b9998 Privacy Policy

b9998 ("we", "us", "our", "the Platform") operates the online gaming platform accessible at b9998.asia. In the context of data protection law, b9998 acts as the data controller in respect of personal data collected from users who register accounts, interact with platform features, or otherwise provide personal information through b9998 channels.

This Privacy Policy applies to all users of the b9998 platform, including registered account holders, visitors who browse b9998 without registering, and individuals who contact b9998 through support channels. It governs how b9998 handles personal data collected through any of these interactions.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which contain additional provisions relevant to your use of b9998.

The categories of personal data b9998 may collect about you include the following:

b9998 collects personal data through the following channels:

• Direct provision: Information you enter when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting b9998 support;
• Automated technical collection: IP address, device fingerprint, browser data, and session information collected automatically when you visit b9998.asia, regardless of whether you are logged in;
• Payment processor data: Transaction confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when processing your deposits and withdrawals — b9998 receives only the reference data needed to confirm and record the transaction;
• Identity verification providers: Where b9998 uses third-party KYC service providers to verify documents you submit, those providers return a verification result and relevant extracted data to b9998;
• Cookies and tracking technologies: As described in Section 7 of this Policy.

b9998 uses the personal data it collects for the following purposes:

• Account creation and management: To register your b9998 account, maintain your account profile, and authenticate your identity at login;
• Identity verification (KYC): To comply with anti-money laundering requirements and to verify that you meet the 21+ age requirement before processing withdrawals;
• Payment processing: To process deposits from and withdrawals to your designated PKR payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank);
• Gaming service delivery: To provide access to sports betting, casino, slots, poker, and bingo products and to record your gaming activity for account purposes;
• Fraud prevention and security: To detect and investigate suspicious activity, protect the integrity of the platform, and prevent unauthorised account access;
• Responsible gaming: To monitor gaming patterns, apply account limits, respond to self-exclusion requests, and comply with responsible gaming obligations;
• Regulatory compliance: To meet applicable legal, regulatory, and reporting obligations;
• Customer support: To respond to your queries, complaints, and support requests;
• Marketing communications: To send you promotional offers and platform updates, where you have provided consent or where a legitimate interest exists and you have not opted out.

b9998 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to deliver the b9998 gaming services you have registered to use, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, identity verification requirements, and regulatory reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and direct marketing to existing users where those interests are not overridden by your privacy rights;
• Consent: Where b9998 relies on your consent — for example, for certain categories of marketing communication — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

b9998 does not sell your personal data to third parties. We may share your data with the following categories of recipient where necessary and proportionate:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the transaction data necessary to process your deposits and withdrawals. Each processor handles your data under their own privacy terms and applicable Pakistani financial regulations;
• KYC and identity verification providers: Where b9998 uses third-party verification services to authenticate identity documents submitted during the KYC process, those providers process only the data required for verification and are contractually bound to confidentiality;
• Game content providers: Third-party game studios whose titles are accessible through b9998 may receive session data necessary to operate their games, subject to the studio's data processing terms;
• Regulatory and law enforcement authorities: b9998 may be required by law to disclose personal data to relevant authorities. Such disclosures are made only to the extent required by applicable legal obligation;
• Professional advisers: Lawyers, auditors, and compliance consultants acting under binding confidentiality obligations where disclosure is necessary for business or legal purposes.

b9998 uses cookies and similar technologies to support platform functionality, analyse usage patterns, and improve the user experience. The categories of cookies in use on b9998 are as follows:

You may control cookie preferences through your browser settings. Disabling essential cookies will impair platform functionality, including the ability to log in and maintain an authenticated session. Disabling analytics cookies will not affect your ability to use b9998.

b9998 retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a legal obligation requires longer retention:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping obligations;
• Gaming activity data: Retained for the duration of the active account relationship and three (3) years following closure, to support responsible gaming reviews, dispute resolution, and regulatory audit;
• Support correspondence: Retained for three (3) years from the date of the last communication in a support thread;
• Technical and log data: Retained for twelve (12) months from collection, unless a security incident investigation requires extended retention.

Where you exercise a right to erasure (see Section 10) and no overriding legal obligation prevents deletion, b9998 will delete your personal data ahead of the standard retention period.

b9998 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and b9998 servers;
• Encryption at rest for stored sensitive data, including identity documents and financial account references;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Automated anomaly detection monitoring for unusual login patterns, data access events, and transaction irregularities;
• Regular security assessments of platform infrastructure and third-party integrations;
• Incident response procedures for identifying, containing, and notifying affected users in the event of a data breach, where required by applicable law.

While b9998 takes data security seriously, no internet-connected system can guarantee absolute security. You are encouraged to use a strong, unique password for your b9998 account and to activate two-factor authentication, which is available in Account Settings.

Registered b9998 users hold the following rights in respect of their personal data. To exercise any of these rights, contact b9998 at [email protected]:

b9998 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or voluminous, this period may be extended by a further 30 days with notice to you.

Note that certain rights are subject to exceptions — for example, the right to erasure may be restricted where b9998 is required by law to retain records for a minimum period. b9998 will explain the basis for any such restriction in its response to your request.

11.1 Consent-Based Marketing. Where b9998 sends promotional emails, SMS notifications, or in-platform messages about offers, bonuses, or new game launches, it does so only to users who have opted in to marketing communications or where b9998 holds a legitimate interest as an existing account holder subject to the right to opt out at any time.

11.2 Opting Out. You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in Account Settings under Notifications;
• Clicking the unsubscribe link included in any b9998 marketing email;
• Contacting b9998 support at [email protected] with a request to opt out of marketing.

11.3 Transactional Communications. Opting out of marketing does not affect transactional communications that b9998 is required to send — such as deposit confirmations, withdrawal processing updates, account security alerts, and Terms & Conditions change notifications. These communications are sent regardless of marketing preferences because they are necessary for account management.

11.4 Responsible Gaming Communications. Users who are in a self-exclusion period will not receive promotional marketing communications from b9998 for the duration of that period. b9998 makes reasonable technical efforts to suppress marketing to self-excluded accounts.

b9998 is strictly an adult platform. Services are available only to individuals aged 21 and above. b9998 does not knowingly collect or process personal data from individuals under the age of 21.

Where b9998 identifies or has reason to suspect that personal data has been submitted by or on behalf of an individual under 21 years of age, we will immediately suspend the relevant account, delete the data to the extent permissible by legal record-keeping obligations, and — where required — report the matter to relevant authorities.

If you are a parent or guardian and believe that an individual under 21 has created a b9998 account or provided personal data to b9998, please contact [email protected] immediately. b9998 will investigate and take appropriate action without delay.

b9998 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, new data sharing arrangements, or changes to user rights — b9998 will notify registered account holders via email to the address on record and by posting a notice on the b9998 platform with at least 14 days' advance notice before the revised Policy takes effect.

Non-material clarifications and typographical corrections may be made without advance notice. The effective date shown at the top of this Policy will always reflect when the current version came into force.

Continued use of b9998 following the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should discontinue use of b9998 and may request account closure by contacting support.

For any questions about this Privacy Policy, to exercise a data right, or to raise a data protection concern, please contact the b9998 team:

• Email: [email protected]
• Subject line for data requests: "Privacy / Data Request – [Your Account Username]"
• Response commitment: Acknowledgement within 5 business days; substantive response within 30 days
• Support availability: 24/7, with peak staffing aligned to Pakistan Standard Time (PKT)

For concerns relating to responsible gaming, self-exclusion, or account limit settings, please visit the Responsible Gaming page or include "Responsible Gaming" in your support email subject line for priority handling.