bm999 Privacy Policy — Your Data, Your Rights, Our Obligations

1 About This Privacy Policy

This Privacy Policy ("Policy") describes how bm999 ("the Company", "we", "us", "our") collects, uses, stores, and protects personal data provided by individuals ("Players", "you", "your") who register for and use the bm999 online casino and sports betting platform, accessible at bm999.casino ("the Platform").

This Policy applies to all personal data collected through the bm999 Platform, including data provided during account registration, data generated through gameplay activity, data provided when contacting bm999 support, and data collected automatically through platform usage. It should be read alongside the bm999 Terms & Conditions, which are incorporated here by reference.

By registering a bm999 account or continuing to use the Platform, Pakistani players acknowledge that they have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the bm999 Platform and contact us at [email protected] to close your account.

2 Data Controller

bm999 is the data controller responsible for the personal data of Pakistani players collected and processed through the Platform. As data controller, bm999 determines the purposes for which personal data is collected and the means by which it is processed.

All data-related queries, access requests, correction requests, and deletion requests from Pakistani players should be directed to the bm999 Data Privacy contact at: [email protected]

3 Personal Data We Collect

bm999 collects personal data from Pakistani players through the following channels and in the following categories:

3.1 Registration Data

When you create a bm999 account, we collect the information you provide, including:

• Full legal name
• Date of birth (for age verification — 18+ requirement)
• Pakistani national identity number (CNIC) or passport number
• Registered email address
• Pakistani mobile number
• Residential address in Pakistan
• Chosen username and encrypted password

3.2 KYC Verification Data

To comply with Know Your Customer obligations and process withdrawals, bm999 may collect documentary evidence including scanned copies of your CNIC, passport, proof of Pakistani address, and proof of payment method ownership (for example, a screenshot of your Easypaisa or JazzCash account showing your registered name and mobile number).

3.3 Financial Transaction Data

bm999 records all PKR deposit and withdrawal transactions made through your account, including transaction amounts, timestamps, payment method references (such as Easypaisa transaction IDs or HBL bank reference numbers), and transaction status. Note that bm999 does not store full payment card numbers; card tokenisation is handled by our PCI-compliant payment processor.

3.4 Gameplay and Account Activity Data

bm999 automatically records gameplay activity associated with your account, including game sessions, bet amounts in PKR, game outcomes, bonus usage, and session duration. This data is used for account administration, dispute resolution, responsible gaming monitoring, and platform improvement.

3.5 Device and Technical Data

When you access the bm999 Platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, and approximate geographic location based on IP address (used to confirm Pakistan access and for fraud prevention). We do not use this data to build personal profiles for advertising outside the bm999 Platform.

3.6 Support Communications

Any communications you send to the bm999 support team — including live chat transcripts, emails, and in-app messages — are retained for a period necessary for customer service quality, dispute resolution, and legal compliance purposes.

4 How We Use Your Personal Data

5 Legal Bases for Processing

bm999 processes the personal data of Pakistani players on the following legal bases:

• Contractual necessity: Processing required to fulfil bm999's obligations to registered players under the Terms & Conditions — including account administration, payment processing, and platform delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, KYC obligations, and other legal requirements applicable to bm999's operations.
• Legitimate interests: Processing carried out for bm999's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — primarily direct marketing communications. You may withdraw consent at any time via your bm999 account settings or by contacting [email protected].

6 Cookies & Tracking Technologies

The bm999 Platform uses cookies and similar tracking technologies to enable essential platform functionality, maintain login sessions, remember user preferences, and collect anonymised analytics data to improve the platform experience for Pakistani players.

6.1 Types of Cookies Used

• Essential cookies: Required for the bm999 Platform to function correctly. These cannot be disabled without breaking platform functionality and do not require consent.
• Session cookies: Maintain your bm999 login session while you are actively using the Platform. These expire when you close your browser or log out.
• Analytics cookies: Collect anonymised data on how Pakistani players navigate and use the bm999 Platform. This data is used only for internal platform improvement and is not sold to third parties.
• Preference cookies: Remember your language, display, and notification settings on the bm999 Platform across sessions.

7 Sharing Your Personal Data

bm999 does not sell the personal data of Pakistani players to third parties. We share personal data only with trusted parties under the following circumstances:

• Payment processors: Personal and transaction data is shared with our PKR payment processing partners (including Easypaisa, JazzCash, and HBL payment gateway providers) solely for the purpose of processing your transactions. These processors are contractually bound to use your data only for this purpose.
• KYC verification services: Identity documents provided for account verification may be shared with third-party KYC verification service providers operating under strict data processing agreements with bm999.
• Game software providers: Gameplay session data may be shared with the providers of individual games available on the bm999 Platform for the purpose of game operation, fairness certification, and dispute resolution. Game providers operate under data processing agreements with bm999.
• Legal and regulatory authorities: bm999 will disclose personal data to law enforcement, regulatory bodies, or other government authorities in Pakistan when required to do so by law, court order, or binding regulatory requirement.
• Fraud prevention services: Device and transaction data may be shared with specialist fraud detection services to protect the bm999 Platform and its registered Pakistani players from fraudulent activity.

8 Data Retention

bm999 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following guidelines:

• Active account data: Retained throughout the lifetime of your active bm999 account.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable anti-money laundering regulations.
• KYC verification documents: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for active dispute resolution.
• Marketing consent records: Retained for the duration of the consent plus an additional three (3) years to demonstrate compliance.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked back to any individual player.

When personal data reaches the end of its retention period, bm999 will securely delete or irreversibly anonymise that data. Requests by Pakistani players for early deletion are handled in accordance with Section 10 of this Policy.

9 Security Measures

bm999 implements a comprehensive set of technical and organisational security measures to protect the personal data of Pakistani players against unauthorised access, accidental loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between Pakistani players' devices and bm999 servers
• Encrypted storage of personal data and financial records at rest
• Multi-factor authentication requirements for internal bm999 staff access to player data systems
• Role-based access controls limiting internal data access to staff with a documented operational need
• Regular security audits and penetration testing of the bm999 Platform infrastructure
• Automated monitoring for unusual access patterns or data exfiltration attempts
• Incident response procedures with defined notification timelines in the event of a data breach affecting Pakistani players

10 Your Data Rights

Pakistani players registered on the bm999 Platform hold the following rights in relation to their personal data. To exercise any of these rights, contact bm999 at [email protected] with the subject line "Data Rights Request". bm999 will respond within 30 days of receiving a valid request.

11 Marketing Communications

bm999 may send Pakistani players marketing communications about promotions, new game launches, HBL PSL season offers, Bundesliga betting specials, and Wolf Gold jackpot events by email or SMS, where you have given explicit consent to receive such communications at the time of bm999 account registration or subsequently through your account settings.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your bm999 account settings
• Clicking the "unsubscribe" link in any bm999 marketing email
• Contacting bm999 support at [email protected] with the subject line "Unsubscribe"

Withdrawal of marketing consent does not affect transactional communications — bm999 will continue to send you account-related notifications such as deposit confirmations, withdrawal processing updates, and security alerts, as these are necessary for the operation of your account.

12 Personal Data and Responsible Gaming

bm999 processes gameplay activity data and account behaviour data as part of our responsible gaming monitoring programme. This processing serves the legitimate interest of identifying Pakistani players who may be showing signs of problem gambling and proactively offering support resources or account controls.

Where a Pakistani player has activated a self-exclusion from the bm999 Platform, their personal data will be retained in a restricted self-exclusion register for the duration of the self-exclusion period and the subsequent retention period applicable under this Policy. This is necessary to prevent the self-excluded player from re-registering a bm999 account during the exclusion period — a protection that operates in the player's own interest.

13 Changes to This Privacy Policy

bm999 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer to Pakistani players. Material changes will be communicated to registered players via their bm999 account email address no less than fourteen (14) days before the updated Policy takes effect, except where immediate implementation is required by law.

The current version of this Privacy Policy is always available at bm999.casino/privacy-policy and carries a "Last Updated" date at the top of the document. Your continued use of the bm999 Platform following the effective date of any update constitutes acceptance of the revised Policy.

14 Contact Us

For all privacy-related queries, data rights requests, or complaints regarding the handling of your personal data by bm999, please contact us using the details below. The bm999 privacy support team is available in English and aims to respond to all data-related enquiries from Pakistani players within thirty (30) days of receipt.

Privacy contact email: [email protected]

Subject line for data requests: "Data Rights Request" or "Privacy Query"

If you are not satisfied with bm999's response to your privacy concern, you may have the right to escalate the matter to the relevant data protection or consumer protection authority under applicable Pakistani law.