bj99 Privacy Policy
Your Data. Your Rights.

bj99 ("we", "us", "our", "the Platform") is an internationally licensed online gaming and sports betting platform operating at https://bj99.lol. bj99 offers a comprehensive range of gaming products to Pakistani players and other users, including casino games, live dealer tables, slot titles, crash games, lottery products, and sports betting markets covering cricket (including PSL), football, and UFC.

This Privacy Policy ("Policy") describes in full detail how bj99 collects, processes, stores, shares, and protects the personal data of all individuals ("you", "the Player", "the User") who interact with the bj99 platform — including visitors who browse the Website without registering, registered account holders, and players who have completed the bj99 Login process and are actively using the platform.

This Policy should be read alongside bj99's Terms & Conditions and Responsible Gaming Policy, both of which form part of the broader legal framework governing your relationship with bj99. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy takes precedence on matters relating to the processing of personal data.

bj99 collects personal data through several channels: directly from you when you register or use the platform, automatically when you browse and interact with the Website, and from third-party service providers where necessary to verify your identity or process payments. The following table summarises the categories of personal data we collect:

bj99 uses your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• Account Registration & Management: To create and maintain your bj99 player account, verify your identity in accordance with our international gaming license requirements, enable the bj99 Login process, and manage your account settings and preferences.
• Payment Processing: To facilitate deposits via JazzCash, EasyPaisa, USDT TRC20, HBL, UBL, and Meezan Bank; to process withdrawal requests to your verified payment method; and to maintain accurate financial transaction records as required by our licensing and anti-money laundering obligations.
• KYC & Identity Verification: To verify that you are who you claim to be, that you meet the 21+ age requirement, that you are not on any self-exclusion register, and that your payment methods are registered in your own name, as required by our international gaming license.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the bj99 platform. This includes automated monitoring of transaction patterns and account behaviour.
• Game Delivery & Personalisation: To deliver the games and betting markets you access, record game outcomes, calculate and credit winnings, apply bonuses, and personalise game recommendations based on your demonstrated preferences.
• Customer Support: To respond to your enquiries, process responsible gaming requests (including deposit limits and self-exclusion), investigate complaints, and maintain records of all support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, PSL cricket betting promotions, bonus alerts, and platform news by email or in-platform notification — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Legal & Regulatory Compliance: To comply with the conditions of our international gaming license, applicable anti-money laundering regulations, and any lawful requests from regulatory authorities or law enforcement agencies.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, user experience, and payment processing efficiency. This analysis does not identify individual players.

bj99 processes your personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing your identity data, contact data, financial data, and transaction data is necessary to perform the contract between you and bj99 as set out in our Terms & Conditions. Without this processing, we cannot provide you with a bj99 account, accept deposits, process withdrawals, or deliver gaming services.
• Legal Obligation: Processing your KYC documents, financial transaction records, and AML monitoring data is necessary to comply with the legal and regulatory obligations placed on bj99 as a licensed gaming operator. We are required to retain certain records for a minimum period and to report suspicious activity to relevant authorities.
• Legitimate Interests: Processing technical data, communications data, and fraud prevention data is necessary for bj99's legitimate interests in operating a secure, fair, and commercially viable gaming platform. We have assessed that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing your data for marketing communications and certain personalisation features is based on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

bj99 does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is strictly limited to the following categories of recipients, each of whom is bound by contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, and banking partners (HBL, UBL, Meezan Bank) receive the minimum financial data necessary to process your deposits and withdrawals. USDT TRC20 transactions are processed on the public blockchain; wallet addresses used for transactions are visible on-chain as an inherent property of blockchain technology.
• KYC Verification Providers: Third-party identity verification services receive your identity documents and biometric data solely for the purpose of verifying your identity in accordance with our licensing requirements. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game Software Providers: Licensed game providers whose titles are available on the bj99 platform receive limited technical data (such as session tokens and game outcome data) necessary to operate their games. These providers do not receive your full personal profile.
• Regulatory & Law Enforcement Authorities: bj99 is obligated to share personal data and transaction records with our international gaming license regulator, financial intelligence units, and law enforcement agencies where required by law or where we have reasonable grounds to suspect criminal activity including money laundering or fraud.
• Customer Support Tools: Our live chat and ticketing system provider may process communications data on our behalf solely to deliver customer support services. This provider operates under a strict data processing agreement.

bj99 uses cookies and similar tracking technologies on the Website to ensure the platform functions correctly, to maintain your bj99 Login session, and to improve your overall experience. The following types of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the bj99 platform to operate. They maintain your login session after you complete the bj99 Login process, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing basic platform functionality.
• Functional Cookies: These cookies remember your game preferences, display settings, and responsible gaming tool configurations, allowing the platform to deliver a more personalised experience across sessions.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players navigate and use the bj99 platform — which game categories are most visited, where users encounter errors, and how page load times affect behaviour. This data is used exclusively to improve platform performance and is never linked to your personal identity.
• Security Cookies: These cookies are used by bj99's fraud detection and bot-prevention systems to distinguish legitimate players from automated scripts and to detect suspicious login patterns that may indicate account compromise.

bj99 does not use third-party advertising cookies or retargeting pixels that would allow external advertising networks to track your browsing behaviour across other websites.

bj99 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our international gaming license obligations and applicable legal requirements. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your active bj99 account plus a minimum of 5 years following account closure, as required by our gaming license AML obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of account closure, in line with international AML standards and our licensing requirements. KYC documents are stored in encrypted format with access strictly limited to compliance staff.
• Financial Transaction Records: Retained for a minimum of 5 years following each transaction, as required for financial record-keeping and regulatory reporting purposes.
• Game & Betting History: Retained for 3 years following account closure for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer Support Communications: Retained for 2 years following the closure of each support ticket for quality assurance and dispute resolution purposes.
• Marketing Preferences & Consent Records: Retained for the duration of your active account plus 1 year following account closure, to demonstrate that communications were sent with valid consent.
• Technical & Server Log Data: Retained for 90 days for security monitoring and fraud investigation purposes, after which it is deleted or anonymised.

Upon the expiry of the applicable retention period, your personal data is either securely deleted (for digital records) or anonymised such that it can no longer be linked to your identity, in accordance with bj99's data destruction procedures.

bj99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and unlawful processing. These measures include:

• Encryption in Transit: All data transmitted between your device and bj99's servers — including bj99 Login credentials, payment instructions, and KYC documents — is encrypted using 256-bit SSL/TLS protocols. Connections via unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive personal data stored on bj99's servers, including KYC documents, payment method details, and financial transaction records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bj99 staff who do not require access to personal data to perform their job functions are denied access at a system level. All staff with data access undergo regular data protection training.
• Two-Factor Authentication: bj99 offers two-factor authentication (2FA) for player accounts to provide an additional layer of protection beyond the standard bj99 Login password. Pakistani players are strongly encouraged to enable 2FA, especially if their bj99 account is linked to a JazzCash or EasyPaisa payment method.
• Penetration Testing & Security Audits: bj99's platform undergoes regular independent security penetration tests and vulnerability assessments. Any identified vulnerabilities are remediated on a priority basis according to their severity classification.
• Fraud Detection Systems: Automated fraud detection systems monitor all account activity and transactions in real time to identify and respond to suspicious patterns that may indicate account compromise, payment fraud, or unauthorised access.

As a bj99 player, you have the following rights with respect to your personal data. To exercise any of these rights, contact bj99's Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond to all valid requests within 72 hours of receipt:

bj99 operates exclusively as an adult gaming platform. Access to the bj99 platform, including registration, the bj99 Login process, and all gaming and betting activities, is strictly restricted to individuals who are 21 years of age or older. This age restriction is not merely a policy preference — it is a binding condition of our international gaming license and a core responsible gaming commitment.

bj99's age verification process is mandatory for all players. You will be required to submit a valid government-issued identity document — such as a Pakistani CNIC or passport — confirming your date of birth before your account is fully activated and before any withdrawal can be processed. Age verification is conducted by our third-party KYC partner and is typically completed within 24 hours of document submission.

If you are a parent or guardian and believe that a minor in your household has registered a bj99 account, please contact us immediately at [email protected]. We will investigate the matter urgently and take appropriate action. We also recommend using parental control software to restrict access to gambling websites on devices used by minors. For further information on responsible gaming tools and self-exclusion options, please visit our Responsible Gaming page.

bj99 operates as an internationally licensed gaming platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan where bj99's infrastructure, service providers, or gaming license regulatory authority is located. These countries may have different data protection laws than those applicable in Pakistan.

Where such international data transfers occur, bj99 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data protection clauses in agreements with all third-party processors located outside Pakistan, requiring them to process your data to the same standard as bj99.
• Selection of service providers that maintain internationally recognised security certifications such as ISO 27001 or SOC 2 Type II.
• Encryption of all data during international transfer, ensuring that data cannot be read or intercepted in transit.
• Limiting the scope of data transferred internationally to the minimum required for the specific processing purpose — for example, KYC verification providers receive only identity documents, not full player profiles.

bj99 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, updates to our international gaming license requirements, changes in applicable law, or improvements to our platform and services. The current version of this Privacy Policy is always available at https://bj99.lol/privacy-policy.

Where we make material changes to this Privacy Policy — that is, changes that significantly affect how your personal data is processed or your rights as a data subject — we will notify you by:

• Sending a notification to the email address registered to your bj99 account;
• Displaying a prominent notice on the bj99 platform when you next complete the bj99 Login process;
• Updating the "Last Updated" date displayed in the hero section of this page.

Minor clarifications, formatting corrections, and non-material updates may be made without individual notification, though the updated Policy will always be available on this page. We recommend reviewing this Privacy Policy periodically — at least once every six months — to stay informed of how bj99 processes your personal data. Your continued use of the bj99 platform following notification of a material change constitutes acceptance of the revised Privacy Policy.

bj99 takes all privacy enquiries and data protection complaints seriously. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data has been handled, please contact bj99's Data Protection team using the details below:

• Email: [email protected] (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Response Time: All privacy enquiries and data rights requests are acknowledged within 24 hours and fully responded to within 72 hours.
• Language: You may contact us in English. Our support team includes staff familiar with Pakistani-English communication conventions and can assist players from Karachi, Lahore, Islamabad, Faisalabad, and all other cities across Pakistan.
• Live Chat: For urgent data security concerns — such as suspected unauthorised access to your account — you may also use the 24/7 live chat feature available on the bj99 platform after completing the bj99 Login process.

If you are not satisfied with bj99's response to your privacy complaint, you have the right to escalate the matter to the relevant supervisory authority associated with bj99's international gaming license jurisdiction. Details of the applicable supervisory authority are available in the licensing information section on our About Us page.