bq999 Privacy Policy — How We Handle Your Personal Data

This Privacy Policy ("Policy") is issued by bq999.one ("bq999", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player") who register for, access, or use the bq999 gaming platform, including all casino games, sports betting services, promotional features, and customer support channels.

bq999 serves over 850,000 registered players across Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond. We recognise that the privacy of Pakistani players is not just a legal obligation — it is a core part of the trust that our users place in the bq999 platform every time they log in.

This Policy should be read alongside the bq999 Terms and Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between bq999 and its registered players.

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the operator of bq999.one. As data controller, bq999 determines the purposes and means of processing your personal data and is accountable for doing so in a lawful, fair, and transparent manner.

All data protection queries, subject access requests, and privacy-related complaints should be directed to the bq999 data protection contact at [email protected]. bq999 undertakes to respond to all verifiable privacy requests within thirty (30) calendar days of receipt.

bq999 collects the following categories of personal data from Pakistani players:

bq999 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where biometric identity verification is required under applicable KYC obligations and only with your explicit consent.

bq999 collects personal data through the following channels:

• Direct Submission: Information you provide when completing the bq999 registration form, verifying your identity, contacting support, or updating your account settings;
• Automated Technical Collection: Device and session data collected automatically when you access bq999, including IP address logging, cookie data, and platform usage analytics;
• Payment Processing: Financial data transmitted by third-party payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, 1LINK) when you make deposits or withdrawals on bq999;
• KYC Verification Partners: Identity verification data received from licensed third-party identity verification services where bq999 uses automated KYC tools;
• Fraud Prevention Services: Risk and fraud signals received from third-party fraud detection providers used to protect the bq999 platform and its players.

bq999 processes your personal data only for specific, legitimate purposes. The principal purposes and the corresponding legal basis for each are set out below:

• Account Management: Processing necessary to perform the contract between bq999 and the Player — creating and maintaining your bq999 account, processing deposits and withdrawals, and providing access to games;
• Identity Verification (KYC): Legal obligation — bq999 is required under its international gaming licence to verify the identity of players prior to first withdrawal and to maintain KYC records;
• Fraud Prevention & Security: Legitimate interest of bq999 — detecting and preventing fraudulent transactions, account takeovers, multi-accounting, and money laundering on the bq999 platform;
• Responsible Gaming Monitoring: Legal obligation and legitimate interest — monitoring player activity patterns to identify signs of problem gambling and ensuring compliance with bq999's responsible gaming obligations;
• Customer Support: Contractual necessity — processing communications data to resolve player queries, disputes, and account issues;
• Marketing Communications: Consent — sending promotional offers, bonus notifications, and PSL betting updates to players who have opted in to receive marketing from bq999. Consent may be withdrawn at any time;
• Platform Improvement: Legitimate interest — using aggregated, anonymised gaming data to improve the bq999 platform, identify popular game categories, and optimise the user experience for Pakistani players;
• Legal Compliance: Legal obligation — retaining transaction and identity records as required by bq999's licensing authority and applicable anti-money laundering regulations.

bq999 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data is shared only in the following circumstances and with the following categories of recipient:

• Payment Processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, 1LINK, and USDT TRC20 processors solely to facilitate deposits and withdrawals;
• Game Content Providers: Anonymised session data may be shared with licensed game studios (such as Pragmatic Play, PG Soft, Evolution, Ezugi) for the purpose of game performance and fairness verification;
• Identity Verification Services: KYC data including CNIC copies is shared with licensed identity verification providers for the purpose of age and identity confirmation;
• Fraud & Risk Services: Technical and behavioural data may be shared with fraud detection service providers to protect the bq999 platform;
• Regulatory Authorities: bq999 will disclose player data to its licensing authority, law enforcement agencies, or other regulatory bodies where required by law or valid legal process;
• Professional Advisers: Legal, audit, and compliance advisers may access player data on a strictly confidential basis where necessary for the operation of the bq999 business.

All third-party processors used by bq999 are contractually bound to process player data only for specified purposes and to maintain appropriate data security standards.

As an internationally licensed gaming platform, bq999 operates infrastructure and uses service providers located in multiple jurisdictions. This means that your personal data may be transferred to and processed in countries outside Pakistan, including jurisdictions where the data protection laws may differ from those in Pakistan.

Where bq999 transfers personal data internationally, we take appropriate steps to ensure that your data receives an adequate level of protection. These steps may include contractual clauses that impose data protection obligations on the recipient, or reliance on adequacy decisions where applicable.

bq999 does not transfer your personal data to jurisdictions known to have inadequate data protection standards without implementing appropriate safeguards as described above.

bq999 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, and in any event for as long as required by bq999's licensing obligations and applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your bq999 account and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations;
• KYC Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with bq999's licensing authority requirements;
• Transaction Records: Financial transaction logs retained for a minimum of five (5) years;
• Customer Support Records: Support communications retained for three (3) years from the date of resolution;
• Technical & Session Data: Retained for up to twelve (12) months for platform security and fraud prevention purposes;
• Marketing Consent Records: Retained for the duration of your bq999 account or until consent is withdrawn, whichever is earlier.

Following the expiry of the applicable retention period, bq999 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

bq999 uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential Cookies: Required for the bq999 platform to function, including session management, bq999 Login authentication, and security tokens. These cannot be disabled without impairing platform functionality;
• Analytics Cookies: Used to understand how Pakistani players navigate the bq999 platform — which game categories are most visited, which pages have high exit rates, and how deposit journeys perform. Data collected via analytics cookies is aggregated and anonymised;
• Functional Cookies: Used to remember your bq999 account preferences, such as your preferred language setting, last visited game lobby, and display preferences;
• Performance Cookies: Used to monitor platform load times and identify technical issues that may affect the bq999 player experience on Pakistani mobile networks.

bq999 does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

bq999 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the bq999 platform;
• Encrypted storage of all personal data and financial records at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication requirements for all bq999 internal systems that process player data;
• Regular penetration testing and vulnerability assessments of the bq999 platform infrastructure;
• Segregation of player funds from operational accounts, ensuring your PKR wallet balance is not exposed to bq999 business risks.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bq999 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

As a registered bq999 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact bq999 at [email protected] with a description of your request and sufficient information to verify your identity.

bq999 implements age verification at registration and again at first withdrawal via KYC to prevent minors from accessing the platform. If you believe a minor may have registered on bq999, please contact [email protected] immediately so that the account can be reviewed and closed.

With your consent, bq999 may send you promotional communications via SMS to your Pakistani mobile number or via email, including:

• bq999 welcome bonus and deposit match offers;
• PSL season betting promotions and cricket match previews;
• New game launch announcements on the bq999 slot and live casino lobby;
• Personalised cashback and reload bonus offers based on your bq999 gaming activity;
• Platform updates and new payment method announcements.

You may withdraw your consent to receive bq999 marketing communications at any time by updating your preferences in your bq999 account settings or by contacting bq999 support. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

bq999 does not send unsolicited marketing to individuals who have not opted in. We do not share your contact details with third parties for their own marketing purposes.

The bq999 platform may contain references to third-party game providers, payment processors, and licensing bodies. This Privacy Policy applies exclusively to personal data processed by bq999. bq999 is not responsible for the privacy practices of any third-party services or websites, even where those services are integrated into the bq999 platform.

Players are encouraged to review the privacy policies of any third-party service providers they interact with in connection with their bq999 account, including JazzCash, EasyPaisa, HBL, and other payment providers, each of which operates under its own data protection framework.

bq999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the products and services available on the bq999 platform. Where amendments are material, bq999 will notify registered players via email or in-platform notification prior to the changes taking effect.

The current version of this Policy is always available at bq999.one/privacy-policy. The version date displayed at the top of this document indicates when the current edition was last reviewed. Continued use of bq999 following any amendment constitutes acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or the way bq999 processes your personal data, please contact the bq999 data protection team:

• Email: [email protected]
• Subject Line: "Privacy Request – [Your bq999 Account Username]"
• Response Time: Within 30 calendar days of receipt of a verifiable request
• Languages: English and Urdu requests accepted

If you are dissatisfied with bq999's response to a privacy complaint, you have the right to escalate your complaint to the data protection supervisory authority in the jurisdiction under which bq999 holds its international gaming licence. Details of the applicable supervisory authority are available upon request from bq999 support.

This Privacy Policy was last reviewed in 2026 and supersedes all prior versions of the bq999 privacy notice.