This Privacy Policy ("Policy") describes how by999 ("we," "us," "our," "the Platform") collects, processes, stores, shares, and protects the personal data of users ("you," "Player," "User") who access or use by999's online casino and sports betting services at by999.bio. by999 is committed to safeguarding the privacy of every Pakistani player and to handling all personal data with the highest standards of security and confidentiality — in accordance with applicable data protection legislation. By registering for or using the by999 Platform, you acknowledge that you have read, understood, and accepted this Privacy Policy in full.
Six core data protection principles that underpin everything by999 does with your personal information.
by999 only collects personal data for clearly defined, legitimate purposes — account management, KYC verification, PKR payment processing, fraud prevention, and regulatory compliance. We do not collect data beyond what is genuinely necessary for these purposes.
All personal data held by by999 is protected by 256-bit SSL encryption, access controls, and secure server infrastructure. Your CNIC details, payment information, and account credentials are never stored in plain text and are never accessible to unauthorised personnel.
by999 recognises and actively supports your data rights — including the right to access, correct, delete, restrict, and port your personal data. These are not theoretical rights: you can exercise them by contacting by999's support team and we will act promptly.
by999 does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks. Your personal information is used exclusively to operate and improve by999's services — never monetised without your explicit consent.
by999 does not retain personal data beyond the period necessary for the purpose for which it was collected, or beyond the minimum retention periods required by applicable anti-money-laundering and gaming regulation. Data is securely deleted or anonymised when no longer needed.
by999 is transparent about what data we collect, why we collect it, how long we keep it, and who we share it with. This Privacy Policy is written in plain language as well as legal English so that every by999 player — whether in Karachi or Gilgit — can understand it.
Your Data Rights Under This by999 Privacy Policy
For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal data is by999, operating the online casino and sports betting platform accessible at by999.bio. by999 is an internationally licensed gaming operator.
by999 operates as the primary data controller for all personal data collected from Pakistani players during account registration, gaming activity, and use of by999's payment and support services. When by999 engages third-party service providers (such as KYC verification firms, payment processors including JazzCash and EasyPaisa integrators, or game providers), those entities act as data processors under instruction from by999 and are bound by data processing agreements requiring them to protect your data.
The by999 Data Protection contact for enquiries relating to this Policy is reachable at: [email protected] — please use the subject line "Privacy / Data Request."
by999 collects only the categories of personal data that are strictly necessary for the stated purposes described in Section 4 of this Policy. The categories of data by999 collects from Pakistani players include:
by999 collects personal data through the following channels:
The majority of data by999 holds about you is provided directly by you when you: register a by999 account; complete the KYC verification process; make a deposit or withdrawal via JazzCash, EasyPaisa, or bank transfer; contact by999 customer support; or respond to by999 surveys, promotions, or feedback requests.
When you visit by999.bio or use any by999 service, by999 automatically collects technical and behavioural data through cookies, server logs, and analytics tools. This includes your IP address, device information, pages visited, games played, bets placed, and session duration. This data is collected passively and does not require any active input from you.
by999 may receive personal data about you from third-party sources, including:
by999 uses the personal data it collects for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account Registration & Management | Identity, Contact | Contract Performance |
| Age Verification (21+) | Identity (CNIC, DOB) | Legal Obligation |
| Processing PKR Deposits & Withdrawals | Financial, Identity | Contract Performance |
| KYC / Anti-Money-Laundering Compliance | Identity, Financial | Legal Obligation |
| Fraud Prevention & Security | Technical, Financial | Legitimate Interest |
| Providing Gaming Services | Gaming, Technical | Contract Performance |
| Responsible Gaming Monitoring | Gaming, Identity | Legal Obligation + Legitimate Interest |
| Customer Support | Identity, Communications | Contract Performance |
| Marketing & Promotions | Contact, Gaming | Consent |
| Platform Analytics & Improvement | Technical, Gaming | Legitimate Interest |
by999 processes your personal data on the following legal bases under applicable data protection legislation:
Processing is necessary to perform the contract between you and by999 — specifically, to provide you with access to by999's casino and betting services, to process PKR deposits and withdrawals, and to operate your account in accordance with by999's Terms and Conditions.
by999 is subject to legal obligations including anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, age verification obligations (21+), and responsible gaming mandates imposed by by999's operating licence. Processing necessary to fulfil these obligations is conducted on the basis of legal obligation.
by999 processes certain data — such as IP addresses, device information, and gaming patterns — on the basis of legitimate interest, where by999's interest in fraud prevention, platform security, service improvement, and responsible gaming monitoring outweighs any potential impact on your privacy rights. by999 has conducted legitimate interest assessments for all such processing.
Where by999 processes data for marketing communications — including promotional emails, PSL season offers, and bonus notifications — this processing is conducted on the basis of your explicit consent. You may withdraw consent for marketing communications at any time by contacting by999 support or using the unsubscribe link in any marketing email.
by999 shares personal data with third parties only in the following limited and controlled circumstances:
by999 shares necessary financial and identity data with payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank integrators — solely for the purpose of processing your PKR deposits and withdrawals. These processors are bound by data processing agreements and applicable financial regulations governing data confidentiality.
by999 engages third-party identity verification firms to conduct CNIC and address verification as part of the KYC process. Your identity documents and CNIC number are shared with these providers only for verification purposes and are not retained by them beyond the minimum period required by applicable regulation.
To provide live casino, slot, and RNG game content on by999, your account identifier and session token are shared with by999's game providers (e.g., Pragmatic Play, NetEnt). These providers receive only the technical data necessary to deliver the game session and are prohibited by contract from using this data for their own commercial purposes.
by999 is legally obligated to share personal data with relevant regulatory authorities, law enforcement agencies, and anti-financial-crime bodies where required by law, court order, or regulatory directive. by999 will notify you of any such disclosure where permitted to do so under applicable law.
by999 shares certain technical and identity data with industry-standard fraud prevention databases to detect and prevent fraudulent account activity, bonus abuse, and financial crime on the by999 Platform.
by999.bio uses cookies and similar tracking technologies to provide essential site functionality, improve the user experience, and — where you have consented — deliver relevant promotional content during PSL seasons and other by999 campaigns.
You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impact your ability to use by999 — including your ability to log in to your by999 account and complete PKR transactions. Instructions for managing cookies are available in your browser's help documentation.
Your CNIC number and identity documents are processed by by999 and its authorised KYC partner solely for the purpose of verifying your identity and confirming that you are at least 21 years of age. These documents are never shared with game providers, marketing partners, or any entity not directly involved in the KYC verification process.
When you deposit or withdraw via JazzCash or EasyPaisa, by999 processes the mobile number associated with your wallet and the transaction reference number. by999 does not store your JazzCash or EasyPaisa PIN, and these are never transmitted through by999's systems. All payment data is processed over encrypted connections with by999's payment processing partners.
Where you provide HBL, UBL, or Meezan Bank account details for withdrawals, this data is stored in encrypted form and is only accessible to by999's payments team for the purpose of processing your withdrawal. Bank account details are verified against the identity documents on file before any withdrawal is processed.
by999 retains personal data for as long as necessary to fulfil the purpose for which it was collected, or for the duration required by applicable legal and regulatory obligations — whichever is longer. The following retention periods apply:
When data retention periods expire, by999 securely deletes or anonymises the relevant personal data so that it can no longer be associated with any individual player.
As a by999 user, you have the following rights in relation to your personal data. by999 will respond to all valid data rights requests within 30 days of receipt, unless an extension is required for complex requests (in which case we will notify you).
You have the right to request a copy of all personal data that by999 holds about you. by999 will provide a structured subject access response detailing what data we hold, why we hold it, and how long we intend to keep it.
If any personal data by999 holds about you is inaccurate or incomplete, you have the right to request correction. Note that corrections to identity data (name, CNIC number) may require submission of updated KYC documents for verification before by999 can process the correction.
You have the right to request deletion of your personal data. However, by999 is not always able to comply with erasure requests where retention of your data is required by law — for example, AML regulations require by999 to retain your KYC documents and transaction records for specified minimum periods regardless of erasure requests.
You have the right to request that by999 restricts the processing of your personal data in specified circumstances — for example, while the accuracy of data you have disputed is being verified.
You have the right to receive a copy of the personal data you provided to by999 in a structured, commonly-used, machine-readable format, and to request that by999 transmits this data to another data controller where technically feasible.
You have the right to object to by999's processing of your personal data where that processing is based on legitimate interest. by999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
To exercise any of the rights listed above, please contact by999 at: [email protected] with the subject line "Data Rights Request — [Your Account ID]." by999 may require identity verification before processing your request to protect against fraudulent access to account data.
by999 services are strictly for adults aged 21 and above. by999 does not knowingly collect personal data from any person under the age of 21. If by999 discovers that personal data has been collected from an underage user, that data will be immediately deleted and the account will be permanently closed.
by999 applies robust age verification (KYC) processes to all newly registered accounts. Pakistani players are required to submit CNIC documentation confirming they are aged 21 or older before any withdrawal from their by999 account is approved. In all cases where by999 suspects a player may be underage, by999 will immediately suspend that player's account and initiate enhanced verification before any further gaming activity is permitted.
Parents and guardians who believe their child has registered on by999 should contact by999 immediately at [email protected]. by999 will prioritise such requests and close the account and delete all associated data without undue delay.
by999 implements and maintains appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These measures include:
The by999 Platform may contain links to third-party websites, game provider portals, or informational resources. This Privacy Policy applies exclusively to personal data processed by by999 on the by999.bio Platform. by999 is not responsible for the privacy practices, data collection activities, or content of any third-party website or service, and you access any third-party sites at your own risk.
by999 recommends that you read the privacy policy of any third-party website you visit through a link encountered on by999, as their data practices may differ significantly from those described in this Policy.
As an internationally licensed gaming operator, by999 may transfer your personal data to, and process it in, countries other than Pakistan. Where such transfers occur, by999 ensures that appropriate safeguards are in place to protect your personal data at the destination, in accordance with applicable data protection requirements. These safeguards may include:
Pakistani players may request details of the specific international transfer mechanisms applicable to their personal data by contacting by999 at [email protected].
by999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, by999's data processing activities, or best practice in data protection. When material changes are made to this Policy, by999 will:
Your continued use of by999 following notification of any material Policy update constitutes your acceptance of the updated Privacy Policy. If you do not agree to any change, you should stop using by999 and may request closure of your account in accordance with the account management provisions of by999's Terms and Conditions.
For all privacy-related enquiries, data rights requests, or concerns about by999's handling of your personal data, please contact by999's Data Protection team using the contact details below. by999 does not provide a telephone number for data protection matters — all requests must be submitted in writing to ensure proper documentation and tracking.
If you are dissatisfied with by999's handling of a privacy concern or data rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority applicable in your jurisdiction. by999 encourages you to contact us directly in the first instance so that we may address your concern promptly.
Privacy at by999 is not fine print — it is foundational. Every PKR transaction, every JazzCash withdrawal, every by999 login session is protected by the same security standards Pakistani banks use. No data selling. No third-party marketing without your consent. Full transparency about what we hold and why. Ready to experience by999 with confidence? 21+ only. Play responsibly.
Visit by999 Casino Read Terms & Conditions