Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bu999 ("bu999", "we", "us", "our") collects, uses, stores, shares and protects personal information relating to users ("you", "your") of the bu999 platform accessible at https://bu999.cam (the "Platform"). bu999 is an online gaming information and content platform primarily serving users in Pakistan.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, you must discontinue use of the Platform immediately.

2. Definitions

• "Personal Data" means any information that identifies or can reasonably identify a natural person, including name, email address, phone number, IP address and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, bu999 acts as Data Controller in respect of data collected via the Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a written agreement.
• "Cookies" means small text files placed on your device by the Platform or third-party services to store session information and preferences.
• "KYC" means Know Your Customer — identity verification documentation required by the Operator for compliance purposes.

3. Data Controller Identity

For all personal data collected through the Platform, bu999 is the Data Controller. If you have any questions about how your data is handled or wish to exercise any of your rights under this Policy, please contact us using the details provided in Section 17.

Where you register an account with an Operator accessed through bu999, that Operator becomes an independent Data Controller in respect of your account and transactional data. bu999 is not responsible for the data practices of third-party Operators. You should review the relevant Operator's privacy policy separately.

4. Data We Collect

bu999 collects the following categories of personal data, as applicable to the service being used:

5. How We Collect Your Data

We collect personal data through the following mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC, making a deposit, contacting support or subscribing to communications.
• Automated technologies: Cookies, web beacons, pixel tags and server logs that record technical and usage data when you access the Platform.
• Third-party sources: Identity verification providers, payment processors (such as those supporting Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah transactions), fraud screening services and analytics providers. These providers are contractually bound by data protection standards consistent with this Policy.

6. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing, bu999 relies on one or more of the following:

• Contractual necessity: Processing required to perform the contract between you and bu999, including account registration, transaction processing and account management.
• Legal obligation: Processing required to comply with anti-money laundering, age verification, responsible gambling and other applicable legal requirements.
• Legitimate interests: Processing necessary for bu999's legitimate business interests, including Platform security, fraud prevention and service improvement, where those interests are not overridden by your rights.
• Consent: Where you have provided explicit, informed and freely given consent — for example, for marketing communications or the use of non-essential cookies. You may withdraw consent at any time without detriment to your account.

7. How We Use Your Data

bu999 uses your personal data for the following purposes:

• To create, verify and manage your account, including age and identity verification.
• To process deposits, withdrawals and related financial transactions.
• To detect, investigate and prevent fraud, money laundering and other prohibited conduct.
• To provide customer support and resolve account queries or complaints.
• To send you transactional communications — including account confirmations, security alerts and policy updates — that are necessary for your account.
• To send you promotional communications about offers, bonuses or Platform features — only where you have provided consent, and only to the extent permitted by applicable law.
• To monitor responsible gambling indicators and, where required, to enforce deposit limits, loss limits or self-exclusion obligations.
• To improve, test and optimise Platform functionality, content and user experience.
• To comply with applicable legal and regulatory obligations.

8. Data Sharing & Disclosure

bu999 does not sell or rent your personal data. We may share your data with the following categories of recipient, strictly as necessary:

• Service Providers: Third-party vendors providing hosting, payment processing, identity verification, fraud detection, customer support software and analytics services. All such vendors are bound by data processing agreements.
• Operators: Where you access games or betting services through the Platform, the relevant Operator receives data necessary to manage your account, process transactions and comply with their own regulatory obligations.
• Legal and Regulatory Authorities: Where required by applicable law, court order, regulatory investigation or to protect the rights and safety of bu999, its users or third parties.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of bu999's assets, your data may be transferred to the relevant successor entity, subject to equivalent data-protection obligations.

9. Cookies & Tracking Technologies

bu999 uses cookies and similar technologies to operate and improve the Platform. The following cookie categories are used:

• Essential Cookies: Required for core Platform functionality, including session management, login state and security features. These cannot be disabled without impairing Platform use.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform, which pages are most visited and where errors occur. Used to improve Platform performance.
• Preference Cookies: Remember your settings and preferences, such as language selection and display options, to personalise your experience.
• Marketing Cookies: Where consent has been given, used to deliver relevant promotional content. You may withdraw consent for marketing cookies at any time through your browser settings.

You may manage cookie preferences through your browser's cookie settings. Please note that disabling non-essential cookies may affect certain Platform features. For full details, refer to your browser's help documentation.

10. Data Retention

bu999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting and reporting obligations. Indicative retention periods are as follows:

• Account and Identity Data: Retained for the duration of the account and for a minimum of five (5) years after account closure, to satisfy anti-money laundering record-keeping obligations.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of the transaction in accordance with applicable financial regulations.
• Support Communications: Retained for up to three (3) years after resolution of the query.
• Technical and Usage Data: Retained for up to twenty-four (24) months, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of the consent and for twelve (12) months after withdrawal of consent.

11. Data Security

bu999 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your browser and the Platform.
• Encryption of sensitive data fields — including financial details and identity documents — at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis.
• Regular security assessments, vulnerability scans and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting and responding to personal data breaches within required timeframes.

While bu999 takes all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You use the Platform at your own risk and are responsible for maintaining the security of your account credentials.

12. International Data Transfers

bu999 may transfer your personal data to service providers or Operators located outside Pakistan. Where such transfers occur, bu999 takes steps to ensure that your data receives an adequate level of protection — for example, through contractual clauses requiring the recipient to process data to a standard consistent with this Policy.

By using the Platform, you acknowledge that your data may be transferred, stored and processed outside of Pakistan. If you have concerns about international data transfers, please contact us using the details in Section 17.

13. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bu999:

• Right of Access: Request a copy of the personal data we hold about you, along with information about how it is processed.
• Right of Rectification: Request correction of any inaccurate or incomplete personal data we hold about you.
• Right of Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations (such as AML retention requirements).
• Right to Restrict Processing: Request that we restrict the processing of your data in certain circumstances — for example, where you contest its accuracy.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, request a machine-readable copy of your personal data for transfer to another service.
• Right to Object: Object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact us at the details provided in Section 17. We will respond within the timeframe required by applicable law, and in any event within thirty (30) days. We may need to verify your identity before processing your request.

14. Children's Privacy

The Platform is strictly intended for adults aged 18 or over — or the higher minimum age required by the applicable Operator or license jurisdiction. bu999 does not knowingly collect personal data from anyone under the minimum eligible age.

If we become aware that personal data has been collected from a person below the minimum eligible age without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the relevant account. If you believe a minor has accessed the Platform, please contact us immediately at [email protected].

15. Third-Party Links & Services

The Platform may contain references to or content about third-party services (such as payment providers or game titles). bu999 does not control and is not responsible for the data-handling practices of any third party. This Policy applies only to data collected directly by the Platform. We encourage you to review the privacy policies of any third-party services you use.

16. Amendments to This Policy

bu999 reserves the right to update this Privacy Policy at any time. Material changes will be communicated by publishing a revised Policy on the Platform with an updated effective date. For significant changes affecting how your data is processed, we may also notify you directly by email or in-platform notification where we hold your contact details.

Your continued use of the Platform after the revised Policy has been published constitutes your acknowledgement of the changes. If you do not agree with any amendment, you should discontinue use of the Platform and contact us to request account closure and data deletion.

17. Contact Us

For all privacy-related enquiries, data subject access requests, consent withdrawal requests or complaints, please contact the bu999 data team using the details below. Please do not include sensitive account credentials, passwords or full payment method details in your initial contact.

Email: [email protected]
Support Language: English (Urdu assistance available on request via Live Chat)