bv99 Privacy Policy

This Privacy Policy ("Policy") describes how bv99 ("bv99", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("Player", "User", "you") who register for and use the bv99 online gaming platform accessible at https://bv99.vu ("Platform").

bv99 is committed to treating your personal data with respect and transparency. This Policy is written in plain English so that Pakistani players can understand clearly what happens to their information when they use the bv99 platform — from the moment of registration through every deposit, withdrawal, game session, and customer support interaction.

By registering an account on bv99 or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, please discontinue use of the bv99 Platform and contact us to close your account.

For the purposes of applicable data protection legislation, bv99 is the Data Controller of personal data collected through the Platform. As Data Controller, bv99 is responsible for determining the purposes for which and the means by which personal data is processed.

bv99 operates under an international gaming licence and processes personal data in accordance with the data protection standards applicable within its licensing jurisdiction. Where third-party processors are engaged — for example, payment processors handling JazzCash, EasyPaisa, or bank transfer transactions — bv99 enters into appropriate data processing agreements to ensure those parties maintain equivalent data protection standards.

All enquiries relating to this Privacy Policy or the exercise of your data rights may be directed to our support team using the contact details provided in Section 16 of this Policy.

bv99 collects personal data through several channels: directly from you during registration and account use; automatically through your use of the Platform; and in limited cases from third-party sources such as identity verification services. The categories of data we collect are described in the table below.

bv99 uses personal data collected from Pakistani players for the following documented purposes:

• Account registration and management: Creating and maintaining your bv99 account, authenticating your identity at login, and providing access to Platform features.
• Providing gaming services: Processing bets and wagers, crediting winnings, managing your PKR wallet balance, and delivering the full range of bv99 gaming products including cricket betting, live casino, and slot games.
• Payment processing: Facilitating deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency channels.
• Identity verification (KYC): Verifying your identity and age (21+ requirement) in compliance with anti-money laundering and responsible gaming obligations.
• Fraud detection and security: Monitoring for suspicious login activity, unusual betting patterns, potential account compromise, and prohibited conduct as defined in the bv99 Terms & Conditions.
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling indicators, applying responsible gaming tools where appropriate, and communicating with players who may need support.
• Legal and regulatory compliance: Meeting obligations under bv99's international gaming licence, anti-money laundering regulations, and applicable data protection requirements.
• Customer support: Responding to enquiries, resolving complaints, and providing assistance with account and payment matters.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game offerings, and user experience. Individual player data is not used for this purpose without anonymisation.
• Marketing communications: Sending promotional emails, bonus notifications, and relevant offers to players who have opted in to receive such communications. See Section 13 for full details.

bv99 processes personal data only where a lawful basis for doing so exists. The principal legal bases on which bv99 relies are:

• Contractual necessity: Processing your data is necessary to perform the contract between you and bv99 — i.e., to provide the gaming services, process payments, and manage your account as set out in the Terms & Conditions.
• Legal obligation: Processing is necessary to comply with applicable legal requirements including KYC verification, anti-money laundering reporting obligations, and licensing requirements under bv99's international gaming licence.
• Legitimate interests: Processing is necessary for bv99's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of bv99 services, provided those interests are not overridden by your data protection rights.
• Consent: For marketing communications and non-essential cookies, bv99 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bv99 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and cryptocurrency network processors receive transaction-specific data necessary to process your deposits and withdrawals. These processors are bound by their own data protection obligations.
• Identity verification providers: Third-party KYC service providers receive copies of identity documents and related data to verify your identity and age in compliance with licensing and anti-money laundering requirements.
• Gaming software suppliers: Game providers whose titles are integrated into the bv99 platform may receive anonymised or pseudonymised game session data to support game operation, analytics, and RNG certification. They do not receive personally identifiable information unless necessary for dispute resolution.
• Regulatory and law enforcement authorities: bv99 will disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by bv99 may access personal data on a need-to-know basis, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bv99's business, personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

As bv99 operates under an international gaming licence and engages service providers located in multiple jurisdictions, your personal data may be transferred to and processed in countries outside Pakistan. This includes countries where bv99's servers are hosted, where KYC providers are established, and where game software suppliers are based.

Where personal data is transferred to a country that does not provide a level of data protection equivalent to the standards applied by bv99, we implement appropriate safeguards to protect the data during and after the transfer. These safeguards may include data processing agreements incorporating standard contractual clauses, binding corporate rules, or reliance on applicable adequacy decisions.

By using the bv99 Platform and accepting this Privacy Policy, Pakistani players consent to the transfer of their personal data to jurisdictions outside Pakistan where necessary for the purposes described in this Policy.

bv99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your bv99 account and for a period of five (5) years following permanent account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of last transaction, whichever is later, in accordance with applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the relevant transaction for compliance and audit purposes.
• Support and communications records: Retained for a period of three (3) years from the last interaction, unless the interaction relates to a complaint or dispute, in which case records are retained for five (5) years.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications and for three (3) years following opt-out, to evidence the consent or withdrawal of consent.
• Technical and session data: Retained for twelve (12) months for security and fraud detection purposes, after which it is deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

bv99 respects the following data rights that players have in relation to their personal data. To exercise any of these rights, please submit a written request to our support team using the contact details in Section 16. We will respond within thirty (30) days of receiving a valid request.

bv99 uses cookies and similar tracking technologies on the Platform for the purposes described below. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies help the Platform function correctly, remain secure, and provide data that allows bv99 to improve the player experience.

• Essential cookies: Strictly necessary for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing the functionality of the bv99 Platform.
• Functional cookies: Store your preferences and settings — such as your preferred language, display settings, and responsible gaming limit configurations — so that you do not need to re-enter them at each visit.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where errors occur, and how session flows work — to allow bv99 to improve Platform design and performance. This data is not linked to your identity.
• Security cookies: Support bv99's fraud detection systems by identifying unusual access patterns, flagging suspicious login attempts, and helping to verify that login sessions are initiated by human users rather than automated tools.

bv99 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your device and bv99 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to login credentials, payment data, and all account management interactions.
• Encryption at rest: Personal data and financial data stored on bv99 servers is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to bv99 employees and contractors who require it to perform their specific job functions. Access is governed by role-based permissions and is logged and audited regularly.
• Password security: Account passwords are stored as cryptographic hashes using current best-practice hashing algorithms. bv99 staff cannot retrieve your plaintext password — only a new password can be set through the reset process.
• Penetration testing and security audits: bv99's systems are subject to regular security assessments including penetration testing by qualified security professionals.
• Incident response: bv99 maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players without undue delay.

The bv99 Platform is strictly restricted to individuals aged 21 and above. bv99 does not knowingly collect, store, or process personal data belonging to any person under the age of 21. Age verification is a mandatory step in the bv99 registration and KYC process.

If bv99 becomes aware that personal data has been collected from an individual under the age of 21 — whether through misrepresentation during registration or any other means — we will immediately delete that data, close the associated account, and forfeit any balance held, in accordance with the bv99 Terms & Conditions.

With your consent, bv99 may send you marketing communications by email relating to new game releases, promotional bonuses, sporting events covered by the bv99 sportsbook (including PSL and international cricket fixtures), and other offers relevant to your interests as a bv99 player.

You may opt in to marketing communications during account registration or at any later time through your account settings. You may withdraw consent and opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link present in every marketing email sent by bv99.
• Updating your communication preferences in your bv99 account settings.
• Contacting bv99 support with a request to unsubscribe from all marketing emails.

Withdrawal of consent for marketing communications will not affect your ability to use the bv99 Platform or receive essential transactional and account-related communications. bv99 will continue to send you emails relating to account security, payment confirmations, KYC requests, and important policy updates regardless of your marketing preference.

The bv99 Platform does not contain links to external third-party websites. However, bv99's gaming products incorporate software from third-party game providers. When you interact with a game provided by a third-party supplier through the bv99 Platform, game session data (including bets, outcomes, and session duration) is processed by that supplier to operate the game. Such processing is governed by the supplier's own data processing agreement with bv99 and this Policy.

bv99 accepts no responsibility for the privacy practices of any third party that is not engaged as a data processor by bv99 under a formal data processing agreement. If you independently visit any third-party website, that website's own privacy policy governs the collection and use of your data.

bv99 may update this Privacy Policy from time to time to reflect changes in the Platform's data processing activities, applicable legal requirements, or best practice in data protection. The "Last Reviewed" date at the top of this Policy will be updated whenever a revision is made.

Where changes are material — meaning they significantly affect your rights or the way your personal data is processed — bv99 will notify you by email to your registered address or by a prominent notice on the Platform at least fourteen (14) days before the changes take effect. For non-material changes (such as typographical corrections or minor clarifications), the revised Policy will take effect immediately upon publication.

We encourage you to review this Policy periodically to stay informed about how bv99 protects your personal data. Your continued use of the bv99 Platform following notification of any material change constitutes your acceptance of the revised Policy.

For any questions, concerns, or requests relating to this Privacy Policy or bv99's handling of your personal data — including requests to exercise your data rights under Section 9 — please contact the bv99 support team using the details below. All data-related correspondence should be submitted in English and should include your registered bv99 account email address to allow us to locate your records and respond effectively.

Data Enquiries Contact:
support@bv99.vu

We aim to acknowledge all data enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days of receipt of a valid, complete request.