b699 Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out the manner in which b699 ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data relating to individuals ("Player", "User", "You") who access or use the b699 website, mobile applications, and associated gaming and sports betting services.

b699 operates as a digital gaming platform serving players primarily based in Pakistan, including users in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and all other regions of the country. This Policy applies to all b699 users regardless of the device or channel through which they access the platform.

By registering an account on b699, using any of its services, or continuing to browse the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must immediately discontinue use of the b699 platform.

This Policy should be read alongside the b699 Terms & Conditions, which govern the overall contractual relationship between you and the platform. Capitalised terms not defined in this Policy carry the meaning assigned to them in the Terms & Conditions.

Data We Collect

b699 collects personal data through a number of channels, including direct input from the Player, automated technical collection during platform use, and information provided by regulated third-party service providers. The categories of personal data we collect include:

How We Use Your Data

b699 processes your personal data only for specific, defined purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which b699 uses your personal data are as follows:

1. Account Registration and Management: To create and maintain your b699 player account, verify your identity, and administer account settings and preferences.
2. Service Delivery: To provide you with access to b699 gaming and betting services, process your wagers and game rounds, and deliver promotional content you have opted into.
3. Financial Transactions: To process your deposits and withdrawal requests, reconcile transaction records, and comply with financial record-keeping obligations. This includes processing payments via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported PKR payment methods.
4. Regulatory Compliance: To comply with anti-money laundering (AML), counter-terrorism financing (CTF), Know Your Customer (KYC), and other applicable legal and regulatory requirements. b699 is obligated to retain certain financial and identity records for prescribed periods.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraud, account compromise, bonus abuse, money laundering, and other prohibited activities. This may involve automated decision-making processes.
6. Customer Support: To respond to your queries, resolve disputes, process complaints, and maintain records of your interactions with the b699 support team.
7. Responsible Gaming: To monitor your gaming behaviour and, where necessary, proactively reach out to players who may be displaying indicators of problem gambling. b699 uses account activity data to support its responsible gaming obligations.
8. Platform Improvement: To analyse usage patterns, identify technical issues, test new features, and continuously improve the performance and user experience of the b699 platform.
9. Direct Marketing: To send you promotional communications about b699 bonuses, new game launches, cricket and PSL betting offers, and other relevant updates — but only where you have provided explicit consent and only through channels you have selected.

You may withdraw your consent to direct marketing at any time by updating your communication preferences within your account settings or by contacting b699 support. Withdrawal of marketing consent does not affect b699's ability to send you service-related communications that are necessary for the administration of your account.

Legal Basis for Processing

b699 processes your personal data only where it has a valid legal basis for doing so. The following legal bases apply to b699's processing activities:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the b699 Terms & Conditions, including account administration, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML legislation, KYC requirements, financial reporting obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate Interests: Processing carried out in pursuit of b699's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit, informed, and freely given consent, including direct marketing communications and the use of non-essential cookies. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing

b699 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own independent commercial purposes. Personal data is shared only in the following strictly controlled circumstances:

• Payment Service Providers: Financial data is shared with payment processors and banking partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and international payment gateways — solely for the purpose of processing your transactions. These providers are bound by their own privacy obligations and applicable financial regulations.
• Identity Verification Partners: KYC documents and identity data may be shared with accredited identity verification service providers engaged by b699 to perform age and identity checks. These providers act as data processors under contract with b699.
• Game Software Providers: Technical usage data and game session information may be shared with the third-party game developers and casino content providers whose titles are featured on the b699 platform, solely for the purpose of game delivery, fairness auditing, and technical support.
• Regulatory and Law Enforcement Authorities: b699 will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by applicable law, court order, or regulatory directive. b699 will notify the affected Player of any such disclosure where legally permissible to do so.
• Professional Advisers: Personal data may be disclosed to b699's legal advisers, auditors, or accountants where necessary for the conduct of legal proceedings, regulatory audits, or financial reporting, subject to strict professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of b699 or any of its assets, personal data held on the platform may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of any such transfer in advance.

All third parties with whom b699 shares personal data are required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was disclosed. b699 does not authorise any third party to use your personal data for their own marketing purposes without your separate, explicit consent.

Cookies & Tracking

b699 uses cookies and similar tracking technologies to operate the platform, remember your preferences, measure performance, and — where you have consented — deliver relevant promotional content. The following categories of cookies are used on the b699 platform:

• Strictly Necessary Cookies: Essential for the operation of the b699 platform. These cookies enable core functions such as secure login, session management, and fraud prevention. They cannot be disabled without materially affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how players interact with the b699 platform — including pages visited, time on site, error logs, and navigation paths — to help us identify and resolve issues and improve the user experience.
• Functional Cookies: Enable enhanced functionality and personalisation, such as remembering your preferred language, game display settings, and responsible gaming limits. Disabling these cookies may reduce the quality of your experience.
• Marketing & Targeting Cookies: Used — only with your explicit consent — to deliver promotional content relevant to your activity and interests on the b699 platform. These cookies may record your visits to b699 to help us make our communications more relevant to you.

In addition to cookies, b699 may use web beacons, pixel tags, and similar tracking technologies for analytics and marketing measurement purposes, subject to the same consent requirements described above.

Data Retention

b699 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following retention periods apply as a general guideline:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where anonymisation is not technically feasible, the data is archived with strict access controls until secure deletion is possible.

Data Security

b699 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the b699 platform is encrypted using TLS 1.2 or higher. Sensitive data stored on b699 servers — including financial credentials and identity documents — is encrypted at rest using AES-256 standard encryption.
• Access Controls: Access to personal data within b699's systems is restricted on a strict need-to-know basis. Staff access privileges are reviewed regularly and revoked immediately upon change of role or departure from the organisation.
• Two-Factor Authentication: b699 supports and encourages the use of two-factor authentication (2FA) for player accounts. Players are strongly advised to enable 2FA via their account security settings to add an additional layer of protection against unauthorised access.
• Vulnerability Management: b699 conducts regular security assessments, penetration testing, and software patch management to identify and remediate vulnerabilities in the platform infrastructure.
• Incident Response: b699 maintains a documented data breach response procedure. In the event of a data security incident that poses a risk to your rights and freedoms, b699 will notify affected players and relevant authorities within the timeframes required by applicable law.
• Staff Training: All b699 employees and contractors who handle personal data receive mandatory data protection training and are bound by confidentiality obligations as a condition of their engagement.

Your Rights

As a player whose personal data is processed by b699, you hold the following rights in relation to that data. These rights may be subject to certain limitations and exemptions under applicable law, particularly where b699 is required to retain data for regulatory compliance purposes.

• Right of Access: You have the right to request a copy of the personal data b699 holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). b699 will respond to verified SAR requests within 30 days.
• Right to Rectification: If any personal data b699 holds about you is inaccurate, outdated, or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe it is being processed unlawfully. This right is subject to b699's legal retention obligations.
• Right to Restriction: You have the right to request that b699 restrict the processing of your personal data in certain circumstances, for example while you contest the accuracy of data or while an objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on b699's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes.
• Rights Related to Automated Decision-Making: Where b699 makes decisions about you based solely on automated processing — including profiling — that produce legal or similarly significant effects, you have the right to request human intervention, to express your point of view, and to contest the decision.

International Transfers

b699 operates with the support of a global network of technology partners, payment processors, and service providers. As a result, your personal data may be transferred to and processed in countries other than Pakistan. These transfers may include jurisdictions that do not provide the same level of data protection as Pakistani law.

Where personal data is transferred internationally, b699 ensures that appropriate safeguards are in place to protect your data in transit and at the destination. Such safeguards may include:

• Contractual clauses requiring the recipient to apply equivalent data protection standards to those observed by b699.
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection by relevant regulatory authorities.
• Binding corporate rules where data is transferred within a corporate group of companies that share a common data protection framework.
• Explicit consent from the Player, where no other appropriate safeguard is available and the transfer is necessary to deliver a service requested by the Player.

If you would like further information about the international transfer safeguards applied by b699, you may contact us using the details provided in Section 12 of this Policy.

Children & Minors

The b699 platform is strictly intended for use by adults only. b699 enforces a minimum age requirement of 21 years for all account holders and does not knowingly collect, process, or retain personal data relating to individuals under the age of 21.

During the registration process, all applicants are required to declare that they are 21 years of age or older. b699 verifies age declarations through its mandatory KYC process, which requires the submission of a government-issued photo identification document confirming date of birth.

Parents and guardians who have reason to believe that a minor may have gained access to the b699 platform using falsified information are encouraged to contact our support team immediately at [email protected] so that the matter can be investigated and the account closed without delay. b699 takes underage access extremely seriously and maintains robust preventative controls as part of its responsible gaming programme.

Policy Updates & Contact

b699 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed prominently at the top of this page.

Where changes to this Policy are material — meaning they significantly affect your rights or the way in which b699 processes your personal data — b699 will notify you in advance via the email address registered to your account or through a prominent notice on the platform. Your continued use of b699 services following such notification will constitute your acceptance of the revised Policy.

We encourage you to revisit this Policy periodically to stay informed about how b699 protects your personal data. The current version of this Policy supersedes all prior versions and is the sole authoritative statement of b699's privacy practices.