b399 Privacy Policy
How We Handle Your Data

This Privacy Policy ("Policy") describes how b399 ("b399", "we", "us", "our") collects, uses, stores, and discloses personal information about individuals ("you", "your", "the Player") who access or use the b399 online casino and sports betting platform available at https://b399.bio and any associated mobile applications or services (collectively, the "Platform").

b399 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. This Policy has been drafted to meet the standards of transparency and fairness that Pakistani players deserve when entrusting a gaming platform with their personal information.

This Policy applies to all personal data collected through the Platform, including data collected via the website, any mobile-optimised version, customer support interactions, and promotional campaigns. It does not apply to third-party websites that may be linked from the Platform — those sites maintain their own separate privacy policies.

b399 is the data controller in respect of all personal data collected through the Platform. Any questions about this Policy or your personal data should be directed to our support team at [email protected].

b399 collects several categories of personal data from players. The specific data collected depends on the context of the interaction, but generally includes the following:

Identity & Registration Data

• Full legal name as it appears on your CNIC, passport, or driving licence;
• Date of birth (for age verification — players must be 21 or older);
• Pakistani CNIC number, passport number, or other government-issued identification number;
• Gender (where provided during registration);
• Residential address including city (e.g., Karachi, Lahore, Islamabad, Faisalabad) and postal code.

Contact Data

• Email address;
• Mobile phone number (used for OTP verification and account security).

Financial & Transaction Data

• JazzCash or EasyPaisa account details linked to your b399 wallet;
• Bank account details where HBL, UBL, Meezan Bank, or SadaPay are used for deposits or withdrawals;
• USDT TRC20 wallet address where applicable;
• Full transaction history including deposit amounts, withdrawal requests, bonus credits, and wagering activity expressed in PKR.

Technical & Usage Data

• IP address and approximate geolocation derived from it;
• Device type, operating system, and browser version;
• Unique device identifiers;
• Session timestamps, pages visited, games played, and features accessed;
• Referral source and any marketing campaign attribution data.

Communications Data

• Records of all communications with b399's customer support team, including chat transcripts and email correspondence;
• Promotional communication preferences (opt-in or opt-out status).

b399 collects personal data through the following methods and touchpoints:

b399 does not purchase personal data from data brokers or third-party list providers. All data b399 holds about you originates from your direct interaction with the Platform or from verification processes you have participated in.

b399 processes your personal data only for specific, legitimate purposes. The following table summarises the primary purposes for which your data is used:

• Account Creation & Maintenance: To register your account, verify your identity and age (21+ requirement), and maintain your account in good standing on the b399 Platform.
• KYC & Compliance: To comply with anti-money laundering (AML) obligations, responsible gaming requirements, and international gaming licensing standards by verifying your identity and source of funds where required.
• Payment Processing: To process your PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay, and to process withdrawal requests to your verified payment accounts.
• Game & Betting Services: To provide access to b399's slot games, live casino tables, cricket betting markets, and all other gaming features on the Platform.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, duplicate account creation, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns and identify indicators of problem gambling so that appropriate responsible gaming interventions, such as deposit limits or self-exclusion, can be offered.
• Customer Support: To respond to your queries, process complaints, and provide assistance via email or live chat.
• Promotional Communications: To send you information about bonuses, promotions, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, design, and features of the b399 Platform.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory bodies or law enforcement, and to enforce our Terms & Conditions.

b399 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: The majority of data processing carried out by b399 is necessary for the performance of the contract between you and b399 as established by our Terms & Conditions. This includes processing data to register your account, facilitate payments, and provide gaming services.
• Legal Obligation: Certain processing activities are required for b399 to comply with its legal and regulatory obligations. This includes KYC identity verification, AML transaction monitoring, age verification, and data retention for audit purposes.
• Legitimate Interests: b399 processes some personal data on the basis of its legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics. Where legitimate interests are relied upon, b399 has assessed that those interests are not overridden by the player's fundamental privacy rights.
• Consent: Where processing is based on your consent — such as sending marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

b399 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: b399 uses regulated third-party KYC service providers to verify player identity documents. These providers process identity data on b399's behalf under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Payment Processors: Your payment details are shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and crypto payment processors as necessary to process your transactions. Each of these providers operates under its own privacy policy and regulatory framework.
• Anti-Fraud & AML Services: b399 may share transaction data with specialist anti-money laundering and fraud detection service providers for the purposes of screening transactions against international watchlists and detecting suspicious activity patterns.
• Legal & Regulatory Authorities: b399 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a valid legal order. b399 will seek to notify affected players of such disclosures where legally permitted to do so.
• Platform Infrastructure Providers: Hosting, cloud storage, and technical infrastructure providers may have limited access to personal data as a necessary consequence of providing their services to b399. All such providers are bound by confidentiality and data processing obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of b399's assets, personal data held by b399 may be transferred to the acquiring entity. Players will be notified of any such transfer and will have the opportunity to close their accounts if they do not wish to proceed under the new entity.

As an internationally operated platform, b399 may transfer personal data to servers, service providers, or affiliated entities located outside Pakistan. Where such transfers occur, b399 takes steps to ensure that your personal data receives an adequate level of protection equivalent to the standards described in this Policy.

Safeguards applied to international data transfers include:

• Data processing agreements that require recipient entities to maintain security and confidentiality standards equivalent to those applied by b399;
• Transfer only to jurisdictions or service providers with recognised data protection frameworks;
• Encryption of data in transit using TLS 1.3 or higher, regardless of the destination geography.

Players who wish to obtain further information about the safeguards applied to international data transfers may contact b399 at [email protected].

b399 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law or regulation. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. b399 conducts periodic data audits to ensure compliance with these retention schedules.

b399 uses cookies and similar tracking technologies on the Platform for the purposes described below. A "cookie" is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot transmit viruses.

b399 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication cookies that keep you logged in to your b399 account, security tokens, and CSRF protection mechanisms. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: These cookies remember your preferences such as language settings, preferred currency display (PKR), and notification preferences. They improve your experience but are not essential to the Platform's core operation.
• Performance & Analytics Cookies: b399 uses first-party analytics cookies to understand how players navigate the Platform, which games are most popular, and where technical issues occur. This data is used in aggregate and is not linked to individual player profiles for marketing purposes.

You can control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your b399 account. For functional and analytics cookies, you can opt out without affecting your ability to use the Platform.

b399 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All personal data transmitted between your device and b399's servers is encrypted using TLS 1.3. Data stored at rest, including financial records and KYC documents, is encrypted using AES-256.
• Access Controls: Access to personal data within b399's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their job functions. All access is logged and audited.
• Two-Factor Authentication: b399 supports and strongly encourages the use of two-factor authentication (2FA) for all player accounts. 2FA via SMS OTP is available for all Pakistani players.
• Penetration Testing: b399's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: b399 maintains a documented data breach response procedure. In the event of a security incident affecting personal data, b399 will notify affected players without undue delay and take immediate remedial action.
• Staff Training: All b399 staff who handle personal data receive regular training on data protection obligations and information security best practices.

As a player on the b399 Platform, you have the following rights in respect of your personal data. b399 is committed to honouring these rights and will respond to all valid requests within 30 calendar days.

The b399 Platform is strictly for individuals aged 21 years and above. b399 does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted at registration and again at the point of first withdrawal for all players.

If b399 discovers or is notified that a player is under the age of 21, the following actions will be taken immediately:

• The account will be suspended and access to the Platform will be blocked;
• Any funds deposited by the underage player will be returned to the payment method used for deposit, after verification;
• All personal data associated with the account will be securely deleted, subject to any legal obligation to retain records of the incident;
• The incident will be documented and reviewed by b399's compliance team.

The b399 Platform may contain links to third-party websites, payment provider portals, or informational resources. These links are provided for your convenience only. b399 does not control those third-party websites and is not responsible for their content, privacy practices, or security measures.

When you follow a link to a third-party website, that website's own privacy policy governs the collection and use of your personal data. b399 encourages you to review the privacy policy of any third-party site you visit before providing any personal information to that site.

The inclusion of any third-party link on the b399 Platform does not constitute an endorsement, recommendation, or approval of that third-party website or its operators by b399.

b399 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, b399 will notify registered players by email to the address on their account and/or by placing a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this page reflects when the most recent version of this Policy came into effect. We encourage you to review this Policy periodically to stay informed about how b399 protects your data.

Your continued use of the b399 Platform following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way b399 handles your personal data, please contact our Data Protection team using the details below:

b399 is committed to resolving all privacy-related complaints fairly and transparently. If you submit a complaint and are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or to the licensing authority under whose jurisdiction b399 operates.

b399 takes all privacy complaints seriously. Our team will acknowledge your complaint within 5 business days and provide a substantive response within 30 calendar days. Complex complaints may require additional time, in which case we will keep you informed of progress.