bx999 Privacy Policy — How We Collect, Use & Protect Your Data

1. Introduction

This Privacy Policy is issued by bx999 ("bx999", "we", "us", or "our") and applies to all personal data collected from individuals ("you", "Player", or "User") who access, register on, or use any service provided through the bx999 website at bx999.org and any associated mobile-optimised versions of that site (collectively, the "Platform").

bx999 operates an internationally licensed online gaming platform designed specifically for Pakistani players, offering services including but not limited to live casino games such as Teen Patti, Andar Bahar, Roulette, and Blackjack; sports betting covering PSL cricket, international cricket, UFC, and football; slot games; and associated payment and wallet services in Pakistani Rupees (PKR).

bx999 is committed to processing personal data in accordance with applicable data protection legislation and the requirements of its international gaming licence. This Privacy Policy should be read in conjunction with the bx999 Terms & Conditions, which form an integral part of your agreement with bx999.

2. Data Controller

For the purposes of applicable data protection law, bx999 is the data controller in respect of personal data collected from Players using the bx999 Platform. bx999 determines the purposes and means of processing personal data collected through the Platform and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

bx999 operates under an international gaming licence and is subject to the data protection and anti-money-laundering obligations imposed by that licensing regime. For all privacy-related matters, including data subject rights requests and complaints, you may contact bx999 directly using the contact details provided in Section 16 of this Privacy Policy.

3. Personal Data We Collect

bx999 collects the following categories of personal data from Pakistani players in connection with the provision of its Services:

bx999 does not intentionally collect sensitive personal data beyond what is strictly necessary for identity verification and regulatory compliance. You are not required to provide data beyond what is requested during registration and KYC verification to access bx999 Services.

4. How We Collect Your Data

bx999 collects personal data through the following primary channels:

• Account Registration: When you create a bx999 account, you directly provide identity and contact data, including your Pakistani mobile number, email address, full name, and date of birth.
• KYC Verification: When you submit CNIC documentation for identity verification prior to withdrawals, bx999 collects and retains copies of your identity documents for the period mandated by our licensing obligations.
• Deposits & Withdrawals: When you transact through JazzCash, EasyPaisa, or linked bank accounts, bx999 receives financial data from the relevant payment processor confirming transaction details.
• Platform Use: bx999 automatically collects technical and usage data through server logs, session analytics, and game platform tracking as you use the bx999 website and play games.
• Cookies & Tracking Technologies: bx999 uses cookies and similar technologies as described in Section 9 of this Privacy Policy to enhance your experience and analyse Platform performance.
• Customer Support Interactions: When you contact bx999 via live chat or email, your communications are recorded and retained for quality assurance, dispute resolution, and regulatory audit purposes.
• Third-Party Providers: bx999 may receive supplementary identity verification data from authorised third-party KYC or anti-fraud service providers engaged to support our compliance obligations.

5. Legal Basis for Processing

bx999 processes your personal data only where a lawful basis exists under applicable data protection legislation. The legal bases on which bx999 relies are as follows:

• Contract Performance: Processing necessary to create and operate your bx999 account, execute deposits and withdrawals, process bets and game outcomes, and provide all Services you have requested.
• Legal Obligation: Processing required to comply with our international gaming licence conditions, anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and any applicable regulatory or law enforcement reporting duties.
• Legitimate Interests: Processing undertaken in furtherance of bx999's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and service improvement analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your data for direct marketing communications, which requires your prior opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing or your ability to continue using bx999 Services.

6. How bx999 Uses Your Personal Data

bx999 uses the personal data it collects from Pakistani players for the following specific purposes:

• To establish, verify, manage, and administer your bx999 account throughout its lifetime.
• To verify your identity and age (21+) through CNIC and supporting documentation review prior to processing any withdrawal.
• To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to your verified payment methods.
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and any other conduct prohibited under the bx999 Terms & Conditions or applicable law.
• To monitor gameplay patterns in support of our responsible gaming obligations — including identification of players showing signs of problem gambling behaviour and proactive outreach where appropriate.
• To provide bilingual customer support (English and Urdu) via live chat and email, and to maintain records of support interactions for quality assurance and dispute resolution.
• To personalise your bx999 experience by presenting game recommendations and promotional offers relevant to your demonstrated preferences — only where you have consented to personalised marketing.
• To comply with our reporting obligations to regulatory and licensing authorities and, where legally required, to disclose data to law enforcement agencies.
• To analyse aggregate, anonymised usage data to improve Platform performance, game selection, payment processing efficiency, and overall user experience for Pakistani players.

7. Sharing Your Data with Third Parties

bx999 does not sell, rent, or trade your personal data to any third party. However, in the course of operating its Platform and meeting its legal obligations, bx999 shares data with the following categories of third-party recipients, each subject to appropriate data protection agreements:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers used to process your deposits and withdrawals receive transaction-level data necessary to execute and verify your payments.
• Game Content Providers: Third-party game studios and live casino platform providers whose games are accessible through bx999 receive pseudonymised gameplay data necessary to operate game rounds, verify results, and manage jackpots.
• KYC & Identity Verification Services: Authorised third-party identity verification specialists may process your CNIC and supporting documents to assist bx999 in meeting its age verification and anti-money-laundering obligations.
• Anti-Fraud & Security Providers: Specialised fraud prevention and cybersecurity services may receive technical data (IP address, device fingerprint, login patterns) to identify and block suspicious activity on your bx999 account.
• Regulatory & Licensing Authorities: bx999 may be required to disclose Player data — including identity, transaction history, and gameplay records — to its licensing authority, anti-money-laundering supervisory bodies, or law enforcement agencies where legally obligated to do so.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by bx999 may access Player data on a strictly confidential, need-to-know basis in connection with their advisory mandates.

8. International Data Transfers

As an internationally licensed platform, bx999 may transfer your personal data to countries outside Pakistan in connection with the delivery of its Services. Such transfers may occur in relation to game server hosting, live dealer studio operations, payment gateway processing, and KYC verification services.

Where bx999 transfers personal data internationally, it ensures that appropriate safeguards are in place to protect your data, including execution of standard contractual data protection clauses with the receiving parties, or reliance on recognised legal frameworks that provide equivalent protection to Pakistani and international data protection standards.

By registering a bx999 account and using its Services, you acknowledge and consent to the international transfer of your personal data where necessary for the performance of your account agreement and the delivery of bx999 Services, subject to the protections described in this Policy.

9. Cookies & Tracking Technologies

bx999 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used on bx999:

• Essential Cookies: Required for the bx999 Platform to function correctly, including maintaining your login session, managing your PKR wallet state, and securing your account. These cannot be disabled without preventing normal Platform use.
• Analytics Cookies: Used to collect anonymised data about how Pakistani players navigate the bx999 Platform — which pages are visited, how long sessions last, and which features are used most frequently. This data is used to improve Platform performance and game availability.
• Preference Cookies: Used to remember your bx999 account settings and preferences, such as your chosen language, preferred game categories, and responsible gaming limit configurations.
• Security Cookies: Used to detect and prevent fraudulent login attempts, protect against account takeover attacks, and verify the integrity of your bx999 session.

You may control non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the bx999 Platform. Essential and security cookies cannot be disabled without logging out of your bx999 account.

10. Data Retention Periods

bx999 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

• Account Data & Identity Records: Retained for the duration of your active bx999 account plus a minimum of five (5) years following permanent account closure, in compliance with anti-money-laundering regulatory requirements applicable to bx999's international gaming licence.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, consistent with financial record-keeping requirements applicable to internationally licensed gaming operators.
• KYC Documentation: CNIC copies and identity verification documents are retained for the period required by our licensing authority — typically five years post-account closure — after which they are securely destroyed.
• Communications Records: Live chat logs and email correspondence are retained for three (3) years from the date of each interaction for quality assurance and dispute resolution purposes.
• Technical & Usage Data: Anonymised or pseudonymised analytics data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes personal data once fully anonymised.

Upon expiry of applicable retention periods, bx999 will securely delete or permanently anonymise your personal data in accordance with its internal data disposal procedures.

11. Security Measures

bx999 implements industry-leading technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption protecting all data transmitted between your device and bx999 servers.
• AES-256 encryption applied to personal data stored on bx999 servers, including all identity and financial records.
• Strict role-based access controls ensuring that bx999 staff can only access Player data relevant to their specific operational responsibilities.
• Two-factor authentication (2FA) available for all bx999 Player accounts via Pakistani mobile number SMS verification.
• Real-time login monitoring and automatic account lockout following multiple consecutive failed login attempts.
• Regular independent security audits and penetration testing of the bx999 Platform infrastructure.
• Segregated storage of Player financial data, ensuring PKR wallet balances are isolated from operational system access.

Despite bx999's comprehensive security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their bx999 accounts, enable two-factor authentication, and report any suspected security incidents to bx999 support immediately at [email protected].

12. Minors & Age Verification

bx999 uses CNIC verification to confirm the age and identity of all Players prior to processing any withdrawal from the platform. Where bx999 has reasonable grounds to believe that a Player is under 21 years of age, the relevant account will be immediately suspended, all activity during the period of suspected underage access will be reviewed, and all funds associated with the account will be withheld pending investigation.

If you believe that a minor has registered a bx999 account using false information, or has accessed the Platform without authorisation, please contact bx999 immediately at [email protected] so that appropriate action can be taken promptly.

13. Your Data Protection Rights

As a bx999 Player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact bx999 using the details provided in Section 16. bx999 will respond to all legitimate rights requests within thirty (30) calendar days of receipt, subject to identity verification.

Please note that certain rights may be subject to limitations where bx999's legal obligations — particularly anti-money-laundering and gaming licence compliance requirements — necessitate continued retention or processing of your data.

14. Marketing Communications & Opt-Out

bx999 may send promotional communications to Pakistani players who have opted in to receive marketing materials, including information about new game releases, bonus promotions, PSL cricket betting offers, seasonal tournaments, and VIP programme updates. Marketing communications are sent via SMS to your registered Pakistani mobile number and/or email, depending on your stated preferences.

You may opt out of bx999 marketing communications at any time through any of the following methods:

• Updating your communication preferences in your bx999 account settings.
• Clicking the unsubscribe link included in any bx999 marketing email.
• Replying STOP to any bx999 SMS marketing message.
• Contacting bx999 customer support via live chat or email at [email protected] with a written opt-out request.

Opting out of marketing communications will not affect the delivery of essential service communications, including transaction confirmations, security alerts, account verification messages, withdrawal notifications, and responsible gaming communications, which bx999 is required to send as part of its Service obligations.

15. Changes to This Privacy Policy

bx999 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, or bx999's operational practices. When material changes are made, bx999 will notify registered Pakistani players by SMS to their registered mobile number and/or by email, and the revised Privacy Policy will be published on the bx999 Platform with a clearly updated effective date.

Players are encouraged to review this Privacy Policy periodically. Continued use of the bx999 Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using bx999 and contact support to close your account.

16. Contact Us & Privacy Complaints

For all privacy-related enquiries, data subject rights requests, or complaints regarding bx999's processing of your personal data, please contact the bx999 privacy team through the following channels:

• Email: [email protected] — subject line: "Privacy Request" (formal data rights requests acknowledged within 5 business days; resolved within 30 calendar days)
• Live Chat: Available 24 hours a day, 7 days a week via the bx999 Platform in English and Urdu — for urgent privacy concerns or account security incidents
• Service Coverage: bx999 serves players throughout Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, Quetta, and all other cities and regions

If you are not satisfied with bx999's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or regulatory body under the jurisdiction governing bx999's gaming licence. bx999 will cooperate fully with any such authority in the investigation of privacy complaints received from Pakistani players.

This Privacy Policy was last reviewed and updated on 1 January 2026. bx999 thanks you for taking the time to read and understand how we protect your personal data. Your privacy is not an afterthought at bx999 — it is built into every system, process, and policy we operate.