BX999 Privacy Policy

This Privacy Policy ("Policy") describes how BX999 ("BX999", "we", "us" or "our"), operator of the online gaming platform accessible at https://bx999.cam (the "Platform" or "Website"), collects, processes, stores, shares and protects the personal data of users ("Player", "you" or "your") who access or use the Platform.

BX999 is committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is intended to give you a clear and complete understanding of our data practices so you can make an informed decision about using the Platform.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

BX999 collects personal data in the following categories:

3.1 Registration Data: Full legal name, date of birth, residential address, email address, username and password (stored in hashed form). This data is collected at the point of account creation and is required to establish and verify your account.

3.2 Identity Verification (KYC) Data: Government-issued identification documents such as a valid Pakistani Computerised National Identity Card (CNIC) or passport, proof of residential address (e.g., a recent utility bill or bank statement), and — where required — proof of ownership of the payment method used for deposits. This data is collected to satisfy our AML and responsible-gambling obligations.

3.3 Financial & Payment Data: Transaction history (deposits, withdrawals, wagers and bonuses), payment method details (e.g., wallet identifiers, bank account references), currency and value of transactions, and records of any cryptocurrency transactions (BTC/USDT wallet addresses). We do not store complete card numbers on our servers — where card processing is involved, this is handled by a PCI-DSS compliant payment gateway.

3.4 Usage & Behavioural Data: Betting and gaming activity including games played, markets accessed, wager amounts, session durations, live chat interactions and bonus usage patterns. This data is used for responsible-gambling monitoring, fraud detection and platform improvement.

3.5 Technical & Device Data: IP address, browser type and version, operating system, device type and model, screen resolution, language settings, referring URL, pages visited and timestamps. This data is collected automatically when you access the Platform.

3.6 Communication Data: Records of your communications with BX999 support staff via email and live chat, including timestamps, content and resolution outcomes. This data is retained for quality assurance, dispute resolution and regulatory compliance purposes.

BX999 processes personal data only where a valid lawful basis exists. The applicable lawful bases for our processing activities are as follows:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable AML regulations, KYC requirements, gaming license conditions and any lawful request from a competent regulatory or law enforcement authority.
• Legitimate Interests: Processing necessary for BX999's legitimate interests, including fraud prevention, platform security, responsible-gambling monitoring and improving our products and services — provided these interests are not overridden by your rights and interests.
• Consent: Where you have provided specific consent to optional processing activities such as direct marketing communications, we will process your data for that purpose. You may withdraw consent at any time without affecting the lawfulness of prior processing.

BX999 uses your personal data for the following purposes:

• Account Management: Creating, verifying and maintaining your player account, including password management, login authentication and account preference settings.
• KYC & AML Compliance: Verifying your identity and age before approving withdrawals or where triggered by a compliance event. Screening against applicable sanctions and PEP (Politically Exposed Persons) lists.
• Payment Processing: Executing deposit and withdrawal transactions, recording transaction histories and resolving payment disputes.
• Responsible Gambling Monitoring: Monitoring betting and gaming patterns to identify signs of problem gambling behaviour and to apply responsible-gambling tools (e.g., deposit limits, self-exclusion) in accordance with operator policy.
• Fraud Prevention & Security: Detecting and investigating fraudulent activity, unauthorised access, money laundering and other prohibited conduct. Maintaining platform security and integrity.
• Customer Support: Responding to your enquiries, resolving disputes and providing technical assistance via email and live chat.
• Marketing (Consent-Based): Where you have opted in, sending promotional communications about bonuses, new games and platform features. You can unsubscribe from marketing communications at any time.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve Platform functionality, navigation and product offerings.
• Legal & Regulatory Compliance: Fulfilling our obligations under applicable gaming regulations, AML laws and any lawful order from a competent authority.

BX999 does not sell, rent or trade your personal data to unrelated third parties for their own marketing purposes. We share your data only in the following limited circumstances:

6.1 Service Providers & Data Processors: We engage trusted third-party service providers to support the operation of the Platform, including payment gateways, identity verification and KYC providers, fraud-detection and risk-management services, cloud hosting and infrastructure providers, and customer support platforms. All such providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection requirements.

6.2 Licensing Authority: We may be required to disclose player data to our licensing authority as a condition of our gaming license or in response to a lawful audit or investigation request.

6.3 Legal & Regulatory Disclosure: We will disclose personal data to competent law enforcement, regulatory or government authorities where required by applicable law, court order or where we have a good-faith belief that such disclosure is necessary to prevent fraud, money laundering or a serious risk of harm.

6.4 Business Transfers: In the event of a merger, acquisition, asset sale or restructuring of BX999, personal data may be transferred as part of the transaction. We will notify affected players via in-platform notice or email before personal data is transferred to a new controller under materially different terms.

BX999 uses cookies and similar tracking technologies to support Platform functionality, analyse usage patterns and improve your experience. The categories of cookies we use are described below:

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use core Platform features. Please note that blocking cookies may affect session stability or personalisation features.

BX999 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Retained for the duration of your account registration and for a minimum period following account closure as required by applicable AML and gaming regulations — typically five (5) to seven (7) years post-closure.
• KYC Documents: Retained for the period required by applicable AML and identity-verification regulations from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, consistent with standard AML record-keeping requirements.
• Support Communications: Email and chat records are retained for a period sufficient to resolve disputes and satisfy regulatory record-keeping requirements, typically three (3) years.
• Marketing Consent Records: Records of consent to marketing communications are retained for the duration of active consent plus a reasonable period thereafter to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

BX999 implements and maintains a range of technical and organisational security measures proportionate to the nature and sensitivity of the personal data we hold, including:

• Encryption in Transit: All data transmitted between your device and BX999 servers is encrypted using HTTPS/TLS protocols. All Platform pages — including login, deposit and account settings pages — are served over HTTPS.
• Encryption at Rest: Sensitive personal data, including passwords (stored in hashed form) and identity documents, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict least-privilege basis. Staff members access personal data only to the extent required to perform their specific job function.
• Two-Factor Authentication: Optional two-factor authentication is available to players to add an additional layer of security to their accounts.
• Security Monitoring: Our infrastructure is monitored for unauthorised access, anomalous activity and potential security incidents on an ongoing basis.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. BX999 cannot guarantee absolute security but commits to notifying affected players and, where required, relevant authorities, promptly upon becoming aware of a material data security incident affecting personal data.

BX999 operates as an international platform. In the course of providing our services, your personal data may be processed on servers or by service providers located in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection as your home country.

Where personal data is transferred to a third country, BX999 takes appropriate safeguards to ensure that your data remains adequately protected, including:

• Transferring data only to processors in countries with an adequate level of data protection as determined by the relevant supervisory authority;
• Implementing contractual data protection clauses (standard contractual clauses or equivalent mechanisms) with all international data processors;
• Applying technical security measures consistent with those described in Section 9 to all transferred data.

By using the BX999 Platform, you acknowledge and consent to the international transfer of your personal data as described in this Section.

Subject to applicable law and any overriding legal retention or disclosure obligations, you have the following rights in respect of your personal data held by BX999. You may exercise any of these rights by contacting us at the details in Section 15.

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to all valid requests within 30 days and may require proof of identity before processing your request.

BX999 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 18, or under the higher minimum age required by the operator or applicable license jurisdiction. The Platform is not directed at, nor intended for use by, minors.

If BX999 becomes aware that personal data has been collected from a minor — whether through a fraudulent registration or otherwise — we will immediately close the relevant account, void any associated transactions and securely delete the collected data to the extent not required for legal or regulatory purposes.

If you believe that a minor has accessed or attempted to access BX999 using false information, please contact us immediately at the details in Section 15.

The BX999 Platform may reference third-party services in a contextual capacity — for example, references to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah as familiar payment context for Pakistani players, or to sports organisations such as the PCB or ICC as sports information context.

These references do not create a data-sharing relationship with those third parties in relation to BX999 account data. BX999 is the sole data controller in respect of your account information.

To the extent that the Platform integrates with any third-party tools — for example, identity verification providers, payment gateways or analytics services — those providers process data in accordance with their own privacy policies, and their processing is governed by the contractual arrangements described in Section 6.1.

BX999 accepts no responsibility for the data practices of external websites or services not operated by BX999, even where they are referenced on the Platform in a contextual capacity.

BX999 reserves the right to update, modify or replace this Privacy Policy at any time. Where changes are material — for example, a significant change to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — we will use reasonable efforts to notify registered players via email or an in-platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed about how we protect your information.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you must close your account and cease using the Platform before the revised Policy takes effect.

If you have any questions, concerns or requests relating to this Privacy Policy, wish to exercise any of your data rights, or wish to report a suspected data security incident, please contact our Data & Privacy support team using the details below. All privacy-related communications will be handled in English; Urdu support is available on request.