bo999 Privacy Policy — Your Data, Your Rights, Our Responsibility

This Privacy Policy applies to all services offered by bo999 through the website bo999.best and any related mobile interfaces, applications, and customer support channels (collectively, the "Platform"). It governs how bo999 collects, processes, stores, and protects the personal data of individuals who register an account or otherwise interact with the Platform.

By registering an Account on bo999 or continuing to use the Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Privacy Policy, you should not use the bo999 Platform.

bo999 collects personal data in three ways: information you provide directly during registration and account use, information generated automatically by your use of the Platform, and information received from third-party service providers involved in payment processing and identity verification.

2.1 Information You Provide

2.2 Automatically Collected Information

When you access the bo999 Platform, we automatically collect certain technical information necessary for the operation and security of the service:

• IP address and approximate geographic location
• Device type, operating system version, and browser type
• Session start and end times, pages visited, and game sessions played
• Cookies and similar tracking technologies (see Section 5 below)
• Deposit and wagering patterns used for responsible gaming monitoring

bo999 processes your personal data only for the following specific purposes, each of which represents a legitimate need tied to the operation of the Platform:

• Account Management: Creating, maintaining, and administering your bo999 account, including resetting credentials and managing account preferences.
• Identity Verification: Verifying that you are who you say you are, that you meet the 18+ age requirement, and that your account complies with anti-money laundering obligations.
• Payment Processing: Facilitating PKR deposits via Easypaisa, JazzCash, HBL, Visa, and Mastercard, and processing withdrawal requests to your nominated payment method.
• Game and Service Delivery: Providing access to the bo999 casino lobby, live dealer tables, Jackpot Slots, Money Train, Cockfighting markets, and all other Platform services.
• Customer Support: Responding to your enquiries, resolving disputes, and processing responsible gaming requests such as deposit limit changes or self-exclusion activations.
• Responsible Gaming Monitoring: Analysing your wagering patterns and session data to identify indicators of problem gambling, and reaching out proactively if concerns are identified.
• Fraud Prevention and Security: Detecting and investigating suspicious account activity, unauthorised access attempts, and potential bonus abuse.
• Legal and Regulatory Compliance: Meeting applicable anti-money laundering, financial crime prevention, and data protection obligations.
• Platform Improvement: Using aggregated, anonymised analytical data to improve the design, performance, and game library of the bo999 Platform.

bo999 does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and necessary circumstances:

4.1 Payment Service Providers

To process your PKR deposits and withdrawals, bo999 shares the minimum necessary financial data with the payment providers you select, including Easypaisa, JazzCash, HBL, Visa payment networks, and Mastercard payment networks. These providers process your data under their own privacy policies and security standards.

4.2 Game Content Providers

bo999 uses third-party game studios and aggregation platforms to deliver live dealer games, Jackpot Slots (including the Money Train series), and other content. These providers may receive anonymised session identifiers necessary to authenticate and manage game sessions. They do not receive your full personal profile.

4.3 Identity Verification Services

Where identity verification is required, bo999 may share identity documents and relevant personal data with specialist Know Your Customer (KYC) service providers. These providers are contractually bound to process your data solely for the purpose of verification.

4.4 Legal Obligations

bo999 may disclose your personal data to law enforcement authorities, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or other legal process. We will notify you of such disclosure where legally permitted to do so.

bo999 uses cookies and similar technologies on the Platform to ensure it functions correctly, to maintain your session when you are logged in, and to collect anonymised analytical data about Platform usage patterns.

5.1 Essential Cookies

These cookies are strictly necessary for the bo999 Platform to function. They manage your login session, remember your account preferences, and ensure the security of your connection. You cannot opt out of essential cookies while using the Platform.

5.2 Analytical Cookies

bo999 uses anonymised analytical data to understand how players navigate the Platform — which pages are visited most frequently, how long sessions last, and where players encounter difficulties. This data is aggregated and cannot be used to identify individual players. You may decline analytical cookies through your browser settings without affecting your ability to use bo999.

5.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. Disabling cookies may affect certain features of the bo999 Platform, particularly login session management. For guidance on managing cookies in your specific browser, please consult your browser's help documentation.

bo999 implements technical and organisational measures appropriate to the sensitivity of the personal data held. These measures include:

• Encryption in Transit: All data transmitted between your device and the bo999 Platform is encrypted using SSL/TLS protocols. The padlock symbol visible in your browser address bar confirms this protection is active.
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted when stored on bo999 servers.
• Access Controls: Access to player data within bo999 systems is restricted to authorised personnel whose job function requires it. All access is logged and audited.
• Password Security: Account passwords are stored using one-way hashing algorithms. bo999 staff cannot view your password in plain text.
• Regular Security Reviews: bo999 conducts periodic reviews of its security practices and infrastructure to identify and address emerging risks.

While bo999 takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. You are responsible for maintaining the security of your own login credentials and for notifying bo999 support immediately if you suspect unauthorised access to your Account.

bo999 retains your personal data for as long as your Account remains active. Following Account closure — whether initiated by you or by bo999 — personal data is retained for the minimum period required by applicable legal obligations, including anti-money laundering record-keeping requirements.

Transaction records denominated in PKR are retained for a minimum period consistent with financial record-keeping obligations. After the required retention period has elapsed, your personal data will be securely and permanently deleted from bo999 systems.

As a bo999 player, you have the following rights with respect to the personal data bo999 holds about you. To exercise any of these rights, please contact the bo999 support team using the email address in the footer of this page:

• Right of Access: You have the right to request a copy of the personal data bo999 holds about you and to receive information about how it is processed.
• Right to Rectification: If any personal data bo999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic Account details, you may also update certain information directly in your Account settings.
• Right to Erasure: In certain circumstances, you may request that bo999 delete your personal data. This right is subject to legal retention obligations — bo999 cannot delete data that we are legally required to retain.
• Right to Restrict Processing: In certain circumstances, you may request that bo999 restrict the processing of your personal data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to Object: Where bo999 processes your personal data on the basis of legitimate interests, you have the right to object to that processing where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive the personal data you have provided to bo999 in a structured, commonly used, and machine-readable format where technically practicable.

bo999 will respond to all personal data rights requests within a reasonable timeframe. We may request proof of identity before processing your request to ensure the security of your data.

bo999 uses the wagering, deposit, and session data collected from your Account specifically to support responsible gaming monitoring. This means that bo999 may analyse your gameplay patterns to identify indicators of problem gambling behaviour — such as rapidly increasing deposit amounts in PKR, extended uninterrupted sessions, or frequent attempts to reverse self-exclusion requests.

Where such indicators are identified, bo999 may contact you proactively via email to discuss responsible gaming tools available on your Account, including deposit limits, session timers, and cooling-off periods. This use of your data is in your interest and is treated as a legitimate basis for processing.

If you have activated a self-exclusion on your bo999 Account, your identity data may be retained on a restricted access list used solely to prevent re-registration during your exclusion period. This data is processed exclusively for the purpose of enforcing your self-exclusion request and protecting your wellbeing.

For more information about the responsible gaming tools available on bo999, please visit the Responsible Gaming page.

The bo999 Platform is strictly intended for adults aged 18 years and over. bo999 does not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has registered an Account on bo999 or has provided personal data to the Platform, please contact the bo999 support team immediately using the email address in the footer of this page.

Upon receiving a credible report of an underage user, bo999 will promptly investigate and, if confirmed, will close the Account and securely delete all associated personal data consistent with applicable legal requirements.

bo999 may update this Privacy Policy from time to time to reflect changes in the Platform's data processing practices, changes in applicable law, or improvements in our security and privacy standards. The date of the most recent update is displayed at the top of this document.

When material changes are made to this Privacy Policy — changes that affect the way your personal data is collected, used, or shared in a meaningful way — bo999 will provide advance notice to registered players via the Platform or by email to the address on your Account before those changes take effect. Your continued use of the bo999 Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy-related concern about your bo999 Account, please contact our support team. The support email address is displayed in plain text in the footer of every page on the bo999 Platform. Our team responds in English and serves players from across Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, and all other cities and regions.

When contacting bo999 about a privacy matter, please include your registered Account username and a clear description of your request so that we can handle it efficiently. For data access and deletion requests, we will ask you to verify your identity before proceeding.