based on legitimate interests, including direct marketing. Objection to marketing takes immediate effect.
To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request." All requests will be acknowledged within 72 hours and substantively responded to within 30 calendar days. bd999 may request identity verification before processing a data rights request to ensure it is acting on instructions from the legitimate account holder.
The bd999 Platform is strictly intended for individuals aged 21 years and above. bd999 does not knowingly collect personal data from individuals under the age of 21. Any account found to have been registered by an individual under 21 will be immediately closed, all data associated with that account will be deleted (except where retention is required for regulatory purposes), and any funds held in the account will be handled in accordance with applicable regulatory guidance.
⚠ Underage Access: If you are aware that a minor has registered on bd999 using false age information, please contact our support team immediately at [email protected]. bd999 takes underage access very seriously and will act on all credible reports promptly.
Parents and guardians in Pakistan are encouraged to use available parental control software to restrict minors' access to online gaming platforms. bd999 supports the use of such tools and encourages responsible household management of internet-connected devices.
bd999's Platform is primarily designed for players in Pakistan. However, the technical infrastructure supporting the Platform — including cloud servers, game-streaming services, and KYC verification systems — may involve the transfer of personal data to data centres located in jurisdictions outside Pakistan.
Where personal data is transferred to a jurisdiction that does not provide equivalent data protection standards, bd999 ensures that appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms, before any such transfer is made. The categories of data transferred internationally are limited to what is strictly necessary for the provision of the specific technical service involved.
Pakistani Players: Your PKR payment data processed through JazzCash and EasyPaisa is handled by those providers within Pakistan in accordance with their own privacy frameworks. bd999 does not transfer your JazzCash or EasyPaisa account details outside Pakistan.
bd999 will only send you promotional communications — including emails about cricket betting offers, live casino bonuses, slot promotions, and Fortune Bingo events — if you have explicitly opted in to receive such communications at registration or subsequently through your account preferences.
You may withdraw your marketing consent at any time by:
Withdrawal of marketing consent does not affect your ability to receive service-related communications — including account security alerts, withdrawal confirmations, KYC requests, and responsible gaming notifications — which are sent on a non-promotional, necessary basis regardless of marketing preference settings.
The bd999 Platform may contain references or links to third-party services, including game studios, payment providers, and sports data feeds. This Privacy Policy applies solely to data processed by bd999 directly. bd999 has no control over the data practices of third-party services and accepts no responsibility for how those parties collect, use, or protect personal data.
Players are advised to review the privacy policies of any third-party service they interact with independently of the bd999 Platform. bd999's integration with JazzCash, EasyPaisa, and bank payment services involves those providers' own data processing, which is governed by their respective privacy frameworks.
bd999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or bd999's data processing practices. Where changes are material, bd999 will provide registered players with advance notice through their registered email address or a prominent notice on the Platform, with a minimum of seven (7) days before the updated Policy takes effect.
The current version of this Privacy Policy, including the "Last Updated" date, is always available at bd999.games/privacy-policy. Continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and request account closure before the effective date.
For all queries relating to this Privacy Policy, data rights requests, or any concern about how bd999 handles your personal data, please contact the bd999 data team through the following channel:
All privacy-related requests will be acknowledged within 72 hours. Substantive responses to data rights requests will be provided within 30 calendar days of receipt. Where a request is particularly complex or involves a high volume of data, bd999 may extend this period by up to an additional 30 days, with prior notice to the requesting party.
This Privacy Policy was last reviewed and updated on 1 January 2026. The version published at bd999.games/privacy-policy is the current operative version and supersedes all previously published versions of this document.
bd999 protects your personal data with TLS 1.3 encryption, strict AML compliance, and a no-sell data policy. Log in and enjoy cricket betting, live casino, slots, and Fortune Bingo — all in PKR via JazzCash and EasyPaisa. Strictly 21+.