This Privacy Policy explains how b999 collects, processes, stores, shares, and protects personal data relating to registered players and website visitors. By using the b999 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein, as required for the operation of the b999 gaming service.
Before reading the full policy, here is a plain-English summary of how b999 approaches the privacy and data security of every Pakistani player on the platform
b999 collects only the personal data that is strictly necessary for account registration, payment processing, KYC age verification, and regulatory compliance. We do not collect data for its own sake. Every data category collected maps directly to a specific, documented purpose that we disclose in this policy.
All personal data held by b999 is stored on encrypted servers with access controls, audit logging, and regular security assessments. Data in transit between your browser and b999's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Pakistani banking institutions including HBL and Meezan Bank.
b999 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data shared with third parties — such as certified game providers, KYC verification services, or payment processors like JazzCash and EasyPaisa — is shared only under contractual data protection obligations and solely to deliver the services you use.
b999 provides Pakistani players with meaningful rights over their personal data, including the right to access, correct, export, and — where legally applicable — delete the data we hold. These rights can be exercised by contacting b999 support. We respond to all data rights requests within 30 days of receipt.
Financial data — including your JazzCash account number, EasyPaisa wallet, bank account details, and CNIC information — is classified as sensitive personal data at b999 and is subject to heightened access controls, strict need-to-know staff access, and enhanced encryption at rest. Payment credentials are never stored in plain text.
b999 will only send you promotional communications — including bonus offers, PSL cricket promotions, and new game announcements — if you have opted in to receiving marketing at registration or through your account preferences. You can withdraw marketing consent at any time through your account settings or by contacting support, with immediate effect.
b999 (referred to throughout this policy as "b999", "we", "us", or "our") is the operator of the b999.lol online gaming platform and all associated services. b999 acts as the data controller in respect of all personal data collected and processed through the b999 platform. b999 holds a valid international gaming licence issued by a recognised regulatory authority, which imposes mandatory obligations on b999 regarding the collection, processing, and retention of player personal data.
This Privacy Policy applies to all users of the b999 platform, including registered players who hold an active b999 account, former registered players whose accounts have been closed, and unregistered visitors who browse the b999 website. For the avoidance of doubt, this policy applies to all players based in Pakistan, including those located in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities and regions across the country.
b999 collects personal data through several channels, including account registration, payment transactions, KYC submissions, gameplay activity, customer support interactions, and website browsing. The categories of personal data we collect are as follows:
b999 uses the personal data collected for the following purposes:
b999 processes personal data under the following legal bases:
b999 does not sell, rent, or trade your personal data. b999 may share your personal data with the following categories of recipients, strictly for the purposes described:
Important: b999 never shares your personal data with third parties for their own marketing or commercial purposes. Any data sharing with the categories listed above is governed by contractual data protection obligations. If you have concerns about any specific data sharing practice, contact b999 support.
b999 uses cookies and similar tracking technologies on the b999 platform. A cookie is a small text file placed on your device by a website. The following categories of cookies are used by b999:
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent b999 from functioning correctly. Non-essential cookie consent can also be managed through the b999 cookie preferences panel when first accessing the site.
b999 retains personal data for the periods necessary to fulfil the purposes for which it was collected, subject to applicable regulatory minimum retention requirements. The principal retention periods applicable at b999 are:
Following expiry of the applicable retention period, b999 will securely delete or anonymise your personal data unless retention is required by a specific legal obligation, regulatory investigation, or active legal proceedings.
b999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Specific security measures in place include:
Despite these measures, no digital system is completely immune to security risk. b999 is not liable for security breaches that result from actions within your control — including sharing your credentials, using weak passwords, or accessing b999 from compromised devices. Players are strongly encouraged to enable 2FA and use unique, strong passwords for their b999 account.
Subject to applicable law and b999's regulatory obligations, you have the following rights in respect of your personal data held by b999. These rights can be exercised by contacting b999 support via live chat or the support email address. b999 will respond to all data rights requests within 30 calendar days of receipt.
| Right | What It Means | Applicable Limitations |
|---|---|---|
| Right of Access | You may request a copy of the personal data b999 holds about you, including what categories of data are held and for what purposes. | Subject to identity verification. Provided free of charge for reasonable requests. |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data held by b999. | Certain data corrections (e.g. name changes) may require documentary evidence. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. | Cannot apply where b999 has legal or regulatory obligations to retain the data (e.g. AML retention requirements). |
| Right to Data Portability | You may request a copy of the personal data you provided to b999 in a structured, machine-readable format. | Applies to data processed by automated means on the basis of consent or contract. |
| Right to Object | You may object to processing of your personal data carried out on the basis of b999's legitimate interests, including direct marketing. | Direct marketing objections are honoured immediately. Legitimate interest objections are assessed on a case-by-case basis. |
| Right to Restrict Processing | You may request that b999 temporarily restrict processing of your data in specific circumstances — for example, while a rectification request is being assessed. | May limit access to certain platform features during the restriction period. |
| Withdraw Marketing Consent | You may withdraw consent to receiving marketing communications at any time, with immediate effect, through your account preferences or by contacting support. | Withdrawal of marketing consent does not affect the lawfulness of prior processing conducted on the basis of that consent. |
b999's gaming licence imposes mandatory obligations to collect and retain identity verification documents (KYC) and to monitor account activity for indicators of money laundering and terrorist financing (AML). This processing is not optional — it is a legal requirement that b999 must fulfil as a condition of its licence.
KYC processing involves the collection, storage, and verification of your CNIC or passport, proof of payment method in your name, and where required, a facial photograph matched to your identity document. This data is processed by b999 and by authorised third-party KYC verification service providers under contractual data processing agreements. KYC data is retained for a minimum of five years from your last transaction, as required by applicable AML regulatory standards.
AML monitoring involves automated analysis of deposit amounts, withdrawal requests, transaction frequencies, source of funds indicators, and account activity patterns. Where indicators of potential financial crime are identified, b999 is required under its regulatory obligations to make disclosures to the relevant supervisory authorities without informing the player concerned (a "tipping off" restriction). Players cannot exercise data rights requests that would compromise an active AML investigation.
b999 processes gameplay data, session duration data, deposit frequency data, and loss pattern data for the purpose of responsible gaming monitoring. This processing serves b999's legitimate interest in identifying players who may be exhibiting signs of problem gambling behaviour, and its regulatory obligation to maintain responsible gaming safeguards.
Where b999's responsible gaming monitoring detects patterns associated with potential problem gambling, b999 may contact you with information about the responsible gaming tools available on your account, including deposit limits, loss limits, session time alerts, cooling-off periods, and self-exclusion. This contact is not marketing — it is a welfare-oriented interaction carried out under b999's responsible gaming obligations.
Responsible gaming limit settings you apply to your account — including self-exclusion elections — are recorded and maintained as operational data essential to the delivery of the responsible gaming protections you have chosen. This data cannot be deleted upon request during the period for which a restriction is active, as deletion would undermine the protective purpose of the restriction.
For full information on responsible gaming tools available at b999, visit the Responsible Gaming page.
The b999 platform is strictly restricted to individuals aged 21 years and above. b999 does not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the mandatory KYC process.
If b999 discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all funds will be returned to the deposit payment method (less any winnings from underage play), and all personal data associated with the account will be deleted as soon as technically practicable, except to the extent that retention is required for regulatory reporting purposes. Parents or guardians who believe a minor has accessed b999 should contact support immediately.
b999 operates internationally and may process your personal data on servers located outside Pakistan. Some of the third-party service providers used by b999 — including game providers, KYC verification services, and fraud prevention platforms — may be located in jurisdictions outside Pakistan that have different data protection frameworks.
Where personal data is transferred outside Pakistan, b999 ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that impose data protection standards equivalent to those applicable under b999's gaming licence obligations. b999 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without ensuring contractual protections are in place.
The b999 platform does not contain links to third-party external websites. All navigation within b999 remains within the b999.lol domain. This Privacy Policy applies exclusively to personal data collected and processed by b999 through the b999.lol platform. b999 is not responsible for the privacy practices of any third-party service providers, whose data handling is governed by their own privacy policies.
b999 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or b999's data processing practices. Material updates will be communicated to registered players via the email address on file or through a prominent notice displayed on the b999 platform, no less than 7 days before the updated policy takes effect.
Continued use of the b999 platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. The most current version of this Privacy Policy is always available on this page and supersedes all prior versions. The effective date at the top of this policy indicates when it was last updated.
Last updated: 1 January 2026. This version of the Privacy Policy supersedes all prior versions. Players are encouraged to review this policy periodically. If you have questions about any recent change, contact b999 support via live chat before continuing to use the platform.
If you have questions, concerns, or requests relating to this Privacy Policy or b999's data processing practices — including requests to exercise any of the data rights described in Section 9 — please contact b999 through the following channels:
b999 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to unauthorised individuals. Verification may require you to confirm details associated with your registered account.
For information about responsible gaming tools and self-exclusion, visit the Responsible Gaming page. For general platform questions, visit the FAQ page. For the full terms governing your use of b999, see the Terms & Conditions.
Transparent data practices, 256-bit encryption, zero data selling, and full player rights — all backed by international gaming licence obligations. b999 is the platform Pakistani players can trust. Strictly 21+ only.