At 999bv, protecting the personal data of our players — across Karachi, Lahore, Faisalabad, Islamabad, and every city in Pakistan — is a responsibility we take seriously. This Privacy Policy explains exactly what personal information 999bv collects, why we collect it, how we use and store it, who we share it with, and what rights you have over your own data.
Six principles that govern how 999bv handles every piece of personal data it holds.
999bv collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect data speculatively or hold information beyond the retention periods defined below. Every data field collected from Pakistani users serves a documented, legitimate purpose.
All personal data held by 999bv is stored on encrypted, access-controlled servers. Sensitive data — including CNIC details, payment method information, and authentication credentials — is stored using industry-standard encryption protocols and is never stored in plain text under any circumstances.
999bv does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Data sharing with third parties is limited strictly to service providers who assist in operating the 999bv platform and who are contractually bound to protect your data to the same standard we apply ourselves.
As a 999bv account holder, you have defined rights over your personal data — including rights of access, correction, erasure, and portability. These rights are described in full in Section 9 of this Policy and can be exercised by contacting our Data Protection team directly.
999bv retains personal data only for as long as necessary to fulfil the purposes for which it was collected — or as required by our licensing obligations and applicable law. After retention periods expire, data is securely deleted or irreversibly anonymised in accordance with our data lifecycle policy.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 999bv will notify affected users without undue delay and will take immediate remedial action. We also maintain internal incident response procedures reviewed regularly by our security team.
This Privacy Policy ("Policy") is published by 999bv ("999bv", "we", "us", "our") and applies to all personal data processed in connection with your use of the 999bv website, sportsbook, 999bv Casino, payment services, mobile interface, customer support functions, and any other services offered by 999bv (collectively, the "Platform").
By registering an account with 999bv, depositing funds, placing bets, playing casino games, or otherwise accessing any part of the 999bv Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.
This Policy should be read alongside the 999bv Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall agreement between you and 999bv. In the event of any conflict between this Policy and any other document, this Privacy Policy shall prevail with respect to data protection matters.
This Policy tells you what data 999bv collects when you use the platform, why we need it, how long we keep it, who we might share it with, and what you can do if you want to see, change, or delete it. We collect only what we genuinely need, protect it rigorously, and never sell it to advertisers.
For the purposes of applicable data protection law, the data controller responsible for your personal data is 999bv, operating under an international online gaming licence. 999bv is the entity that determines the purposes and means by which your personal data is processed in connection with the Platform.
As a Pakistani user of the 999bv Platform, you are providing your personal data to 999bv in its capacity as an internationally licensed gaming operator. The 999bv Data Protection Officer ("DPO") oversees compliance with this Policy and can be contacted using the details set out in Section 14 below.
Where 999bv engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, or analytics partners — those providers act as data processors and are contractually required to process data only on 999bv's instructions and to apply data protection standards equivalent to those required of 999bv under its licensing obligations.
999bv collects personal data from you in the following circumstances: when you register an account, when you use the Platform (including betting, gaming, and payment activity), when you contact customer support, and through automated technical means when you access the Platform. The categories of personal data we collect are as follows:
999bv does not intentionally collect special category personal data (such as health information, biometric data, or political opinions) as part of standard Platform operations. Where a user voluntarily discloses health-related information in the context of a responsible gaming interaction — for example, disclosing a gambling disorder — that information is treated with the highest degree of confidentiality and used solely to facilitate appropriate support measures.
The personal data collected by 999bv is used for the following purposes, each of which is associated with a defined legal basis as described in Section 5:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration & identity data, device data |
| Age and identity verification (KYC) | Identity data, CNIC documentation |
| Payment processing — deposits & withdrawals | Financial & payment data, identity data |
| Anti-money laundering (AML) and fraud detection | All categories, particularly financial and technical data |
| Sportsbook and casino service delivery | Gaming & betting activity data, financial data |
| Customer support (Urdu & English) | Communications data, account data |
| Responsible gaming monitoring and intervention | Gaming activity, communications, account data |
| Personalised promotions and bonus delivery | Gaming activity, registration data |
| Platform security and fraud prevention | Technical & device data, financial data |
| Regulatory compliance and licensing obligations | All categories |
999bv does not use automated decision-making processes that produce legal or similarly significant effects on users, other than in the context of fraud detection and AML screening, where automated systems may flag accounts for human review. You have the right to request human review of any automated decision that affects your account.
999bv processes your personal data on the following legal bases, as applicable to each processing purpose:
Where processing is based on consent, withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. Withdrawal of consent for certain processing activities may result in 999bv being unable to provide all or part of the Platform services to you.
999bv shares personal data with third parties only in the limited circumstances described below. In all cases, data sharing is subject to contractual safeguards requiring the recipient to maintain data protection standards equivalent to those applied by 999bv itself.
999bv engages the following categories of service providers who may access personal data in the course of delivering services to 999bv:
999bv may disclose personal data to its licensing authority, to law enforcement agencies, or to other regulatory bodies where required to do so by law or by a valid legal process. 999bv will, where legally permitted, notify you of any such disclosure.
In the event that 999bv undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by 999bv may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change in data processing practices that results from it.
999bv does not sell, rent, lease, or otherwise commercially exploit your personal data for the benefit of third-party advertisers, data brokers, or marketing organisations. Your data is used exclusively for the purposes described in this Policy and to operate and improve the 999bv Platform for Pakistani users.
999bv uses cookies and similar tracking technologies on the Platform to facilitate core functionality, improve the user experience, and support security and fraud detection. The following categories of cookies are used by 999bv:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing — required for the Platform to function. Cannot be disabled without breaking core functionality. | Session / 24 hours |
| Functional | Remembering user preferences (language, display settings, odds format), previously viewed sports and game categories. | 30 days |
| Analytics | Aggregated usage data to understand how Pakistani users navigate the Platform, identify errors, and improve performance. No individual profiling. | 90 days |
| Security & Fraud | Device fingerprinting and risk scoring to detect fraudulent activity, multiple account creation, and bot traffic. | Up to 12 months |
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the 999bv Platform and may prevent you from logging in or using core services. 999bv does not use third-party advertising cookies or retargeting pixels that track your browsing activity outside the 999bv Platform.
999bv retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised. Retention periods are determined by the purpose for which data was collected and by applicable regulatory requirements under 999bv's international gaming licence.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | Licensing & AML obligations |
| Transaction records | 7 years from transaction date | Financial regulatory requirements |
| Betting & gaming records | 5 years from account closure | Licensing obligations & dispute resolution |
| Support communications | 3 years from last interaction | Legitimate interest — service quality |
| Technical & device logs | 12 months from collection | Security & fraud prevention |
| Marketing preferences | Until consent withdrawn + 12 months | Consent |
Where data is retained beyond the period of active account use — for example, to comply with AML regulations — access to such retained data is restricted to authorised personnel only and is subject to additional access controls. Upon expiry of the applicable retention period, data is deleted using secure erasure methods that prevent reconstruction.
As a user of the 999bv Platform, you have the following rights in relation to your personal data. These rights can be exercised free of charge by contacting 999bv's Data Protection team using the contact details in Section 14. 999bv will respond to all valid rights requests within 30 days of receipt.
You have the right to request a copy of all personal data held by 999bv about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of a verified request.
If any personal data held by 999bv about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Updates to core identity data may require re-verification via CNIC.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, where you withdraw consent, or where processing is unlawful. Erasure requests are subject to overriding legal retention obligations.
You may request that 999bv restricts processing of your data while a correction request or objection is assessed, or where processing is unlawful and you prefer restriction to erasure.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a machine-readable format transferable to another controller.
You have the right to object to processing of your personal data where 999bv relies on legitimate interests as the legal basis. 999bv will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
To exercise any of the above rights, contact the 999bv Data Protection team at [email protected] with the subject line "Data Rights Request". You will be asked to verify your identity before we process your request. We aim to respond within 30 days; complex requests may require up to a further 60 days, in which case we will notify you of the extension and the reasons for it.
The 999bv Platform is strictly restricted to individuals aged 21 years and above. 999bv does not knowingly collect, process, or retain personal data relating to any person under the age of 21. This restriction reflects both our licensing obligations and our commitment to responsible gaming as a core value of the 999bv Platform.
All 999bv account registration processes include mandatory age declaration and are followed by identity verification procedures that confirm the account holder's date of birth via CNIC documentation. Any account discovered to belong to an individual under 21 years of age will be immediately and permanently closed, all associated personal data will be deleted to the extent permitted by law, and any funds held in the account will be handled in accordance with our Terms & Conditions.
If you believe that a person under the age of 21 has registered an account on the 999bv Platform, please contact our support team immediately so that the matter can be investigated and the account closed without delay.
999bv treats the 21+ age requirement as an absolute rule — not a guideline. All verification procedures are designed to detect and prevent underage access. Parents and guardians in Pakistan who are concerned about a minor's access to online gambling should contact our responsible gaming team immediately. We take every report of underage access seriously and act on it promptly.
999bv implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:
Despite these measures, no internet-based service can guarantee absolute security. You remain responsible for maintaining the confidentiality of your 999bv account credentials and for notifying us immediately of any suspected unauthorised access to your account.
As an internationally licensed gaming platform serving Pakistani players, 999bv may transfer your personal data to countries outside Pakistan in the course of providing the Platform services. Such transfers may occur where service providers — such as identity verification specialists, game providers, or analytics platforms — are located in, or process data in, jurisdictions outside Pakistan.
Where personal data is transferred outside Pakistan to a third country, 999bv implements appropriate safeguards to ensure that your data receives equivalent protection to that which it would receive within a jurisdiction subject to international gaming licence data protection requirements. Safeguards employed by 999bv for international data transfers include:
You may request further information about the safeguards applicable to specific international transfers by contacting 999bv's Data Protection team as described in Section 14.
999bv reviews this Privacy Policy periodically and reserves the right to update it to reflect changes in our data processing practices, changes in applicable law, or changes in our Platform services. The date of the most recent revision is displayed prominently at the top of this Policy page and within the 999bv account help documentation.
Where changes to this Policy are material — meaning they significantly alter your rights or the way 999bv handles your personal data — 999bv will notify registered users via their registered mobile number or email address at least 14 days before the changes take effect, where reasonably practicable to do so.
Your continued use of the 999bv Platform following notification of any change to this Policy constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact our support team to discuss the closure of your account.
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 999bv holds about you, please contact us using the details below. All data-related enquiries are handled by our Data Protection team, who aim to respond within 5 business days for general enquiries and within 30 days for formal data rights requests.
If you are dissatisfied with 999bv's response to your data protection enquiry or rights request, you may escalate the matter to the data protection supervisory authority in 999bv's licensing jurisdiction, or to the relevant Pakistani digital rights body where applicable. Details of the appropriate supervisory authority will be provided upon request.
For responsible gaming concerns specifically — including self-exclusion requests, account access issues, or concerns about a family member's use of 999bv — please visit our dedicated Responsible Gaming page or contact our responsible gaming advisory team directly via live chat.
Now that you understand exactly how 999bv protects your personal data, log in to your account and access Pakistan's most trusted cricket betting, live casino, and slots experience — with JazzCash and EasyPaisa supported from day one.
21+ only. Please gamble responsibly. See our Responsible Gaming page for full details.