bv9999 Privacy Policy

bv9999 ("we", "us", "our") operates the online casino and sports betting platform accessible at bv9999.onl and is committed to protecting the privacy and personal data of all registered players and platform visitors, including players based in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and across Pakistan.

This Privacy Policy has been prepared in accordance with the principles of internationally recognised data protection frameworks, including the General Data Protection Regulation (GDPR) and the requirements of our international gaming license. It sets out the legal basis on which we process your data, the categories of data we collect, how we use and protect that data, the circumstances in which we share it, and the rights you hold in respect of your personal information.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the full legal framework governing your relationship with bv9999.

bv9999 is the data controller for all personal data collected through the bv9999 platform. As data controller, bv9999 determines the purposes for which, and the manner in which, personal data is processed. bv9999 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may contact the DPO directly using the contact details provided in Section 16 of this Policy.

Depending on how you interact with the bv9999 platform, we may collect and process the following categories of personal data:

bv9999 does not collect special category data (such as health data, biometric data, or data revealing racial or ethnic origin) except where specifically required by a regulatory body for responsible gaming compliance purposes, and then only with your explicit consent or as otherwise lawfully required.

bv9999 collects personal data through the following channels:

• Direct interaction: Data you provide when you register an account, complete KYC, make a deposit or withdrawal, contact support, or respond to a survey.
• Automated technologies: Technical and usage data collected automatically when you access the bv9999 platform, via cookies, server logs, and analytics tools.
• Third-party sources: Identity and financial data received from KYC verification service providers and payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank) in connection with transaction processing and fraud prevention.
• Publicly available sources: In limited circumstances, bv9999 may consult publicly available databases as part of fraud, AML, or sanctions screening procedures.

bv9999 processes your personal data only where there is a lawful basis for doing so. The table below sets out our primary processing purposes and the corresponding legal basis:

6.1 Payment Processors. To process PKR deposits and withdrawals, bv9999 must share relevant financial and identity data with our authorised payment partners including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These processors are contractually bound to use your data solely for the purpose of processing your transaction and are prohibited from using it for any other purpose.

6.2 KYC Service Providers. bv9999 engages licensed KYC and identity verification service providers to verify the identity and age of registered players as required by our gaming license. These providers receive only the data necessary to complete the verification and are contractually bound to strict confidentiality obligations.

6.3 Regulatory and Legal Disclosure. bv9999 may be required to disclose player data to its international gaming license authority, financial intelligence units, law enforcement agencies, or a court, in response to a lawfully issued order or as part of its regulatory compliance obligations. Such disclosures are made only to the extent required by law.

6.4 Service Providers. bv9999 uses third-party technology service providers for functions such as cloud hosting, email delivery, and analytics. These providers act as data processors under written data processing agreements and are not permitted to use player data for their own purposes.

6.5 No Sale of Data. bv9999 does not and will not sell, rent, or trade your personal data to any third party for commercial or marketing purposes under any circumstances.

As an operator under an international gaming license, bv9999 may process and store personal data on servers located outside Pakistan. Where personal data is transferred to countries that may not offer the same level of data protection as the jurisdiction of our gaming license, bv9999 ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data transfer mechanisms, to ensure that your data remains protected to the same standard regardless of where it is processed.

bv9999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law or our gaming license obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for five years following permanent account closure.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of five years post-transaction to satisfy AML regulatory requirements.
• KYC documentation: Retained for a minimum of five years following account closure or the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the relevant interaction.
• Marketing preference records: Retained for three years from the date of last interaction or opt-out, whichever is earlier.

Following the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with bv9999's data destruction procedures.

bv9999 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for all data stored at rest.
• TLS 1.3 protocol encryption for all data in transit between your device and bv9999 servers.
• Strict role-based access controls limiting access to personal data to authorised personnel only on a need-to-know basis.
• Regular independent security audits and penetration testing of the bv9999 platform.
• Multi-factor authentication (MFA) requirements for administrative access to bv9999 systems.
• Continuous monitoring and intrusion detection systems operating 24/7.

While bv9999 takes all reasonable steps to protect your data, no internet transmission or electronic storage system can be guaranteed to be 100% secure. Players are advised to maintain strong, unique passwords for their bv9999 accounts and to enable two-factor authentication where available.

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. bv9999 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse platform usage.

10.2 Types of Cookies. bv9999 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function, including session management and security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language, currency, and game settings to personalise your experience.
• Analytics Cookies: Collect anonymised data on how players use the bv9999 platform to help us improve functionality and content.
• Marketing Cookies: Track interactions with promotional content. These are only placed where you have given explicit consent.

10.3 Managing Cookies. You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the bv9999 platform, including maintaining your login session.

If you are a parent or guardian and believe that a person under 21 in your care has registered a bv9999 account, please contact our support team immediately. We will investigate and take appropriate action without delay.

Subject to applicable law and the terms of our gaming license, you have the following rights in respect of your personal data held by bv9999:

• Right of Access (Subject Access Request): You may request a copy of all personal data bv9999 holds about you. bv9999 will respond within 30 days.
• Right of Rectification: You may request correction of any inaccurate or incomplete data. Where possible, corrections will be made within 10 business days.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that bv9999 pauses processing of your data in circumstances such as where you have contested its accuracy or where you have objected to processing.
• Right to Data Portability: You may request that bv9999 provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including profiling and direct marketing. If you object to direct marketing, bv9999 must stop processing your data for that purpose immediately.
• Rights in Relation to Automated Decision-Making: Where bv9999 makes decisions based solely on automated processing that significantly affect you, you have the right to request human review of that decision.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 16. bv9999 will not charge a fee for data rights requests in ordinary circumstances and will respond within 30 calendar days of receiving a valid request.

bv9999 will only send you promotional communications, including bonus offers, tournament announcements, and platform updates, where you have given explicit opt-in consent at registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team. Withdrawal of marketing consent will not affect your ability to continue using the bv9999 platform.

Please note that certain operational communications — such as account verification emails, transaction confirmations, KYC requests, and security alerts — are not marketing communications and will be sent regardless of your marketing preferences, as they are necessary for the performance of your account contract.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bv9999 will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with applicable data protection law. Where the breach is likely to result in a high risk to affected players, bv9999 will also notify affected players directly without undue delay, providing details of the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach.

bv9999 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, bv9999 will provide notice to registered players via email or prominent platform notification prior to the changes taking effect. The updated Policy will be posted on this page with a revised effective date. Your continued use of the bv9999 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the platform and request account closure.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how bv9999 processes your personal data, please contact the bv9999 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the bv9999 platform. Mention "Data Rights Request" or "DPO" when connecting.
• Email: [email protected] — please include "Privacy / DPO Request" in your subject line (plain text only — not a clickable link).
• Response time: bv9999 will acknowledge your request within 2 business days and provide a substantive response within 30 calendar days.

If you are not satisfied with bv9999's response to your data rights request or privacy concern, you have the right to lodge a complaint with the supervisory authority designated by our international gaming license jurisdiction.