Privacy Policy –
How b699 Handles Your Data

§ 1Introduction

This Privacy Policy ("Policy") is issued by b699 ("we", "us" or "our"), the operator of the online sports betting and live casino platform accessible at b699.cam and any associated subdomains or mobile applications (collectively, the "Service").

This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. By accessing the Service, creating an account or making a deposit, you acknowledge that you have read and understood this Policy. If you do not agree to the processing described herein, you must not use the Service.

This Policy should be read alongside our Terms & Conditions, which are incorporated herein by reference. In the event of any inconsistency between this Policy and the Terms & Conditions on a data-protection matter, this Policy shall prevail.

b699 operates under an international licensing framework and is not regulated or endorsed by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan or any Pakistani provincial authority. This Policy does not constitute legal advice. Users accessing the Service from Pakistan should independently assess applicable local data-protection and gambling laws.

§ 2Definitions

The following definitions apply throughout this Policy:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, postal address, national identity number, financial information and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing Personal Data; in the context of this Policy, b699 acts as Data Controller.
• "Data Processor" — any third party that processes Personal Data on behalf of b699, subject to a written data-processing agreement.
• "User" or "you" — any individual who accesses or uses the Service, whether registered or not.
• "KYC" — Know Your Customer; the identity and address verification process applied as part of anti-money laundering (AML) and responsible-gambling obligations.
• "Cookies" — small data files placed on your device by the Service for functionality, analytics and security purposes.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including financial account details, identity document data and responsible-gambling disclosures.

§ 3Data Controller

b699 is the Data Controller in respect of Personal Data collected through the Service. Questions, requests and complaints regarding this Policy should be directed to our support team using the contact details set out in Section 16 of this Policy.

Where b699 engages third-party service providers to assist in the delivery of the Service — such as payment processors, KYC verification providers, analytics platforms and game content suppliers — those parties act as Data Processors under written agreements that bind them to appropriate data-protection standards. b699 remains responsible for ensuring such processors handle your data in accordance with this Policy.

§ 4Data We Collect

b699 collects Personal Data through several channels. The categories of data we collect, and the circumstances in which collection occurs, are set out below.

4.1 Data You Provide Directly

• Registration data: full name, date of birth, email address, username, password (stored in hashed form) and country of residence.
• KYC documents: government-issued identity document (e.g., CNIC, passport, national identity card), proof of address (e.g., utility bill, bank statement) and, where required, source-of-funds documentation.
• Financial data: deposit and withdrawal transaction records, preferred payment method details and PKR account or wallet identifiers (as applicable).
• Support communications: the content of emails, live-chat transcripts and any documentation you submit when contacting our support team.
• Responsible-gambling disclosures: self-exclusion elections, limit-setting preferences and any information provided when accessing responsible-gambling tools.

4.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device model and unique device identifiers.
• Usage data: pages visited, features used, bet history, game session logs, timestamps, click-stream data and referral source.
• Cookie and tracking data: as described in Section 11 of this Policy.
• Geolocation data: approximate location derived from IP address for jurisdiction-compliance and fraud-prevention purposes. Precise GPS location is not collected without your express consent.

4.3 Data from Third Parties

• Identity-verification providers may supply confirmation of your identity status as part of the KYC process.
• Fraud-detection and AML screening services may supply risk-scoring information.
• Payment processors supply transaction confirmation and status data.

§ 5Legal Basis for Processing

b699 processes Personal Data on the following legal bases:

• Contractual necessity: processing required to fulfil the contract with you (the Terms & Conditions), including account creation, bet settlement, payment processing and dispute resolution.
• Legal obligation: processing required to comply with applicable anti-money laundering (AML) laws, KYC obligations under our licensing framework, and responses to lawful requests from competent authorities.
• Legitimate interests: processing undertaken in pursuit of b699's legitimate business interests, including fraud prevention, security monitoring, responsible-gambling monitoring, product analytics and service improvement — where these interests are not overridden by your fundamental rights.
• Consent: processing for optional purposes (such as marketing communications) where you have provided explicit, informed, freely given and withdrawable consent. Consent may be withdrawn at any time without detriment to your Account.

§ 6Purposes of Processing

b699 processes your Personal Data for the following specific purposes:

1. Account management: creating and maintaining your Account, verifying your identity, processing deposits and withdrawals, and providing access to the Service.
2. KYC and AML compliance: verifying your identity and address, assessing source-of-funds, monitoring transactions for suspicious activity, and filing reports as required under applicable anti-money laundering obligations.
3. Bet and game settlement: recording wagering activity, calculating and crediting winnings, and maintaining an auditable transaction history.
4. Customer support: responding to queries, resolving complaints and maintaining a record of support interactions.
5. Responsible gambling: monitoring play patterns to identify indicators of problem gambling, applying limits and exclusions you have set, and proactively reaching out where monitoring data suggests a player may be at risk.
6. Fraud prevention and security: detecting, investigating and preventing fraudulent transactions, unauthorised account access and misuse of the Service.
7. Service analytics and improvement: understanding how users interact with the platform to fix bugs, improve performance and develop new features.
8. Marketing communications: sending promotional offers, bonuses and platform updates — only where you have provided consent or where the communication is legitimately connected to services you have used. You can opt out at any time.
9. Legal compliance: meeting obligations under applicable law, responding to court orders, regulatory requests and law enforcement enquiries.

§ 7Sharing Your Data

b699 does not sell your Personal Data to third parties. We share data only in the following circumstances and only to the extent necessary:

• Service providers and Data Processors: third-party vendors who provide KYC verification, payment processing, fraud screening, cloud hosting, customer support software and analytics tools — bound by data-processing agreements.
• Game content providers: third-party studios that supply casino game content may receive technical session data necessary to deliver and verify game outcomes.
• Regulatory and licensing authorities: our licensing regulator may require access to certain records as part of their supervisory functions.
• Law enforcement and legal process: where we are legally required to disclose information in response to a valid court order, warrant, subpoena or other lawful process.
• AML reporting: disclosures to relevant financial intelligence units where we are legally obligated to report suspected money-laundering activity.
• Business restructuring: in the event of a merger, acquisition or sale of the business, your data may be transferred to the acquiring entity, subject to the same data-protection obligations.

§ 8International Data Transfers

b699 operates internationally and your Personal Data may be stored or processed on servers located outside your country of residence, including outside Pakistan. Where data is transferred to countries that do not provide the same level of data protection as your home jurisdiction, b699 implements appropriate safeguards, which may include:

• Standard contractual clauses approved by applicable data-protection authorities;
• Binding corporate rules where applicable;
• Adequacy decisions recognising the destination country as providing equivalent protection;
• Other contractual, technical or organisational measures ensuring equivalent protection.

By using the Service, you acknowledge that your data may be transferred and processed in jurisdictions outside Pakistan. If you wish to understand the safeguards applied to a specific transfer, please contact us using the details in Section 16.

§ 9Data Retention

b699 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. In practice this means:

• Active Account data is retained for the duration of your Account and a minimum of five (5) years after Account closure, to satisfy AML and KYC record-keeping obligations.
• Transaction records (deposits, withdrawals, wager history) are retained for a minimum of five (5) years from the date of the transaction.
• KYC documents are retained for the period required by applicable anti-money laundering legislation, typically five (5) years from the end of the business relationship.
• Support communications are retained for two (2) years from the date of the interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records are retained for as long as consent is active and for a reasonable period after withdrawal, to demonstrate compliance.

After the relevant retention period expires, Personal Data is securely deleted or anonymised.

§ 10Security Measures

b699 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure:

• Encryption: all data in transit is protected by 256-bit TLS/SSL encryption. Sensitive data at rest (including KYC documents and financial records) is encrypted using industry-standard algorithms.
• Access controls: access to Personal Data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication.
• Password security: user passwords are stored as salted cryptographic hashes — they are never stored or transmitted in plain text.
• Penetration testing and vulnerability management: regular security assessments are conducted to identify and remediate vulnerabilities.
• Audit logging: access to Personal Data by internal systems and staff is logged and subject to periodic review.
• Incident response: b699 maintains a documented data-breach response procedure. In the event of a breach affecting your rights, we will notify you and relevant authorities as required by applicable law.

Whilst we maintain robust security measures, no online system can be guaranteed to be completely secure. You play an important role in keeping your Account secure — use a strong, unique password, enable two-factor authentication and never share your credentials.

§ 11Cookies & Tracking Technologies

b699 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Service. Cookies are small text files stored on your device when you visit the platform.

11.1 Types of Cookies We Use

• Strictly necessary cookies: essential for core platform functionality such as session authentication, account security and fraud prevention. These cannot be disabled without affecting your ability to use the Service.
• Functional cookies: remember your preferences such as language settings, odds format and display options to improve your experience.
• Analytics cookies: collect anonymised usage data to help us understand how users interact with b699, identify errors and improve performance. No personally identifiable information is shared with analytics providers.
• Security cookies: detect and prevent automated bot activity, session hijacking and cross-site request forgery.

11.2 Managing Cookies

Most web browsers allow you to control cookies through browser settings. You may choose to block or delete non-essential cookies; however, doing so may affect the functionality of some features of the Service. Strictly necessary cookies cannot be disabled via browser settings as they are essential to platform security.

§ 12Your Rights

Subject to applicable law and the terms of our licensing obligations, you hold the following rights in respect of your Personal Data processed by b699. To exercise any of these rights, please contact us using the details in Section 16.

b699 aims to respond to rights requests within 30 days. Complex requests may take up to 90 days; if so, you will be notified of the extension and the reason within the initial 30-day window. Identity verification may be required before a request is processed.

§ 13Minors

The Service is strictly intended for adults aged 18 years or older — or such higher minimum age as is required by the operator's licensing jurisdiction or applicable local law, whichever is the greater. b699 does not knowingly collect Personal Data from persons below the applicable minimum age.

Where b699 becomes aware that Personal Data has been collected from an underage person, that Account will be immediately closed, all associated data will be flagged for review and, subject to AML obligations, will be deleted or anonymised. Any deposits made by an underage user will be returned subject to identity verification. Winnings generated by an underage Account will be forfeited.

If you believe an underage person has registered an Account on b699, please contact us immediately at [email protected].

§ 14Third-Party Services

The Service may contain references to or integrations with third-party services, including payment processors, game studios and identity verification providers. Each of these third parties operates under its own privacy policy, which b699 does not control.

When you interact with a third-party payment channel referenced in the b699 cashier (such as a local bank transfer, mobile wallet or cryptocurrency exchange), the relevant third party will collect and process data according to its own privacy terms. b699 is not responsible for the data-handling practices of third-party providers.

Casino game content is supplied by third-party studios. Game session data necessary to verify game outcomes and RTP compliance may be shared with the applicable studio under data-processing agreements.

§ 15Amendments to This Policy

b699 may update this Privacy Policy periodically to reflect changes in our data-processing practices, applicable law or product features. When material changes are made, registered users will be notified by email to the address on their Account prior to the changes taking effect. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

Your continued use of the Service after the effective date of any amended Policy constitutes acceptance of the revised terms. If you do not accept the changes, you must discontinue use of the Service and may request Account closure.

§ 16Contact Us

For all privacy-related enquiries, rights requests or complaints regarding this Policy, please contact the b699 Data Protection team:

Please mark your email subject line with "Privacy Request" or "Data Subject Rights" to ensure it reaches the correct team. We aim to acknowledge all privacy enquiries within 5 business days and to resolve requests fully within 30 days.