Data & Privacy
Last Updated: 1 January 2026

b9998 Privacy Policy — How We Protect Your Personal Data

b9998 takes the privacy and security of every Pakistani player's personal data seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold over your own information. Transparency is non-negotiable for us.

256-Bit SSL Encryption

All data transmitted between your device and b9998 servers is protected by industry-standard 256-bit SSL/TLS encryption. Your personal and financial information cannot be intercepted in transit.

No Data Sold to Third Parties

b9998 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information exists to serve your account — not to generate revenue for advertisers.

Your Rights, Respected

You hold rights over your personal data — access, correction, deletion, and portability. b9998 provides clear mechanisms to exercise every one of these rights through your account settings or via our support team.

Secure Data Storage

All b9998 member data is stored on secured servers with access controls, regular security audits, and intrusion detection systems. Only authorised personnel with a legitimate operational need can access member records.

Clear Retention Periods

b9998 does not retain your personal data indefinitely. Retention periods are defined by regulatory obligations, legal requirements, and operational necessity. Data no longer needed is securely deleted or anonymised.

Regulatory Compliance

b9998's data practices are designed to align with applicable international data protection standards and our licensing obligations. KYC and AML data collection is legally required — we collect only what the regulations mandate.

Summary: b9998 collects only the personal data necessary to operate your account, comply with legal obligations, process payments in PKR, and keep the platform safe. We do not sell your data. You can access, correct, or delete your data at any time by contacting us. This policy explains everything in full detail below.

1. Introduction

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by b9998 in connection with the operation of its online sports betting and casino platform at b9998.biz. b9998 is committed to handling the personal information of its Pakistani members — and all users who interact with the platform — responsibly, transparently, and in accordance with applicable data protection principles.

b9998 operates as Pakistan's premier online cricket betting and casino platform. The nature of our services means we necessarily collect certain personal and financial information about our members. This policy explains precisely what that information is, why it is needed, how it is protected, and the rights you hold over it.

By registering an account with b9998, or by using any part of the b9998 platform, you confirm that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Privacy Policy, you must not use b9998.

This Privacy Policy should be read alongside the b9998 Terms & Conditions, which govern the overall contractual relationship between you and b9998.

2. Data Controller

2.1 For the purposes of this Privacy Policy, the data controller — meaning the entity that determines the purposes and means of processing your personal data — is b9998, the operator of the b9998.biz platform.

2.2 b9998 operates under international gaming regulations and is responsible for ensuring that all personal data collected from members and users of the platform is processed in accordance with this Privacy Policy and applicable data protection law.

2.3 Queries, requests, and concerns relating to data protection and privacy may be directed to b9998 through the support channels available on the platform. Contact details are provided in Section 16 of this policy.

3. Categories of Personal Data We Collect

b9998 collects personal data in several distinct categories. The specific data collected in each category is set out in the table below:

Category Data Collected Purpose
Identity Data Full legal name, date of birth, CNIC number, CNIC document images (front and back), nationality Account registration, age verification (21+), KYC compliance, AML obligations
Contact Data Mobile phone number (Pakistani), email address, city / region of residence Account communication, verification OTPs, support correspondence, responsible gaming alerts
Financial Data Payment method details (JazzCash account number, EasyPaisa number, bank account name and number for HBL / UBL / Meezan transfers, masked card details for Visa / Mastercard), deposit and withdrawal history, transaction amounts in PKR Payment processing, fraud prevention, AML monitoring, withdrawal verification
Betting & Gaming Data Bet history, wager amounts, game session records, win / loss history, bonus usage, VIP tier and points balance Account management, dispute resolution, responsible gaming monitoring, regulatory reporting
Technical Data IP address, device type and model, operating system, browser type, device fingerprint identifier, geolocation data (country / city level), session timestamps, login history Security, fraud prevention, jurisdictional compliance, platform performance optimisation
Communications Data Records of support interactions (chat logs, email correspondence), complaint records, feedback submitted Support resolution, quality assurance, dispute evidence, regulatory compliance
Behavioural & Analytics Data Pages visited on b9998, features used, session duration, click paths, promotional interactions Platform improvement, user experience personalisation, marketing effectiveness analysis

b9998 does not collect sensitive personal data — such as racial or ethnic origin, religious beliefs, health data unrelated to responsible gaming, or biometric data — except where explicitly required by applicable law or with your express prior consent.

4. How We Collect Your Personal Data

b9998 collects personal data through the following channels:

  • Direct Collection: Information you provide when you register a b9998 account, complete KYC verification, submit a deposit or withdrawal request, contact support, respond to a survey, or interact with any b9998 feature that requires you to input personal information.
  • Automated Technical Collection: Technical and behavioural data collected automatically when you access the b9998 platform through your browser or device, including via cookies and similar tracking technologies. See Section 7 for full details of our cookie practices.
  • Third-Party Verification Services: Identity verification and document authenticity data received from b9998's KYC and AML service providers, who process your identity documents on b9998's behalf.
  • Payment Processors: Transaction confirmation data and payment status updates received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors when you conduct transactions on b9998.
  • Fraud and Security Providers: Risk signals and device intelligence data from b9998's fraud detection service providers, used to protect members' accounts from unauthorised access and fraudulent activity.

5. How We Use Your Personal Data

b9998 uses the personal data it collects for the following specific purposes:

  • Account Creation and Management: Establishing, maintaining, and managing your b9998 account, including processing your registration, verifying your identity, managing your account settings, and communicating with you about your account.
  • Payment Processing: Processing deposits and withdrawals in PKR via your chosen payment method; verifying that payment instruments belong to the registered account holder; detecting and preventing payment fraud.
  • Legal and Regulatory Compliance: Fulfilling b9998's legal obligations under applicable gaming regulations, including age verification (21+), Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and reporting obligations to relevant regulatory authorities.
  • Platform Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, prohibited conduct, and technical attacks on the b9998 platform.
  • Responsible Gaming: Monitoring betting and gaming patterns to identify potential problem gambling behaviour; applying responsible gaming tools including deposit limits and self-exclusion; communicating responsible gaming information to members where appropriate.
  • Customer Support: Responding to queries, complaints, and support requests; investigating and resolving disputes relating to bets, games, or account transactions.
  • Platform Improvement: Analysing aggregated behavioural and technical data to improve the performance, reliability, usability, and feature set of the b9998 platform.
  • Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to members who have opted in to marketing communications, subject to the rights described in Section 14 of this policy.

6. Legal Basis for Processing

b9998 processes your personal data on one or more of the following legal bases:

  • Contractual Necessity: Processing required to perform the contract between you and b9998 — specifically, to operate your account, process bets and payments, and deliver the services you have registered to receive.
  • Legal Obligation: Processing required to comply with b9998's legal obligations, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting requirements applicable to licensed gaming operators.
  • Legitimate Interests: Processing carried out for b9998's legitimate business interests, including platform security, fraud prevention, and service improvement, where those interests are not overridden by your privacy rights.
  • Consent: Processing based on your freely given, specific, and informed consent — in particular, for marketing communications and for the use of non-essential cookies. Where consent is the basis for processing, you have the right to withdraw it at any time.

7. Cookies & Tracking Technologies

7.1 b9998 uses cookies and similar tracking technologies — including local storage, session storage, and device fingerprinting — to operate and improve the platform. Cookies are small data files stored on your device by your browser when you visit b9998.

7.2 Essential Cookies: These cookies are strictly necessary for the b9998 platform to function. They manage your login session, maintain your account authentication status, enable bet placement, and support basic platform security. Essential cookies cannot be disabled without preventing you from using b9998.

7.3 Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming configuration — to personalise your b9998 experience across sessions.

7.4 Analytics Cookies: b9998 uses analytics cookies to understand how members use the platform — which features are most used, where users encounter difficulties, and how the platform performs across different devices and connection speeds. This data is collected in aggregated, anonymised form.

7.5 Security and Fraud Cookies: These cookies and device fingerprinting tools support b9998's fraud detection systems by identifying unusual patterns of behaviour or login activity that may indicate unauthorised account access.

7.6 You may manage cookie preferences through your browser settings. Note that disabling cookies other than essential cookies may affect the functionality and performance of the b9998 platform on your device.

8. Sharing Your Data with Third Parties

8.1 b9998 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. This is an absolute commitment.

8.2 b9998 may share your personal data with the following categories of third parties, solely for the purposes described:

  • Payment Processors and Financial Institutions: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment network processors receive the transaction data necessary to process your deposits and withdrawals.
  • Identity Verification and KYC Providers: Third-party KYC service providers receive your identity documents and personal details for the purpose of verifying your identity and age in compliance with regulatory requirements. These providers are contractually prohibited from using your data for any purpose beyond identity verification for b9998.
  • Fraud Detection and Security Providers: Security technology providers receive technical data — including IP address, device fingerprint, and session data — for the purpose of fraud detection and account security. No personal identity data is shared with these providers beyond what is technically necessary.
  • Regulatory and Law Enforcement Authorities: b9998 is legally obligated to disclose member data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, including AML reporting obligations. b9998 will only make such disclosures where legally required to do so.
  • Gaming Technology and Software Providers: Game software providers and live casino streaming providers may receive session and game-specific data as part of their platform integration. These providers are bound by data processing agreements and may only use data for the purpose of delivering their services to b9998.

8.3 All third parties who process personal data on b9998's behalf are subject to written data processing agreements that restrict their use of your data to the specific purposes for which it was shared and require them to maintain appropriate data security standards.

9. International Data Transfers

9.1 b9998 is a platform serving Pakistani users. Some of b9998's technology infrastructure, third-party service providers, and operational systems are located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

9.2 Where personal data is transferred internationally, b9998 takes reasonable steps to ensure that such transfers are conducted with appropriate safeguards in place — including contractual data protection clauses with recipient service providers — designed to ensure that your personal data receives a level of protection comparable to the standards applied within Pakistan.

9.3 By registering and using b9998, you acknowledge and consent to the international transfer of your personal data as described in this section.

Your data security during transfers: Regardless of where your data is processed, b9998's security standards — including 256-bit SSL encryption for data in transit — apply universally. The geographic location of processing does not affect the encryption or security controls applied to your data.

10. Data Retention

10.1 b9998 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable legal and regulatory obligations.

10.2 The following indicative retention periods apply:

  • Account and Identity Data: Retained for the duration of your active b9998 account, plus a minimum of five (5) years following permanent account closure, to fulfil AML and regulatory record-keeping obligations.
  • Financial and Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AML regulatory requirements.
  • Betting and Gaming Records: Retained for a minimum of three (3) years following account closure for dispute resolution purposes, and for longer periods where required by regulatory reporting obligations.
  • Communications and Support Records: Retained for two (2) years from the date of the relevant communication, or for longer periods where the communication relates to an unresolved dispute or legal claim.
  • Technical and Analytics Data: Aggregated analytics data may be retained indefinitely in anonymised form. Individualised technical data (e.g., session logs) is retained for up to twelve (12) months.

10.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it impossible to re-identify the individual to whom it related.

11. Your Data Protection Rights

Subject to applicable law and certain exceptions, you hold the following rights in respect of your personal data held by b9998:

👁️
Right of Access

You have the right to request a copy of all personal data b9998 holds about you. Upon a valid request, b9998 will provide a summary of your personal data within a reasonable timeframe, typically 30 days. This is sometimes called a Subject Access Request (SAR).

✏️
Right to Rectification

If any personal data b9998 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly in your b9998 account settings. For corrections to identity documents or other sensitive data, please contact b9998 support.

🗑️
Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer needed for the purpose for which it was collected. Note that b9998 is legally required to retain certain data (particularly KYC, AML, and transaction records) for minimum regulatory periods, which take precedence over erasure requests in those specific categories.

⏸️
Right to Restrict Processing

In certain circumstances — such as while the accuracy of your data is being verified, or while a complaint is being investigated — you may request that b9998 restrict its processing of your personal data to storage only.

📦
Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.

🚫
Right to Object

You have the right to object to processing of your personal data carried out on the basis of b9998's legitimate interests, including direct marketing. Where you object to direct marketing, b9998 will cease processing your data for that purpose immediately upon receipt of your objection.

↩️
Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. To withdraw consent for marketing communications, see Section 14. To withdraw consent for non-essential cookies, adjust your browser settings.

To exercise any of the rights listed above, please contact b9998 support with your request. b9998 will respond within 30 days. Where a request is complex or involves multiple rights, the response period may be extended by a further 60 days, with notification provided to you within the initial 30-day period.

12. Data Security Measures

12.1 b9998 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and b9998 servers;
  • Encrypted storage for sensitive personal and financial data at rest on b9998 servers;
  • Role-based access controls ensuring that only authorised b9998 personnel with a genuine operational need can access member personal data;
  • Two-factor authentication available to all members and required for all b9998 operational staff with access to member data systems;
  • Regular external security audits and penetration testing of the b9998 platform;
  • Continuous intrusion detection and anomaly monitoring on all b9998 infrastructure;
  • Secure data disposal procedures ensuring that data deleted from b9998 systems cannot be recovered.

12.2 While b9998 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security against all possible threats. You also play a role in protecting your account: use a strong, unique password for your b9998 account, enable two-factor authentication, and never share your login credentials with anyone.

12.3 Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected members, b9998 will notify affected members without undue delay, providing details of the nature of the breach, the categories and approximate number of individuals affected, the likely consequences of the breach, and the measures b9998 has taken or proposes to take to address it.

13. Children & Minors

Strictly 21+: b9998 is exclusively for adults aged 21 years and older. b9998 does not knowingly collect personal data from any individual under the age of 21. If b9998 discovers or has reason to believe that a registered account belongs to a person under 21, that account will be immediately closed, all funds will be withheld pending investigation, and any personal data collected will be deleted.

13.1 b9998's mandatory CNIC-based identity verification process is specifically designed to prevent minors from registering accounts. The CNIC contains date-of-birth information that b9998 verifies as part of the KYC process.

13.2 If you are a parent or guardian and you believe that a person under 21 in your care has accessed or registered with b9998, please contact b9998 support immediately. b9998 will act promptly to close the account and remove associated personal data.

14. Marketing Communications

14.1 b9998 may send you marketing communications — including promotional bonus offers, match-day betting promotions, PSL season campaigns, and platform feature announcements — via SMS to your registered Pakistani mobile number or via email, subject to your consent.

14.2 You may indicate your marketing communication preferences during the account registration process. You may update these preferences at any time through your b9998 account settings or by contacting b9998 support.

14.3 b9998 will continue to send you transactional and account-related communications — including deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming communications — regardless of your marketing communication preferences, as these are necessary for the operation of your account.

14.4 b9998 does not share your contact details with third parties for the purpose of those third parties sending you marketing communications.

15. Changes to This Privacy Policy

15.1 b9998 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, b9998's data practices, or platform operations. The "Last Updated" date at the top of this page will be updated accordingly whenever material changes are made.

15.2 Where changes are material — meaning they substantively affect your rights or how your personal data is used — b9998 will notify registered members via their registered mobile number or email address prior to the changes taking effect.

15.3 Your continued use of b9998 following notification of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Privacy Policy, you should contact b9998 to request account closure before the revised policy takes effect.

16. Contact Us — Data Protection Enquiries

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or b9998's handling of your personal data, please contact b9998's data protection team through the support channels available on the platform.

16.2 b9998 support is available 24 hours a day, 7 days a week. Data protection and privacy enquiries are acknowledged within 48 hours and are handled by designated personnel with specific responsibility for data protection matters.

16.3 If you wish to exercise any of your data protection rights as described in Section 11 of this policy, please include the following information in your request: your full name, your registered b9998 mobile number, a clear description of the right you wish to exercise, and any specific data or processing activities your request relates to. b9998 may request additional verification to confirm your identity before processing your request, to ensure that personal data is not disclosed to or acted upon by an unauthorised party.

16.4 b9998's data protection contact email is: [email protected]

Acknowledgement: By using b9998, you acknowledge that you have read and understood this Privacy Policy in full, that you are 21 years of age or older, and that you consent to the collection and use of your personal data as described herein. Your privacy matters to us — and we will always be transparent about how we handle it.

Why Pakistani Players Trust b9998

Privacy Built Into Everything We Do

Data protection at b9998 is not a legal footnote — it is a genuine operational priority embedded in every part of how the platform is built and run.

PKR Transactions — No Overseas Exposure

All deposits and withdrawals are processed in PKR via local Pakistani payment channels — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank. Your financial data does not travel to overseas card processors unnecessarily.

CNIC Data — Verified and Protected

Your Pakistani CNIC details are used solely for mandatory age and identity verification. Once verified, your documents are stored in encrypted form and accessed only by authorised compliance personnel when legally required.

24/7 Data Rights Support

Exercise your data rights any time — access, correction, deletion. b9998 support is available around the clock, including during PSL match days. Data protection requests are acknowledged within 48 hours.

Your Data is Safe — Your Bets Can Begin

b9998 is Pakistan's most trusted cricket betting and casino platform — and now you know exactly how we protect your personal data. Explore what's waiting for you on the platform.

21+ only. Identity verification required. Please gamble responsibly.