bn99 Privacy Policy

1 Who We Are

bn99 is an online casino and sports betting platform accessible at bn99.im, operated by its licensed parent entity under international gaming regulations. The bn99 platform provides Pakistani players with access to live cricket betting, PSL markets, slot games, live dealer casino tables, and a range of promotional features, all transacted in Pakistani Rupees (PKR) through locally supported payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.

For the purposes of this Privacy Policy, bn99 acts as the data controller — meaning we are the entity that determines the purposes and means of processing your personal data. When we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by written data processing agreements that restrict how they may use your information.

Any questions or requests relating to this Privacy Policy should be directed to our support team at [email protected]. We will respond to all privacy-related enquiries within 10 business days of receipt.

2 Information We Collect

bn99 collects personal information through several channels: directly from you when you register or use the platform, automatically through your use of our website, and from third-party service providers where permitted. The categories of personal information we collect are described below.

We do not collect any special category data (such as biometric data, health data, political opinions, or religious beliefs) unless expressly required by a specific regulatory obligation, in which case we will notify you separately and obtain your explicit consent.

3 How We Use Your Data

bn99 uses the personal data we collect for the following purposes. Each purpose is linked to a specific legal basis, which is described in Section 4.

• Account creation and management: Processing your registration, maintaining your account profile, authenticating your login sessions, and managing account settings including deposit limits and self-exclusion preferences.
• Service delivery: Enabling you to place bets on cricket and PSL markets, play slot games, access live dealer tables, and use all other platform features that form the core of the bn99 service.
• Payment processing: Receiving and verifying your deposits via JazzCash, EasyPaisa, and linked bank accounts; processing withdrawal requests to your verified payment methods; maintaining an accurate transaction ledger for your account.
• Identity and age verification: Conducting KYC checks to confirm that you are who you say you are and that you meet the 21+ age requirement for access to bn99.
• Regulatory compliance: Fulfilling obligations under applicable anti-money laundering, counter-terrorism financing, and gaming regulatory frameworks, including responding to lawful requests from regulatory authorities.
• Fraud prevention and platform integrity: Detecting and investigating suspicious activity, bonus abuse, multi-accounting, use of prohibited software, and any other conduct that violates the bn99 Terms and Conditions.
• Responsible gaming monitoring: Analysing play patterns to identify potential signs of problem gambling behaviour and, where appropriate, applying responsible gaming interventions such as account restrictions or outreach messages.
• Customer support: Investigating and resolving queries, complaints, and disputes submitted through live chat or email.
• Marketing communications: Sending promotional offers, bonus alerts, PSL season updates, and new game notifications — but only where you have provided explicit opt-in consent to receive such communications.
• Platform improvement: Using aggregated and anonymised usage data to understand how players interact with the bn99 platform, identify technical issues, and improve the overall user experience.

4 Legal Basis for Processing

Every processing activity carried out by bn99 is supported by one or more of the following legal bases:

• Contractual necessity: Processing your registration data, operating your account, facilitating deposits and withdrawals, and delivering the gaming services you have requested are all necessary for bn99 to perform its contractual obligations to you as a Player.
• Legal obligation: KYC verification, AML screening, transaction monitoring, and record-keeping activities are carried out to comply with the legal obligations placed on bn99 as a licensed gaming operator.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and analytics for platform improvement are conducted in pursuit of bn99's legitimate business interests, provided those interests are not overridden by your data protection rights.
• Consent: Marketing communications, non-essential cookies, and any processing of special category data are carried out solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Cookies & Tracking Technologies

bn99 uses cookies and similar tracking technologies on the bn99.im website to ensure the platform functions correctly and to understand how visitors use it. A cookie is a small text file stored on your device by your web browser when you visit a website.

You can manage your cookie preferences at any time through the cookie settings panel available in the footer of every bn99 page, or by adjusting your browser settings directly. Please note that disabling strictly necessary cookies may impair the functionality of the bn99 platform, including your ability to log in and access your account.

6 Third-Party Sharing

bn99 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly as necessary for the purposes described in this Privacy Policy:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive the minimum transactional data required to process your deposits and withdrawals.
• Identity verification providers: KYC and AML screening service providers receive identity documents and reference data to complete the verification process required by our regulatory obligations.
• Gaming software providers: The third-party developers of slot games, live dealer platforms, and sports data feeds may receive session identifiers and anonymised gameplay data necessary to deliver and audit their games within the bn99 platform.
• Customer support infrastructure: Third-party platforms that power our live chat and ticketing systems process communication data in the course of support interactions.
• Regulatory and law enforcement authorities: Where bn99 is legally required to do so — for example, in response to a lawful court order, regulatory directive, or AML investigation — we will disclose personal data to the relevant authority. We will not make such disclosures voluntarily and will always seek legal guidance before doing so.
• Fraud prevention agencies: Where an account is suspected of fraudulent activity or financial crime, relevant data may be shared with cross-industry fraud prevention agencies to protect the integrity of the wider financial system.

7 Payment Data & Financial Information

bn99 handles financial data with particular care given its sensitive nature. When you make a deposit via JazzCash, EasyPaisa, a linked bank account, or USDT TRC20, your payment credentials are processed directly by the relevant payment service provider through their own secure infrastructure. bn99 does not store full bank account numbers, JazzCash PINs, or EasyPaisa mPIN values on its own servers at any point.

What bn99 does retain in connection with your financial transactions includes:

• Transaction reference numbers issued by the payment provider.
• The payment method type (e.g., JazzCash, EasyPaisa, HBL) and the partially masked account identifier (e.g., the last four digits of a mobile number or account number) used for the transaction.
• The PKR amount, date, time, and status of each deposit and withdrawal processed through your bn99 account.
• The name of the account holder as provided to bn99 during KYC verification, for the purpose of confirming that deposits and withdrawals are made to and from accounts in your own name.

This financial transaction data is retained for a minimum of seven years in compliance with standard financial record-keeping requirements applicable to licensed gaming operators.

8 Data Retention

bn99 retains personal data for different periods depending on the category of data and the purpose for which it was collected. The table below summarises our standard retention periods:

When a retention period expires, bn99 will securely delete or irreversibly anonymise the relevant personal data. Deletion requests submitted by Players are processed in accordance with Section 9, subject to any overriding legal obligations that require us to retain specific data for longer than you may request.

9 Your Privacy Rights

As a bn99 player, you hold the following rights in relation to your personal data. These rights may be exercised by contacting our support team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data that bn99 holds about you, along with information about how it is used, who it is shared with, and how long it will be retained.
• Right to Rectification: If any personal data bn99 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to bn99's legal obligations to retain certain records.
• Right to Restrict Processing: You may request that we temporarily suspend certain processing activities — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you believe your individual rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications or analytical cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.
• Right to Data Portability: You may request that we provide personal data you have supplied to us in a structured, commonly used, machine-readable format, or transfer it directly to another controller where technically feasible.

10 Data Security

bn99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• TLS 1.2 or higher encryption for all data in transit between your device and the bn99 platform infrastructure.
• AES-256 encryption for sensitive data stored at rest on bn99 servers, including KYC documents and financial reference data.
• Role-based access controls ensuring that only authorised personnel with a business need can access personal data, and that all access is logged and auditable.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Multi-factor authentication requirements for all internal administrative systems that handle personal data.
• Formal data breach response procedures, including obligations to notify affected Players and relevant regulatory authorities where a breach meets the threshold for mandatory notification.

While bn99 takes all reasonable precautions to protect your data, no system transmitted over the internet is completely secure. You are encouraged to maintain strong, unique account credentials and to report any suspected unauthorised access to your bn99 account immediately at [email protected].

11 Children & Minors

The bn99 platform is strictly intended for adults aged 21 and above. bn99 does not knowingly collect, process, or retain personal data from any individual under the age of 21. All registration applicants are required to confirm their age during the sign-up process, and this is independently verified through the KYC process before withdrawals are enabled.

If bn99 discovers that an account has been created by an individual who is under the age of 21, that account will be immediately and permanently suspended, access to the platform will be revoked, and all personal data associated with the account will be deleted in accordance with our data retention policy and any applicable legal obligations.

12 International Data Transfers

As an internationally operated platform, bn99 may process or store your personal data in countries outside of Pakistan, including the jurisdiction in which bn99's servers and licensed parent entity are based. These jurisdictions may have data protection laws that differ from those applicable in Pakistan.

Where personal data is transferred internationally, bn99 takes appropriate steps to ensure that the transfer is carried out in compliance with applicable data protection standards. These steps include:

• Ensuring that the recipient jurisdiction provides an adequate level of data protection as determined by applicable regulatory guidance.
• Where adequacy decisions do not apply, implementing appropriate safeguards such as standard contractual clauses or binding corporate rules between bn99 and the receiving entity.
• Restricting the volume and sensitivity of data transferred internationally to the minimum necessary for the relevant processing purpose.

You may request further information about the specific safeguards in place for any international transfer of your personal data by contacting our support team.

13 Changes to This Privacy Policy

bn99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. When material changes are made to this Privacy Policy, we will notify active Players by email to the address registered on their bn99 account, or by displaying a prominent notice on the bn99.im website, no less than 7 days before the changes take effect.

The "Last updated" date displayed at the top of this page reflects when the most recent version of this Privacy Policy took effect. We encourage all Players to review this page periodically. Your continued use of the bn99 platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy.

If you have any concerns about a proposed change to this Privacy Policy, you may contact us at [email protected] before the effective date to discuss your concerns or, if you do not accept the revised terms, to request closure of your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bn99 handles your personal data, please reach out to our dedicated privacy support team. We are committed to addressing all privacy-related enquiries promptly and transparently.