BJ 999 Privacy Policy – How We Protect Your Personal Data

bj 999 operates the online gaming platform available at bj999.world ("the Platform"). For the purposes of this Privacy Policy, bj 999 is the data controller — meaning we are the organisation responsible for deciding how and why your personal data is collected and used.

This policy is written primarily for Pakistani players who use bj 999 for cricket betting, casino games, jackpot slots, the Aviator game, card games, and other entertainment available on the Platform. We've written it in straightforward English because we believe you have a right to understand exactly what happens with your information — not just that something happens with it.

If you have any questions, concerns, or requests regarding your personal data at any point, you can reach the bj 999 data team through the following channels:

• Email: support@bj999.world
• Live Chat: Available 24/7 from any page on the bj 999 Platform

We aim to respond to all data-related enquiries within 48 hours. For formal data rights requests (access, deletion, correction), please allow up to 30 days for full processing as required by applicable data protection regulations.

bj 999 collects personal data that is necessary to operate the Platform, comply with legal obligations, and deliver a good experience to Pakistani players. We do not collect data beyond what is needed for these purposes. Here is a clear breakdown of the categories of data we collect:

bj 999 does not collect sensitive personal data such as health information, religious beliefs, political opinions, or biometric data, unless this is specifically required for a compliance purpose and you are informed at the time of collection.

Personal data arrives at bj 999 through several different channels. Understanding these helps you know exactly what you are sharing and at which point.

Data You Provide Directly

The most straightforward category: information you type in yourself. This includes your registration details (name, mobile number, date of birth), information provided during identity verification, details you provide when contacting customer support, and any preferences you set in your account settings. At bj 999 we only ask for what we genuinely need — you won't be asked to fill in fields that serve no operational purpose.

Data Collected Automatically

When you use the bj 999 platform, certain technical data is collected automatically by our systems. This includes your IP address (used to detect suspicious login attempts and comply with geographic restrictions), your device type and browser information, and session data showing when you logged in and out. This data is collected in the background and doesn't require any action on your part — it's a standard feature of how web platforms operate securely.

Data from Payment Processors

When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or bank IBFT, the payment processor shares transaction confirmation data with bj 999 so we can credit your account correctly. bj 999 never has access to full payment credentials — we receive transaction reference numbers and confirmation statuses, not your full banking details.

Data from Identity Verification Providers

For compliance with anti-money laundering regulations, bj 999 may use a third-party identity verification service to check the documents you submit. This provider processes your document images and returns a verification result to bj 999. The provider is contractually bound to process your data only for this purpose and to maintain appropriate security standards.

bj 999 uses your personal data only for clear, legitimate purposes. Every use of your data falls into one of the categories below:

• Account Management: Creating and maintaining your bj 999 account, processing logins, managing your wallet balance, and handling account settings changes. Without this we simply cannot operate your account.
• Payment Processing: Processing deposits and withdrawals accurately and promptly, reconciling transactions, and investigating payment discrepancies. Your financial data is used only for payment purposes.
• Identity and Age Verification: Confirming that you meet the eligibility requirements set out in our Terms and Conditions — particularly the 18+ age requirement and the one-account-per-person rule. This is both a legal obligation and a responsible gaming commitment.
• Anti-Money Laundering Compliance: Monitoring transactions for signs of money laundering or other financial crime as required by applicable regulations. This includes reviewing unusual deposit or withdrawal patterns and, where required by law, reporting suspicious activity to relevant authorities.
• Customer Support: Responding to your queries, resolving account issues, and maintaining a record of support interactions so we can provide consistent, informed assistance.
• Platform Security: Detecting and preventing fraud, unauthorised account access, bot activity, and other security threats that could harm you or other bj 999 players.
• Platform Improvement: Understanding how players use bj 999 in aggregate — which games are popular, where players encounter difficulties, how the mobile experience performs — so we can make improvements that benefit everyone.
• Marketing Communications: Sending promotional offers, bonus announcements, and platform updates to players who have opted in to receive them. This is always opt-in at bj 999. You can change your marketing preferences at any time from your account settings.
• Responsible Gaming: Using session and betting data to identify patterns that might indicate a problem gambling situation, so we can offer appropriate support tools. This is a core ethical obligation at bj 999.

bj 999 does not sell your personal data to any third party. This is not a marketing claim — it is a firm operational policy. Your personal information is shared only in the specific, limited circumstances described below:

Payment Processing Partners

Easypaisa, JazzCash, NayaPay, SadaPay, and bank partners receive the minimum data necessary to process your transactions — typically your mobile number or account details alongside the transaction amount. These partners are regulated financial institutions operating under their own data protection obligations.

Identity Verification Providers

Where bj 999 uses a third-party service to verify your identity documents, that provider receives the document images and personal details necessary to conduct the verification. They are contractually bound to use this data solely for verification purposes and to maintain ISO-standard data security.

Technology Infrastructure Partners

The bj 999 platform runs on cloud hosting infrastructure and uses various software services for platform operations. These providers may process data as part of their services but do so as data processors on our behalf, under contracts that prevent them from using your data for their own purposes.

Game Software Providers

Some games available on bj 999 are provided by third-party game studios. To enable fair play and settle winnings correctly, limited gameplay data (such as bet amounts and game outcomes) is shared with relevant game providers. Personally identifiable information is not shared with game providers beyond what is strictly necessary for game operation.

Regulatory Authorities and Law Enforcement

bj 999 is required by law to share data with regulatory authorities and law enforcement agencies when legally compelled to do so — for example, in the context of anti-money laundering investigations or court orders. We do not share data with authorities voluntarily beyond our legal obligations.

Data security at bj 999 is treated as a technical and organisational responsibility, not just a policy commitment. The following measures are in place to protect your personal data:

• 256-bit SSL Encryption: All data transmitted between your device and bj 999 servers is encrypted using the same standard used by Pakistan's major commercial banks. This prevents interception of your data in transit.
• Secure Password Storage: Passwords are never stored in plain text at bj 999. They are hashed using industry-standard algorithms before storage, meaning even internal team members cannot read your password.
• Access Controls: Access to player data within bj 999 is restricted to staff who need it to perform their job functions. All internal access is logged and audited regularly.
• Intrusion Detection Systems: bj 999 operates real-time monitoring for unusual access patterns, login attempts, and other indicators of potential security breaches.
• Regular Security Audits: The Platform and its infrastructure undergo periodic independent security reviews to identify and address vulnerabilities.
• Data Minimisation: bj 999 retains only the data that is necessary and disposes of data that is no longer needed in a secure manner.

bj 999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable legal and regulatory obligations. Here is a plain-language guide to retention periods at bj 999:

• Active Account Data: Retained for the lifetime of your account plus a minimum of 5 years following account closure. This includes your identity data, transaction history, and gameplay records. The extended retention period is required by anti-money laundering regulations.
• Identity Verification Documents: Retained for a minimum of 5 years after your last transaction at bj 999, as required by applicable financial crime regulations.
• Customer Support Records: Chat logs and email correspondence are retained for 3 years from the date of the interaction, so we can maintain context for any follow-up queries.
• Technical Logs (IP addresses, session data): Retained for up to 12 months for security monitoring and fraud investigation purposes, then deleted.
• Marketing Preferences: Retained indefinitely while your account is active, so we can honour your opt-in or opt-out choices accurately. Updated immediately when you change your preferences.

When data reaches the end of its retention period, bj 999 deletes or anonymises it securely. Anonymised, aggregated data (which cannot be linked to any individual player) may be retained indefinitely for statistical and business analysis purposes.

The bj 999 platform uses cookies and similar tracking technologies to make the Platform work correctly and to improve your experience. Here is what they do and why:

Essential Cookies

These cookies are required for the Platform to function. They maintain your login session so you don't get logged out mid-game, remember your language and display preferences within a session, and enable the secure payment flow. You cannot opt out of essential cookies and continue to use bj 999, as they are fundamental to how the Platform operates.

Analytics Cookies

bj 999 uses anonymised analytics data to understand how players navigate the Platform — which sections are popular, where players drop off, and how game load times perform. This data is collected in aggregate and cannot be linked back to any individual player. It helps us prioritise improvements that benefit the most players.

Security Cookies

Short-lived cookies used to detect unusual login patterns, prevent CSRF attacks, and identify bot activity. These are part of our fraud prevention infrastructure and are deleted shortly after your session ends.

Managing Cookies

You can control non-essential cookies through your browser settings. Most modern mobile browsers allow you to clear cookies, block third-party cookies, or receive alerts before a cookie is stored. Note that disabling certain cookies may affect how the bj 999 Platform functions. If you need help managing your cookie preferences, contact support via live chat.

As a bj 999 player, you have the following rights over the personal data we hold about you. These rights can be exercised by contacting us at support@bj999.world or via live chat. bj 999 will respond to all valid data rights requests within 30 days.

In certain circumstances — such as where data must be retained to comply with legal obligations — we may not be able to fulfil a request in full. When this is the case, we will explain why clearly and tell you what steps are available to you.

bj 999 is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from any person under 18 years of age. If you are under 18, you must not attempt to register, use, or access the bj 999 Platform in any way.

If bj 999 discovers or is informed that personal data has been collected from a person under 18 — for example because false date-of-birth information was provided during registration — we will take immediate action to close the account, delete the data in compliance with applicable regulations, and ensure no funds generated through the account are paid out.

If you are a parent or guardian and believe that a person under your care has created a bj 999 account, please contact us immediately at support@bj999.world or via live chat. We take these reports seriously and will act on them promptly. We also encourage parents and guardians to use parental control software to help prevent underage access to online gaming platforms.

bj 999 may update this Privacy Policy from time to time to reflect changes in the Platform, new legal requirements, or changes in how we operate. The version number and last-updated date at the top of this page tell you when the most recent update was made.

When we make significant changes to this policy — changes that materially affect how we process your data or what rights you have — we will notify registered players via their registered mobile number or email address before the change takes effect. Minor clarifications or administrative corrections will be published on this page without separate notification, though the last-updated date will always reflect when any change was made.

Continuing to use the bj 999 Platform after a notified policy change takes effect constitutes your acceptance of the updated policy. If you do not agree with any update, you may request account closure by contacting support. Any data collected before the update will continue to be handled in accordance with the policy that was in place when it was collected, to the extent legally required.

We recommend bookmarking this page and checking it periodically, particularly when you receive an update notification. The table of contents on the left makes it easy to go directly to any section you want to review.