BK 999 Privacy Policy – How We Protect Your Data

1. Who We Are

This Privacy Policy applies to BK 999, the online sports betting and gaming platform accessible at bk999.cash. When this policy refers to "BK 999", "we", "us", or "our", it means the operator of the BK 999 platform.

BK 999 is the data controller for the personal information you provide when registering and using the platform. As data controller, we are responsible for deciding how and why your personal data is processed, and we are accountable for ensuring it is handled in accordance with applicable data protection principles.

This Privacy Policy is written in plain English specifically for our Pakistani user base. We want you to clearly understand what happens with your data — not have to wade through dense legalese to find out. If any part of this policy is unclear, contact our support team at support@bk999.cash before proceeding.

This Policy should be read together with the BK 999 Terms and Conditions and the Responsible Gaming Policy. By using BK 999, you confirm that you have read and understood this Privacy Policy.

2. Personal Data We Collect

BK 999 collects personal data across several categories. Below is a clear breakdown of the types of information we hold about registered players.

3. How We Collect Your Data

BK 999 collects personal data through the following means:

• Registration form: When you create a BK 999 account, you provide your name, date of birth, email address, and phone number.
• Identity verification: When we request KYC documents — CNIC, passport, or proof of address — you upload these directly to our secure verification system.
• Payment processing: When you make a deposit or request a withdrawal, payment details are captured to process the transaction.
• Platform usage: As you use BK 999 — browsing markets, placing bets, using live chat — we automatically log activity data including IP address, device identifiers, and session information.
• Cookies and similar technologies: Our platform uses cookies and similar tracking technologies as described in Section 9 of this Policy.
• Third-party identity checks: We may receive supplementary identity or fraud-screening information from third-party verification services as part of our KYC process.

4. How BK 999 Uses Your Personal Data

Every use of your personal data by BK 999 has a specific, legitimate purpose. We do not use your data for purposes beyond those stated in this policy without first obtaining your consent. Here is how your data is used:

• Account management: Creating, maintaining, and administering your BK 999 account, including login verification, balance management, and account security.
• Payment processing: Executing deposits and withdrawals in PKR through your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard).
• Identity verification: Confirming that you are who you say you are and that you meet the eligibility requirements to use BK 999, including age verification and KYC checks.
• Anti-money laundering (AML) compliance: Monitoring transactions and account activity for patterns consistent with money laundering or other financial crimes, as required by applicable law.
• Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent accounts, bonus abuse, identity theft, and other security threats.
• Responsible gaming: Using betting activity and session data to identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion and deposit limit tools.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of support interactions.
• Platform improvement: Using aggregated, anonymised usage data to improve the platform's features, performance, and user experience.
• Marketing communications: Sending promotional offers and platform updates by email or SMS — only where you have opted in to receive such communications.
• Legal compliance: Meeting our obligations under applicable laws and responding to lawful requests from regulatory bodies or law enforcement authorities.

5. Legal Basis for Processing

Every time BK 999 processes your personal data, we do so on one of the following legal bases:

• Contract performance: Processing necessary to fulfil the contract between you and BK 999 — this covers account operation, bet settlement, and payment processing.
• Legal obligation: Processing required to comply with our legal and regulatory obligations, including KYC identity verification, AML transaction monitoring, and age verification requirements.
• Legitimate interests: Processing necessary for BK 999's legitimate business interests where these are not overridden by your rights — including fraud detection, platform security, and customer service improvement.
• Consent: Where we rely on your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

BK 999 does not sell, rent, or trade your personal data. We share your data only in the specific circumstances described below, and only to the extent necessary for each purpose.

• Payment processors: Your financial data is shared with payment service providers (such as Easypaisa, JazzCash, NayaPay, or card processors) solely to execute deposit and withdrawal transactions.
• Identity verification providers: We use regulated third-party KYC verification services to check identity documents. These providers process your data under strict data processing agreements.
• Fraud screening services: Third-party fraud prevention tools may receive certain account and transaction data to generate risk assessments.
• Technology and hosting providers: Our platform infrastructure is hosted on secure servers. Hosting and platform providers may have limited access to data as part of service delivery, under contractual confidentiality obligations.
• Legal and regulatory authorities: Where required by law or in response to a lawful request from a competent authority — such as Pakistan's Financial Monitoring Unit (FMU) — we may be required to disclose account and transaction data.
• Business restructuring: In the event of a merger, acquisition, or sale of the BK 999 business, your data may transfer to the acquiring entity. You will be notified of any such transfer.

7. How Long We Keep Your Data

BK 999 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law.

When the relevant retention period expires, data is securely deleted or anonymised so it can no longer be linked to any individual.

8. How We Secure Your Data

Data security is a core operational priority at BK 999, not an afterthought. We implement multiple layers of protection:

• SSL/TLS encryption: All data transmitted between your device and our servers is encrypted in transit using up-to-date SSL/TLS protocols.
• Encrypted storage: Sensitive data — including payment details and identity documents — is encrypted at rest in our database systems.
• Access controls: Strict role-based access controls limit which BK 999 staff can access personal data. Access is granted on a need-to-know basis only.
• Two-factor authentication: BK 999 supports two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA to protect your account.
• Regular security assessments: BK 999 conducts periodic security reviews and vulnerability assessments of its platform infrastructure.
• Staff training: All BK 999 staff with access to personal data receive data protection training and are bound by confidentiality obligations.

Despite these measures, no internet-based system is 100% secure. In the unlikely event of a data breach that affects your rights, BK 999 will notify affected players as promptly as possible and take immediate steps to contain and remediate the incident.

9. Cookies and Tracking Technologies

BK 999 uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform effectively and improve your experience.

The types of cookies we use are:

• Strictly necessary cookies: Essential to the operation of the platform. These enable login sessions, security features, and core functionality. You cannot opt out of these without breaking the platform. No consent is required for these.
• Performance cookies: These help us understand how players interact with the platform — which pages are visited most, where errors occur, and how load times can be improved. Data is aggregated and does not identify individuals.
• Functional cookies: These remember your preferences — such as your preferred language or last-visited sport — to improve convenience on return visits.
• Analytics cookies: We use analytics tools to understand broad usage patterns on the platform. Where we use third-party analytics, those providers process data under strict data processing agreements and are not permitted to use the data for their own purposes.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. Most modern browsers allow you to block, delete, or review cookies at any time.

10. Your Data Rights

As a BK 999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@bk999.cash with the subject line "Data Rights Request".

We will respond to all data rights requests within 30 days. In complex cases we may extend this by a further 60 days and will inform you if this is necessary.

11. Minors and Under-18 Players

BK 999 is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory step in our registration and KYC process.

If BK 999 discovers that it has inadvertently collected data from a minor, the account will be immediately suspended, data will be securely deleted (except where legally required to retain it for fraud reporting purposes), and any deposited funds will be returned to the verified source.

If you believe a minor has created a BK 999 account, please contact us at support@bk999.cash immediately. We take underage gambling extremely seriously and will act promptly on all such reports.

12. International Data Transfers

BK 999 operates primarily for Pakistani players and processes most data within the platform's primary operational infrastructure. In some cases, data may be processed by third-party service providers — such as cloud hosting providers, KYC verification services, or fraud screening tools — who operate infrastructure outside Pakistan.

Where your data is transferred internationally, BK 999 ensures that appropriate safeguards are in place. These may include contractual data protection clauses, adequacy decisions, or other legally recognised transfer mechanisms. We only work with service providers who can demonstrate adequate data protection standards.

If you have questions about where your data is processed, you are entitled to request this information by contacting support@bk999.cash.

13. Changes to This Privacy Policy

BK 999 may update this Privacy Policy from time to time to reflect changes in the platform, our data practices, or applicable legal requirements. The date shown at the top of this page reflects when the policy was last updated.

When material changes are made to this Policy, registered players will be notified by email to their registered address and/or by a notice displayed on the platform. Your continued use of BK 999 after a policy update constitutes your acknowledgement of the revised policy.

14. Contact BK 999 on Privacy Matters

If you have any questions, concerns, or requests relating to this Privacy Policy or how BK 999 handles your personal data, please get in touch:

• Email: support@bk999.cash (subject: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available 24/7 from inside your logged-in BK 999 account
• FAQ: Common questions about account data are answered on the FAQ page

We aim to acknowledge all privacy-related emails within 24 hours and to provide a full response within 30 days. For urgent data security concerns — such as suspected unauthorised access to your account — please contact live chat immediately for the fastest response.