BK99 Privacy Policy – How We Protect Your Personal Data

1. Who We Are

bk99 operates the online gaming and sports betting platform at bk99-app.net. For the purposes of this Privacy Policy, bk99 is the data controller — meaning we are responsible for deciding what personal data is collected, why it is collected and how it is handled. Our platform is designed specifically for Pakistani users and all data handling is carried out with that context in mind.

If you have any questions about how your personal data is handled at bk99 — whether it's about what we hold, how long we keep it or how to exercise any of your rights — you can reach our data queries team at support@bk99-app.net. We aim to respond to all data-related queries within 5 business days.

This policy applies to all services operated under the bk99 brand including the main website, any mobile-optimised interface and the live dealer gaming environment. It should be read alongside the bk99 Terms and Conditions and Responsible Gaming policy.

2. What Personal Data We Collect

bk99 collects personal data that falls into the following categories. We only collect what is genuinely needed for the purpose described — nothing extra, nothing that isn't used.

2.1 Registration Data

When you create a bk99 account, we collect the information you provide during sign-up, which includes:

• Full name
• Pakistani mobile phone number
• Username and password (password stored as a one-way hash — we never store or see your plain-text password)
• Date of birth (to verify you are 18 or older)
• Email address (where provided)

2.2 Identity Verification (KYC) Data

Where bk99 is required to carry out identity verification — for example, before processing a high-value withdrawal or where fraud screening flags an account for review — we may request:

• Copy of your CNIC (Computerised National Identity Card) or other government-issued photo ID
• Proof of address (such as a utility bill or bank statement)
• Selfie photograph for liveness verification

KYC documents are handled with the highest level of care and are only accessed by authorised bk99 compliance staff.

2.3 Financial and Transaction Data

• Easypaisa, JazzCash, NayaPay or SadaPay account numbers associated with deposits and withdrawals
• IBFT reference details and bank account numbers where bank transfer is used
• Last four digits of debit/credit card numbers where card payment is used (full card numbers are never stored by bk99 — they are handled by our PCI-compliant payment processor)
• Full transaction history: deposit amounts, withdrawal amounts, dates, payment method used and processing status

2.4 Gaming Activity Data

• Complete bet history across all bk99 game types (Teen Patti, Poker, Ludo, PSL betting, Virtual Sports)
• Session start/end times, session duration and session frequency
• Game outcomes, stakes and winnings/losses
• VIP Club point accumulations, tier progressions and bonus claims

2.5 Technical and Device Data

• IP address at time of login and account activity
• Device type, operating system and browser/app version
• Mobile network operator (where applicable)
• Time-stamped access logs

2.6 Communications Data

• Messages sent to bk99 via live chat, email or any other support channel
• Details of any complaints or formal communications
• SMS or push notification interaction data where you have opted into bk99 communications

3. How We Collect Your Data

bk99 collects personal data through three main routes:

• Directly from you: when you register, complete your profile, make a deposit, place a bet, contact support, or submit documents for verification. This is the primary route and covers the majority of data we hold.
• Automatically through your use of the platform: our servers log IP addresses, access times, device information and session data every time you use bk99. This happens in the background and does not require any active input from you.
• From third-party payment processors: when a transaction is processed via Easypaisa, JazzCash or another payment method, that provider confirms payment status and provides the transaction reference and account identifier necessary to credit or debit your bk99 balance. bk99 does not receive your full payment credentials from these providers.

4. Why We Use Your Personal Data

Every use of your personal data by bk99 serves a specific, legitimate purpose. The table below sets out the main processing activities and why each one is carried out:

bk99 does not use your personal data for unsolicited third-party marketing. Where we send promotional communications about bk99 offers, this is done only with your consent and you can opt out at any time by contacting support or using the unsubscribe option in any message.

5. Legal Basis for Processing

bk99 processes your personal data on the following legal grounds:

• Contract performance: Processing your registration data, transaction data and gaming activity is necessary to operate your bk99 account and deliver the services you have signed up for. Without this processing, the account cannot function.
• Legitimate interests: Security monitoring, fraud detection, responsible gaming monitoring and platform analytics are carried out based on bk99's legitimate interest in operating a safe, fair and compliant platform. These interests are balanced against your privacy rights and do not override them.
• Legal obligation: Identity verification (KYC), anti-money laundering record-keeping and cooperation with lawful authority requests are carried out to meet legal obligations applicable to operators in our sector.
• Consent: Where bk99 uses cookies beyond strictly necessary ones or sends promotional communications, this is done on the basis of your consent, which you can withdraw at any time.

6. Who We Share Your Data With

bk99 does not sell personal data. We do not share your data with third parties for their own marketing purposes. Data is shared only in the following limited, specific circumstances:

6.1 Payment Processors

To process deposits and withdrawals, bk99 shares the minimum necessary information with our integrated payment processors — Easypaisa, JazzCash, NayaPay, SadaPay and our card processing partner. These processors are contractually required to use your data only for payment processing purposes and may not use it for any other purpose.

6.2 Identity Verification Providers

Where enhanced KYC is required, bk99 may use a third-party verification service to cross-reference identity documents. These providers operate under strict confidentiality agreements and process data only for the verification purpose.

6.3 Legal and Regulatory Authorities

bk99 will disclose personal data to regulatory bodies, law enforcement or other governmental authorities where legally required to do so. This includes responding to lawful requests, court orders and regulatory investigations. bk99 will not voluntarily disclose data to authorities beyond what is required.

6.4 Fraud Prevention and Security Services

bk99 may use third-party security services to assist in fraud detection, bot identification and account protection. These services receive limited technical data (such as IP addresses and device fingerprints) and are bound by contractual data protection obligations.

7. Cookies and Tracking Technologies

bk99 uses cookies and similar technologies on its platform. Here is what each type does and what your choices are:

7.1 Strictly Necessary Cookies

These cookies are essential for the bk99 platform to function. They maintain your login session, remember your language preference and enable core security features. You cannot opt out of strictly necessary cookies while using bk99 — without them, the platform cannot work.

7.2 Performance and Analytics Cookies

These cookies collect anonymised information about how players use bk99 — which pages are visited most often, where users encounter difficulties and how the platform performs across different device types. This data helps us improve the experience for all Pakistani players. These cookies are enabled by default but can be disabled in your account settings.

7.3 Functional Cookies

Functional cookies remember your preferences such as your preferred stake level, table display settings and notification preferences. They are not strictly necessary but make your bk99 experience more convenient. You can disable these through your account settings without affecting core functionality.

7.4 Managing Your Cookie Preferences

You can adjust non-essential cookie preferences at any time through your bk99 account settings. You can also manage cookies through your browser settings, though disabling all cookies in your browser may affect platform functionality. For detailed information about the specific cookies bk99 uses, contact our support team.

8. Data Storage and Security

bk99 takes data security seriously and implements multiple layers of protection to keep your personal information safe:

• Encryption in transit: All data transmitted between your device and bk99 servers is encrypted using TLS (Transport Layer Security). The padlock icon in your browser confirms this is active whenever you use bk99.
• Encryption at rest: Sensitive personal data stored on bk99 servers — including KYC documents and financial records — is encrypted at rest using industry-standard AES-256 encryption.
• Password security: bk99 stores passwords as salted hashes using a strong one-way hashing algorithm. We do not store, transmit or have access to your plain-text password.
• Access controls: Access to personal data within bk99's systems is restricted to authorised staff members who have a specific need to access it for their role. All internal access is logged and audited.
• Intrusion detection: bk99 operates real-time monitoring on its infrastructure to detect and respond to unauthorised access attempts.

While bk99 takes all reasonable technical and organisational measures to protect your data, no online system is completely immune to security risks. In the unlikely event of a data breach that poses a risk to your rights, bk99 will notify affected users promptly and take immediate remediation steps.

9. Data Retention

bk99 retains personal data for only as long as necessary for the purpose it was collected, or as required by legal and regulatory obligations. The general retention periods we apply are:

• Active account data: Retained for the lifetime of your active bk99 account plus a period after closure as described below.
• Transaction records: Retained for a minimum of 5 years after the transaction date, in line with standard financial record-keeping requirements applicable to payment service environments.
• KYC documents: Retained for a minimum of 5 years after account closure or after the last transaction, whichever is later.
• Customer support communications: Retained for up to 3 years from the date of the communication.
• Gaming activity logs: Retained for 5 years from the date of the activity.
• Self-exclusion records: Retained for the full duration of the exclusion period plus 5 years after expiry to prevent the person re-registering during an active exclusion and to support responsible gaming monitoring.

Data that is no longer needed and not subject to a retention obligation is securely deleted or anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical analysis and platform improvement purposes.

10. Your Data Rights

As a bk99 user, you have specific rights over the personal data we hold about you. Here is what each right means in practice and how to exercise it:

To exercise any of these rights, contact bk99 at support@bk99-app.net with sufficient information to identify your account. We will respond within 30 days and may ask for identity verification before actioning a request.

11. Children's Privacy

bk99 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified at registration and, where required, through KYC documentation. If bk99 becomes aware that an account belongs to a person under 18, that account will be closed immediately, all funds will be returned to the original payment method after verification, and the associated personal data will be deleted in accordance with our retention policy.

If you are a parent or guardian and believe your child has registered on bk99, please contact support@bk99-app.net immediately with the relevant account details. We will investigate and take action as a priority.

12. Third-Party Links

The bk99 platform does not link to external websites. However, in some contexts — such as responsible gaming resources — information about third-party organisations may be referenced. bk99 is not responsible for the privacy practices of any external organisations and this Privacy Policy applies only to data collected through bk99-app.net and its associated services.

If you navigate to any external site using an address you have found independently, that site's own privacy policy governs how it handles your data. bk99 has no visibility into or control over that.

13. Changes to This Privacy Policy

bk99 may update this Privacy Policy from time to time to reflect changes in platform features, legal requirements or best practice. Where a change is material — meaning it meaningfully affects how your data is used or what rights you have — we will notify you via your registered contact details at least 7 days before the change takes effect.

Minor updates that clarify existing practices without changing their substance may be made without prior notice. The current version of this policy is always available at bk99-app.net/privacy-policy and the effective date is shown at the top. Continued use of bk99 after a notified change constitutes acceptance of the revised policy.

If you disagree with a change to this policy, you should stop using bk99 and may request account closure by contacting support. Any data already collected will continue to be handled in accordance with the policy under which it was collected, to the extent possible.

14. Contact and Complaints

For any privacy-related query, data rights request or complaint about how bk99 handles personal data, please contact us using the details below:

If you are not satisfied with how bk99 has handled your privacy concern after raising it with us directly, you have the right to escalate your complaint through appropriate channels. We take all privacy complaints seriously and will cooperate fully with any legitimate investigation.