br999 Privacy Policy – How We Handle Your Personal Data

1. Who We Are

br999 ("we", "us", "our") operates the online casino and sports betting platform accessible at br999.bio ("the Platform"). This Privacy Policy applies to all personal data collected by br999 in connection with the registration, operation, and closure of player accounts, and all services provided through the Platform.

When you create a br999 account, br999 acts as the data controller in respect of your personal data. This means br999 determines the purposes and means by which your personal data is processed, and bears responsibility for ensuring that processing is lawful, fair, and transparent.

For questions relating to this Privacy Policy or to exercise your data rights, please contact br999's data team at [email protected]. Email addresses in this policy are displayed as plain text and are not clickable links.

2. Data We Collect

br999 collects the following categories of personal data:

2.1 Data You Provide Directly. The majority of personal data br999 holds is provided directly by you — during registration, KYC verification, payment transactions, and communication with support.

2.2 Data Collected Automatically. When you use the br999 Platform, technical and usage data is collected automatically through server logs, session tracking, and cookies. See Section 7 for details on cookie use.

2.3 Data from Third Parties. br999 may receive identity verification data from KYC verification service providers used to confirm the authenticity of documents you submit. br999 may also receive fraud-related data from payment processors where a transaction is flagged for investigation.

3. How We Use Your Data

br999 uses your personal data for the following purposes:

• Account creation and management: To register your br999 account, authenticate your identity at login, and manage your account settings and preferences.
• Payment processing: To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, and Skrill in PKR.
• KYC and compliance: To verify your identity in compliance with anti-money laundering (AML) and know-your-customer (KYC) obligations, and to satisfy any reporting requirements under applicable law.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion restrictions, and identify players who may be exhibiting problem gambling behaviour.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, and other prohibited conduct.
• Customer support: To respond to queries, investigate disputes, and provide assistance related to your account.
• Platform improvement: To analyse usage patterns and improve the performance, usability, and content of the br999 Platform.
• Marketing (with consent): To send promotional communications about br999 offers, bonuses, and new features where you have opted in to receive such communications.

4. Legal Basis for Processing

br999 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and br999, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with AML, KYC, and other regulatory obligations applicable to br999's operations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving br999's services where such processing does not override your rights and interests.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without penalty.

5. Sharing Your Data

5.1 br999 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers receive the transactional data necessary to process your deposits and withdrawals.
• KYC verification providers: Third-party identity verification services receive identity documents you submit for KYC in order to perform automated and manual document checks.
• Game providers: br999's game and sportsbook providers receive a pseudonymous player identifier and game session data necessary to deliver the game. They do not receive your full identity or payment data.
• Legal authorities: br999 will disclose personal data to law enforcement, regulators, or courts where required by applicable law or in response to a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of br999's assets, player data may be transferred to the acquiring entity, subject to the same privacy protections.

5.2 All third parties that receive personal data from br999 are required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared.

6. Data Retention

br999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal and regulatory retention obligations.

• Active accounts: Data is retained for the duration of your account's active status.
• Closed accounts: Following account closure, br999 retains identity, KYC, and transaction data for a minimum of five (5) years in compliance with AML regulatory requirements.
• Marketing data: If you withdraw consent to marketing, your contact details are removed from marketing lists within 30 days. Transactional history is retained separately under the AML retention schedule.
• Technical and usage data: Retained for up to two (2) years for fraud prevention and platform improvement purposes.

After applicable retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with your identity.

7. Cookies

br999 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help br999 maintain your session and improve your experience.

7.1 Essential Cookies. These cookies are required for the Platform to function. They maintain your login session, store your language preference, and enable secure authentication. You cannot opt out of essential cookies while using the Platform.

7.2 Analytics Cookies. br999 uses first-party analytics to understand how players use the Platform — which pages are visited most, where players drop off, and how navigation flows. This data is aggregated and anonymised and is used solely to improve br999's platform experience.

7.3 No Third-Party Advertising Cookies. br999 does not use third-party advertising networks or behavioural targeting cookies. Your browsing activity on br999 is not shared with advertising platforms.

7.4 Cookie Management. Most browsers allow you to manage cookie settings — you can view, delete, and block cookies through your browser settings. Blocking essential cookies will prevent you from logging in to your br999 account.

8. Data Security

br999 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and br999's servers.
• Encryption at rest for all stored personal data and KYC documents.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security audits and vulnerability assessments of the Platform infrastructure.
• Two-factor authentication (2FA) available to all players to secure account access.

While br999 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play an important role in protecting your own data — by using a strong, unique password and enabling 2FA on your br999 account. See our br999 Login page for account security guidance.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, br999 will notify affected players in accordance with applicable data protection laws.

9. Your Data Rights

You have the following rights in relation to the personal data br999 holds about you:

To exercise any of the above rights, contact br999 support at [email protected] (displayed as plain text — not a clickable link). br999 may require identity verification before processing a data rights request to ensure it is actioned for the correct account holder.

10. Children's Privacy

The br999 Platform is strictly for users aged 18 and above. br999 does not knowingly collect personal data from any person under the age of 18. If br999 becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the account will be closed.

Parents and guardians who believe that a minor has registered on the br999 Platform should contact support immediately at [email protected] so that appropriate action can be taken without delay.

11. International Data Transfers

br999's platform infrastructure and certain third-party service providers (including KYC verification services and game providers) may be located outside of Pakistan. Where personal data is transferred internationally, br999 takes steps to ensure that appropriate safeguards are in place to protect the data to a standard equivalent to that required under applicable data protection law.

These safeguards may include contractual clauses requiring the recipient to maintain appropriate data security standards, or reliance on the recipient's adherence to internationally recognised data protection frameworks.

12. Changes to This Privacy Policy

br999 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. The "Last updated" date at the top of this document indicates when the most recent revision was made.

Material changes to this Privacy Policy will be communicated to registered players via email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of the br999 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.