Last Updated: 1 July 2025

by999 Privacy Policy – How We Protect Your Data in Pakistan

by999 takes your privacy seriously. This policy explains exactly what data we collect, why we collect it, how it is protected, and what rights you have over your own information.

Privacy at a Glance

Six things that summarise how by999 handles your data. Full details are in the sections below.

Encrypted Storage
All personal data stored and transmitted using industry-standard SSL encryption.
No Data Sales
by999 never sells your personal information to any third party, ever.
Minimal Collection
We only collect what is genuinely needed to run your account and process payments.
Your Rights
You can request access to, correction of, or deletion of your data at any time.
PKR Payments Safe
Payment details processed securely; by999 never stores full card or wallet credentials.
Limited Retention
Data is kept only as long as necessary and deleted when it is no longer needed.
by999

This Privacy Policy describes how by999 (operating at by999.best) collects, uses, stores, and protects the personal information of its users – primarily Pakistani players using the platform for online gaming, sports betting, and related services. by999 is committed to handling your data responsibly and transparently. This policy applies to all interactions with the by999 platform, including account registration, deposits, gameplay, bonus claims, and customer support communications.

By registering an account on by999 or by continuing to use by999 services, you confirm that you have read this Privacy Policy and understand how your data is handled. If you have any questions about this policy at any time, you can reach the by999 support team at support@by999.best.

This policy is written in plain English specifically for Pakistani players. If any section is unclear, please contact by999 support before providing any personal information. Your comfort with how your data is used matters to us.

1. Who We Are

by999 is an online gaming and sports betting platform serving players across Pakistan. The platform is accessible at by999.best and provides live casino games, jackpot slots, roulette, PSL cricket betting, fishing games, and related entertainment services. All services on by999 are denominated in Pakistani Rupees (PKR).

When this Privacy Policy refers to "by999", "we", "us", or "our", it refers to the platform and its operators responsible for the by999.best website and all associated services. by999 acts as the data controller for personal information collected through the platform.

by999 takes its responsibilities as data controller seriously. We collect only the minimum personal data necessary to deliver the services you have signed up for, to comply with legal obligations, and to maintain the security and integrity of the platform for all users.

2. Data We Collect

by999 collects personal data through several channels: registration forms, payment processes, gameplay activity, device and browser data, and customer support interactions. The specific categories of data collected are set out below.

2.1 Registration Data

When you create a by999 account, we collect:

  • Full name as it appears on your CNIC or passport
  • Date of birth (for age verification)
  • Pakistani mobile phone number
  • Email address
  • Chosen username and encrypted password
  • City and province of residence

2.2 Identity Verification (KYC) Data

For accounts that reach KYC verification thresholds, by999 may collect:

  • CNIC number and CNIC scan or photograph (front and back)
  • Passport bio-data page (if passport is used)
  • Proof of address documents such as utility bills
  • Bank statement or mobile wallet screenshots for payment method verification

2.3 Financial Transaction Data

by999 records all deposits and withdrawals associated with your account, including transaction amounts in PKR, timestamps, payment method type, and transaction reference numbers. by999 does not store full card numbers, CVV codes, or complete Easypaisa/JazzCash PINs.

2.4 Gameplay and Betting Data

Your activity on by999 is recorded, including: game sessions played, bet amounts, game outcomes, bonus claims and fulfilment, and login/logout times. This data is used to operate your account, resolve disputes, and support responsible gaming monitoring.

2.5 Technical and Device Data

by999 automatically collects: IP address, device type and model, operating system version, browser type and version, screen resolution, and approximate geographic location derived from IP. This data helps by999 optimise the platform for Pakistani mobile users and detect fraudulent activity.

Data CategoryExamplesCollection Method
IdentityName, DOB, CNIC, email, phoneRegistration form, KYC upload
FinancialPKR transaction amounts, payment method type, timestampsDeposit/withdrawal process
GameplayBet history, win/loss record, session durationPlatform activity logs
TechnicalIP address, device type, browser, OSAutomatic on platform access
CommunicationsSupport chat transcripts, email contentCustomer support interaction
MarketingPromotion responses, opted-in email engagementWith consent only

3. How by999 Uses Your Data

by999 uses your personal data for specific, documented purposes. We do not use your data for any purpose beyond what is listed here without first obtaining your explicit consent.

  • Account management: Creating, maintaining, and operating your by999 player account, including login authentication and account settings.
  • Payment processing: Processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard; verifying payment method ownership.
  • Age and identity verification: Confirming you meet the 18+ age requirement and verifying your identity as required by KYC procedures.
  • Game delivery: Running the games, recording outcomes, applying bonus rules, and maintaining your wallet balance accurately in PKR.
  • Security and fraud prevention: Detecting unauthorised account access, identifying suspicious betting patterns, preventing money laundering, and investigating complaints.
  • Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and applying self-imposed limits you have set on your account.
  • Customer support: Responding to your queries, resolving disputes, and maintaining a record of support interactions.
  • Platform improvement: Analysing aggregate, anonymised usage data to improve game performance, mobile experience, and payment processing speed.
  • Marketing communications: Sending by999 promotion notifications and bonus alerts – only to players who have opted in. You can opt out at any time from your account settings.
  • Legal compliance: Meeting obligations under applicable regulations, responding to lawful information requests from authorities, and maintaining records as required by law.

Marketing emails are opt-in only on by999. If you did not opt in during registration or subsequently, you will not receive promotional emails. You can change your marketing preferences at any time from your account dashboard.

by999

4. Legal Basis for Processing

by999 processes your personal data on the following legal grounds, depending on the specific processing activity:

  • Contractual necessity: Processing required to fulfil the by999 Terms and Conditions you agreed to at registration, including account operation, payment processing, and game delivery.
  • Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, age verification obligations, and lawful authority requests.
  • Legitimate interests: Processing carried out to protect the security of the platform, prevent fraud, and improve service quality – where these interests do not override your privacy rights.
  • Consent: Processing for optional purposes such as marketing communications, where you have explicitly opted in. Consent can be withdrawn at any time without affecting your ability to use by999.

5. Data Sharing

by999 does not sell, rent, or trade your personal data to any third party. Your data may be shared with third parties only in the following limited circumstances, and always subject to appropriate data protection standards:

5.1 Payment Providers

To process your PKR transactions, by999 shares necessary transaction data with payment providers including Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners. These providers receive only the data required to execute the transaction and are contractually bound to protect your information.

5.2 Game Software Providers

Some by999 games are powered by third-party software providers. Where game delivery requires sharing a player identifier, the provider receives only a pseudonymous identifier – not your name, CNIC, or payment details.

5.3 KYC Verification Partners

by999 may use a third-party identity verification service to validate CNIC documents and confirm age. These partners act as data processors under contract and are not permitted to use your data for any purpose beyond providing verification services to by999.

5.4 Legal and Regulatory Authorities

by999 will disclose personal data to law enforcement, regulatory bodies, or other authorities if required to do so by a valid legal order. by999 will notify affected users where legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or asset sale involving by999, player data may be transferred as part of the transaction. Affected players will be notified in advance and the terms of this Privacy Policy will continue to apply.

by999 never sells your data. Any third party that receives data as part of service delivery is contractually bound to protect it and use it only for the stated purpose.

6. Payment Data Security

by999 handles payment information with the highest level of care. The following specific protections apply to financial data on the by999 platform:

  • by999 does not store full debit or credit card numbers on its servers. Card payments are tokenised by the payment gateway before any data is transmitted to by999.
  • Easypaisa, JazzCash, NayaPay, and SadaPay account PINs are never requested or stored by by999 at any point in the payment process.
  • All payment transactions between your bank or mobile wallet and by999 are encrypted using TLS (Transport Layer Security).
  • by999 will never ask for your full payment credentials via email, live chat, or phone. Any communication claiming to be from by999 support that asks for such information should be treated as fraudulent and reported immediately.
  • Withdrawal requests are matched against the verified payment method registered on your account to prevent unauthorised fund transfers.

All PKR transactions on by999 are logged with reference numbers that are visible in your account's transaction history. If you notice a transaction you do not recognise, contact by999 support immediately.

7. Cookies and Tracking Technologies

by999 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The types of cookies used on by999 are as follows:

You can manage cookie preferences from your device's browser settings. Disabling essential cookies will prevent you from logging in to your by999 account. Disabling optional cookies will not affect your ability to play or withdraw.

by999

8. Data Security

by999 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, or disclosure:

  • SSL/TLS Encryption: All data transmitted between your device and by999 servers is encrypted using industry-standard TLS. The by999 platform operates exclusively over HTTPS.
  • Encrypted data storage: Sensitive personal data fields including CNIC numbers, dates of birth, and financial reference data are encrypted at rest in by999's databases.
  • Access controls: by999 staff access to personal data is restricted on a need-to-know basis. Systems that contain personal data are protected by multi-factor authentication.
  • Intrusion detection: by999's infrastructure includes automated monitoring for unusual access patterns, brute-force login attempts, and data exfiltration indicators.
  • Incident response: by999 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, by999 will notify affected users within a reasonable timeframe.
  • Security reviews: by999's security measures are reviewed and updated regularly. Third-party security assessments are conducted periodically.

Your account security also matters. Use a strong, unique password for by999. Do not share your login credentials with anyone. by999 will never ask for your password by any channel. Enable any additional account security options available in your dashboard.

9. Data Retention

by999 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The general retention periods applied by by999 are as follows:

Data TypeRetention PeriodReason
Account registration dataDuration of account + 5 years after closureLegal compliance, dispute resolution
KYC documentsDuration of account + 5 years after closureAnti-money-laundering legal requirement
Transaction records7 years from transaction dateFinancial record-keeping obligations
Gameplay history3 years from session dateDispute resolution, responsible gaming monitoring
Support communications2 years from last interactionQuality assurance, dispute evidence
Marketing preferencesUntil opt-out or account closureConsent management
Technical/device logs90 daysSecurity monitoring, fraud detection

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Anonymised aggregate data may be retained indefinitely for statistical purposes.

10. Your Privacy Rights

As a by999 player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting by999 support at support@by999.best.

Right of Access

Request a copy of the personal data by999 holds about you. We will respond within 30 days of a verified request.

Right to Rectification

Request correction of inaccurate or incomplete personal data. Some changes require KYC re-verification.

Right to Erasure

Request deletion of your personal data. This right is subject to legal retention obligations – some data cannot be deleted during the mandatory retention period.

Right to Restrict Processing

Request that by999 limits how it processes your data in certain circumstances, for example while a dispute is being investigated.

Right to Data Portability

Request your personal data in a structured, machine-readable format that you can transfer to another service provider.

Right to Withdraw Consent

Withdraw consent for processing based on consent (such as marketing emails) at any time without affecting your account or ability to use by999.

by999 will respond to all verified privacy rights requests within 30 days. In complex cases, this may be extended by a further 60 days – we will notify you if an extension is needed. by999 will not discriminate against you in any way for exercising your privacy rights.

11. Children's Privacy

by999 is strictly for adults aged 18 and over. by999 does not knowingly collect personal data from anyone under the age of 18. During registration, date of birth is collected specifically to verify that the registrant meets the minimum age requirement.

If by999 discovers that an account has been created by a person under 18, the account will be immediately closed, all gameplay records deleted, and any deposits returned to the originating payment method. by999 actively cooperates with parents or guardians who notify us that a minor may have created an account using false age information.

If you believe a minor is using by999, please contact support immediately at support@by999.best. We will investigate and act promptly.

12. Policy Updates

by999 may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, or changes in applicable law. When material changes are made, by999 will:

  • Update the "Last Updated" date shown at the top of this page
  • Notify registered players via email at least 14 days before the updated policy takes effect, where the changes materially affect how we process your data
  • Display a prominent notice on the by999 platform when you next log in after a policy update

Minor clarifications and non-material changes may be made without advance notice. The most current version of the by999 Privacy Policy is always available at by999.best/privacy-policy. Your continued use of by999 after a policy update constitutes your acceptance of the revised policy.

13. Contact by999 About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or how by999 handles your personal data, please contact us using the details below. We are committed to responding promptly and transparently.

Email: support@by999.best
Subject line: "Privacy Request – [Your Username]"
Live Chat: Available from within your by999 account dashboard, 24/7
Response time: Privacy requests acknowledged within 48 hours; substantive response within 30 days

For account security issues such as suspected unauthorised access, please contact by999 support immediately via live chat for the fastest response. Related pages: Terms and Conditions · Responsible Gaming · FAQ

🔒

Your Data Is Safe. Your Winnings Are Real.

by999 protects your personal data with the same seriousness as your PKR balance. Join hundreds of thousands of Pakistani players who trust by999 for fair gaming and fast withdrawals.