This Privacy Policy explains how by999 collects, uses, stores, and protects your personal data. We are committed to handling all player information with transparency, security, and respect for your rights.
by999 takes privacy seriously. As a platform serving players across Pakistan — from Karachi and Lahore to Islamabad and Faisalabad — we recognise that trust is foundational. Players share sensitive personal and financial information with us when they register and transact. This Privacy Policy sets out precisely what we collect, why we collect it, and how it is protected. It is written in plain English, not buried in technical language.
This Policy applies to all users of the by999 website at by999.co and any associated services. By registering an account or using any by999 service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the by999 Terms & Conditions.
by999 (operating via by999.co) is the data controller responsible for all personal data collected through the Platform. As data controller, by999 determines the purposes and means of processing your personal information. All data processing activities by by999 are conducted in accordance with applicable data protection standards and the commitments set out in this Privacy Policy.
For all privacy-related queries, requests, or complaints, players may contact the by999 data protection team via the support email displayed in the footer of this page. Please include your registered email address and a clear description of your request. by999 will respond to privacy requests within a reasonable timeframe, typically within 30 days.
by999 collects personal data in the categories described below. We collect only the data that is reasonably necessary for the stated purposes and do not collect data speculatively or in excess of operational need.
| Data Category | Examples | Collection Method |
|---|---|---|
| identity | Full name, date of birth, CNIC number and scan (for KYC) | Provided by player during registration or KYC process |
| contact | Email address, mobile number (if provided) | Provided during registration or account updates |
| financial | JazzCash/Easypaisa wallet reference, bank account details (last 4 digits), transaction amounts in PKR | Provided during deposit and withdrawal processes |
| account | Username, login timestamps, password hash, 2FA status | Generated automatically upon account creation and use |
| technical | IP address, device type, browser version, operating system | Collected automatically via server logs on each visit |
| gameplay | Game sessions, wager amounts, win/loss records, sports bets placed | Generated automatically as part of platform use |
| support | Live chat transcripts, support ticket content | Collected during support interactions |
| cookies | Session tokens, preference settings, analytics identifiers | Set automatically; see Section 9 for details |
3.1 Account Operation. by999 uses your registration and contact data to create and maintain your account, authenticate your identity at by999 Login, and send essential service communications such as password reset emails and security alerts. These are not marketing communications — they are necessary for account security.
3.2 KYC Compliance. Identity and document data collected during KYC is used exclusively to verify your age (18+) and confirm that your account details are accurate. KYC is a legal and operational necessity; by999 cannot process withdrawals from unverified accounts. CNIC scans are processed by the by999 compliance team and stored securely with access controls.
3.3 Payment Processing. Financial data is used solely to process your deposits and withdrawals via JazzCash, Easypaisa, bank transfer, or USDT. by999 does not store full payment credentials. Only the reference information necessary to reconcile transactions is retained.
3.4 Fraud Prevention & Security. Technical data including IP addresses, device identifiers, and login patterns is used to detect and prevent fraudulent activity, unauthorised account access, and abuse of promotional offers. This processing is essential for protecting the integrity of the platform and the security of all by999 players.
3.5 Responsible Gaming. Gameplay data is used to monitor for patterns consistent with problem gambling. Where such patterns are identified, by999 may take proactive steps including displaying responsible gaming messages or reaching out via account notifications. This is done in the interest of player welfare and is not used for any commercial profiling.
3.6 Platform Improvement. Aggregated, anonymised technical and gameplay data is used to improve the by999 platform, optimise game performance, and identify technical issues. This data does not identify individual players.
3.7 Legal Compliance. by999 may process and retain certain data to comply with legal obligations including anti-money laundering requirements, dispute resolution, and responses to valid legal requests from competent authorities.
by999 processes personal data under the following legal bases:
5.1 No Sale of Data. by999 does not sell, rent, or trade personal data to third parties for commercial purposes under any circumstances.
5.2 Service Providers. by999 shares data with carefully selected third-party service providers who assist in operating the Platform — including payment processors (JazzCash, Easypaisa, banking partners), KYC verification providers, and cloud infrastructure services. All such providers are contractually bound to process data only for specified purposes and to maintain appropriate security standards.
5.3 Legal Disclosures. by999 may disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or to protect the legal rights of by999 or third parties. by999 will notify affected players of such disclosures where legally permitted to do so.
by999 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. The table below outlines general retention periods by data category:
| Data Type | Retention Period |
|---|---|
| account data | Duration of account + 5 years post-closure |
| kyc documents | 5 years post-account closure (AML requirement) |
| transaction records | 7 years (financial records obligation) |
| support transcripts | 2 years from interaction date |
| technical / log data | 90 days rolling |
| cookie data | As per cookie expiry (see Section 9) |
After retention periods expire, data is securely deleted or anonymised. Players who request account closure may request early deletion of data that is not subject to mandatory retention obligations.
by999 implements technical and organisational security measures appropriate to the sensitivity of the data processed. These measures include:
Players contribute to their own account security by choosing strong passwords, enabling 2FA via account settings, and keeping their registered email address secure. by999 strongly recommends enabling 2FA on all accounts — instructions are available on the by999 Login page.
Pakistani players have the following rights with respect to their personal data held by by999. To exercise any of these rights, contact the by999 support team via live chat or email. by999 will respond within 30 days and will not charge a fee for reasonable requests.
You may request a copy of the personal data by999 holds about you. by999 will provide this in a readable format within 30 days of a verified request.
You may request correction of inaccurate personal data. For KYC-related corrections (name, date of birth), a revised document may be required.
You may request deletion of your personal data where it is no longer necessary for its original purpose and no mandatory retention obligation applies.
You may request that by999 restricts processing of your data in certain circumstances, for example while a rectification request is being assessed.
Where data is processed by automated means on a contractual basis, you may request a machine-readable export of your account and transaction data.
You may object to processing based on legitimate interests, including direct marketing. Objections to marketing are processed immediately; other objections are assessed on their merits.
by999 uses cookies and similar tracking technologies to operate the Platform, maintain login sessions, and analyse usage patterns. The following cookie categories are in use:
| Type | Purpose | Expiry |
|---|---|---|
| essential | Login session, security tokens, cart state | Session |
| functional | Language/display preferences | 1 year |
| analytics | Anonymised page view and performance data | 90 days |
by999 does not use third-party advertising cookies or retargeting pixels. Essential cookies cannot be disabled as they are required for the Platform to function. Analytics cookies may be disabled via your browser settings without affecting Platform access.
by999 does not knowingly collect personal data from individuals under the age of 18. The Platform is strictly an adult service. Age verification is enforced at registration and through KYC documentation review. If by999 determines that personal data has been collected from an individual under 18, that data will be deleted immediately and the account closed.
Parents or guardians who believe a minor has registered on by999 should contact by999 support immediately via live chat or email. by999 will investigate and act upon such notifications as a priority.
by999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email and a notice on the Platform. The revised Policy will state its effective date. Continued use of by999 following a policy update constitutes acceptance of the revised terms.
For all privacy-related queries including data access requests, erasure requests, or complaints, contact the by999 data protection team. Support is available 24/7 via live chat. The team email address is displayed in the footer of this page. Please quote your registered account email in all communications to allow prompt identification of your record.
The privacy commitments every by999 account holder can count on
by999 has never sold player data and commits never to do so. Your personal information is used only to operate and improve the service you signed up for.
All data transmitted between your device and by999 is encrypted via TLS. KYC documents and financial records are encrypted at rest using industry-standard protocols.
Access requests, erasure requests, and corrections are processed within 30 days at no charge. by999 does not make it difficult to exercise your data rights.
by999 retains only the payment reference information needed to process transactions. Full JazzCash wallet credentials or full bank account numbers are never stored by by999.
by999 analyses gameplay patterns only to support responsible gaming — not to build commercial profiles or target you with ads. Your betting history stays private.
Questions about your data? by999's live chat support team is available around the clock to help with privacy queries, data requests, and account security concerns.
Your privacy is a core part of the by999 experience — not an afterthought. Join Pakistani players who trust by999 for fair games, secure payments, and transparent data practices.
Access Your by999 Account