bts999 Privacy Policy

1 About This Privacy Policy

This Privacy Policy ("Policy") applies to the bts999 platform, accessible at bts999.app, and all related services, applications, and communications operated under the bts999 brand. It describes how bts999 ("we", "us", "the Platform") collects, processes, stores, and protects the personal data of users ("you", "Player") who access or interact with the platform.

This Policy should be read alongside the bts999 Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference into this document. By creating a bts999 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of applicable data protection law, bts999 acts as the data controller for personal data collected from players who access the platform. As data controller, bts999 is responsible for determining the purposes and means of processing your personal information in connection with the services offered on the platform.

bts999 operates under an international gaming licence. The platform is made available to Pakistani players on the basis described in these policies. All data processing activities are conducted in accordance with the applicable regulatory framework governing the platform's licensed operations.

For all privacy-related enquiries, players may contact the bts999 data protection point of contact by emailing [email protected] with the subject line "Privacy Enquiry". bts999 aims to respond to all privacy enquiries within 14 calendar days.

3 Personal Data We Collect

bts999 collects personal data across the following categories depending on your interaction with the platform:

3.1 Registration & Identity Data

• Full name as it appears on your official Pakistani identity document (CNIC or passport)
• Date of birth (used to verify you meet the 21+ age requirement)
• Pakistani mobile number (used as your primary account identifier and for OTP authentication)
• Email address (used for account notifications and support communications)
• Residential address in Pakistan

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (CNIC, passport, or driving licence)
• Proof of address documentation where required
• Proof of payment method ownership where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method type used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank)
• Transaction reference numbers provided by the payment processor
• Account balance history and bonus transaction records

3.4 Gaming Activity Data

• Games played, bet amounts, win and loss records, and session durations
• Sports betting selections, stake values, and settlement records
• Use of responsible gaming tools (deposit limits, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geographical location derived from IP
• Device type, operating system, browser type and version
• Session logs, access timestamps, and navigation data within the platform
• Cookie identifiers and similar tracking technologies (see Section 9)

3.6 Communications Data

• Content of support chat conversations and email exchanges with bts999
• Feedback, complaint records, and any other correspondence you send to bts999

4 How We Collect Your Data

bts999 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, use live chat or email support, or participate in promotions.
• Automatically: When you access or use the bts999 platform, technical and device data is collected automatically through server logs, cookies, and similar technologies embedded in the platform.
• From payment processors: Transaction confirmation data is received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you complete a deposit or withdrawal. This data is limited to confirmation references, amounts, and timestamps — bts999 does not receive your full payment credentials.
• From fraud prevention and identity verification services: Where third-party services are used to assist with KYC verification or fraud screening, bts999 may receive verification status information from those providers.

5 Purposes & Legal Basis for Processing

bts999 processes your personal data for specific, legitimate purposes. The table below outlines the primary processing purposes and the legal basis on which each relies:

6 Data Sharing & Disclosure

bts999 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. Personal data may be disclosed to the following categories of recipient only where necessary and proportionate:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the data necessary to process your transaction — typically name, amount, and account reference. Full payment credentials are not stored or forwarded by bts999.
• Identity Verification Providers: Where third-party KYC services are used, document images and verification status may be shared with those providers under data processing agreements that restrict their use of your data to verification purposes only.
• Fraud Prevention Services: IP addresses, device fingerprints, and transaction patterns may be shared with fraud detection partners to identify and prevent fraudulent activity on the platform.
• Technology Service Providers: Companies that provide hosting, infrastructure, analytics, and customer support tooling may process data on behalf of bts999 under contractual data processing agreements with strict usage restrictions.
• Regulatory and Law Enforcement Authorities: bts999 will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so under applicable law, a court order, or where disclosure is necessary to prevent serious harm or criminal activity.
• Corporate Transactions: In the event of a merger, acquisition, or sale of platform assets, player data may be transferred to the successor entity subject to equivalent privacy protections.

7 International Data Transfers

bts999 operates platform infrastructure that may involve the storage or processing of personal data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide the same level of data protection as the country in which it was collected, bts999 implements appropriate safeguards to ensure your data remains protected.

These safeguards may include contractual data protection clauses in agreements with service providers, technical security measures such as encryption of data at rest and in transit, and access controls that restrict who can view or process your personal information within bts999's operational infrastructure.

By using the bts999 platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan as described above.

8 Data Retention

bts999 retains personal data for as long as your account is active and for a defined period thereafter, determined by the following retention principles:

• Active account data: Retained throughout the life of your bts999 account.
• Closed account data: Retained for a minimum of five years following account closure to meet anti-money laundering regulatory requirements and to handle any post-closure disputes or regulatory inquiries.
• KYC documentation: Retained for the period required under the applicable AML regulatory framework of bts999's operating licence jurisdiction.
• Transaction records: Retained for the regulatory minimum period applicable under AML obligations, typically five years from the date of each transaction.
• Support communications: Retained for up to three years from the date of the final communication, or longer if the communication relates to an unresolved dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of the consent and for one year thereafter to evidence that consent was validly obtained.

Personal data that is no longer required for any purpose and for which no regulatory retention obligation exists will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9 Cookies & Tracking Technologies

bts999 uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to improve the user experience, and to gather anonymised analytical data about how the platform is used.

9.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These enable session management, login authentication, and security features. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings and game display preferences to personalise your experience on return visits.
• Analytical Cookies: Collect aggregated, anonymised data about how players navigate and use the platform. This data is used internally to identify usability issues and improve platform performance.
• Security Cookies: Used for fraud detection and device fingerprinting purposes, helping bts999 identify suspicious login attempts and protect your account from unauthorised access.

9.2 Managing Cookies

You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from accessing the bts999 platform, though certain personalisation features may be unavailable. Disabling essential cookies may prevent the platform from functioning correctly.

10 Security Measures

bts999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bts999 servers
• Encryption of sensitive data fields at rest within bts999 databases
• OTP-based two-factor authentication for account login, using your registered Pakistani mobile number
• Role-based access controls limiting internal access to personal data to authorised personnel only, on a need-to-know basis
• Regular security assessments and vulnerability scanning of platform infrastructure
• Firewall and intrusion detection systems protecting the server environment
• Segregated storage of payment credentials, which are handled exclusively by the relevant payment provider rather than stored on bts999 infrastructure

While bts999 applies industry-standard security measures, no online platform can guarantee absolute security against all possible threats. Players are encouraged to maintain strong, unique passwords for their bts999 account and to enable OTP authentication.

11 Your Data Rights

As a bts999 player whose personal data is processed in accordance with this Policy, you hold the following rights in relation to that data. To exercise any of these rights, contact bts999 support at [email protected] with the subject line "Data Rights Request". bts999 will respond within 30 days.

• Right of Access: You may request a copy of the personal data bts999 holds about you, including information on how it is used and with whom it has been shared.
• Right to Rectification: If personal data bts999 holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request that bts999 delete the personal data it holds about you. This right is subject to overriding legal obligations, including AML record-keeping requirements, which may prevent immediate or complete erasure.
• Right to Restrict Processing: You may request that bts999 restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is disputed.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request a copy of the personal data you have provided to bts999 in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. bts999 will consider such objections but may be required to continue processing where there are overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12 Children & Minors

bts999 is strictly an adult platform for users aged 21 and above. bts999 does not knowingly collect personal data from any person under the age of 21. If bts999 discovers or is made aware that a registered account holder is under 21 years of age, the account will be immediately suspended, any deposits returned to the original payment method, and all associated personal data deleted in accordance with applicable data protection obligations.

If you believe a minor has registered on bts999 or that your minor child has accessed the platform, please contact bts999 support immediately at [email protected] so that the matter can be investigated and resolved without delay.

13 Marketing Communications

bts999 may send you promotional communications, including information about new bonuses, game releases, PSL betting promotions, and exclusive VIP offers, where you have provided your consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences within your bts999 account dashboard or by contacting support. Withdrawal of marketing consent does not affect the delivery of transactional and account-related notifications, which are sent regardless of marketing preferences as they are necessary for the operation of your account.

bts999 does not send unsolicited marketing messages to individuals who have not registered on the platform or who have not consented to receive marketing communications.

14 Third-Party Links

The bts999 platform may contain links to third-party content, including game provider interfaces and payment processor pages. bts999 is not responsible for the privacy practices of third-party platforms or services accessed through the bts999 interface. Players are encouraged to review the privacy policies of any third-party services they interact with in connection with their use of bts999.

bts999 has no control over and assumes no responsibility for the content, privacy policies, or data handling practices of any third-party websites or services that are not operated by bts999.

15 Updates to This Privacy Policy

bts999 reserves the right to update this Privacy Policy at any time to reflect changes in platform operations, regulatory requirements, or data processing practices. When material changes are made, bts999 will notify registered players via their registered mobile number or email address prior to the changes taking effect.

The effective date at the top of this Policy indicates the date on which the current version entered into force. Continued use of the bts999 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. Players who do not agree with the updated Policy should cease using the platform and contact support to close their account.

Previous versions of this Policy are available on request by contacting bts999 support.

16 Contact & Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bts999, please contact us through the following channel:

• Email: [email protected] — use subject line "Privacy Enquiry" for data protection matters
• Live Chat: Available 24/7 from within your logged-in bts999 account dashboard

bts999 aims to acknowledge all privacy enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where a request involves a significant volume of data or requires legal review, the response period may be extended by a further 30 days, with notice of the extension provided to the requester.