VB999 Privacy Policy – How We Protect Pakistani Players' Personal Data

1Who We Are

This Privacy Policy applies to vb999, operating at vb999.online — Pakistan's dedicated online cricket betting and casino platform. References throughout this document to "vb999", "we", "us", or "our" refer to the operating entity behind the vb999.online platform. References to "you", "player", or "user" refer to any individual whose personal data we process in connection with their use of vb999.

vb999 is the data controller for personal information collected through the vb999.online platform. This means we determine the purposes for which your data is collected and the means by which it is processed. We take this responsibility seriously and are committed to handling all personal data in a manner that is transparent, lawful, and respectful of your privacy.

2Personal Data We Collect

vb999 collects personal data through several channels — when you register an account, when you use the platform, when you make deposits or withdrawals, and when you interact with our support team. Below is a complete breakdown of the categories of data we collect.

Registration Data

• Full legal name
• Date of birth
• Pakistani mobile number (used for account authentication)
• Email address
• Username and password (password stored in hashed format only, never in plain text)
• Province and city of residence

Identity Verification Data (KYC)

• CNIC (Computerised National Identity Card) number and scan/photograph
• Passport or other government-issued photo ID where applicable
• Selfie or liveness verification image used to match against identity documents
• Proof of address documentation where required

Financial & Payment Data

• Mobile wallet account details (Easypaisa, JazzCash, NayaPay, SadaPay) — account number and registered name only
• Bank account details for IBFT withdrawals — account title, IBAN, and bank name
• Card details for Visa/Mastercard transactions (card number handled exclusively by our PCI-DSS compliant payment processor; vb999 does not store full card numbers)
• Transaction history — all deposits, withdrawals, bet amounts, and game activity

Technical & Usage Data

• IP address at the time of registration and login
• Device type, operating system, and browser version
• Session duration and pages visited within the platform
• Bet placement behaviour, preferred games, and session frequency
• Error logs and customer support interaction records

3How We Use Your Personal Data

vb999 uses the personal data described in Section 2 for specific, defined purposes. We do not use your data for anything not listed here. The primary purposes for which your data is processed are:

vb999 will never use your personal data to send unsolicited third-party marketing, build advertising profiles, or make automated decisions that have significant legal effects on you without human review.

4Legal Bases for Processing

vb999 processes your personal data on the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to provide the services you have registered for — account management, payment processing, bet settlement.
• Legal obligation: Processing necessary for vb999 to comply with applicable legal requirements, including anti-money laundering checks, age verification, and financial record-keeping obligations.
• Legitimate interests: Processing carried out for purposes that are in vb999's legitimate business interests and do not override your privacy rights — including fraud prevention, platform security, and improving the quality of the vb999 service for Pakistani players.
• Consent: Processing based on your specific agreement, such as receiving promotional communications. You may withdraw consent at any time without this affecting the legality of processing carried out prior to withdrawal.

5Sharing Your Data

vb999 shares personal data only where strictly necessary for the operation of the platform and in accordance with this Privacy Policy. The categories of third parties who may receive your data are:

Payment Processors

When you make a deposit or withdrawal, relevant payment data is shared with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, the relevant bank for IBFT, or our card payment processing partner. Each of these providers operates under its own privacy policy and data protection obligations.

KYC Verification Providers

Identity documents submitted for KYC verification are shared with our contracted third-party verification service solely for the purpose of verifying your identity. Documents are not used for any other purpose and are not shared beyond this context.

Technology & Infrastructure Partners

vb999's platform operates on cloud infrastructure and uses certain third-party software tools for security, analytics, and operations. These partners process data strictly as data processors acting on our instructions, not for their own independent purposes.

Regulatory & Legal Requirements

vb999 may share personal data with regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law. We will notify you of any such disclosure where legally permitted to do so.

6Cookies & Tracking Technologies

vb999 uses cookies and similar technologies to operate the platform correctly and to improve your experience as a Pakistani player. Here is exactly what we use and why.

Essential Cookies

These cookies are required for vb999 to function at all. They maintain your login session, remember your preferences within a session, and protect against cross-site request forgery. You cannot opt out of essential cookies and continue using the platform — they are technically necessary.

Analytics Cookies

vb999 uses first-party analytics to understand how the platform is being used — which pages are visited most, where players encounter problems, and how the mobile experience compares to desktop. This data is aggregated and anonymised. It tells us "players in Pakistan are struggling with this page" rather than "you specifically struggled with this page." You may opt out of analytics cookies via the cookie preference centre accessible from the platform footer.

What We Don't Use

vb999 does not use advertising cookies, retargeting pixels, or third-party tracking technologies that build profiles of you across other websites. When you leave vb999, you are not followed around the internet by our advertising.

Managing Cookies

Most browsers allow you to view, manage, and delete cookies through the browser settings. Blocking essential cookies will prevent vb999 from functioning correctly. For instructions on managing cookies in your specific browser, consult your browser's help documentation.

7Data Security

vb999 takes the security of your personal and financial data seriously. The following technical and organisational measures are in place to protect your information.

• SSL/TLS encryption: All data in transit between your device and vb999's servers is encrypted using current TLS standards. The padlock in your browser address bar confirms this is active during your session.
• Password hashing: Your vb999 account password is stored using a strong one-way hashing algorithm. vb999 staff cannot see your password; if you forget it, it must be reset rather than retrieved.
• Payment data handling: Full card numbers are never stored on vb999 servers. Card processing is handled by our PCI-DSS compliant payment processor. Mobile wallet account numbers are stored in encrypted form.
• Access controls: Internal access to player data at vb999 is restricted to staff with a legitimate operational need. Access is logged and audited. Support staff see only the data relevant to the support function they are performing.
• Security monitoring: vb999's infrastructure is monitored continuously for unusual access patterns, intrusion attempts, and other security events. Our security team responds to identified incidents according to a documented incident response procedure.

8Data Retention

vb999 retains personal data for as long as necessary for the purposes described in this Privacy Policy, and no longer. The specific retention periods vary by data type and are determined by a combination of operational necessity, legal obligation, and responsible data minimisation principles.

• Active account data: Retained for the lifetime of your active vb999 account plus a period required for legal compliance after account closure.
• Financial and transaction records: Retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for five years from account closure or as required by applicable anti-money laundering regulations, whichever is longer.
• Support communications: Retained for three years from the date of the last communication in each case.
• Marketing preferences and consent records: Retained until you withdraw consent or close your account, with consent withdrawal records kept for five years.
• Technical logs (IP, device, session data): Typically retained for 12 months for security and fraud purposes, then deleted or anonymised.

When data reaches the end of its retention period, it is deleted or permanently anonymised so that it can no longer be attributed to you as an individual.

9Your Privacy Rights

As a vb999 player, you have a set of rights in relation to your personal data. These rights are meaningful — vb999 will respond to and action valid requests without unnecessary delay.

To exercise any of these rights, contact support@vb999.online. Please include sufficient information for us to identify your account and understand your request. We will confirm receipt within 2 business days and complete the request within 30 days.

10Children's Privacy

vb999 is strictly a platform for adults aged 18 and above. We do not knowingly collect, store, or process personal data from individuals under the age of 18. Our registration process includes a date of birth field and we carry out age verification checks, but we acknowledge that determined individuals may attempt to provide false information.

If vb999 discovers or is informed that an account belongs to a person under 18, the account will be immediately closed, all balances forfeited, and all personal data associated with that account deleted as promptly as possible, subject to any mandatory legal retention requirements.

If you are a parent or guardian and believe your child may have created a vb999 account, please contact support@vb999.online immediately with the relevant details. We will investigate and resolve the matter as a priority.

11International Data Transfers

vb999's primary operations are focused on serving Pakistani players, and the majority of data processing occurs on infrastructure located in or near the region. However, some service providers used by vb999 — including certain cloud infrastructure, KYC verification, and analytics partners — may process data outside Pakistan.

Where personal data is transferred to countries or regions that may not have data protection laws equivalent to the standards vb999 adheres to, we ensure appropriate safeguards are in place. These safeguards include:

• Contractual data processing agreements that obligate receiving parties to protect your data to the same standard as required under this Privacy Policy.
• Technical security measures equivalent to those applied to data processed within Pakistan.
• Limiting the scope of data transfers to only what is necessary for the specific service being provided.

If you have specific concerns about international data transfers relating to your account, please contact support@vb999.online.

12Changes to This Privacy Policy

vb999 may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When material changes are made, the "Last Updated" date at the top of this page will be revised. For significant changes, we will also notify registered players via email or an in-platform notification.

We encourage all vb999 players to review this Privacy Policy periodically — particularly before submitting any new documents for KYC verification or enabling any new data-related features within your account. Continued use of vb999 after the effective date of any update constitutes acceptance of the revised Privacy Policy.

If you disagree with any change to this Privacy Policy, you have the right to close your vb999 account and withdraw any available real-cash balance. Contact support@vb999.online to initiate this process.

13Contact & Complaints

For any privacy-related questions, data requests, or complaints about how vb999 handles your personal information, please contact us using the details below. Our privacy team will acknowledge all enquiries within 2 business days and aim to fully resolve them within 30 days.

If you feel your privacy complaint has not been satisfactorily resolved by vb999, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. vb999 will cooperate fully with any regulatory investigation into data handling practices.