BK 999 Privacy Policy — How We Protect Your Personal Data

2. Data We Collect

BK 999 collects personal data in two broad ways: information you provide directly, and information collected automatically through your use of the platform. Here is a complete breakdown of what we collect and why:

BK 999 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or for responsible gaming purposes at the player's own request.

3. How We Use Your Data

Every piece of personal data held by BK 999 is used for a specific, documented purpose. Below is a full explanation of the purposes for which we process your data:

• Account creation and management: Your name, mobile number, and contact details are used to set up and maintain your registered BK 999 account and to communicate with you about your account activity.
• Identity and age verification: CNIC details and supporting documents are used to verify that you are who you say you are and that you meet the minimum age requirement of 18 years to use BK 999.
• Processing deposits and withdrawals: Your financial data — including your Easypaisa or JazzCash mobile number, bank account details, or Visa/Mastercard information — is used solely to process the transactions you initiate.
• Bet settlement and account history: Transaction and betting data is retained to maintain an accurate record of your account activity, settle bets correctly, and handle any disputes.
• Fraud prevention and security: Technical and usage data helps BK 999 detect and prevent fraudulent activity, suspicious login attempts, and security threats to your account or the platform.
• Regulatory compliance: BK 999 may be required to retain certain data and provide it to relevant authorities in connection with anti-money laundering, identity verification, or other legal obligations.
• Responsible gaming: Betting history and usage patterns may be reviewed by BK 999's responsible gaming team to identify players who may be showing signs of problem gambling and to offer appropriate support tools.
• Platform improvement and analytics: Anonymised and aggregated usage data helps the BK 999 team understand how the platform is used and where improvements can be made. This data does not identify individual players.
• Marketing communications: If you have opted in, BK 999 may use your contact details to send you information about promotions, bonuses, and new features. You can opt out at any time.

4. Legal Basis for Processing

BK 999 processes your personal data under one or more of the following legal grounds depending on the specific processing activity:

• Contract performance: Processing that is necessary to deliver the BK 999 service you have contracted for — including account management, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including identity verification, anti-money laundering checks, and tax reporting obligations.
• Legitimate interests: Processing carried out for the legitimate interests of BK 999 where those interests are not overridden by your rights — including fraud prevention, platform security, and anonymised analytics.
• Consent: Processing based on your explicit consent — primarily in relation to optional marketing communications. You may withdraw this consent at any time without affecting any other processing.

5. Data Sharing and Third Parties

BK 999 does not sell or rent your personal data. However, to operate the platform and comply with our legal obligations, we do share certain data with specific categories of third party under strict controls:

• Payment processors: Your financial data is shared with payment service providers — including Easypaisa, JazzCash, NayaPay, SadaPay, and bank IBFT networks — solely to the extent necessary to process the transactions you initiate. These providers operate under their own regulatory obligations.
• Identity verification providers: KYC (Know Your Customer) service providers may receive your identity documents and biometric data for the purpose of verifying your identity. These providers are contractually bound to handle your data securely and only for the stated purpose.
• Technology service providers: Hosting, infrastructure, and security providers who support the operation of the BK 999 platform may process technical data on our behalf. All such providers are subject to data processing agreements.
• Regulatory and legal authorities: BK 999 may disclose personal data to law enforcement agencies, anti-money laundering authorities, or courts if required by law, court order, or regulatory demand. We do not disclose more data than is legally required.
• Fraud prevention agencies: In cases where fraudulent activity is suspected, BK 999 may share relevant account data with fraud prevention agencies or other platforms in the online gaming industry to prevent further harm.

6. Cookies and Tracking Technologies

The BK 999 platform uses cookies and similar tracking technologies to provide you with a functional and personalised experience. Here is an honest explanation of what we use and why:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences during a visit, and ensure the bet slip works correctly. You cannot disable essential cookies without affecting your ability to use the platform.
• Analytics cookies: BK 999 uses anonymised analytics to understand how players navigate the platform — which features are used most, where users drop off, and how the mobile experience compares to desktop. This data does not identify individual players.
• Security cookies: These help us detect suspicious login attempts, bot activity, and potential fraud patterns by tracking device fingerprints and session behaviour.
• Preference cookies: These remember your settings between sessions — such as language preference and notification settings — so you do not have to reconfigure them every time you log in.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not prevent you from using the core BK 999 betting and gaming features, but may affect personalisation and analytics features.

7. Data Retention

BK 999 retains your personal data for as long as is necessary for the specific purpose for which it was collected, subject to any longer retention periods required by law. The following general retention guidelines apply:

• Account data: Retained for the duration of your active BK 999 account plus a minimum of five years after account closure, to satisfy anti-money laundering and identity verification compliance obligations.
• Transaction and betting records: Retained for a minimum of five years from the date of the transaction, as required for financial regulatory compliance.
• KYC documents: Retained for the period required by applicable anti-money laundering regulations from the date of verification — typically five to seven years.
• Support communications: Retained for two years from the date of the last interaction, to handle any follow-up complaints or disputes.
• Technical and session logs: Retained for 12 months for security analysis purposes, then deleted or fully anonymised.
• Marketing data: Retained until you opt out or withdraw consent. Following opt-out, your contact details are removed from marketing lists within 30 days.

8. Security Measures

BK 999 has implemented a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include:

• SSL/TLS encryption on all data transmitted between your device and BK 999 servers — the padlock icon in your browser confirms this is active.
• Encrypted storage of sensitive data including payment details, identity documents, and account credentials. Passwords are stored using one-way hashing algorithms — BK 999 staff cannot see your actual password.
• Role-based access controls ensuring that only BK 999 staff with a specific operational need can access particular categories of player data.
• Two-factor authentication options available to players for additional account security.
• Regular internal security reviews and vulnerability assessments of the BK 999 platform infrastructure.
• Contractual data security obligations imposed on all third-party service providers who process data on behalf of BK 999.

Despite these measures, no internet-based system can be guaranteed to be 100% secure. BK 999 strongly encourages players to use a strong, unique password for their account and to enable any additional security features available in their account settings.

9. Your Rights Over Your Personal Data

As a BK 999 player in Pakistan, you have meaningful rights in relation to your personal data. Below is a clear explanation of each right and how to exercise it:

To exercise any of these rights, contact BK 999 support at support@bk999-bangla.com or via live chat. We aim to respond to all data rights requests within 30 days. Requests that are complex or numerous may take up to 60 days — we will notify you if this is the case.

10. Children's Privacy

BK 999 is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account, make a deposit, or use any feature of the BK 999 platform.

If BK 999 becomes aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, void all transactions, and delete the personal data collected, except where retention is required by law.

Parents and guardians who are concerned that a minor may be using the BK 999 platform are encouraged to contact our support team immediately. We will investigate and take appropriate action within 24 hours of receiving such a report.

11. Updates to This Privacy Policy

BK 999 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the features and services available on the platform. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

When we make material changes to this policy — changes that significantly affect how we collect, use, or share your personal data — we will notify registered players via the mobile number or email address held on their BK 999 account, and by displaying a notice on the platform when you next log in.

Minor changes — such as corrections to wording, clarifications of existing practices, or updates to contact information — will be reflected in the updated document without a separate notification. We encourage you to review this page periodically to stay informed of any changes.

12. Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or the way BK 999 handles your personal data, please reach out using the following channels:

• Email: support@bk999-bangla.com — mark your subject line "Privacy Request" for faster routing to our data team.
• Live Chat: Available 24/7 through the BK 999 platform when logged in. For privacy queries, ask to be connected to the data privacy team.
• Response Time: We aim to acknowledge all privacy-related queries within 24 hours and provide a full response within 30 days.

If you are not satisfied with how BK 999 has handled your personal data or responded to a data rights request, you may escalate the matter through our formal complaints process. Full details are available from our support team on request.