Privacy Policy – by999.club

by999 collects personal data through several channels, including the registration process, account activity, customer support interactions, and automatically through technical systems. The categories of data collected include:

• Identity Data: Full name, date of birth, username, and copies of identity documents submitted for verification (e.g., CNIC, passport).
• Contact Data: Email address and any contact details provided to by999 support.
• Financial Data: Payment method identifiers (e.g., JazzCash mobile number, Easypaisa account reference, bank account details), transaction amounts, and transaction histories. Full payment credentials are not stored by by999 — they are handled by certified payment processors.
• Account Activity Data: Login timestamps, session durations, game play history, betting records, deposit and withdrawal activity, bonus claims, and account settings.
• Device & Technical Data: IP address, device type, operating system, browser type, screen resolution, and approximate geographic location derived from IP.
• Communications Data: Records of correspondence between you and by999 support, including the content of messages and any attachments submitted.
• Verification Data: Information and documents submitted during Know Your Customer (KYC) or Anti-Money Laundering (AML) verification processes.

by999 uses the personal data collected for the following purposes:

• Account Management: To create, verify, maintain, and manage your by999 account, including processing login authentication and account recovery.
• Transaction Processing: To process PKR deposits and withdrawals via supported payment methods including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah.
• Identity Verification & KYC: To verify your age (18+ requirement), identity, and the source of deposited funds in compliance with anti-money laundering obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct as defined in the by999 Terms & Conditions.
• Platform Operation: To deliver games, maintain service availability, diagnose technical issues, and improve platform performance.
• Customer Support: To respond to your enquiries, resolve disputes, and process responsible gaming requests including self-exclusion.
• Legal Compliance: To comply with applicable laws, regulatory obligations, court orders, and lawful requests from competent authorities.
• Communications: To send transactional communications (e.g., deposit confirmations, withdrawal status updates, security alerts). Marketing communications will only be sent with your consent and are subject to opt-out rights.

by999 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil obligations under the Terms & Conditions you have accepted — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where by999's legitimate interests are not overridden by your rights.
• Consent: Where you have provided explicit consent — for example, for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

by999 does not sell, rent, or trade your personal data to third parties. by999 may disclose personal data to the following categories of recipients where strictly necessary:

• Payment Service Providers: JazzCash, Easypaisa, and bank payment processors receive transaction-related data necessary to process your PKR deposits and withdrawals.
• Game Providers: Certified third-party studios providing games through the by999 platform may receive anonymised or pseudonymised session data for RNG auditing and game integrity purposes.
• Identity Verification Services: Third-party KYC and AML providers who assist by999 in verifying the identity and age of users.
• Legal & Regulatory Authorities: Law enforcement agencies, regulatory bodies, courts, or other governmental authorities where by999 is required or permitted by law to disclose your data.
• Technical Service Providers: Hosting, infrastructure, and security providers who process data on by999's behalf under confidentiality agreements and data processing terms.

All third-party data processors engaged by by999 are required to handle personal data in accordance with applicable data protection standards and are prohibited from using the data for their own independent purposes.

by999 processes all financial transactions in Pakistani Rupees (PKR) through certified payment processors. by999 does not store complete payment credentials such as full bank account numbers or JazzCash/Easypaisa PINs. Payment card details, where applicable, are handled exclusively by PCI-DSS compliant processors.

Transaction records — including deposit amounts, timestamps, and payment method references — are retained by by999 for account management, fraud prevention, and compliance purposes for the duration set out in the Data Retention section below.

by999.club uses cookies and similar local storage technologies to operate the platform. Cookies are small data files placed on your device when you visit by999.club. by999 uses the following categories of cookies:

• Essential Cookies: Required for basic platform functionality — session authentication, login state, and security tokens. These cannot be disabled without affecting platform operation.
• Functional Cookies: Remember your preferences such as language settings, game filter states, and cashier display options.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with by999.club to help improve the platform. No individual user is identified through analytical data.

by999 does not embed third-party advertising cookies, retargeting pixels, or social media tracking scripts on by999.club. You may manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from logging in or using the cashier.

by999 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Active Account Data: Retained for the duration of the account relationship and for a reasonable period thereafter to allow for the resolution of any disputes or regulatory enquiries.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the transaction date in compliance with anti-money laundering record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the account relationship.
• Support Communications: Retained for the period reasonably necessary to resolve the matter and for a further period in case the matter is revisited.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with by999's internal data lifecycle procedures.

by999 implements technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• HTTPS encryption for all data transmitted between your device and by999.club.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting internal data access to staff with a legitimate operational need.
• Regular security reviews and monitoring of system access logs.
• Contractual security requirements imposed on third-party data processors.

Whilst by999 takes reasonable and proportionate steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your by999 login credentials. If you suspect your account has been compromised, contact by999 support immediately and change your password without delay.

Subject to applicable law, you may hold the following rights in relation to personal data by999 processes about you:

• Right of Access: You may request a copy of the personal data by999 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected.
• Right to Erasure: In certain circumstances, you may request the deletion of personal data held by by999. Note that by999 may be required to retain certain data for legal and regulatory compliance purposes, which will take precedence over an erasure request.
• Right to Restriction of Processing: You may request that by999 restrict the processing of your data in certain defined circumstances.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact by999 support. by999 will verify your identity before processing any data rights request and will respond within a reasonable timeframe. Requests that are manifestly unfounded or excessive may be declined or subject to an administrative fee.

by999.club is strictly intended for adults aged 18 years and above. by999 does not knowingly collect personal data from individuals under the age of 18. If by999 discovers that personal data has been collected from a minor, that data will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that a minor has registered or used by999.club, please contact by999 support immediately with relevant details so the matter can be investigated and resolved without delay.

by999.club does not contain links to external third-party websites. All navigation within by999.club remains within the by999 platform. by999 is not responsible for the privacy practices of any third-party services you may access independently of by999.club.

Game providers integrated within the by999 platform operate under their own privacy and data handling terms. Where you interact with a game provided by a certified third-party studio through the by999 lobby, that provider may process limited session data in accordance with their own certified operational standards.

by999 reserves the right to update this Privacy Policy at any time. Where changes are material, by999 will notify registered users via the platform or by email to the registered address on file. The "Last updated" date at the top of this Policy reflects the date of the most recent revision.

Your continued use of by999.club following the effective date of any revised Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease use of by999.club and may request account closure.

The current version of this Policy is always accessible at by999.club/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by by999, please contact us through the official support channel on by999.club.

Email: [email protected] (plain text — not a clickable link)

Please include your registered username and a clear description of your enquiry to ensure prompt handling. by999 will acknowledge receipt of data rights requests and will respond within the timeframe required under applicable law.

For information about responsible gaming tools and self-exclusion, please visit by999 Responsible Gaming. For the full Terms & Conditions, visit by999 Terms & Conditions.