Privacy Policy

Introduction

bak999 ("bak999", "we", "us", "our") operates the website located at https://bak999.cam (the "Platform"). This Privacy Policy describes how bak999 collects, processes, stores, shares and protects personal data provided by or collected from users ("you", "User", "Player") in connection with their use of the Platform and its services.

bak999 is an English-language online gaming and sports betting platform serving users across Pakistan and internationally where lawful. Given the nature of online gaming services, the collection and processing of certain personal data is necessary to operate a compliant, secure and functional platform.

By registering an account, submitting personal information or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure and erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, bak999.
• "Data Processor" means a third party that processes Personal Data on behalf of bak999 under a contractual obligation.
• "Cookies" means small data files placed on a user's device by a website to store session or preference information.
• "KYC" (Know Your Customer) means the identity and document verification process required for account management and regulatory compliance.
• "PKR" means Pakistani Rupee, the currency denomination used for Pakistani user accounts.
• "Third Party" means any entity that is not bak999 or the User.

Data We Collect

bak999 collects Personal Data through several channels depending on how you interact with the Platform. The categories of data collected are described below.

3.1 Data You Provide Directly

• Registration Data: Legal full name, date of birth, email address, residential country and city, preferred currency (e.g., PKR for Pakistani users), and chosen username.
• KYC Documents: Government-issued photo identification (CNIC or passport), proof of address, and source-of-funds documentation where required for higher-value accounts.
• Payment Information: Payment method details submitted during deposit or withdrawal, including bank transfer references (e.g., HBL, UBL, Meezan Bank, Bank Alfalah) or mobile wallet identifiers (e.g., Easypaisa, JazzCash) as familiar local payment references. bak999 does not store full payment card numbers on its own servers.
• Support Communications: Content of messages submitted via Live Chat, email support or the Help Center, including any personal data included in those communications.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution and language settings.
• Usage Data: Pages visited, session duration, games played, betting activity, search queries within the Platform and feature interactions.
• Cookies & Tracking Data: Session cookies, preference cookies and analytics identifiers as described in Section 7.
• Location Data: Approximate geographic location derived from IP address, used for access-control and fraud-prevention purposes.

3.3 Data from Third Parties

• Identity verification data returned from KYC service providers engaged to validate government-issued documents.
• Payment verification data from payment processors confirming transaction status.
• Fraud-scoring data from anti-fraud service providers used to assess account risk.

Data Processing

bak999 processes Personal Data for the following purposes:

4.1 Service Delivery

To create and maintain your Account, process deposits and withdrawals (including PKR-denominated transactions), deliver sports betting and casino services, calculate and credit bonus rewards, and provide customer support in English and Urdu where requested.

4.2 Identity Verification & Compliance

To verify your identity and age (18+ or the higher minimum required), conduct KYC checks, perform anti-money-laundering (AML) screening, and meet obligations imposed by the operator's licence conditions and applicable law.

4.3 Fraud Prevention & Security

To detect and prevent fraudulent transactions, unauthorised account access, bonus abuse, multiple-account registration and other prohibited conduct as defined in our Terms & Conditions. Device data, IP addresses and behavioural patterns are analysed for anomalies.

4.4 Responsible Gambling

To monitor gaming activity for patterns associated with problem gambling, implement player-set deposit limits, session timers and self-exclusion tools, and fulfil responsible gambling obligations. See our Responsible Gambling page for full details.

4.5 Platform Improvement

To analyse aggregated, anonymised usage data to improve Platform performance, user interface design and product offerings — particularly for mobile users across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

4.6 Marketing Communications

Where you have provided opt-in consent, to send promotional communications about bak999 offers, bonus events and platform updates. You may withdraw this consent at any time through your Account settings or by contacting support.

Legal Basis for Processing

Where applicable data-protection law requires a legal basis for processing, bak999 relies on one or more of the following grounds:

• Contractual Necessity: Processing required to perform the contract with you — account registration, service delivery, payment processing and KYC verification.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, responsible gambling obligations and licence conditions.
• Legitimate Interests: Processing carried out in pursuit of bak999's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, informed consent — specifically for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.

Data Sharing

bak999 does not sell, rent or trade Personal Data to third parties for their independent commercial use. Personal Data may be shared only in the following circumstances:

• Payment Processors: Personal and payment reference data shared with payment processors solely to execute deposit and withdrawal transactions. This may include familiar local payment references such as Easypaisa, JazzCash, Raast and bank-transfer processors. These are shared as operational data only — not as endorsements of gambling.
• KYC / AML Providers: Identity documents shared with regulated third-party KYC verification and anti-money-laundering screening services under contractual data-processing agreements.
• Game Technology Providers: Anonymised session and gameplay data shared with licensed game-studio and sportsbook technology providers for bet settlement and game delivery purposes.
• Legal & Regulatory Authorities: Personal Data disclosed to law enforcement agencies, regulatory bodies or courts where required by applicable law or a valid legal order.
• Fraud Prevention Networks: Risk-scoring data shared with fraud-detection consortia to protect the Platform and its users from financial crime.
• Corporate Transactions: In the event of a merger, acquisition or sale of Platform assets, Personal Data may be transferred to the successor entity, subject to equivalent privacy protections.

Cookies & Tracking Technologies

bak999 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality including account session management, security token storage and load balancing. These cookies cannot be disabled without impacting service availability.
• Functional Cookies: Store user preferences such as language settings, currency display (PKR) and responsible gambling tool configurations between sessions.
• Analytics Cookies: Collect aggregated, anonymised data on how users navigate the Platform — pages visited, session lengths, device types — used to improve user experience and mobile performance.
• Security Cookies: Support fraud detection and account-security mechanisms by identifying anomalous browsing patterns.

7.2 Cookie Management

You may control non-essential cookies through your browser settings. Disabling certain cookie categories may reduce Platform functionality. Most modern browsers — used widely in Karachi, Lahore and across Pakistan — allow you to view, manage and delete cookies through the browser's privacy or settings menu.

Data Retention

bak999 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Account Data: Retained for the duration of your Account relationship with bak999 plus any mandatory post-closure retention period required under the operator's licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, or longer if required by anti-money-laundering regulations applicable to the operator's jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years to satisfy financial record-keeping obligations.
• Support Communications: Retained for a period sufficient to resolve disputes and meet legal obligations — typically two (2) to five (5) years.
• Marketing Consent Records: Retained for the duration of consent and for a reasonable period thereafter to demonstrate compliance.
• Analytics Data: Anonymised aggregated analytics data may be retained indefinitely for Platform improvement purposes as it cannot be attributed to individual users.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised using industry-standard destruction methods.

Data Security

bak999 implements appropriate technical and organisational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Specific security measures employed include:

• SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access Controls: Personal Data is accessible only to bak999 personnel and authorised processors who require it for legitimate operational purposes, governed by role-based access controls.
• Two-Factor Authentication (2FA): Available on all user accounts to provide an additional layer of access security.
• Payment Data Security: Payment reference data is handled in accordance with applicable payment industry security standards. Full payment card numbers are not stored on bak999's own infrastructure.
• Incident Response: bak999 maintains procedures to detect, investigate and notify affected users of any data breach in accordance with applicable obligations.

User Rights

Subject to applicable data-protection law and the operator's licence obligations, registered users of bak999 have the following rights in relation to their Personal Data:

• Right of Access: You may request confirmation of whether bak999 processes your Personal Data and obtain a copy of the data held.
• Right of Rectification: You may request correction of inaccurate or incomplete Personal Data held by bak999.
• Right of Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that bak999 restrict processing of your Personal Data in certain circumstances, such as where accuracy is contested or processing is unlawful.
• Right to Data Portability: Where technically feasible and legally applicable, you may request your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-out can be actioned via Account settings or by contacting support.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact bak999 support at [email protected] (plain text — not a clickable link). bak999 will respond within a reasonable timeframe and may require identity verification before fulfilling a request.

Minors & Age Verification

bak999 does not knowingly collect Personal Data from persons under the age of 18, or the higher minimum age required by the applicable operator licence jurisdiction. The Platform is strictly for adults.

Age verification is a mandatory component of the KYC process. Where bak999 discovers or is notified that an Account has been registered by a minor, the Account will be immediately suspended, all balances forfeited in accordance with operator policy, and any Personal Data collected will be securely deleted as promptly as practicable.

Parents and guardians who believe a minor has registered on bak999 are encouraged to contact support immediately at [email protected].

Third-Party Services

The Platform may integrate with third-party service providers for payment processing, game delivery, KYC verification and analytics. Each third-party provider operates under its own privacy policy. bak999 is not responsible for the data-processing practices of third parties beyond the contractual data-processing agreements in place.

Payment references familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned as contextual local payment options only. Where data is shared with payment processors for transaction execution, it is governed by the processor's own privacy practices and applicable financial services regulations. None of these references imply endorsement of gambling by these providers.

The Platform does not contain links to external websites beyond its own domain. However, third-party payment interfaces accessed during the deposit or withdrawal flow are operated by those providers and are subject to their own privacy notices.

International Data Transfers

bak999 operates as an international platform. Personal Data collected from users — including those based in Karachi, Lahore, Islamabad and across Pakistan — may be transferred to and processed in countries outside Pakistan where bak999's infrastructure, processors or service providers are located.

Where Personal Data is transferred internationally, bak999 takes steps to ensure that appropriate safeguards are in place — including contractual clauses, data-processing agreements and equivalent data-protection standards — to protect Personal Data to a level consistent with applicable law.

By using the Platform, you acknowledge and consent to the international transfer of your Personal Data in accordance with this Policy.

Policy Changes

bak999 reserves the right to update or modify this Privacy Policy at any time. The revised Policy will be published on this page with an updated Effective Date. Where changes are material — for example, a change in the purposes for which Personal Data is processed or the categories of third parties to whom it is disclosed — bak999 will notify registered users via their registered email address or through an in-platform notification.

Continued use of the Platform after the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the changes, you should cease using the Platform and contact support to request account closure.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data, please reach out through the following channels:

• Email: [email protected] — plain text display only, not a clickable link
• Live Chat: Available 24/7 directly within the Platform
• Help Center: Via the FAQ section of this website
• Response Time: bak999 will respond to data-related requests within a reasonable period, typically within 30 days of receipt
• Languages: English (primary); Urdu available on request

For concerns specifically about responsible gambling and personal-data handling in that context, please also consult the Responsible Gambling page.