Privacy Policy

This Privacy Policy ("Policy") describes how BN999 ("we", "us", "our"), the operator of the BN999 Platform accessible at https://bn999.cam (the "Platform"), collects, uses, stores, shares and protects the personal data of individuals who access or use the Platform ("you", "your", "User").

BN999 is an English-language online sports betting and casino entertainment platform serving adult users, including Pakistani users across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and other locations. The Platform operates under the governance of the operator's license jurisdiction. This Policy is written to reflect applicable data protection principles and is designed to be transparent, readable and accessible.

This Policy applies to all personal data collected through the Platform, including data collected during registration, identity verification (KYC), deposit and withdrawal transactions, account usage, customer support interactions and marketing communications.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the Platform.

In this Policy, the following terms have the meanings assigned to them below:

• "Personal Data" means any information that identifies, or could reasonably identify, a living individual — either directly (e.g., full name, CNIC number) or indirectly (e.g., device ID combined with other data).
• "Processing" means any operation or set of operations carried out on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, BN999's operator.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller (e.g., payment processors, KYC verification providers).
• "KYC" means Know Your Customer — identity verification procedures used to confirm a User's identity, age, and, where required, source of funds.
• "Sensitive Personal Data" means Personal Data that warrants higher levels of protection due to its nature, including identity document data, financial account details and data related to health or criminal records where applicable.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "Cookie" means a small text file placed on a User's device by the Platform to facilitate certain functions, preferences and analytics.

BN999 collects Personal Data in several categories, depending on the nature of your interaction with the Platform. The table below sets out the main categories of data collected:

BN999 does not intentionally collect Sensitive Personal Data beyond identity and financial data required for KYC and payment processing. We do not collect data relating to racial or ethnic origin, religious beliefs, political opinions, trade union membership, genetic data or health data except where incidentally disclosed by the User in a support interaction.

BN999 collects Personal Data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, placing bets, contacting customer support or subscribing to marketing communications.
• Automated technologies: Technical Data and Usage Data collected automatically when you access and use the Platform, including through cookies, web beacons, server logs and analytics tools.
• Third-party KYC providers: Identity verification services that process your KYC documents on our behalf and return a verification status result, in accordance with data processing agreements.
• Payment processors: Transaction confirmation data shared with us by payment processing partners to confirm the status of deposits and withdrawals.
• Fraud prevention services: Device fingerprinting, IP reputation and other fraud-detection data sourced from third-party services acting as Data Processors under appropriate agreements.

BN999 processes your Personal Data on one or more of the following legal bases, depending on the category of data and the purpose of processing:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including account management, bet settlement, payment processing and KYC verification.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements in our license jurisdiction — including AML checks, age verification, record-keeping obligations and responses to lawful authority requests.
• Legitimate interests: Processing carried out on the basis of BN999's legitimate business interests, where those interests are not overridden by your data protection rights — including fraud detection, platform security, responsible gambling monitoring and analytics-driven improvements to the Platform.
• Consent: Processing based on your freely given and informed consent, particularly in relation to marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BN999 uses the Personal Data we collect for the following purposes:

6.1 Account Management & Service Delivery

• Creating, maintaining and managing your Account.
• Verifying your identity and age through KYC procedures.
• Processing deposits, bets and withdrawal requests.
• Settling betting markets, awarding bonuses and applying promotional terms.
• Providing customer support and responding to enquiries.

6.2 Security, Fraud Prevention & Compliance

• Detecting, investigating and preventing fraudulent activity, money laundering and other prohibited conduct.
• Monitoring for account security threats, duplicate account activity and prohibited territory access.
• Complying with AML, KYC and other regulatory obligations under our license jurisdiction.
• Fulfilling obligations to respond to lawful requests from regulatory or law enforcement authorities.

6.3 Responsible Gambling

• Monitoring account activity for indicators of problem gambling behaviour.
• Enforcing self-exclusion, deposit limits, loss limits and other responsible gambling restrictions applied to an Account.
• Contacting users where responsible gambling concerns are identified, in accordance with our Responsible Gambling obligations.

6.4 Platform Improvement & Analytics

• Analysing usage patterns to improve Platform features, performance and user experience.
• Conducting internal research and analysis to develop new products and services.
• Optimising the Platform's technical performance across different device types and network conditions, including the mobile-first experience important to Pakistani users on 4G and 3G networks.

6.5 Marketing Communications (Consent-Based)

• Sending promotional offers, bonus notifications and Platform news where you have opted in or where a legitimate interest basis applies.
• Personalising promotional content based on your usage history and preferences, where consent has been obtained.

BN999 does not sell, rent or trade your Personal Data to third parties. We share Personal Data only in the following circumstances:

• Service Providers (Data Processors): We share data with trusted third-party service providers who process it on our behalf under written data processing agreements. These include KYC verification providers, payment processors, fraud detection services, cloud infrastructure providers and customer support platform operators. These parties are contractually bound to process data only as instructed by BN999 and to maintain appropriate security standards.
• Regulatory & Legal Authorities: We may disclose Personal Data to regulatory bodies, law enforcement agencies, courts or other competent authorities where required by law, court order, or where disclosure is necessary to protect the rights, safety or property of BN999, its users or the public.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of substantially all assets of the operator, Personal Data held by BN999 may be transferred to the relevant successor entity, subject to equivalent data protection commitments.
• Affiliate Entities: Where BN999 operates within a group of affiliated entities, limited data sharing within that group may occur for consolidated compliance, fraud prevention and operational purposes, under equivalent data protection standards.

The operation of the BN999 Platform may require the transfer of Personal Data to countries outside of Pakistan or the operator's primary license jurisdiction. This may occur, for example, when data is processed by cloud infrastructure or KYC verification providers based in other countries.

Where Personal Data is transferred internationally, BN999 takes steps to ensure that appropriate safeguards are in place to protect the data. These safeguards may include standard contractual clauses, data processing agreements incorporating equivalent protections, or transfers to jurisdictions that provide an adequate level of data protection under applicable law.

By using the Platform and providing your Personal Data, you acknowledge that your data may be transferred, stored and processed outside of Pakistan. BN999 does not represent that such processing is governed by Pakistani data protection law, and is not responsible for the data protection frameworks of other jurisdictions.

BN999 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention principles apply:

• Account Data: Retained for the duration of your active Account and for a period thereafter as required by the operator's license jurisdiction, AML regulations and applicable law — typically a minimum of five years following account closure.
• KYC Documents: Retained in accordance with AML and identity verification regulatory requirements applicable in the license jurisdiction. Typically retained for a minimum of five years following the conclusion of the business relationship.
• Transaction Records: Financial and betting transaction records are retained as required by the operator's license conditions and AML obligations — typically five to seven years.
• Support Communications: Retained for a reasonable period to support dispute resolution and quality monitoring — typically one to three years from the date of the most recent interaction.
• Marketing Data: Retained until you withdraw consent or opt out of marketing, at which point it is removed from active marketing lists. Suppression records may be retained to honour opt-out requests.
• Technical and Usage Data: Anonymised or aggregated usage data may be retained indefinitely for analytics purposes without constituting Personal Data retention.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with BN999's data disposal procedures.

BN999 uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device when you visit the Platform. They serve a variety of functions as described below.

You can manage cookie preferences through your browser settings. Blocking or deleting certain cookies may affect the functionality of the Platform. BN999 does not use third-party advertising cookies for cross-site behavioural tracking or profiling for external advertising networks.

Subject to applicable law and the operator's license jurisdiction, you have the following rights in relation to your Personal Data held by BN999:

The BN999 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

If BN999 becomes aware that Personal Data has been collected from an underage individual, the Account will be immediately closed, any funds deposited will be returned, any winnings generated will be forfeited, and the Personal Data will be securely deleted in accordance with our retention procedures and applicable law.

BN999 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, loss or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive Personal Data and KYC documents stored on our systems.
• Access controls limiting internal access to Personal Data to authorised personnel on a need-to-know basis.
• Two-factor authentication options for user accounts to prevent unauthorised account access.
• Regular security assessments of Platform systems and data processing environments.
• Incident response procedures for identifying, containing and notifying affected parties in the event of a data security incident, in accordance with applicable legal obligations.

While BN999 takes these measures seriously, no online platform can guarantee absolute security against all threats. Users are also responsible for maintaining the security of their own Account credentials — including keeping passwords confidential and using strong, unique passwords.

The Platform does not contain links to third-party external websites as a matter of policy. Where any such references appear in informational or educational content, BN999 is not responsible for the privacy practices, data handling or content of any third-party sites. Users who independently navigate to external websites do so at their own risk and subject to those sites' own privacy policies.

Third-party service providers engaged by BN999 (such as payment processors and KYC providers) operate under their own privacy policies in addition to any data processing agreements with BN999. BN999 takes reasonable steps to select service providers that maintain appropriate privacy and security standards.

BN999 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or the services offered on the Platform. When material changes are made, BN999 will endeavour to provide reasonable notice — for example, through a notice on the Platform or via email to registered Account holders — before the updated Policy takes effect.

The effective date and version number at the top of this Policy indicate when it was last updated. Users are encouraged to review this Policy periodically. Continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the changes.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data by BN999, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the recommended and fastest channel for privacy-related queries and data rights requests.
• Email (display only): [email protected] — for general privacy enquiries. This address is for display reference only; please use live chat for account-specific and urgent matters.

When submitting a data rights request, please include sufficient information for us to identify your Account and verify your identity. BN999 will not process data rights requests from unverified requestors to protect the security of Account holders' personal information.

For concerns related to responsible gambling and account controls, please visit our Responsible Gambling page.