At 999bk, we take the privacy and security of your personal data seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have over your own information.
Six core principles that govern every data decision at 999bk. These are not just policies — they are the operational standards we hold ourselves to every day.
999bk collects only the data it genuinely needs for account management, KYC compliance, payment processing, responsible gaming, and support. We do not collect data speculatively or build data profiles beyond what is necessary for providing the 999bk service.
All data transmitted between your device and 999bk is protected by 256-bit SSL/TLS encryption. Personal data at rest — including CNIC copies and financial records — is stored encrypted with access controls limiting who within 999bk can view sensitive fields.
999bk does not sell, rent, or commercially exploit your personal data to any third party for their own marketing or commercial purposes. Your data exists to make 999bk work for you — nothing else. This policy has no exceptions and no monetisation carve-outs.
You have the right to access, correct, and request deletion of your personal data. You can opt out of marketing communications at any time. Data subject requests are handled within 30 days of receipt via [email protected]. No charge applies to standard access requests.
999bk retains personal data only for as long as necessary to fulfil the original collection purpose, or as required by applicable regulatory obligations. KYC and transaction records are retained for the period mandated by our gaming licence. Inactive account data is reviewed and deleted on schedule.
Data handling at 999bk complies with the requirements of our international gaming licence and applicable international data protection standards. We cooperate with regulatory bodies where required and conduct periodic internal reviews of our data practices.
This Privacy Policy ("Policy") sets out how 999bk ("999bk", "we", "us", "our") collects, processes, stores, uses, and protects personal data about users ("you", "your") who access or use the 999bk online gaming platform at 999bk.one and all associated services.
This Policy applies to all personal data collected in connection with your 999bk account registration, KYC verification, deposits, withdrawals, gaming activity, customer support interactions, and any other engagement with the 999bk platform. It covers users accessing 999bk from all locations, including Pakistan — Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and all other cities and regions.
This Policy forms an integral part of the 999bk Terms & Conditions. By registering for a 999bk account or otherwise using any 999bk service, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.
We collect personal data to run your 999bk account, verify your identity, process transactions, and comply with regulatory requirements. We protect it with encryption, don't sell it to third parties, and give you meaningful control over it. If you ever want to know exactly what data we hold about you, just ask.
999bk is the data controller responsible for personal data collected through the 999bk platform. As data controller, 999bk determines the purposes for which and the means by which personal data is processed, and bears responsibility for ensuring that processing is carried out in compliance with this Policy and applicable data protection standards.
For all data protection enquiries, access requests, correction requests, or complaints, please contact 999bk at [email protected]. All data subject requests are handled in accordance with Section 9 of this Policy.
999bk collects personal data across several categories depending on the nature of your interaction with the platform. We collect only what is necessary and proportionate to the purposes described in Section 4.
999bk uses collected personal data for the following purposes only. Any new processing purpose beyond those listed below will be communicated to you before it commences.
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining, and operating your 999bk account, including login authentication and account security. |
| KYC & Age Verification | Verifying your identity and confirming you are 21 years of age or older as required by our gaming licence and responsible gaming obligations. |
| Payment Processing | Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, SadaPay, and other accepted methods in PKR. |
| Gaming Services | Delivering the casino, sports betting, and instant game services; recording bets, settling outcomes, and managing balances. |
| Regulatory Compliance | Fulfilling obligations under our international gaming licence, including AML/KYC requirements, responsible gaming standards, and regulatory reporting. |
| Fraud & Security | Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and platform abuse. |
| Customer Support | Responding to queries, resolving disputes, processing complaints, and providing account assistance. |
| Responsible Gaming | Administering deposit limits, self-exclusion, cool-off periods, and other responsible gaming tools; monitoring for signs of problem gambling. |
| Service Improvement | Analysing aggregated, anonymised platform usage to improve product features, performance, and user experience. |
| Marketing (opt-in) | Sending promotional offers, bonus notifications, and platform updates to users who have consented to receive them. Opt-out available at any time. |
999bk processes personal data on the following legal bases as applicable to each processing activity:
999bk does not sell, rent, or commercially share your personal data with any third party for their own independent purposes. Personal data is shared with third parties only in the following strictly limited circumstances:
999bk engages trusted third-party service providers to assist in operating the platform. These providers process personal data on 999bk's behalf and are contractually bound by strict data processing agreements requiring them to handle data only as instructed by 999bk and in compliance with applicable data protection standards. Categories include:
999bk may disclose personal data to regulatory authorities, law enforcement agencies, gaming licence supervisors, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. 999bk will, where legally permitted, notify the affected User before making such disclosure.
Under no circumstances does 999bk sell, license, or otherwise commercially transfer your personal data to any third party for that party's own marketing, profiling, or commercial exploitation purposes. This prohibition is absolute and unconditional.
As an internationally licensed online gaming platform, 999bk may transfer personal data to and process it in countries outside of Pakistan, including the jurisdiction of our gaming licence and the locations of our cloud infrastructure and service providers.
Where personal data is transferred internationally, 999bk ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections described in this Policy. Safeguards include contractual data processing agreements with recipient organisations, use of certified cloud infrastructure providers, and compliance with the data protection requirements of our gaming licence jurisdiction.
By using the 999bk platform, you acknowledge that your personal data may be transferred, stored, and processed outside of Pakistan as described in this Section. If you have concerns about international transfers of your data, please contact us at [email protected].
999bk retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following general retention principles apply:
| Data Category | Retention Period |
|---|---|
| Account & Registration Data | Duration of active account plus 5 years following account closure, or longer if required by applicable gaming licence regulations. |
| KYC Documents (CNIC etc.) | Minimum 5 years from the date of verification, or as mandated by applicable AML regulations under the gaming licence framework. |
| Transaction Records | Minimum 5 years from transaction date in accordance with financial record-keeping requirements of the gaming licence jurisdiction. |
| Gaming Activity Logs | Duration of active account plus 2 years. Dispute-related records retained until resolution plus applicable limitation period. |
| Support Communications | 2 years from the date of the last interaction, or until the associated account is closed plus 1 year. |
| Marketing Preferences | Until the User withdraws consent or closes their account. |
| Self-Exclusion Records | Duration of exclusion period plus 5 years to prevent circumvention of self-exclusion through re-registration. |
Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 999bk's internal data lifecycle management procedures.
As a user of the 999bk platform, you have the following rights in relation to your personal data. 999bk is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights below, please contact [email protected] with your request.
You may request a copy of all personal data 999bk holds about you. We will provide a structured summary within 30 days of a verified request at no charge.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account details can be updated via Account Settings or support.
You may request deletion of your personal data where it is no longer necessary for the purposes collected. Note that regulatory retention obligations may prevent full deletion in certain categories.
You may request that 999bk restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested or a legitimate interest objection is under review.
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
You may object to processing based on legitimate interests, including direct marketing. Marketing opt-out takes effect immediately upon request. Legitimate interest objections are assessed case by case.
The 999bk platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. This section explains what cookies we use and how you can control them.
| Cookie Type | Required? | Purpose |
|---|---|---|
| Essential | YES | Login session maintenance, security tokens, fraud prevention, load balancing. Cannot be disabled without breaking platform functionality. |
| Functional | Optional | Remembering your preferences — language, display settings, last game played. Enhances convenience but not required for core services. |
| Analytics | Optional | Aggregated, anonymised platform usage analysis to improve performance and features. No individual profiling. Requires consent where applicable. |
| Marketing | Consent | Delivery of relevant promotional content to users who have opted in to marketing communications. Strictly consent-based and opt-out available at any time. |
You may manage your cookie preferences via the Cookie Settings panel accessible from the 999bk platform footer. You may also control cookies at browser level — consult your browser's help documentation for instructions. Please note that disabling essential cookies will impair or prevent access to the 999bk platform.
999bk implements technical and organisational security measures proportionate to the risks associated with processing personal data. Security is treated as an ongoing operational commitment, not a one-time implementation exercise.
In the event of a personal data breach that poses a risk to your rights and freedoms, 999bk will notify affected Users without undue delay and take all necessary remediation steps. Regulatory authorities will be notified in accordance with the requirements of our gaming licence jurisdiction.
While 999bk takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are also responsible for maintaining the confidentiality of your account credentials and for using secure network connections when accessing your 999bk account.
The 999bk platform is strictly intended for adults aged 21 years and over. 999bk does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. Age verification is conducted as part of the KYC process and all accounts are subject to this requirement without exception.
If 999bk becomes aware that personal data has been collected from an individual under the age of 21, all such data will be permanently deleted without delay, the associated account will be closed, and any balance will be returned to the verified payment method. Where fraud or misrepresentation is identified in connection with underage access, the matter may be referred to appropriate authorities.
If you have reason to believe that a person under 21 has accessed or is attempting to access 999bk, please notify us immediately at [email protected]. We take underage access extremely seriously and will act on all credible reports without delay.
The 999bk platform may contain references to third-party services such as payment provider interfaces (JazzCash, EasyPaisa) and game studio environments. These third-party environments operate under their own privacy policies and data handling practices, which are independent of this Policy.
999bk is not responsible for the privacy practices of any third-party service provider or platform. We encourage you to review the privacy policies of any third-party service you interact with in connection with your 999bk account. Our selection of third-party service providers is based in part on their demonstrated commitment to data protection standards compatible with our own.
999bk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. Material changes to this Policy will be communicated to registered Users via the email address associated with their 999bk account and via a prominent notice on the platform prior to the changes taking effect.
The effective date displayed at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this Policy periodically to remain informed of how 999bk handles your personal data. Continued use of the 999bk platform following the effective date of any revision constitutes acceptance of the updated Policy.
Where changes materially affect your rights or the way we handle particularly sensitive data categories, we will provide a minimum of 14 days' prior notice before the revised Policy takes effect, except where immediate implementation is required to comply with a legal or regulatory obligation.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 999bk handles your personal data, please do not hesitate to contact our support team. We are committed to responding to all data-related enquiries promptly and transparently.
When submitting a data subject request, please include your registered account username or mobile number and a clear description of your request to enable the fastest possible identification and processing of your query. Identity verification may be required before certain requests can be fulfilled, to protect against unauthorised access to your data.
If you are not satisfied with the way 999bk has handled your data or responded to your request, you may also raise the matter with the relevant regulatory authority under our gaming licence jurisdiction. 999bk cooperates fully with all regulatory oversight of its data handling practices.
With your privacy secured by encryption, regulatory compliance, and a no-data-selling commitment, explore 500+ slots, live PSL cricket betting, and 24/7 live casino — all in PKR.
21+ only. Gambling involves financial risk. Please play responsibly. Our Terms & Conditions and Responsible Gaming policy apply to all 999bk services.