kb999 Privacy Policy

1. Who We Are

kb999 is an online casino and sports betting platform accessible at https://kb999.bar, operated under an international gaming license framework. We are the data controller in respect of all personal data collected from players who register accounts and use our services.

When this Privacy Policy refers to "kb999", "we", "us", or "our", it means the kb999 platform and its operating entity responsible for determining how and why your personal data is processed. References to "you", "your", or "player" mean any individual who registers an account on, accesses, or otherwise uses the kb999 platform.

kb999 is committed to processing personal data in accordance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. These are not merely legal obligations — they reflect how we believe a trustworthy gaming platform should operate for its Pakistani player community.

2. Data We Collect

kb999 collects personal data in the following categories, depending on your use of the platform:

Data Category	Specific Data Points
Identity Data	Full legal name, date of birth, gender, nationality, CNIC number, passport number, or driving licence number (for KYC verification purposes)
Contact Data	Residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, etc.), email address, Pakistani mobile number
Account Data	Username, encrypted password, account creation date, account status, responsible gaming settings and limits
Financial Data	Deposit and withdrawal history in PKR, payment method details (JazzCash account, EasyPaisa account, bank account details for HBL, UBL, or Meezan Bank transfers), transaction timestamps
Gaming Data	Betting history, game sessions, wagering amounts, win/loss records, bonus usage, game preferences
Technical Data	IP address, device type and identifier, operating system, browser type and version, time zone, session duration, platform interaction logs
KYC Documentation	Scanned or photographed government-issued ID, proof of address documents, selfie or liveness verification images where required
Communications Data	Live chat transcripts, email correspondence with kb999 support, feedback submissions

kb999 does not collect sensitive categories of personal data (such as health data, religious beliefs, or political opinions) unless specifically required for responsible gaming assessments and only with your explicit consent in those circumstances.

3. How We Collect Your Data

kb999 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support via live chat or email, or updating your account settings;
• Automated technologies: Technical data collected automatically when you access the kb999 platform, including IP addresses, session logs, device identifiers, and cookies (see Section 8);
• Payment providers: Transaction confirmation data shared by payment processors including JazzCash, EasyPaisa, and bank transfer systems to verify deposit and withdrawal processing;
• Identity verification services: Confirmation data from KYC verification partners used to authenticate government-issued documents and verify player identity in accordance with our licensing obligations;
• Third-party analytics: Aggregated, anonymised usage analytics from platform analytics tools that help kb999 understand how the platform is being used and identify areas for improvement.

4. Purposes & Legal Bases for Processing

kb999 processes your personal data only where a lawful basis exists. The table below sets out our primary processing purposes and the corresponding legal basis for each:

Purpose	Legal Basis
Account registration and management	Performance of contract between kb999 and the player
Processing deposits, wagers, and withdrawals in PKR	Performance of contract
KYC identity verification and age verification (21+)	Legal obligation under licensing requirements
Anti-money laundering and fraud prevention checks	Legal obligation and legitimate interests of kb999
Responsible gaming monitoring and player protection	Legal obligation and legitimate interests
Customer support and dispute resolution	Performance of contract and legitimate interests
Sending transactional emails and account notifications	Performance of contract
Sending promotional communications and bonus offers	Consent (you may withdraw this at any time)
Platform analytics and service improvement	Legitimate interests of kb999
Compliance with regulatory reporting obligations	Legal obligation

Where kb999 relies on consent as the legal basis for processing (primarily for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, update your preferences in your Account Settings or contact kb999 support.

5. Sharing Your Data

kb999 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your personal data may be shared with third parties only in the following circumstances and for the specific purposes described:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive the minimum necessary data to facilitate deposits and withdrawals in PKR;
• KYC and identity verification providers: Specialist third-party services used to verify government-issued identity documents and conduct age verification checks as required by our licensing obligations;
• Fraud prevention and AML services: Risk assessment and anti-money laundering screening tools that help kb999 detect and prevent financial crime on the platform;
• IT infrastructure and hosting providers: Data centre, cloud hosting, and technology service providers who process data on kb999's behalf under strict data processing agreements with appropriate security obligations;
• Regulatory and licensing authorities: kb999 may be required to disclose player data to its licensing authority or to regulatory bodies as part of its compliance obligations;
• Law enforcement agencies: Where kb999 is legally compelled by a court order, warrant, or equivalent legal process to disclose personal data to law enforcement or government authorities.

All third-party service providers who access player data are bound by contractual obligations to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection requirements.

6. International Data Transfers

As an internationally licensed gaming operator, kb999 may store and process player data on servers located outside Pakistan. Where personal data is transferred to countries that may not provide the same level of data protection as the jurisdiction of the player's residence, kb999 implements appropriate safeguards to protect that data, including contractual protections with data processors and hosting providers.

By registering an account and using the kb999 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. kb999 will always ensure that such transfers are conducted with appropriate protective measures in place and that the rights and security of your personal data are maintained to an equivalent standard.

7. Data Retention

kb999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations imposed by our licensing framework. The following retention guidelines apply:

• Active account data: Retained throughout the duration of your account relationship with kb999 and updated as necessary to remain accurate;
• KYC documentation: Retained for a minimum of five years from the date of account closure or the date of the last transaction, whichever is later, in compliance with anti-money laundering record-keeping requirements;
• Financial transaction records: Retained for a minimum of five years from the date of each transaction in PKR, as required under our licensing and compliance obligations;
• Gaming session and betting history: Retained for a minimum of three years from the date of each session for dispute resolution and responsible gaming monitoring purposes;
• Communications and support records: Retained for two years from the date of the last communication unless a longer retention period is required for ongoing dispute resolution;
• Marketing consent records: Retained from the time consent is given until withdrawn, plus an additional two years as an audit record of the consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where anonymisation rather than deletion is applied, the resulting data may be retained indefinitely for aggregated statistical analysis.

8. Cookies & Tracking Technologies

The kb999 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. A cookie is a small text file placed on your device when you visit a website. kb999 uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function correctly, including maintaining your login session, storing your account preferences, and enabling secure transactions. These cookies cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: Used to collect anonymised or aggregated data about how players navigate and interact with the kb999 platform, helping us identify technical issues and improve the user experience;
• Functional cookies: Allow kb999 to remember your preferences — such as language settings, responsible gaming limit configurations, and game category preferences — to provide a more personalised experience;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and automated abuse of the platform, protecting the integrity of games and the security of player accounts.

You can manage and control cookie settings through your browser settings at any time. Note that disabling certain categories of cookies may limit your ability to use some features of the kb999 platform. kb999 does not use third-party advertising cookies or behavioural targeting cookies on the platform.

9. Your Privacy Rights

As a player on the kb999 platform, you hold the following rights in respect of your personal data. kb999 will respond to all valid rights requests within 30 days of receipt, without charge in the vast majority of cases:

• Right of access: You may request a copy of all personal data kb999 holds about you, together with information about how that data is being used and on what legal basis;
• Right to rectification: Where personal data kb999 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay;
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations that require kb999 to retain certain records;
• Right to restriction of processing: You may request that kb999 temporarily halt the processing of your personal data while a dispute regarding its accuracy or lawfulness is resolved;
• Right to data portability: Where data is processed on the basis of your consent or for performance of a contract, and the processing is carried out by automated means, you may request a structured, machine-readable copy of your data;
• Right to object: You may object to processing carried out on the basis of kb999's legitimate interests, including profiling for responsible gaming monitoring purposes, where your particular circumstances override those interests;
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via Account Settings or by contacting support.

To exercise any of these rights, please contact the kb999 data team via the live chat function or at the support email address provided in Section 14. kb999 may require verification of your identity before processing a rights request to protect against unauthorised access to another player's data.

10. Children & Minors

kb999 enforces mandatory KYC age verification for all players prior to processing withdrawals, and conducts ongoing monitoring to detect underage access. Where kb999 identifies or suspects that a player is under the age of 21, the Account will be immediately suspended, all pending wagers voided, and any deposited funds returned through the original payment method pending identity verification.

If you are a parent or guardian and believe that a minor has registered an account on kb999 or has accessed the platform, please contact our support team immediately via live chat so that appropriate action can be taken promptly. kb999 takes underage gambling extremely seriously and co-operates fully with responsible gaming organisations and parental control service providers to prevent access by minors.

11. Security Measures

kb999 implements comprehensive technical and organisational security measures to protect player personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the kb999 platform;
• Encryption of sensitive data (including financial data and KYC documents) at rest using industry-standard encryption protocols;
• Role-based access controls ensuring that staff members can only access player data relevant to their specific job function;
• Comprehensive audit logging of all internal access to player data;
• Regular security assessments, penetration testing, and vulnerability scanning of the kb999 platform infrastructure;
• Multi-factor authentication options for player accounts to prevent unauthorised access;
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kb999 will notify affected players without undue delay and will implement all necessary remedial measures to contain and address the breach.

Whilst kb999 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your kb999 account credentials and for ensuring that your own device security is adequate. Enable two-factor authentication (2FA) in your Account Settings to add an additional layer of protection to your account.

12. Third-Party Links

The kb999 platform may contain links to third-party websites or services (for example, links to payment provider portals or responsible gaming resources). This Privacy Policy applies solely to data collected and processed by kb999 and does not extend to any third-party websites or services. kb999 is not responsible for the privacy practices or content of any third-party sites.

We encourage you to review the privacy policy of any third-party website you visit, particularly before providing personal information. kb999 has no control over the content, privacy practices, or security of third-party sites and cannot accept responsibility for data processed by those sites.

13. Amendments to This Privacy Policy

kb999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our licensing obligations. Where amendments are material — meaning they significantly affect how we use your data or the rights available to you — kb999 will provide reasonable prior notice via email to your registered address or via a prominent notice on the platform.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent revision was made. Your continued use of the kb999 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the revised Privacy Policy, you must stop using the platform and close your account.

kb999 recommends that players review this Privacy Policy periodically to stay informed of how their personal data is being handled. Prior versions of this Privacy Policy are available on request from the kb999 support team.

14. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data kb999 holds about you, please contact our support team in the first instance. kb999 is committed to resolving all privacy-related queries promptly and transparently.

You may contact us via the 24/7 live chat function available directly on the kb999 platform, or by email at the address below. The email address is displayed as plain text only and is not a clickable link:

Data & Privacy Queries: [email protected]

kb999 will acknowledge all privacy-related complaints within 5 business days and will provide a substantive response within 20 business days of receipt of a fully documented query. Where a query requires additional time to investigate, kb999 will keep you informed of progress throughout.

If you are not satisfied with kb999's response to your privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body associated with our gaming license. Details of the appropriate authority will be provided in our response to your complaint if escalation becomes necessary.