bt999 Privacy Policy
— Your Data, Protected

1 Introduction & Scope

This Privacy Policy ("Policy") is published by bt999 ("bt999," "we," "us," or "our") and governs the collection, use, storage, disclosure, and protection of personal data submitted by or collected from individuals ("you," "the User," or "the Player") who access or use the bt999 platform, including the website at bt999.site and all associated gaming, betting, and support services offered thereunder.

bt999 is committed to handling your personal data responsibly and in accordance with internationally recognised data protection principles. We apply standards equivalent to the European Union General Data Protection Regulation (GDPR) across all our data processing activities, irrespective of the player's location, including Pakistani users accessing bt999 from Karachi, Lahore, Islamabad, Faisalabad, or any other city or region within Pakistan.

This Policy should be read in conjunction with the bt999 Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your relationship with bt999.

2 Data Controller Identity

For the purposes of applicable data protection law, bt999 acts as the Data Controller in respect of the personal data you provide when registering for and using the bt999 platform. As Data Controller, bt999 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

bt999 operates under an international gaming licence from a recognised regulatory authority. Our data protection obligations are maintained in accordance with both our licensing requirements and the data protection standards applicable in the jurisdictions where our services are offered.

If you have questions about who controls your data or how to exercise your data rights, please contact our Data Protection contact via the details provided in Section 14 of this Policy.

3 Categories of Personal Data We Collect

bt999 collects personal data across several categories, depending on how you interact with our platform. The table below summarises the categories of data collected and the primary source of collection:

bt999 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming-related information), or genetic data, unless specifically required by regulatory obligations or at your explicit request in a responsible gaming context.

4 How bt999 Uses Your Personal Data

bt999 uses the personal data we collect for the following specific, documented purposes:

• Account Creation & Management: To register and maintain your bt999 account, authenticate your identity at login, and manage your account settings and preferences across the platform.
• Service Delivery: To provide access to casino games, sports betting markets (including PSL cricket, T20 internationals, and UFC), live dealer tables, crash games, and all other bt999 gaming services.
• Payment Processing: To process your deposits via USDT, JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Bitcoin, and to process withdrawal requests to your registered payment methods.
• Identity Verification (KYC/AML): To verify your age (21+), identity, and the source of your funds in accordance with our anti-money laundering obligations and gaming licence requirements.
• Responsible Gaming Monitoring: To monitor gameplay patterns and identify potential signs of problem gambling behaviour, enabling us to fulfil our responsible gaming obligations and to implement protective measures where appropriate.
• Customer Support: To respond to your queries, process complaints, resolve disputes, and provide technical assistance when you contact the bt999 support team.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, and other security threats to the bt999 platform and to individual player accounts.
• Legal Compliance: To comply with applicable law, our gaming licence requirements, regulatory directions, court orders, and anti-money laundering reporting obligations.
• Marketing Communications (with consent): To send you promotional communications about bt999 bonuses, new games, and platform updates, where you have opted into receiving such communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: To analyse anonymised and aggregated usage data to improve the bt999 platform, enhance the user experience, and develop new features that better serve Pakistani players.

5 Legal Basis for Processing

bt999 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Performance of Contract: Processing is necessary to provide you with the services you have registered for under the bt999 Terms and Conditions, including account management, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable law, our international gaming licence requirements, anti-money laundering regulations, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary for bt999's legitimate interests — including fraud prevention, security monitoring, responsible gaming compliance, and platform improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and optional data processing activities, bt999 relies on your freely given, specific, informed, and revocable consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Cookies & Tracking Technologies

bt999 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and gather anonymised analytics data to understand how players use the bt999 site.

The following categories of cookies may be placed on your device when you access bt999:

• Strictly Necessary Cookies: Required for the bt999 platform to function. These include session authentication cookies that keep you logged in to your bt999 account and security cookies that protect against cross-site request forgery. These cannot be disabled without impacting core functionality.
• Functional Cookies: Remember your preferences, such as your chosen language, game display settings, and responsible gaming limit configurations, so that you do not need to reset them at each visit.
• Analytics Cookies: Collect anonymised data about how players navigate bt999 — which pages are most visited, how long sessions last, and which features are used most. This data is aggregated and cannot be used to identify you individually.
• Performance Cookies: Help bt999 identify and fix technical issues affecting platform performance, load times, and game delivery quality, particularly for players on mobile devices and 4G networks common among Pakistani users.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of your bt999 experience. bt999 does not use third-party advertising cookies or cross-site tracking technologies.

7 Third-Party Data Sharing

bt999 does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes. Disclosure of your personal data to third parties is limited to the following specific circumstances:

• Payment Processors: Your financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency network validators — solely to the extent required to process your deposit or withdrawal. These providers are bound by their own privacy obligations and data security standards.
• Game Software Providers: Game providers such as Pragmatic Play, Evolution Gaming, and PG Soft may receive your player ID and gameplay data to deliver their games. They do not receive your identity or financial data and are bound by strict data processing agreements with bt999.
• Identity Verification Services: During KYC verification, your identity documents may be processed by approved third-party identity verification partners who operate under strict confidentiality and data security obligations.
• Regulatory Authorities: bt999 is obligated by our gaming licence and AML regulations to report certain player activities and financial transactions to the relevant regulatory and law enforcement authorities when legally required to do so.
• Legal Requirements: bt999 may disclose personal data in response to a lawful court order, subpoena, or binding legal direction from a governmental authority or regulator with appropriate jurisdiction.

8 International Data Transfers

As an internationally operating platform, bt999 may transfer your personal data to countries or territories outside of Pakistan in connection with the provision of our services. This includes transfers to the data centres where bt999's servers are hosted, the jurisdictions where our game providers operate, and the locations of our payment processing partners.

Where personal data is transferred internationally, bt999 ensures that appropriate safeguards are in place to maintain the same level of data protection that applies within our primary operating jurisdiction. These safeguards include:

• Standard contractual clauses incorporated into data processing agreements with all international service partners.
• Transfers only to countries or entities recognised as providing an adequate level of data protection by internationally recognised standards.
• Data encryption in transit and at rest for all cross-border data transfers.

You may request further information about the specific safeguards in place for any international data transfer affecting your personal data by contacting bt999 using the details in Section 14.

9 Data Retention Periods

bt999 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, to comply with our legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply:

Upon expiry of the applicable retention period, bt999 will securely delete or anonymise your personal data in a manner that prevents recovery or reconstruction. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and analytical purposes.

10 Security Measures

bt999 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security infrastructure includes:

• Transport Security: All data transmitted between your device and bt999 is encrypted using 256-bit SSL/TLS 1.3 protocols. This applies to account login, payment processing, game data transmission, and support communications.
• Storage Security: Personal data stored on bt999 servers is encrypted at rest using AES-256 encryption standards. Backups are encrypted and stored in geographically separated secure data centres.
• Access Controls: Access to personal data within bt999 is restricted to authorised personnel who require it to perform their specific job functions. Role-based access controls, multi-factor authentication, and audit logging are enforced across all internal systems.
• Password Security: Player account passwords are stored as salted cryptographic hashes. bt999 never stores passwords in recoverable plain text form.
• Penetration Testing: bt999 conducts regular security assessments and penetration tests of our platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Breach Response: bt999 maintains a documented incident response plan. In the event of a personal data breach that poses a risk to your rights, we will notify affected players and relevant authorities in accordance with applicable law.

11 Your Data Rights

Subject to applicable law and certain limited exceptions, you have the following rights in relation to the personal data bt999 holds about you. To exercise any of these rights, please contact us using the details provided in Section 14.

• Right of Access: You may request a copy of all personal data bt999 holds about you. We will provide this in a commonly used electronic format within 30 days of receiving a verifiable request.
• Right to Rectification: If any personal data bt999 holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You may also update certain data directly through your bt999 account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that bt999 delete your personal data. This right is subject to exceptions where retention is required by law or legitimate interest — for example, transaction records held for AML compliance cannot be deleted on request.
• Right to Restriction: You may request that bt999 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or performance of a contract and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format, or transferred directly to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests and to direct marketing at any time. Marketing communications may also be opted out of directly through your bt999 account settings or by following the unsubscribe instructions in any marketing email.
• Rights Related to Automated Decision-Making: bt999 may use automated systems for fraud detection and responsible gaming monitoring. Where a significant decision affecting your account is made solely by automated means, you have the right to request human review of that decision.

bt999 will respond to all data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reason for it. bt999 will never charge a fee for a first data access request unless the request is manifestly unfounded or excessive.

12 Protection of Minors

bt999 strictly prohibits the use of its platform by individuals under the age of 21. We do not knowingly collect or process the personal data of any person who is under 21 years of age. The bt999 registration process includes age verification mechanisms designed to identify and reject registration attempts by minors.

If bt999 discovers or is credibly informed that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account, in accordance with our Terms and Conditions and age verification obligations.

13 Updates to This Privacy Policy

bt999 reserves the right to update or revise this Privacy Policy at any time, in response to changes in applicable law, our business operations, the services we offer, or our data processing practices. The current version of this Policy, including its effective date, will always be available on this page.

Where a revision to this Policy is material — meaning it significantly changes how your data is collected, used, or disclosed — bt999 will notify registered players by email or by prominent in-platform notification prior to the changes taking effect. The nature and extent of any material change will be clearly identified.

Your continued use of the bt999 platform after notification of a revised Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not accept any revised version of this Policy, you should cease using bt999 services and may request account closure by contacting our support team.

14 Contact Us — Data & Privacy Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the personal data bt999 holds about you, please contact our Data Protection team through any of the following channels:

For your security, bt999 will verify your identity before actioning any data rights request. Please be prepared to provide confirmation of your registered mobile number, account username, and in some cases a copy of your identity document.

bt999 takes all privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction or the regulatory authority overseeing bt999's gaming licence.