br999 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by br999 ("br999," "we," "us," or "our") and applies to all personal data processed in connection with the br999 Platform accessible at br999.biz, including its mobile-optimised version and any associated customer support or communication channels.

br999 operates as both a data controller and, in certain circumstances, a data processor. This Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data belonging to registered users, prospective users, and visitors to the br999 Platform.

By registering an account with br999, depositing funds, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not consent, you should not use the br999 Platform.

2. Data Controller

For the purposes of applicable data protection laws, br999 is the data controller responsible for personal data collected through br999.biz. Questions, requests, or complaints relating to the handling of your personal data should be directed to:

Email: [email protected]
Live Chat: Available 24/7 via the br999 Platform
Response Time: Typically within 2 business hours

3. Personal Data We Collect

br999 collects only the personal data necessary to provide its gaming and betting services, comply with regulatory obligations, and maintain the security of the Platform. The categories of personal data we collect include:

4. How We Collect Your Data

br999 collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC document upload, deposit/withdrawal requests, and communications with br999 support;
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, and browser metadata collected via server logs and analytics tools;
• Payment processors: Financial confirmation data returned by JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency networks upon transaction completion;
• Third-party verification services: Identity verification data returned by KYC service providers used to confirm CNIC validity and cross-reference identity against sanctions and politically exposed persons (PEP) lists;
• Cookies and similar technologies: Session and preference data collected via cookies as described in Section 9 of this Policy.

5. How We Use Your Personal Data

br999 uses personal data collected from Pakistani players and other users for the following purposes:

• To create and manage your br999 account and provide access to the Platform;
• To process PKR deposits and withdrawals via JazzCash, Easypaisa, and other supported payment methods;
• To verify your identity and age in compliance with KYC requirements before processing withdrawals;
• To detect, prevent, and investigate fraud, money laundering, account misuse, and other prohibited activities;
• To deliver cricket betting markets, live casino sessions, slot games, and other gaming content;
• To administer bonuses, promotions, and loyalty rewards in accordance with the applicable terms;
• To provide 24/7 customer support via live chat and email;
• To send transactional communications, including OTP messages, deposit confirmations, and withdrawal notifications via SMS to your registered Pakistani mobile number;
• To send promotional communications where you have provided explicit consent, including PSL bonus offers and seasonal promotions — you may withdraw consent at any time;
• To enforce our Terms & Conditions and Responsible Gaming Policy;
• To maintain and improve the technical performance of the Platform for mobile users across Pakistan;
• To comply with applicable legal, regulatory, and licensing obligations.

6. Legal Basis for Processing

br999 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between br999 and the user — including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements applicable to gaming operators;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and business analytics, where such interests are not overridden by the user's privacy rights;
• Consent: Processing of personal data for marketing communications and non-essential cookies, where explicit opt-in consent has been obtained. Users may withdraw consent at any time by contacting support or updating account preferences.

7. Sharing Your Personal Data

br999 does not sell, rent, or trade personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT network infrastructure providers, for the purpose of executing deposits and withdrawals;
• KYC and identity verification providers: Third-party services that validate CNIC documents and screen against international watchlists in compliance with AML obligations;
• Game content providers: Licensed game studios (such as PG Soft, Pragmatic Play, and Jili Games) that power games on the br999 Platform, who may receive session-level technical data necessary to deliver game content;
• IT and hosting providers: Cloud infrastructure and cybersecurity providers who process data on behalf of br999 under strict data processing agreements;
• Legal and regulatory authorities: Where br999 is required by law, court order, or regulatory instruction to disclose personal data, including to Pakistani financial intelligence and law enforcement bodies;
• Professional advisers: Lawyers, auditors, and compliance consultants bound by confidentiality obligations.

8. Payment Data

8.1 br999 does not store full JazzCash PIN codes, Easypaisa mPIN codes, or bank account passwords. Payment authentication is handled entirely by the respective payment provider's own secure interface.

8.2 br999 stores payment method identifiers (such as JazzCash mobile numbers and bank account last-four-digit references) for the purposes of withdrawal processing and fraud prevention. These identifiers are stored in encrypted form.

8.3 USDT wallet addresses used for cryptocurrency deposits and withdrawals are stored solely for transaction reconciliation and AML compliance purposes.

9. Cookies & Tracking Technologies

The br999 Platform uses cookies and similar technologies to maintain user sessions, remember preferences, and analyse Platform usage. The following categories of cookies are used:

• Essential cookies: Necessary for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Store user preferences such as language settings and game lobby filters to improve the user experience across sessions;
• Analytics cookies: Collect anonymised data on page views, session duration, and navigation paths to help br999 improve the Platform. No personally identifiable information is included in analytics datasets;
• Marketing cookies: Used only where the user has consented to promotional communications, to track the effectiveness of br999's marketing campaigns.

Users may manage cookie preferences through their browser settings. Note that disabling essential cookies will prevent br999 from maintaining your logged-in session and may impair key Platform features on mobile and desktop.

10. Data Retention

br999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required for AML compliance;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming session data: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Customer support communications: Retained for two (2) years from the date of the most recent communication in a thread;
• Marketing preference records: Retained until consent is withdrawn, plus one (1) year as evidence of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11. Data Security

br999 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures include:

• TLS/SSL encryption for all data transmitted between the user's device and br999 servers;
• Encryption of sensitive data fields — including CNIC references and financial identifiers — in the br999 database;
• Multi-factor authentication requirements for br999 administrative access;
• Regular penetration testing and security audits of Platform infrastructure;
• IP-based anomaly detection and rate limiting on br999 login endpoints;
• Restricted internal access to personal data on a need-to-know basis.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are encouraged to use strong, unique passwords for their br999 accounts and to enable two-factor authentication via their registered Pakistani mobile number.

12. Your Privacy Rights

Subject to applicable law and br999's legitimate interests and legal obligations, you have the following rights with respect to your personal data held by br999:

• Right of access: Request a copy of the personal data br999 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to br999's legal retention obligations — note that data required for AML compliance cannot be deleted on request;
• Right to restriction: Request that br999 restricts processing of your data in certain circumstances;
• Right to data portability: Request a machine-readable copy of personal data you have provided to br999;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact br999 at [email protected] or via 24/7 live chat. Requests will be acknowledged within 2 hours and resolved within 30 days of receipt. Identity verification will be required before personal data is disclosed or modified.

13. Children's Privacy

The br999 Platform is strictly for adults aged 18 and above. br999 does not knowingly collect personal data from individuals under 18. If br999 becomes aware that personal data has been collected from a minor, that data will be deleted and the account will be closed immediately. If you believe a minor has registered a br999 account, please contact [email protected] immediately. Parents and guardians in Pakistan are encouraged to use device-level parental controls to prevent minors from accessing gambling platforms.

14. International Data Transfers

br999's servers and some of its third-party service providers may be located outside Pakistan. Where personal data is transferred internationally, br999 ensures that appropriate safeguards are in place — including standard contractual clauses, data processing agreements, or adequacy determinations — to protect personal data to a standard equivalent to that required under applicable data protection law. Payment data processed by JazzCash and Easypaisa remains within their respective Pakistani-operated systems in accordance with those providers' own data residency practices.

15. Updates to This Privacy Policy

br999 reviews this Privacy Policy periodically and updates it as necessary to reflect changes in Platform functionality, regulatory requirements, or data practices. The "Last updated" date at the top of this page indicates when the most recent revision was made. Material changes will be communicated to registered users via SMS to their registered Pakistani mobile number or via a prominent notice on the Platform. Continued use of the br999 Platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

16. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or br999's data practices, please contact the br999 data team using the details below:

Email: [email protected]
Live Chat: Available 24/7 on the br999 Platform
Response Time: Email replies within 2 hours; live chat responses immediate

br999 takes privacy seriously and will respond to all data-related enquiries promptly and in good faith.