bt399 Privacy Policy

bt399 is committed to protecting the privacy and personal data of every player on the Platform. We understand that sharing personal information is a matter of trust, and we take that responsibility seriously. This Policy is written in plain, accessible English so that players across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else — can clearly understand how their data is handled.

bt399 operates as an online casino and sports betting platform serving Pakistani players. The processing of personal data is an unavoidable part of operating a licensed gaming platform — it is required for account management, payment processing, fraud prevention, regulatory compliance, and responsible gaming obligations. We collect only the data that is necessary for these purposes and do not use your data for purposes beyond those described in this Policy without your explicit consent.

This Policy applies to all data processed by bt399 in connection with the Platform, including data collected via the bt399 website, customer support interactions, KYC verification processes, and marketing communications where you have opted in to receive them.

bt399 may collect and process the following categories of personal data:

bt399 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming or self-exclusion request, in which case it is processed solely for that purpose.

bt399 collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC verification, deposit or withdrawal requests, customer support interactions, or promotional opt-ins.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technologies. See Section 9 (Cookies & Tracking) for more detail.
• Third-party sources: Identity and payment verification data received from KYC providers, payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay), and fraud detection services when you make a deposit or withdrawal through those channels.
• Publicly available sources: In limited circumstances, bt399 may cross-reference information against publicly available records to comply with anti-money-laundering or sanctions screening obligations.

bt399 processes your personal data for the following purposes:

1. Account creation and management: To register your bt399 account, authenticate your identity at login, and maintain your account settings and preferences.
2. Payment processing: To process PKR deposits and withdrawals via your chosen payment method, and to maintain accurate transaction records.
3. KYC and regulatory compliance: To verify your identity and age (21+ requirement), conduct anti-money-laundering checks, and comply with applicable international licensing obligations.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct as defined in the bt399 Terms & Conditions.
5. Platform operation and improvement: To provide, maintain, and improve the bt399 Platform and its features, including game performance, payment flows, and mobile interface optimisation.
6. Customer support: To respond to your queries, complaints, and support requests, and to maintain records of those interactions for quality assurance purposes.
7. Responsible gaming: To monitor your gaming activity for indicators of problem gambling, to apply and enforce deposit limits, session limits, and self-exclusion arrangements where requested or required, and to communicate responsible gaming information.
8. Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw this consent at any time.
9. Legal and dispute resolution: To comply with legal obligations, respond to regulatory inquiries, and manage any disputes arising from your use of the Platform.

bt399 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the bt399 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with anti-money-laundering regulations, licensing requirements, age verification obligations, and other applicable legal duties.
• Legitimate interests: Processing carried out to protect the integrity of the Platform, prevent fraud, ensure network and information security, and improve our services — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes, such as marketing communications and non-essential cookies, which we only conduct where you have given explicit, freely withdrawable consent.

bt399 does not sell your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients where necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and cryptocurrency processing services receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party verification services may process your identity and document data to fulfil age verification and anti-money-laundering requirements.
• Fraud detection and security services: Specialist providers who help bt399 detect and prevent fraudulent activity, account takeover attempts, and money laundering.
• Game providers: Third-party game studios whose games are accessible via the bt399 Platform may receive limited technical data (such as session tokens and bet values) necessary for game operation. These providers are contractually bound to process such data only for that purpose.
• Regulatory authorities: bt399 may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies in fulfilment of legal obligations or in response to valid legal process.
• Professional advisors: Legal, audit, and compliance advisors who are bound by professional confidentiality obligations.

bt399 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory retention requirements.

As a general guide:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC and identity verification documents are retained for the duration of the account and for five (5) years after closure.
• Customer support records are retained for three (3) years following the resolution of the relevant query or complaint.
• Marketing preference data is retained until you withdraw consent or request erasure, subject to legal retention requirements.
• Technical and usage logs are retained for up to twelve (12) months for security and platform performance purposes.

After the applicable retention period expires, bt399 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

bt399 implements technical and organisational security measures appropriate to the risk level of the data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bt399 Platform;
• Encrypted storage of passwords using industry-standard hashing algorithms — bt399 employees cannot read your password;
• Two-factor authentication (2FA) available to all account holders and mandatory for certain account actions;
• Restricted access controls ensuring that personal data is accessible only to bt399 personnel who require it for their job function;
• Regular security assessments, penetration testing, and vulnerability scanning of the bt399 Platform;
• Intrusion detection systems and real-time monitoring for suspicious access patterns;
• Data breach response procedures, including notification to affected players where a breach poses a significant risk to their rights.

While bt399 applies robust security controls, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own bt399 account credentials and device. If you believe your account has been compromised, contact bt399 customer support immediately.

bt399 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit a website. They serve a number of functions on the bt399 Platform:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your language preference, and enabling secure transactions. These cookies cannot be disabled without impairing Platform functionality.
• Performance cookies: Collect anonymised information about how players use the Platform — which pages are visited most, how long sessions last, and where errors occur. This data helps bt399 improve Platform performance and user experience.
• Functionality cookies: Remember your account preferences, such as game filters, display settings, and notification preferences, so you do not have to reconfigure them on each visit.
• Analytics cookies: Used to understand aggregate player behaviour on the Platform. Data collected via analytics cookies is anonymised and used solely for internal reporting and improvement purposes.

bt399 does not use third-party advertising cookies to track your activity across other websites or to serve targeted advertising outside of the bt399 Platform.

You can manage cookie preferences through your browser settings. Blocking essential cookies may prevent certain Platform features from working correctly. For more information on managing cookies on Pakistani mobile and desktop browsers, refer to your browser's help documentation.

As a bt399 player, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data bt399 holds about you. bt399 will respond to access requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held on your bt399 account. Many account details can be updated directly through your account settings.
• Right to erasure: You may request deletion of your personal data where bt399 no longer has a lawful basis to retain it. Note that legal retention requirements (such as anti-money-laundering obligations) may prevent the immediate deletion of some data categories.
• Right to restrict processing: You may request that bt399 restricts the processing of your personal data in certain circumstances, such as while a dispute over data accuracy is being resolved.
• Right to data portability: You may request a copy of personal data you have provided to bt399 in a structured, machine-readable format where processing is based on your consent or on contractual necessity.
• Right to withdraw consent: Where bt399 processes your data based on consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to bt399's processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.

To exercise any of these rights, contact bt399 customer support. We will verify your identity before processing any data rights request. bt399 will not charge a fee for reasonable requests and will respond within 30 days. For complex or multiple requests, the response period may be extended by up to a further 30 days, and we will notify you accordingly.

The bt399 Platform is strictly intended for adults aged 21 years and above. bt399 does not knowingly collect personal data from individuals under the age of 21. All players are required to confirm their age at registration, and bt399 verifies age through KYC document checks.

If bt399 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all personal data associated with the account will be deleted as soon as practicable (subject to any mandatory legal retention requirements), and any funds in the account will be handled in accordance with applicable regulatory guidance.

bt399 recommends that parents and guardians in Pakistan who are concerned about minors accessing online gambling platforms make use of parental control software and internet filtering tools available on Pakistani mobile and broadband networks. Further guidance is available on the bt399 Responsible Gaming page.

bt399 is an internationally operating platform, and some of the third-party service providers we use — including KYC verification providers, fraud detection services, and cloud infrastructure providers — may process your personal data outside of Pakistan.

Where such international transfers occur, bt399 takes steps to ensure that your personal data receives an adequate level of protection. This includes entering into data processing agreements with service providers that incorporate appropriate safeguards, such as standard contractual clauses or equivalent data protection commitments, consistent with internationally recognised privacy standards.

bt399 does not transfer personal data to countries or organisations that cannot provide an adequate level of data protection without implementing appropriate safeguards.

bt399 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. Updated versions will be published on this page with a revised effective date.

Where bt399 makes a material change to this Policy — meaning a change that substantially affects your rights or the way we use your personal data — we will notify you by email to your registered address at least seven (7) days before the change takes effect. For minor or clarifying updates, notice will be provided by publishing the revised Policy on this page.

Your continued use of the bt399 Platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure as described in the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or bt399's data processing practices, please contact our customer support team. bt399 customer support is available 24 hours a day, 7 days a week via live chat on the bt399 website.

For formal data rights requests or written privacy inquiries, you may contact bt399 at the following address (plain text — not a clickable link): [email protected]

bt399 will acknowledge all privacy-related inquiries within 24 hours and will provide a substantive response within 30 days. For complex requests, the response period may be extended, and you will be notified of the extension and the reason for it.

If you are unsatisfied with bt399's response to a data rights request, you may be entitled to escalate your complaint to the relevant licensing authority or to an independent dispute resolution body. Contact bt399 customer support for details of the applicable authority.