bj999 Privacy Policy

This Privacy Policy ("Policy") is published by bj999 ("bj999", "we", "us", "our") and applies to all personal data collected from visitors, registered players, and any other individuals who interact with the bj999 website, mobile platform, and associated services (collectively, the "Platform").

bj999 is committed to protecting the privacy and personal data of every individual who uses the Platform. This Policy is intended to provide clear, honest information about our data practices so that you — as a Pakistani player or site visitor — can make informed decisions about your personal information.

By registering an account with bj999, accessing the Platform, or continuing to use our services after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you have any questions or concerns about how your data is handled, please contact us using the details provided in Section 14.

For the purposes of applicable data protection law, bj999 acts as the data controller in respect of all personal data collected through the Platform. As data controller, bj999 determines the purposes for which personal data is processed and the means by which such processing is carried out.

bj999 operates under an international gaming licence and complies with the data protection requirements imposed by that licensing authority. Where bj999 engages third-party service providers who process personal data on its behalf, those providers act as data processors and are contractually bound to process your data only as directed by bj999 and in compliance with applicable data protection obligations.

bj999 collects personal data in the following categories, depending on how you interact with the Platform:

bj999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, unless such data is provided voluntarily by you in the context of a responsible gaming assessment or support interaction. In such cases, the data is treated with the highest level of protection and is used only for the purpose for which it was provided.

bj999 collects personal data through the following channels and methods:

• Direct Interactions: Data you provide when creating an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technologies: Technical data collected automatically when you access the Platform, including via cookies, server logs, pixel tags, and session replay tools.
• Third-Party Sources: Identity and fraud-check data received from KYC verification providers, payment processors (including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank), and anti-money laundering screening services.
• Public Sources: Publicly available data used for identity verification or fraud prevention purposes, including data from government databases where legally permitted.

bj999 processes your personal data only where we have a lawful basis to do so. The primary bases on which we rely are:

• Contractual Necessity: Processing required to perform our obligations under the bj999 Terms & Conditions — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC/AML obligations imposed by our international gaming licence.
• Legitimate Interests: Processing carried out in bj999's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and improving our services — where those interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, which we carry out only with your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bj999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first seeking your consent or establishing a separate lawful basis.

bj999 does not sell your personal data. We may share your data with carefully selected third parties only in the following circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction data as necessary to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Providers: Third-party identity verification services receive your identity documents and personal details solely for the purpose of completing mandatory age and identity checks.
• Fraud Prevention & AML Services: Specialist providers receive relevant transactional and identity data to screen for money laundering, fraud, and other financial crime risks, as required by our licensing obligations.
• Customer Support Platforms: Our live chat and ticketing infrastructure providers may process communications data to facilitate your support interactions.
• Legal & Regulatory Authorities: bj999 may disclose your personal data to law enforcement, gaming regulators, tax authorities, or courts where required to do so by law or in response to a valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bj999's assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party recipients of your personal data are subject to contractual data processing agreements that require them to maintain appropriate technical and organisational security measures and to process your data only as directed by bj999.

bj999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by our gaming licence and AML obligations.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years from the date of the relevant transaction.
• KYC Documents: Identity verification documents are retained for the period required by the applicable gaming authority, typically five (5) years following account closure.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, to facilitate dispute resolution.
• Marketing Data: Retained until you withdraw consent, or for a maximum of two (2) years from your last active engagement with our marketing communications, whichever comes first.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

bj999 employs a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS 1.3 Encryption: All data in transit between your device and bj999 servers is encrypted using TLS 1.3 — the current industry standard for secure data transmission.
• Data Encryption at Rest: Sensitive data stored on bj999 servers, including payment credentials and identity documents, is encrypted using AES-256 or equivalent standards.
• Access Controls: Strict role-based access controls limit which bj999 staff can access personal data, and only where operationally necessary. All access is logged and audited.
• Two-Factor Authentication: bj999 supports and encourages two-factor authentication (2FA) for all player accounts to provide an additional layer of protection beyond the password.
• Penetration Testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities in the Platform.
• Tokenised Payments: Payment credentials are tokenised — bj999 never stores your raw card numbers or banking PINs on our systems.

Despite these measures, no digital system can guarantee absolute security. If you suspect any unauthorised activity on your account, please contact bj999 support immediately via live chat or at [email protected].

bj999 uses cookies and similar tracking technologies to operate the Platform, improve user experience, and where you have consented, to deliver relevant marketing communications. Cookies are small text files stored on your device that allow the Platform to recognise your browser across sessions.

• Strictly Necessary Cookies: Required for the Platform to function — including maintaining your logged-in session, processing transactions, and applying your account settings. These cannot be disabled.
• Performance & Analytics Cookies: Used to understand how players navigate the Platform, which games are most popular, and where technical issues arise. Used only in aggregated, anonymised form.
• Functional Cookies: Remember your preferences such as language settings, preferred lobby view, and responsible gaming limits you have set.
• Marketing Cookies: Used — with your consent only — to deliver relevant promotional content. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

As a bj999 player or site visitor, you hold the following rights in respect of your personal data. To exercise any of these rights, contact us using the details in Section 14.

bj999 will respond to all valid data rights requests within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

bj999 strictly prohibits the use of its Platform by anyone under the age of 21 years. We do not knowingly collect, process, or store personal data belonging to individuals under 21. Age verification is a mandatory component of the bj999 account registration and KYC process.

If bj999 discovers or is notified that personal data has been collected from a person under the age of 21, we will promptly delete all such data, close the associated account, and return any deposited funds where it is legally permissible to do so. If you believe that a minor has registered on bj999, please contact us immediately at [email protected].

Parents and guardians of minors who may have access to internet-connected devices are encouraged to install appropriate parental control software to prevent access to online gambling platforms.

bj999 operates internationally and your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, bj999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to those described in this Policy.

These safeguards may include standard contractual clauses with data recipients, processing agreements with third parties that bind them to appropriate data protection standards, and transfers only to jurisdictions that provide an adequate level of data protection as determined by applicable international standards.

bj999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via the email address on file or through an in-platform notification before the updated Policy takes effect.

The "Last Reviewed" date at the top of this document indicates when this Policy was most recently updated. We encourage you to review this Policy periodically to remain informed about how bj999 handles your personal data. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of its revised terms.

If you wish to exercise your data rights, raise a privacy concern, request a copy of your personal data, or ask any question related to this Privacy Policy, please contact the bj999 Data Protection team through the following channels:

• Email: [email protected] — mark your subject line "Privacy Request" for fastest routing to the correct team.
• Live Chat: Available 24/7 within your bj999 account. Our bilingual support agents can log a formal privacy request on your behalf and escalate it to the Data Protection team.
• Response Time: All privacy-related requests are acknowledged within 48 hours and fully resolved within 30 calendar days, subject to the extensions described in Section 10.

If you are not satisfied with bj999's response to a privacy concern, you have the right to escalate the matter to the gaming authority under whose licence bj999 operates or to the relevant data protection supervisory authority in your jurisdiction.