bu999 Privacy Policy

1 Who We Are

bu999 (referred to in this Privacy Policy as "bu999," "we," "us," or "our") operates the online casino and sports betting platform accessible at bu999.bio. bu999 is the data controller responsible for the personal data of players who register and use the bu999 platform.

This Privacy Policy applies to all personal data collected from players in connection with the bu999 platform, including data collected through the bu999.bio website, any bu999 mobile web experience, customer support interactions, and payment processing activities. It does not apply to third-party websites, software providers, or payment processors, each of which operates under their own separate privacy policies.

2 Data We Collect

bu999 collects personal data that is necessary for the lawful operation of a licensed online gaming platform, including fulfilment of Know Your Customer (KYC), anti-money laundering (AML), and responsible gaming obligations. The categories of personal data we collect are set out below.

bu999 does not collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) beyond what is strictly required for identity verification under applicable KYC regulations.

3 How We Collect Data

bu999 collects personal data through the following primary channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or submitting responsible gaming requests.
• Automated technical collection: Data automatically generated and collected when you access the bu999 platform, including IP addresses, browser fingerprints, session identifiers, device information, and cookies (see Section 7).
• Payment processors: Confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency processors when a transaction is completed or declined, including transaction reference numbers and timestamps.
• Game providers: Session and result data passed by licensed game software providers whose titles are available on the bu999 platform, including round identifiers, bet amounts, and game outcomes necessary for account crediting and dispute resolution.
• Third-party identity verification services: Where bu999 uses a licensed third-party KYC provider to cross-reference identity documents, that provider may return verification scores or risk flags which are associated with your bu999 account record.
• Publicly available sources: In limited circumstances related to AML compliance, bu999 may cross-reference publicly available sanctions lists or politically exposed persons (PEP) databases.

4 Legal Basis for Processing

bu999 processes personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including account creation, game delivery, payment processing, and support — is carried out on the basis that it is necessary for the performance of a contract to which you are a party.
• Legal obligation: Processing carried out to comply with applicable legal requirements, including KYC identity verification, AML transaction monitoring, age verification enforcement, and data retention obligations mandated by our operating licence.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your privacy rights.
• Consent: Where bu999 sends you optional marketing communications (such as promotional offer emails or SMS notifications), we do so on the basis of your explicit opt-in consent. You may withdraw this consent at any time by updating your communication preferences in your bu999 account settings or by contacting support.

5 How We Use Your Data

The personal data collected by bu999 is used for the following purposes, each of which corresponds to a valid legal basis described in Section 4:

• Creating, maintaining, and securing your bu999 player account.
• Verifying your identity and age (21+) in accordance with KYC requirements applicable under bu999's operating licence.
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency channels.
• Delivering casino games, live dealer tables, Teen Patti, Andar Bahar, cricket sportsbook markets, and slot titles available on the bu999 platform.
• Applying and administering bonuses, promotional offers, and VIP loyalty rewards in accordance with their respective terms.
• Monitoring gaming activity for responsible gaming purposes, including flagging patterns consistent with problem gambling and facilitating self-exclusion or deposit limit requests.
• Detecting, investigating, and preventing fraud, money laundering, underage gambling, and other prohibited conduct as defined in the bu999 Terms & Conditions.
• Responding to customer support enquiries, resolving disputes, and maintaining compliance records.
• Sending transactional notifications (deposit confirmations, withdrawal status updates, security alerts) via email or SMS to your registered contact details.
• Sending optional promotional communications (new bonus offers, game launches, PSL cricket betting promotions) where you have provided consent and not subsequently withdrawn it.
• Analysing aggregated, anonymised platform usage data to improve the bu999 user experience and product offering.

6 Data Sharing & Disclosure

bu999 shares personal data only in the limited circumstances described below. In all cases, we require recipients to maintain appropriate data security standards and to use your data only for the specified purpose.

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processors receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Licensed third-party KYC service providers receive identity document data solely for the purpose of verifying your identity and age on behalf of bu999.
• Game software providers: Licensed casino game providers receive session identifiers and bet data necessary to deliver their games and return results to your bu999 account.
• Regulatory and law enforcement authorities: bu999 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or the terms of our operating licence — including disclosure related to AML investigations or sanctions compliance.
• Professional advisers: Legal, audit, and compliance advisers engaged by bu999 may access personal data on a strictly confidential basis where necessary to provide their services.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bu999's business, player data may be transferred to the successor entity, subject to equivalent data protection commitments. You will be notified of any such transfer via your registered email address.

7 Cookies & Tracking Technologies

bu999 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform, maintain your session, and improve your experience. The types of cookies we use are described below:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, load-balancing cookies, and security cookies. These cannot be disabled without impairing your ability to use bu999.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming tool configurations. Disabling these cookies will reset your preferences on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the bu999 platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve the platform. bu999 uses first-party analytics rather than sharing raw session data with third-party analytics platforms.
• Security and fraud-prevention cookies: Help bu999 detect and prevent fraudulent activity, including bot traffic, multiple-account creation, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to or using the bu999 platform. bu999 does not use third-party advertising or behavioural tracking cookies.

8 Data Retention

bu999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with the retention obligations imposed by our operating licence and applicable law. The general retention periods applied by bu999 are as follows:

• Active account data: Retained for the duration of the player's registration with bu999, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the date of verification or the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations under applicable law.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or compliance matter.
• Technical and log data: Retained for up to twelve (12) months for security and fraud investigation purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal, to demonstrate compliance with consent obligations.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with bu999's data disposal procedures.

9 Data Security

bu999 implements a multi-layered data security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The security measures in place include:

• Transport encryption: All data transmitted between your device and the bu999 platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Data-at-rest encryption: Sensitive personal data stored on bu999 infrastructure — including KYC documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within bu999's internal systems is restricted to authorised personnel on a need-to-know basis, governed by role-based access control policies.
• Two-factor authentication: bu999 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access.
• Penetration testing and audits: bu999's platform infrastructure undergoes periodic security assessments and penetration tests conducted by qualified independent security professionals.
• Incident response: bu999 maintains a documented data breach response procedure. In the event of a data breach likely to affect your rights and freedoms, you will be notified promptly in accordance with applicable legal obligations.

10 Your Privacy Rights

Subject to applicable data protection law and the obligations imposed by bu999's operating licence, you hold the following rights in respect of your personal data held by bu999:

To exercise any of the above rights, please contact the bu999 data protection team via email at [email protected]. Please include your registered email address and Player ID so we can locate your account and respond promptly. bu999 will not charge a fee for standard data rights requests.

11 Children & Minors

The bu999 platform is strictly intended for persons aged 21 years and above. bu999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the bu999 account registration and KYC process, and the Platform actively monitors for indicators of underage account access.

If bu999 becomes aware that personal data has been collected from a player who is under 21 years of age, that account will be immediately suspended, the data will be securely deleted (subject to any legal retention obligations), and the matter will be escalated to our compliance team for investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account with bu999, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

12 International Data Transfers

bu999 operates under an international gaming licence, and some of the third-party service providers we engage — including game software providers, KYC verification platforms, and cloud infrastructure services — may process personal data in jurisdictions outside Pakistan. Where such transfers occur, bu999 takes the following steps to ensure your data remains protected:

• We engage only service providers that commit to data protection standards equivalent to or exceeding those required under bu999's operating licence.
• Data transfer agreements incorporating appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) are in place with all third-party processors who handle personal data outside Pakistan.
• bu999 conducts periodic reviews of third-party data processor arrangements to verify continued compliance with applicable data protection standards.

By registering and using the bu999 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan, subject to the safeguards described above.

13 Changes to This Privacy Policy

bu999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the requirements of our operating licence. Material changes to this Privacy Policy will be communicated to registered players via the email address associated with their bu999 account and will be prominently notified on the bu999 platform prior to taking effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent version came into effect. We encourage you to review this Privacy Policy periodically. Continued use of the bu999 platform following notification of a change constitutes your acknowledgment of the updated Policy.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bu999 handles your personal data, please contact our data protection team using the details below:

• Email: [email protected] — please include "Privacy Request" or "Data Rights Request" in your subject line for prompt routing.
• Live Chat: Available 24/7 via the bu999 platform. For formal data rights requests, email is preferred to ensure a documented record.
• Response Time: bu999 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with bu999's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body specified under bu999's operating licence. Details of the applicable supervisory mechanism are available from our compliance team upon request.