bk99 Privacy Policy — How We Protect Your Data in Pakistan

This Privacy Policy explains how bk99, operating through bk99-play.net, collects, uses, stores and protects the personal information of players and visitors. It applies to every person who visits the bk99 website, creates a player account or interacts with the platform in any capacity.

At bk99, we understand that the players using this platform are real people with real privacy concerns. Sharing your name, phone number and payment details to create a gaming account requires trust, and that trust is something we take seriously. This policy is written in plain, understandable English — not buried in legal jargon — because we want every Pakistani player to genuinely know what happens with their information when they use bk99.

By registering an account on bk99, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described below. If you do not agree with any part of this policy, please do not create an account. If you already have an account and disagree with an updated version of this policy, you may request account closure by contacting the bk99 support team before the updated policy takes effect.

bk99 collects personal information only to the extent necessary for the secure operation of your gaming account and the processing of PKR transactions. We do not collect data speculatively or for purposes beyond what is described in this policy. The categories of data we collect are as follows:

2.1 Registration Data

When you create a bk99 account, we collect your full legal name, Pakistani mobile phone number, date of birth, and your chosen username and password. This information is used to create and verify your account identity. Providing accurate registration information is a condition of your bk99 account agreement.

2.2 Identity Verification Data

For account verification, withdrawal processing and anti-money-laundering compliance, bk99 may request a copy of your CNIC (Computerised National Identity Card) or other government-issued identity document. This document is used solely for identity confirmation and is stored in an encrypted, access-restricted environment. bk99 staff do not have routine access to raw identity document files.

2.3 Payment Information

To process deposits and withdrawals in PKR, bk99 collects your preferred payment method details — this may include your Easypaisa or JazzCash account number, NayaPay or SadaPay account details, bank account name and IBAN for IBFT transfers, or masked card details for Visa and Mastercard payments. Full card numbers are never stored on bk99 servers — card processing is handled by a PCI DSS-certified payment processor.

2.4 Activity and Game Data

bk99 automatically records game activity, bet history, deposit and withdrawal transactions, session logs and account activity timestamps. This data is used to operate the platform, resolve disputes, generate your account statement and monitor for unusual activity that may indicate security threats or responsible gaming concerns.

2.5 Device and Technical Data

When you access bk99, we automatically collect your IP address, device type, operating system, browser type and version, screen resolution and connection type. This technical data is used for fraud detection, security monitoring and platform performance optimisation. It is not used to build individual marketing profiles.

2.6 Communication Data

If you contact bk99 support via live chat, email or WhatsApp, we retain records of those communications. This allows support agents to have context when you contact us again and enables quality review to improve our service. Chat and email records are retained for 24 months before being archived or deleted.

bk99 collects personal data for the following specific and legitimate purposes. We do not collect data for any purpose beyond what is listed here:

• Account management: Creating, maintaining and authenticating your bk99 account and keeping your profile information accurate.
• Payment processing: Receiving deposits and processing withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card channels.
• Identity and age verification: Confirming that you are the person you say you are and that you are at least 18 years of age, as required before withdrawals and sometimes at registration.
• Legal and compliance obligations: Anti-money-laundering (AML) monitoring, know-your-customer (KYC) compliance and responsible gaming obligations require bk99 to collect, retain and review certain player data.
• Fraud and security monitoring: Detecting and preventing unauthorised account access, duplicate accounts, bonus abuse, suspicious transaction patterns and other security threats.
• Customer support: Allowing support agents to identify your account and understand your history when you contact us for help.
• Platform improvement: Aggregated, anonymised technical data helps us identify performance issues, improve game loading speeds and optimise the bk99 experience for Pakistani mobile users.
• Responsible gaming: Monitoring activity patterns that may indicate problematic gambling behaviour and triggering support interventions where appropriate.
• Service communications: Notifying you about account activity, deposit and withdrawal confirmations, security alerts and material changes to policies — these are non-marketing communications that cannot be opted out of.

The security of your personal information is a top priority at bk99. We apply multiple layers of protection to all data held on our systems.

4.1 Encryption in Transit

All connections between your device and bk99 servers are secured using TLS 1.2 or higher, providing 256-bit encryption of all data in transit. This means that even if network traffic were intercepted, the data would be unreadable. The bk99 website enforces HTTPS on all pages — you should always see the padlock icon in your browser's address bar when using bk99.

4.2 Encryption at Rest

Sensitive data stored on bk99 servers — including identity documents, payment information and personal details — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and rotated on a regular schedule.

4.3 Access Controls

Access to player personal data within the bk99 team is restricted on a need-to-know basis. Support agents can view the account details necessary to assist you but do not have access to raw identity documents, full payment details or other sensitive data unless specifically required for a verified task. All internal data access is logged and audited.

4.4 Infrastructure Security

bk99 operates on dedicated server infrastructure with firewall protection, intrusion detection systems and regular third-party security audits. Any identified vulnerability is treated as a critical priority and addressed immediately. We do not use shared hosting environments for player data.

4.5 Password Security

Your bk99 account password is stored in a one-way hashed format using industry-standard algorithms. This means that even bk99 staff cannot see your password. If you forget your password, it cannot be retrieved — it can only be reset via the secure password reset process sent to your registered mobile number.

bk99 does not sell, rent or share your personal information with third parties for marketing or advertising purposes. Full stop. Your data may be shared in the following limited and necessary circumstances only:

5.1 Payment Processors

To process your deposits and withdrawals, bk99 shares the minimum necessary payment information with payment service providers including Easypaisa, JazzCash, NayaPay and our card processing partner. These providers are contractually bound to use your data only for transaction processing and are not permitted to use it for any other purpose.

5.2 Identity Verification Services

Where bk99 uses a third-party identity verification service to assist with CNIC confirmation, that service receives only the document image and the verification result is returned to bk99. Identity documents are not retained by verification partners beyond the time required to complete the check.

5.3 Legal and Regulatory Obligations

bk99 may be required to disclose player information to law enforcement, financial intelligence units or regulatory authorities where legally mandated to do so. This includes situations involving suspected money laundering, fraud investigations or court orders. bk99 will comply with lawful disclosure requirements and, where legally permitted, will notify the affected player.

5.4 Business Successors

In the event that bk99 is acquired, merged or transfers its operations to a successor entity, player data may be transferred as part of that transaction. In such an event, bk99 will notify registered players in advance and the Privacy Policy commitments made in this document will remain in effect for all transferred accounts.

Payment privacy deserves specific attention because it involves the most sensitive category of information most people hold. Here is exactly how bk99 handles your financial data:

Full card numbers for Visa and Mastercard transactions are never stored on bk99 servers. Card data is tokenised at the point of entry and processed entirely within our PCI DSS-certified payment partner's infrastructure. What bk99 holds is a masked reference (for example, ending in 4242) that allows you to identify and manage your saved payment methods without exposing the actual card number.

For Easypaisa and JazzCash transactions, bk99 stores the mobile wallet account number associated with your bk99 account for the purpose of processing withdrawals. This number is stored in encrypted form and is visible only to the payment processing system during an active transaction. Bank account details provided for IBFT withdrawals are stored with the same level of encryption and access restriction.

Transaction history — amounts, dates, methods and reference numbers — is retained as part of your bk99 account record for a minimum of five years, as required for financial compliance purposes. This history is accessible to you through your account statement at any time.

bk99 uses cookies and similar browser technologies on the bk99-play.net website. The following categories of cookies are used:

7.1 Essential Cookies

These cookies are required for the website to function. They manage your login session, remember your language preference and maintain your account authentication state as you navigate between pages. Essential cookies cannot be disabled — without them the website will not work properly.

7.2 Performance Cookies

These cookies collect anonymised data about how pages are used — which sections are visited most, how long users spend on a page, and whether any technical errors occur. This data is aggregated and does not identify individual users. It is used purely to improve the bk99 platform experience for Pakistani mobile users.

7.3 Security Cookies

bk99 uses session tokens and fingerprinting cookies to detect suspicious login behaviour, identify compromised sessions and prevent account takeover attempts. These are essential security tools and are always active for logged-in sessions.

7.4 What bk99 Does Not Use

bk99 does not place third-party advertising cookies, social media tracking pixels or cross-site behavioural tracking technology on bk99-play.net. You will not be followed around the internet by bk99 advertisements after visiting the site. Your activity on bk99 stays on bk99.

bk99 retains personal data for as long as it is necessary for the purpose it was collected, or as required by applicable financial and anti-money-laundering regulations. The following retention periods apply:

• Account registration data: Retained for the lifetime of your account and for 5 years following account closure.
• Identity verification documents (CNIC copies): Retained for 5 years from date of submission, as required for AML compliance.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Game activity logs: Retained for 2 years, then archived for a further 3 years before deletion.
• Customer support communications: Retained for 24 months, after which they are archived or deleted.
• Device and IP logs: Retained for 90 days for active fraud monitoring, then deleted unless flagged as part of an ongoing security investigation.

After the applicable retention period, personal data is either permanently deleted from active systems or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical purposes.

As a bk99 account holder, you have the following rights over the personal data we hold about you. To exercise any of these rights, contact our support team at support@bk99-play.net with your registered mobile number and a clear description of your request.

bk99 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we discover that an account has been created by someone under 18, we will immediately suspend that account, freeze any balances and delete all personal data associated with the account as quickly as compliance regulations permit.

If you are a parent or guardian and believe that a minor in your care has created a bk99 account, please contact us immediately at support@bk99-play.net. We will investigate within 24 hours and take all necessary action to close the account and remove the minor's data from our systems. We take underage access seriously and invest in age verification measures to prevent it.

bk99 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When material changes are made — changes that meaningfully affect how your data is collected, used or shared — we will notify all registered players via email or in-platform notification at least 7 days before the updated policy takes effect.

Minor clarifications or corrections that do not materially affect player rights may be updated without advance notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically. Your continued use of bk99 after an updated policy takes effect constitutes acceptance of the updated terms.

If you disagree with any change to this Privacy Policy, you may contact bk99 support to request account closure before the effective date of the updated policy. Closed account data will be retained for the regulatory periods described in Section 8 above.

If you have any questions, concerns or requests related to this Privacy Policy or how bk99 handles your personal data, please get in touch through any of the following channels. Privacy-related queries are treated with the same urgency as financial disputes and will receive a response within 48 hours.

• Email: support@bk99-play.net — use the subject line "Privacy Query" for faster routing to the right team.
• Live Chat: Available within your bk99 account 24 hours a day. Identify your query as privacy-related at the start of the conversation.
• WhatsApp Support: Contact number visible in the support section after logging into your bk99 account.

All privacy requests will be acknowledged within 24 hours. Full resolution of access, correction or deletion requests will be completed within 30 days of identity verification. If you are not satisfied with our response, you have the right to escalate the complaint to relevant authorities in Pakistan.