bn999 Privacy Policy

This Privacy Policy ("Policy") describes how bn999 ("the Company," "we," "us," "our"), the operator of the online gaming platform accessible at bn999.bio, collects, processes, stores, shares, and protects the personal data of individuals ("you," "the Player," "User") who register, access, or use any service provided through the bn999 platform.

This Policy applies to all data processing activities conducted by bn999 in connection with the operation of the platform, including registration, identity verification, deposits and withdrawals, gaming activity, customer support interactions, marketing communications, and the use of the bn999 website and any associated applications.

References to "personal data" in this Policy mean any information that relates to an identified or identifiable natural person — in other words, information that directly or indirectly identifies you as an individual. This includes your name, CNIC number, mobile number, email address, financial details, and your gaming activity records.

bn999 collects personal data from you through several means, including information you provide directly during registration and account use, information generated by your use of the platform, and in limited circumstances, information received from third-party service providers.

2.1 Data You Provide Directly

2.2 Data Generated by Platform Use

• Gaming activity data, including game sessions played, bets placed, wager amounts, game outcomes, and session durations across all bn999 products (slots, live casino, sportsbook, Monster Dice, Pearls of Bingo).
• Technical data including your device type, operating system, browser type and version, screen resolution, and internet connection type.
• Log data including IP address, login timestamps, session duration, pages and features accessed within the platform, and error logs.
• Geolocation data (country and city level, derived from IP address) used for regulatory compliance and fraud prevention.
• Responsible gaming data including any deposit limits, loss limits, session time limits, or self-exclusion elections you apply to your account.

2.3 Data Received from Third Parties

In certain circumstances, bn999 may receive personal data about you from third-party sources, including identity verification service providers used to confirm your CNIC details, payment processing partners who confirm transaction status, and regulatory databases maintained by gaming licensing authorities in connection with self-exclusion registers.

bn999 uses your personal data strictly for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those stated here without first providing you with notice and, where legally required, obtaining your consent.

bn999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and bn999 — including registering your account, processing your deposits and withdrawals, and providing you with access to the gaming services you have requested.
• Legal Obligation: Processing that is required for bn999 to comply with its obligations under applicable law and its gaming license, including anti-money-laundering verification, age verification, responsible gaming obligations, and transaction reporting to regulatory authorities.
• Legitimate Interests: Processing carried out for bn999's legitimate business interests that do not override your fundamental rights and freedoms, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services through analytics.
• Consent: Where processing is based on your consent — primarily in relation to marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

bn999 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for the specified purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK, to the extent necessary to process your deposit and withdrawal transactions. These providers are subject to their own data protection obligations.
• Identity Verification Services: Third-party KYC providers used to verify your CNIC and confirm your identity as part of bn999's age verification and AML compliance processes.
• Gaming Software Providers: Companies whose games are available on the bn999 platform may receive limited technical session data necessary for game functionality. These providers do not receive your identity or financial data.
• Regulatory Authorities: bn999's gaming licensing authority and other applicable regulatory or law enforcement bodies, where disclosure is required by law, court order, or regulatory mandate.
• Fraud Prevention Services: Third-party fraud detection and cybersecurity providers who assist bn999 in identifying and preventing fraudulent account activity, money laundering, and unauthorized access.
• Self-Exclusion Registers: Information about self-excluded players may be shared with gaming regulatory authorities or industry self-exclusion schemes as required under bn999's licensing obligations.

bn999 uses cookies and similar tracking technologies on its website and platform to provide essential functionality, improve user experience, maintain session security, and in limited cases, to understand how players interact with the platform at an aggregate level.

Types of Cookies Used by bn999:

• Strictly Necessary Cookies: Essential for the bn999 platform to function. These include session authentication cookies that keep you logged into your account, security tokens that prevent cross-site request forgery, and cookies that remember your language and display preferences. These cannot be disabled without severely impacting platform functionality.
• Functional Cookies: Remember your preferences and settings to personalise your experience on bn999, such as your preferred game category, responsible gaming notification settings, and display options. These improve convenience but are not strictly essential.
• Analytics Cookies: Used by bn999 to understand aggregate usage patterns — which features are most used, where players encounter difficulties, and how the platform can be improved. Data collected for analytics purposes is anonymised or aggregated and does not identify individual players.
• Security & Fraud Prevention: Certain tracking technologies are used to identify suspicious login patterns, detect multiple accounts, and flag potentially fraudulent behaviour. These operate in the background and are a necessary part of bn999's account security infrastructure.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the bn999 platform, including your ability to remain logged in during a gaming session.

bn999 implements a comprehensive suite of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated regularly in line with evolving security standards.

• Encryption in Transit: All data transmitted between your device and the bn999 platform is encrypted using 256-bit SSL/TLS encryption. This applies to your login credentials, payment details, and all other data exchanged during platform use.
• Encryption at Rest: Sensitive personal data stored in bn999's systems, including CNIC details and financial information, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bn999 is restricted to employees and contractors who have a legitimate need to access it for their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: All bn999 player accounts are protected by OTP-based two-factor authentication, which requires confirmation of a code sent to your registered Pakistani mobile number in addition to your password at each login.
• Segregated Player Funds: Player account balances are held in bank accounts that are kept separate from bn999's operational funds, providing an additional layer of financial protection.
• Security Monitoring: bn999 operates continuous automated monitoring of its systems to detect unusual access patterns, potential breaches, and suspicious activity in real time.

bn999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected. The specific retention periods that apply to different categories of data are set out below:

Upon expiry of the applicable retention period, personal data will be securely deleted or, where deletion is not technically feasible, anonymized so that it can no longer be used to identify you as an individual.

Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data that bn999 holds about you. To exercise any of these rights, please contact bn999 support via live chat or email at [email protected].

The bn999 platform is strictly for individuals who are 21 years of age or older. bn999 does not knowingly collect personal data from persons under the age of 21.

Age verification is a mandatory component of the bn999 registration and account verification process. All accounts are required to submit a valid Pakistani CNIC that confirms the account holder is 21 years of age or older before unrestricted platform access is granted.

As a licensed online gaming operator, bn999 operates technology infrastructure and engages service providers that may be located in jurisdictions outside of Pakistan. In the course of providing services to Pakistani players, personal data may be transferred to, stored in, or processed in countries other than Pakistan.

Where such transfers occur, bn999 takes steps to ensure that appropriate safeguards are in place to protect your personal data, including requiring that recipient countries provide an adequate level of data protection or implementing contractual clauses that impose equivalent data protection obligations on the recipient.

You acknowledge that by using the bn999 platform, your personal data may be processed in countries outside Pakistan as described in this Policy. bn999 will always ensure that such transfers are subject to appropriate protections and are carried out in compliance with applicable law.

bn999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. The revised Policy will be posted on this page at bn999.bio/privacy-policy with an updated effective date.

For material changes — those that significantly affect the nature of the data we collect, the purposes for which we use it, or the rights available to you — bn999 will notify you in advance by posting a prominent notice on the platform homepage, sending a notification to your registered email address, or displaying an in-account alert upon your next login.

Your continued use of the bn999 platform following notification of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, please contact bn999 support to discuss your options, including account closure.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which bn999 processes your personal data, or if you wish to exercise any of your data rights, please contact the bn999 data team through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, via the live chat feature inside your logged-in bn999 account dashboard. This is the fastest channel for time-sensitive data matters including suspected unauthorized access to your account.
• Email: [email protected] — for formal data rights requests, privacy complaints, and written correspondence. Please include "Privacy Request" in your subject line so your enquiry is routed to the appropriate team. bn999 targets a response time of 48 hours for privacy-related email enquiries, and 30 days for formal rights requests.

bn999 takes all privacy complaints seriously. If you submit a formal complaint and are not satisfied with the response provided, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution mechanism specified by bn999's gaming license authority.