bc999 Privacy Policy

1. Who We Are — Data Controller

bc999 operates the online casino and sports betting platform accessible at bc999.biz (the "Platform"). For the purposes of this Privacy Policy, bc999 acts as the data controller in respect of personal data collected from registered players and visitors to bc999.biz.

bc999 is committed to handling personal data responsibly and in compliance with applicable data protection standards. If you have any questions or concerns about how bc999 handles your data, please contact our support team using the details in Section 16 of this Policy.

2. Personal Data We Collect

bc999 may collect the following categories of personal data from you when you register, verify, deposit, play, or interact with the Platform:

• Identity Data: Full legal name, date of birth, gender, CNIC (Computerised National Identity Card) number and scanned copies, and selfie photograph for liveness verification.
• Contact Data: Pakistani mobile number (03XX format), email address, and residential city or province (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad).
• Account Data: bc999 username, chosen currency (PKR), account preferences, communication settings, and VIP tier status.
• Financial Data: Deposit and withdrawal amounts, transaction dates and times, PKR balance history, payment method identifiers (JazzCash mobile number, Easypaisa account reference, bank account last four digits, USDT wallet address hash).
• Transactional Data: Game session logs, bet histories, win/loss records, bonus usage records, and wagering activity on bc999.
• Technical Data: IP address, device type and operating system, browser type and version, session tokens, and approximate geolocation derived from IP.
• Usage Data: Pages visited on bc999.biz, navigation paths, time spent in specific game categories, and feature interaction logs.
• Communications Data: Content of live chat transcripts, support ticket submissions, and email correspondence with bc999 support staff.

3. How We Collect Personal Data

bc999 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, contacting support, or completing any form on bc999.biz.
• Automated collection: Technical and usage data collected automatically when you access bc999.biz via server logs, session cookies, and analytics tools.
• Payment providers: Transaction confirmation data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard processors, and USDT blockchain network confirmations.
• Identity verification services: Verification outcomes and risk signals from third-party KYC service providers engaged by bc999 to assist with CNIC verification and liveness checks.
• Fraud prevention systems: Risk scores and device fingerprint data provided by fraud detection partners to protect the bc999 Platform and its players.

4. Purpose and Legal Basis for Processing

bc999 processes personal data only where a lawful basis exists. The primary purposes and corresponding bases are:

• Account registration and management — necessary for performance of the player account contract with bc999.
• KYC identity verification and anti-money-laundering compliance — necessary for compliance with applicable legal obligations.
• Processing deposits and withdrawals in PKR — necessary for performance of the contract; facilitation of JazzCash, Easypaisa, and bank payment instructions.
• Game provision (slots, live casino, cricket sportsbook) — necessary for performance of the contract entered into when a Player places a bet or enters a game on bc999.
• Fraud detection and platform security — necessary for bc999's legitimate interests in protecting the Platform and its players.
• Responsible gaming monitoring — necessary for bc999's legal and legitimate interest obligations in detecting problem gambling patterns and applying player protection interventions.
• Marketing communications — where a Player has provided explicit opt-in consent; consent may be withdrawn at any time.
• Customer support and dispute resolution — necessary for performance of the contract and bc999's legitimate interests.

5. Payment Data and PKR Transactions

5.1 bc999 does not store complete payment instrument credentials such as full card numbers or JazzCash/Easypaisa PINs. Payment transactions are handled through secure third-party payment gateways. bc999 retains only tokenised references, transaction identifiers, and confirmation statuses necessary to reconcile account balances and process withdrawals.

5.2 For bank transfer deposits from HBL, UBL, Meezan Bank, and Bank Alfalah, bc999 retains the sender's account name and last four digits of the account number to verify that the deposit originated from an account matching the registered player's identity — in compliance with anti-money-laundering requirements.

5.3 USDT TRC20 transactions are publicly visible on the blockchain. bc999 retains the wallet addresses associated with deposits and withdrawals in your bc999 account record for compliance and audit purposes.

5.4 All payment data is stored on encrypted servers. Access is restricted to authorised bc999 personnel and payment processing partners on a strict need-to-know basis.

6. KYC and Identity Document Data

6.1 CNIC copies and selfie photographs collected during KYC verification are processed solely for the purpose of verifying the identity and age of bc999 players. This data is not used for any other purpose without explicit consent.

6.2 KYC documents are stored securely and retained for the period specified in Section 9 of this Policy. Access to KYC documents is strictly limited to bc999's compliance and risk management teams and any authorised third-party identity verification service providers engaged under data processing agreements.

6.3 bc999 will not sell, lease, or otherwise commercialise CNIC data or identity documents for any purpose not directly related to player verification and regulatory compliance.

7. Sharing Personal Data with Third Parties

bc999 does not sell personal data to third parties. bc999 may share personal data with the following categories of recipients where necessary and under appropriate contractual safeguards:

• Payment service providers — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and card network processors — for the purpose of executing deposit and withdrawal transactions in PKR.
• KYC and identity verification providers — third-party services that assist bc999 in verifying CNIC authenticity and conducting liveness checks.
• Fraud detection and cybersecurity partners — who provide risk scoring, device fingerprinting, and anomaly detection services to protect the bc999 Platform.
• Game content providers — such as Pragmatic Play, PG Soft, and Hacksaw Gaming — who may receive anonymised session and technical data for game performance monitoring purposes.
• IT infrastructure and cloud hosting providers — who host the bc999 Platform and store player data on bc999's behalf under strict data processing agreements.
• Legal and regulatory authorities — where bc999 is required by applicable law, court order, or regulatory direction to disclose personal data. bc999 will notify affected players of any such disclosure request where legally permitted to do so.

8. International Data Transfers

8.1 bc999 operates infrastructure that may be located outside Pakistan. Where personal data is transferred to servers or third-party processors outside Pakistan, bc999 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to maintain an equivalent level of protection to that described in this Policy.

8.2 By registering a bc999 account, you acknowledge that your personal data may be processed on servers located outside Pakistan for the purposes described in this Policy.

9. Data Retention

9.1 bc999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal obligations.

9.2 Active account data — including identity, contact, financial, and transactional data — is retained for the lifetime of the bc999 account plus a minimum of five (5) years following account closure, to comply with anti-money-laundering record-keeping obligations.

9.3 KYC identity documents (CNIC copies and selfie photographs) are retained for the same period as account data or longer where required by applicable law.

9.4 Support communications and live chat transcripts are retained for a minimum of two (2) years from the date of the communication.

9.5 Technical logs, including IP access logs and session data, are retained for a minimum of twelve (12) months.

9.6 After the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

10. Cookies and Tracking Technologies

10.1 bc999.biz uses cookies and similar tracking technologies to operate the Platform, maintain player sessions, personalise content, and gather analytics data about how the Platform is used. The following categories of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality including login session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options on bc999.
• Analytics cookies: Collect anonymised or pseudonymised usage data to help bc999 understand which features are most used and how the Platform can be improved.
• Security cookies: Used by fraud detection systems to identify and mitigate suspicious access patterns on bc999.

10.2 You may disable non-essential cookies through your browser settings. Disabling strictly necessary cookies may impair your ability to log in and use bc999.

11. Security Measures

11.1 bc999 implements the following technical and organisational security measures to protect player personal data:

• 256-bit TLS encryption on all data transmissions between your device and bc999 servers;
• Encryption at rest for sensitive data categories including payment references and KYC documents;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments of the bc999 Platform;
• Multi-factor authentication requirements for staff accessing player data systems;
• Automated anomaly detection and alerting for unusual data access patterns.

11.2 While bc999 takes all commercially reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their bc999 account and to enable SMS OTP two-factor authentication from their account security settings.

12. Your Rights as a Data Subject

Subject to applicable law, bc999 players have the following rights in relation to their personal data:

• Right of access: You may request a copy of the personal data bc999 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held on your bc999 account.
• Right to erasure: You may request deletion of your personal data, subject to bc999's legal retention obligations (see Section 9). Erasure requests will be assessed against applicable legal requirements before processing.
• Right to restrict processing: You may request that bc999 restrict processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where technically feasible, you may request an export of your bc999 account and transactional data in a structured, machine-readable format.
• Right to withdraw consent: Where bc999 processes your data on the basis of consent (e.g., marketing emails), you may withdraw that consent at any time via your account settings or by contacting support.

To exercise any of the above rights, contact bc999 support via live chat or email as detailed in Section 16. bc999 will respond to rights requests within 30 days.

13. Children and Minors

bc999 is strictly an adult platform. The Platform is not directed at, nor does it knowingly collect personal data from, individuals under the age of 18. If bc999 becomes aware that personal data has been collected from a person under 18 years of age, that data will be deleted and the associated account closed immediately.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gaming platforms including bc999.biz.

14. Marketing Communications

14.1 bc999 may send promotional communications including bonus offers, loyalty programme updates, and bc999 Platform news to Players who have opted in to receive such communications at the time of registration or subsequently via account settings.

14.2 You may opt out of marketing communications at any time by: (a) updating your communication preferences in bc999 account settings; or (b) contacting bc999 support via live chat or email and requesting removal from marketing lists.

14.3 Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, account security alerts, or responses to support queries — these are sent as part of the bc999 service contract and cannot be disabled while your account is active.

15. Changes to This Privacy Policy

15.1 bc999 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via email or an in-Platform notification at least 7 days before the amended Policy takes effect.

15.2 Continued use of bc999 after the effective date of an amended Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated Policy, you must cease using bc999 and request account closure before the effective date.

15.3 The current version of this Privacy Policy is always accessible at bc999.biz/privacy-policy. The "Last updated" date at the top of this page reflects the date of the most recent revision.

16. Contact – Data Queries & Complaints

For all privacy-related queries, data subject rights requests, or complaints about bc999's data handling practices, please contact us through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on bc999.biz
• Support Tickets: Submitted via the bc999 account support panel; responded to within 24 hours

bc999 handles all data-related inquiries in English. Urdu-friendly assistance is available on request for Pakistani players who prefer to communicate in Urdu.