bc9999 Privacy Policy

The data controller responsible for your personal information is the legal entity operating bc9999.ws under an active international gaming licence (hereinafter referred to as "bc9999", "we", "us", or "our"). bc9999 determines the purposes and means by which your personal data is processed in connection with your use of the bc9999 Platform and its associated Services.

bc9999 has appointed a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection legislation. The DPO can be contacted via the email address provided in Section 13 of this Policy. All data subject requests, including requests to access, rectify, or erase personal data, should be directed to the DPO through that contact channel.

This Privacy Policy applies to all personal data collected, processed, or stored by bc9999 in connection with:

• The registration and maintenance of a player Account on bc9999.ws.
• The use of any game, betting, cashier, or support service offered through the bc9999 Platform.
• Communications between you and bc9999 via live chat, email, or any other channel.
• Your browsing of bc9999.ws, including non-registered visits tracked through cookies and analytics tools as described in Section 7.
• The processing of deposits and withdrawals made through any payment method supported by bc9999, including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank.

This Policy does not apply to third-party websites or services that may be linked to or accessible from bc9999.ws. Those third parties operate their own independent privacy policies and bc9999 accepts no responsibility for their data practices.

bc9999 collects personal data through three primary mechanisms: information you provide directly, information collected automatically through your use of the Platform, and information received from third parties as part of our legal compliance obligations.

Information you provide directly includes your full legal name, date of birth, CNIC number, residential address, email address, mobile phone number, financial account details for payment processing, identity document images submitted during KYC, and any information you share in communications with bc9999's support team.

Information collected automatically includes your IP address, device identifier, browser type and version, operating system, session timestamps, pages visited, games played, bets placed, and cookie data as described in Section 7.

Information from third parties includes identity verification results from KYC service providers, fraud risk scores from payment processors, and, where required by law, information from regulatory authorities or law enforcement agencies.

bc9999 uses your personal data for the following specific, documented purposes:

• Account management: Creating, maintaining, and servicing your bc9999 Account, including processing login requests, managing your balance, and providing access to the game lobby and cashier.
• Identity and age verification: Confirming that you meet bc9999's eligibility requirements, including the 21+ age restriction and the requirement that you are not subject to an active self-exclusion, using the identity documents you submit during KYC.
• Payment processing: Processing deposits and withdrawal requests via your chosen payment method, verifying that payment accounts are registered in your name, and maintaining transaction records as required by bc9999's AML obligations.
• Fraud prevention and security: Monitoring Account activity for unusual patterns, detecting unauthorised access attempts, and protecting the bc9999 Platform and its players from fraudulent activity.
• Responsible gaming: Monitoring gameplay data to identify patterns potentially indicative of problem gambling and, where appropriate, contacting players to offer responsible gaming support as required by bc9999's international licence.
• Regulatory compliance: Meeting bc9999's ongoing obligations under its international gaming licence, including maintaining records of player activity and financial transactions for regulatory audit purposes.
• Customer support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have given their explicit consent to receive such communications. Marketing communications can be opted out of at any time.

bc9999 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases bc9999 relies upon are as follows:

• Contract performance: Processing necessary to fulfil bc9999's obligations to you under the Terms & Conditions you accepted upon registration — including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with bc9999's international gaming licence conditions, including KYC verification, AML record-keeping, age verification, and regulatory reporting.
• Legitimate interests: Processing necessary for bc9999's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, and responsible gaming monitoring.
• Consent: Processing based on your explicit, freely given consent — specifically, the sending of marketing communications. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

bc9999 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. bc9999 shares personal data with third parties only in the following strictly limited circumstances:

• Service providers: bc9999 engages third-party service providers to assist with specific operational functions, including KYC verification, payment processing, fraud detection, and IT infrastructure. These providers are contractually bound to process your data only on bc9999's instructions and may not use it for their own purposes.
• Game providers: Game content on bc9999 is supplied by third-party software providers. These providers may receive limited technical data (such as session tokens or bet amounts) necessary to operate their games. They do not receive your identity data or financial account details.
• Regulatory and law enforcement authorities: bc9999 is obligated under its international gaming licence to cooperate with regulatory authorities and, where required by law, with law enforcement agencies. bc9999 will disclose personal data to such authorities when legally required to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bc9999's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

bc9999 uses cookies and similar tracking technologies on bc9999.ws. Cookies are small text files stored on your device by your browser. bc9999 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function — including session management, login state persistence, and security tokens. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences — such as language settings, display preferences, and last-visited sections of the Platform — to provide a more personalised experience on your next visit.
• Analytics cookies: Collect anonymised data about how players use bc9999.ws — which pages are visited most, how long sessions last, and where technical errors occur — to help bc9999 improve the Platform. No personally identifiable information is included in analytics data.
• Security cookies: Used by bc9999's fraud detection systems to identify and flag anomalous browsing patterns or login attempts from unrecognised devices.

You may manage your cookie preferences through your browser's settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect certain personalisation features. bc9999 does not use third-party advertising or behavioural targeting cookies.

bc9999 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law. The following retention schedules apply:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five years following Account closure, in compliance with bc9999's AML and licensing obligations.
• Financial transaction records: Retained for a minimum of five years following each transaction, as required by bc9999's AML compliance programme and international gaming licence conditions.
• Gaming activity logs: Retained for a minimum of three years following Account closure, for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two years following the resolution of each support interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the period during which you hold an active Account plus three years following Account closure, as evidence of consent status.
• Technical and security logs: Retained for a maximum of 12 months, after which they are permanently deleted unless required for an active investigation.

Following the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised so that it can no longer be associated with any individual.

As a registered player on bc9999, you have the following rights with respect to the personal data bc9999 holds about you. To exercise any of these rights, contact bc9999's support team via the channels listed in Section 13:

• Right of access: You may request a copy of all personal data bc9999 holds about you. bc9999 will provide a structured data export within 30 calendar days of a verified request.
• Right to rectification: If any data bc9999 holds about you is inaccurate or incomplete, you may request correction at any time by contacting bc9999's support team and providing updated documentation.
• Right to erasure: You may request deletion of your personal data following Account closure. bc9999 will delete all data that is not subject to a mandatory legal retention obligation and will clearly explain which data must be retained and the reason.
• Right to restriction of processing: Where you contest the accuracy of data bc9999 holds, or where processing is unlawful but you prefer restriction over deletion, you may request that bc9999 restrict processing of that data pending resolution.
• Right to data portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request that bc9999 provide your data in a structured, machine-readable format suitable for transfer to another service provider.
• Right to withdraw consent: Where bc9999 processes your data on the basis of consent (specifically, marketing communications), you may withdraw that consent at any time without affecting any processing that occurred before the withdrawal.

bc9999 implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bc9999's servers.
• AES-256 encryption for personal data stored in bc9999's databases and file systems.
• Strict role-based access controls ensuring that bc9999 staff can access personal data only to the extent required for their specific job function.
• Two-factor authentication required for all bc9999 staff accessing systems that contain personal data.
• Regular independent security audits and penetration testing of bc9999's infrastructure by certified third-party security firms.
• Incident response procedures that ensure bc9999 can detect, contain, and remediate data security incidents promptly, and notify affected players where required.

In the event of a data security incident that poses a risk to your rights and freedoms, bc9999 will notify you at your registered email address without undue delay and will provide full details of the nature of the incident, the data affected, the likely consequences, and the steps bc9999 has taken or is taking to address it.

bc9999's Services are strictly for individuals aged 21 years and over. bc9999 does not knowingly collect or process personal data belonging to individuals under the age of 21. If bc9999 becomes aware that an Account has been registered by or on behalf of an individual under 21, bc9999 will immediately suspend the Account, delete all associated personal data to the extent not required for legal or regulatory purposes, and return any deposited funds to the originating payment method.

Parents and guardians who become aware that a minor under their care has registered an Account on bc9999 are requested to notify bc9999's support team immediately via live chat or email. bc9999 will take prompt action upon receipt of any such notification.

bc9999 reserves the right to amend this Privacy Policy at any time in response to changes in applicable data protection law, changes in bc9999's processing activities, or changes required by bc9999's international gaming licence. When material changes are made to this Policy, bc9999 will notify registered players by email to their registered email address and/or by a prominent notice on bc9999.ws at least 14 days prior to the amended Policy taking effect.

The version number and effective date displayed at the top of this document indicate the current version in effect. Previous versions are archived and available upon written request to bc9999's Data Protection Officer. Your continued use of bc9999's Services following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of the data protection rights described in Section 9, or need to contact bc9999's Data Protection Officer for any reason, please use one of the following channels:

• Email (Data Protection Officer): [email protected] — for all data subject requests, privacy enquiries, and formal complaints relating to bc9999's data practices. Please include "DATA PROTECTION REQUEST" in the subject line. Response time is typically within 5 business days for acknowledgment and 30 calendar days for substantive response.
• Live Chat: Available 24/7 from within your logged-in bc9999 Account. Suitable for urgent privacy matters, including suspected unauthorised access to your Account or immediate data security concerns. bc9999's support team can escalate privacy matters to the Data Protection Officer directly from live chat.

When contacting bc9999 regarding a data subject request, please have your registered email address, Account username (if applicable), and a copy of your CNIC or government-issued photo ID available to allow bc9999 to verify your identity before processing the request.