nb999 Privacy Policy

nb999 ("we", "us", "our", "the Company") operates the online gaming platform accessible at nb999.biz. nb999 is the data controller in respect of all personal data collected from players who register and use the nb999 platform. As data controller, nb999 determines the purposes for which, and the manner in which, your personal data is processed.

nb999 operates under internationally recognised gaming licensing standards and is subject to the data protection requirements of its licensing jurisdiction. This Privacy Policy applies to all personal data processed by nb999 in connection with the provision of gaming services to players, including cricket betting, live casino, slot games, Dragon Hatch, Color Game, and all associated payment and account management services.

This Policy applies to all natural persons who: (a) register an nb999 player account; (b) visit the nb999 website at nb999.biz without registering; (c) contact nb999 through any support channel; or (d) participate in any nb999 promotional activity. For questions about this Policy or our data practices, please contact nb999 support via the live chat facility on the main platform.

nb999 collects the following categories of personal data in connection with the provision of its gaming services:

nb999 collects your personal data through the following channels:

• Direct Registration: When you create an nb999 account, you provide your name, mobile number, date of birth, and other required registration details directly through the nb999.biz registration interface.
• KYC Verification: When you submit identity documents (such as your CNIC) to complete nb999's Know Your Customer (KYC) verification process, required before withdrawal processing.
• Payment Transactions: When you make deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or any other supported Pakistani payment method. Payment processor systems relay transaction details to nb999's financial records.
• Platform Usage: Automatically, through cookies, server logs, and session tracking technologies as you navigate and interact with the nb999 platform.
• Support Interactions: When you contact nb999 through live chat, email, or any other support channel, the content of those interactions is recorded for quality assurance and regulatory compliance purposes.
• Third-Party Verification Services: nb999 may receive data from identity verification service providers used to confirm your CNIC details and cross-reference your information against fraud and AML databases.
• Responsible Gaming Tools: When you set deposit limits, session limits, or request self-exclusion, nb999 records these preferences as part of your responsible gaming profile.

nb999 processes your personal data only where a valid legal basis exists for doing so. The principal legal bases on which nb999 relies to process personal data are as follows:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and nb999 — i.e., to operate your gaming account, process deposits and withdrawals, and deliver the gaming services you have signed up to use.
• Legal Obligation: Processing is necessary for nb999 to comply with its legal and regulatory obligations, including Anti-Money Laundering (AML) requirements, Know Your Customer (KYC) obligations under nb999's gaming licence, and financial record-keeping requirements.
• Legitimate Interests: Processing is necessary for the purposes of nb999's legitimate interests, including: fraud prevention and detection, platform security, responsible gaming monitoring, technical performance optimisation, and customer service quality improvement — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where nb999 relies on your consent as the legal basis for processing — primarily in connection with direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

nb999 uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your nb999 player account, authenticating your identity on login, managing your gaming preferences, and maintaining records of your account activity.
• Age & Identity Verification: Confirming that you are at least 21 years of age before permitting account registration, deposit, and play — a strict requirement under nb999's licensing obligations.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, Raast, and bank transfers, and processing withdrawal requests to your verified Pakistani payment accounts.
• AML & Fraud Compliance: Monitoring transaction patterns to detect and prevent money laundering, fraud, and other financial crimes, as required by nb999's international gaming licence and associated AML obligations.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviours, enforcing self-exclusion periods you have requested, applying deposit and loss limits you have set, and delivering reality check notifications during your sessions.
• Customer Support: Responding to your support queries, resolving disputes, and maintaining records of your support interactions for quality assurance and regulatory compliance purposes.
• Security: Detecting and preventing unauthorised access to your nb999 account, identifying suspicious login activity, and protecting the integrity of the nb999 platform.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with nb999, identify areas for improvement, and develop new features and game categories.
• Legal Compliance: Maintaining records required by nb999's licensing authority, responding to lawful requests from regulatory or law enforcement bodies, and enforcing nb999's Terms & Conditions.
• Marketing (with consent): Sending you promotional communications about nb999 bonuses, new games, PSL promotions, and other offers — only where you have opted in to receive such communications.

nb999 does not sell, rent, or trade your personal data to any third party for commercial gain. nb999 shares your personal data only in the following limited and necessary circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other payment technology partners receive the transaction data required to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist nb999 in verifying CNIC documents and cross-checking against AML databases. These providers process your data strictly under nb999's instructions and are bound by data processing agreements.
• Game Technology Providers: Licensed game studios and live casino platform providers whose game engines operate within the nb999 environment. These providers may receive technical session data required to operate their certified RNG systems and live dealer streams.
• Regulatory & Law Enforcement Authorities: nb999 is legally required to disclose personal data to its licensing authority, financial intelligence units, and law enforcement agencies where lawfully required. nb999 will not make such disclosures unless legally compelled to do so.
• Fraud Prevention Services: Industry-standard fraud intelligence databases that enable nb999 to verify that accounts are not operated by individuals subject to prior fraud flags across the gaming industry.
• Professional Advisors: Legal advisors, auditors, and compliance consultants who are bound by strict confidentiality obligations and who access personal data only to the extent strictly necessary for their professional services to nb999.

nb999 uses cookies and similar tracking technologies on nb999.biz to ensure the platform operates correctly, to enhance your experience, and to collect usage data for security and analytical purposes. The following categories of cookies are used on the nb999 platform:

• Strictly Necessary Cookies: Essential for the nb999 platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies that remember your responsible gaming settings. These cookies cannot be disabled as they are required for the platform to operate.
• Functional Cookies: Remember your language preferences, display settings, and previously configured account settings to deliver a personalised experience when you return to nb999.
• Analytics Cookies: nb999 uses aggregated, anonymised analytics to understand how players navigate the platform — which game categories are most visited, where players encounter friction, and how different features are used. This data helps nb999 improve the platform for Pakistani users specifically.
• Security Cookies: Used to detect and prevent fraudulent access attempts, identify bot activity, and protect your nb999 account from unauthorised login attempts.

You may configure your browser to reject non-essential cookies; however, doing so may affect the functionality of certain features of the nb999 platform. Strictly necessary cookies cannot be disabled without impairing your ability to use the platform at all.

nb999 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable laws or our licensing obligations. The following general retention periods apply:

• Active Account Data: For as long as your nb999 account remains active and open. Your identity, contact, financial, and gaming activity data are maintained for the duration of your account.
• Closed Account Data: Where an account is voluntarily closed by the player, nb999 retains the account records (identity data, transaction history, KYC documents, gaming activity logs) for a minimum of five (5) years following account closure. This retention period is required by nb999's AML and gaming licence obligations.
• Support Interaction Records: Live chat transcripts, email correspondence, and support ticket records are retained for a minimum of three (3) years from the date of the interaction.
• Fraud Investigation Records: Where an account is closed as a result of a fraud or AML investigation, relevant records may be retained for up to seven (7) years or longer where required by a regulatory authority or ongoing legal proceeding.
• Marketing Consent Records: Records of your opt-in consent to receive marketing communications, and any subsequent opt-out, are retained indefinitely to demonstrate compliance with applicable marketing regulations.

After the applicable retention period expires, nb999 securely destroys or anonymises your personal data in a manner that makes it impossible to attribute to you as an individual.

nb999 implements a comprehensive set of technical, operational, and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL Encryption: All data transmitted between your browser or mobile device and nb999's servers is encrypted using industry-standard 256-bit TLS/SSL protocols. This protects your login credentials, payment data, and personal information in transit.
• Password Hashing: Your nb999 account password is never stored in readable format. nb999 uses bcrypt hashing with appropriate work factors to store passwords in a form that cannot be reversed even in the event of a database breach.
• Two-Factor Authentication (2FA): nb999 delivers one-time passwords (OTPs) to your registered Pakistani mobile number for account login and withdrawal confirmation, providing a second layer of protection beyond your password.
• Access Controls: nb999 employee access to player personal data is restricted strictly to those personnel who require it to perform their specific job function. Access is subject to role-based controls, and access logs are maintained and regularly audited.
• Regular Security Audits: nb999 conducts regular security assessments of its platform infrastructure, including penetration testing, vulnerability scanning, and third-party security audits.
• Data Breach Response: nb999 maintains a documented data breach response procedure. In the event of a data breach affecting your personal data, nb999 will notify you and the relevant regulatory authority within the timeframe required by applicable law.

You have the following rights in relation to the personal data that nb999 holds about you. To exercise any of these rights, please contact nb999 support via the live chat facility or the contact details provided in Section 16 of this Policy:

• Right of Access: You have the right to request a copy of the personal data that nb999 holds about you. nb999 will provide this within a reasonable timeframe, subject to identity verification.
• Right to Rectification: You have the right to request that nb999 correct any inaccurate or incomplete personal data held about you. Requests to update your registered name must be accompanied by appropriate documentary evidence.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances. This right is not absolute — nb999 may be required to retain certain data for the mandatory retention periods described in Section 8, particularly where retention is required by AML or gaming licence obligations.
• Right to Restrict Processing: You have the right to request that nb999 restrict the processing of your personal data while the accuracy of that data is contested, or while a complaint about nb999's processing is pending.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that this data be transferred to another controller where technically feasible.
• Right to Object: You have the right to object to nb999's processing of your personal data where that processing is based on nb999's legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes.
• Right to Withdraw Consent: Where nb999 processes your data based on your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

nb999 operates globally and may transfer your personal data to, or process it in, countries outside Pakistan where our servers, technology partners, or third-party service providers are located. Such countries may not provide the same level of data protection as Pakistani law.

Where nb999 transfers your personal data internationally, we ensure appropriate safeguards are in place to protect your data, including: contractual data processing agreements with relevant safeguards, transfers only to service providers in jurisdictions that provide an adequate level of data protection, or other legally recognised transfer mechanisms as appropriate.

All game technology providers and payment processing partners who may receive your data internationally are bound by contractual obligations to maintain security standards equivalent to those applied by nb999 directly. nb999 does not transfer player data to jurisdictions where no adequate protective framework exists.

Parents and guardians in Pakistan who have reason to believe that a minor in their household has registered an nb999 account should contact nb999 support immediately. nb999 will act promptly on all such reports and will cooperate fully with any investigation required by relevant authorities.

nb999 uses your gaming activity data specifically to support responsible gaming monitoring and player protection. This use of data is considered a legitimate interest of nb999 as a licensed gaming operator and forms part of its obligation to maintain a safe gaming environment for all Pakistani players.

Responsible gaming data use by nb999 includes:

• Monitoring betting frequency, session length, deposit patterns, and loss-to-deposit ratios to identify potential problem gambling behaviour.
• Triggering internal alerts when player behaviour indicates elevated risk, enabling nb999's responsible gaming team to proactively reach out to the player.
• Enforcing deposit limits, loss limits, session time limits, and self-exclusion periods that you have requested.
• Maintaining a record of self-exclusion requests to ensure they cannot be circumvented by re-registration attempts.
• Preventing players who are subject to active self-exclusion from receiving promotional marketing communications.

For more information about nb999's responsible gaming tools and resources, please visit our dedicated Responsible Gaming page.

nb999 may send you promotional communications about bonuses, new game releases, PSL season promotions, cashback offers, and other nb999 platform features via SMS to your registered Pakistani mobile number, email, or in-platform notification — but only where you have provided your prior explicit consent to receive such communications.

You can withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your nb999 account settings dashboard.
• Contacting nb999 support via live chat and requesting that your account be removed from marketing communications.
• Replying STOP to any SMS communication received from nb999.

Note that withdrawal of marketing consent does not affect your ability to receive transactional communications from nb999 that are essential to the operation of your account — such as deposit confirmation messages, withdrawal notifications, OTP codes, security alerts, and important account notices.

nb999 reserves the right to update, amend, or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how nb999 processes your personal data or your rights in relation to that data — nb999 will notify registered players via their registered email address or via a prominent notice on the nb999 platform prior to the changes taking effect.

For non-material amendments, nb999 will publish the updated Policy on this page and update the "Effective Date" displayed at the top of the document. Your continued use of the nb999 platform following the publication of a revised Privacy Policy constitutes your acknowledgment of, and agreement to, the revised terms. If you do not agree to the revised Policy, you should stop using the nb999 platform and contact support to request account closure.

We recommend reviewing this Privacy Policy periodically — particularly at the start of major cricket seasons such as the PSL, when nb999 may introduce new features that involve additional data collection.

If you have any questions, concerns, or requests relating to this Privacy Policy or nb999's data practices, please contact the nb999 support team through any of the following channels:

• Live Chat: Available 24/7 on the main nb999 platform. This is the fastest way to reach nb999 for privacy-related queries.
• Email: [email protected] — privacy-related enquiries are routed to nb999's data protection team.

nb999 commits to acknowledging all privacy-related enquiries within 48 hours and to providing a substantive response within 30 days of receipt. For complex requests involving data access, rectification, or erasure, nb999 may request identity verification documentation before processing the request to ensure we are dealing with the legitimate account holder.