vb999 Privacy
Policy

vb999 (referred to in this Policy as "vb999," "we," "us," or "the Company") is the operator of the online gaming platform accessible at vb999.bio. vb999 operates under an internationally recognised gaming license and provides online casino gaming, sports betting, and related entertainment services primarily to registered Pakistani players.

vb999 acts as the data controller in respect of personal data collected through the Platform. This means we are responsible for determining the purposes and means of processing your personal data. Where we engage third-party service providers who process data on our behalf, they act as data processors and are bound by contractual data processing obligations consistent with this Policy.

This Privacy Policy applies to all personal data collected by vb999 through the following channels:

• The vb999 website and mobile web Platform accessible at vb999.bio and any associated subdomains.
• The vb999 account registration process and all subsequent account management activities.
• Payment processing interactions, including deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK.
• Customer support interactions conducted via live chat, email, or any messaging platform operated by vb999.
• KYC identity and age verification processes required by our gaming license obligations.
• Marketing communications where you have provided consent to receive them.

This Policy does not apply to third-party websites, applications, or services that may be linked to from the vb999 Platform. vb999 has no responsibility for the privacy practices of third-party operators, including game studio providers whose games are hosted within the vb999 game lobby.

The following table sets out the categories of personal data vb999 collects, the specific data types within each category, and the primary purpose for which each category is collected:

4.1 Directly From You

The majority of personal data vb999 holds about you is provided directly by you during the following interactions:

• Completing the vb999 account registration form (mobile number, basic personal details).
• Submitting KYC documentation (CNIC scan, photograph) for identity and age verification.
• Initiating deposit or withdrawal transactions through the Cashier section.
• Contacting vb999 customer support via live chat or email.
• Updating account preferences, responsible gaming settings, or communication preferences.

4.2 Automatically Through the Platform

When you access and use the vb999 Platform, certain technical and usage data is collected automatically through server logs, cookies, and analytics systems:

• Your device's IP address and approximate geographic location derived from it.
• Browser type, operating system, and device specifications.
• Pages visited, time spent on each section, and navigation patterns within the Platform.
• Game session initiation and conclusion timestamps, and associated bet data.

4.3 From Third-Party Service Providers

In limited circumstances, vb999 may receive personal data about you from third-party service providers engaged to support Platform operations:

• Payment processors (JazzCash, EasyPaisa, banking partners) may share transaction confirmation data to verify successful deposits and withdrawals.
• Identity verification service providers engaged to cross-reference CNIC data against official databases where required by licensing obligations.
• Fraud prevention and anti-money-laundering screening services, where required under our license compliance obligations.

vb999 uses personal data only for identified, legitimate purposes directly connected to the operation of the Platform and our obligations under our gaming license. The following table maps each data use to its corresponding category and legal basis:

• Account creation and management: We use your mobile number and personal details to create and maintain your vb999 account, enable login via OTP, and manage your account settings.
• Identity and age verification (KYC): CNIC data is processed to confirm you meet the mandatory 21+ age requirement and to verify your identity before processing your first withdrawal, as required by our gaming license.
• Payment processing: Financial data is used to process PKR deposits from and withdrawals to your JazzCash, EasyPaisa, or bank account. Transaction records are maintained for accounting, audit, and regulatory purposes.
• Game delivery and auditing: Gaming activity data is recorded to deliver games correctly, calculate winnings, manage bonus wagering, and maintain auditable records for dispute resolution purposes.
• Responsible gaming monitoring: Usage and gaming activity data is monitored to identify patterns consistent with problem gambling behaviour, in order to trigger proactive player protection interventions as required under our licensing obligations.
• Fraud prevention and security: Technical data (IP address, device fingerprint, login patterns) is analysed to detect and prevent fraudulent activity, duplicate accounts, bonus abuse, and unauthorised account access.
• Customer support: Communication data from live chat and email interactions is retained to provide effective support, resolve disputes, and maintain records of commitments made to players.
• Platform improvement: Aggregated and anonymised usage data is used to identify friction points in the Platform and inform product development priorities. This data does not identify individual players.
• Marketing communications (where consented): Where you have explicitly opted in, contact data is used to send you information about vb999 promotions, new game releases, and platform updates via SMS or email.

vb999 processes personal data under one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: The majority of processing activities (account management, payment processing, game delivery, support) are necessary to perform the contract between vb999 and the registered player — namely, providing the gaming services you have signed up to use.
• Legal Obligation: KYC identity and age verification, anti-money-laundering screening, and regulatory record-keeping are required by the obligations under vb999's international gaming license. Processing in these contexts is not optional — it is a licensing requirement.
• Legitimate Interests: Fraud detection, security monitoring, responsible gaming pattern monitoring, and Platform improvement analytics are conducted on the basis of vb999's legitimate interests in operating a secure, fair, and compliant gaming platform. These interests have been assessed against the privacy interests of players and do not override them.
• Consent: Marketing communications (promotional SMS and email) are sent only where you have provided explicit, freely given consent. You may withdraw this consent at any time without affecting your account status or the services available to you.

vb999 does not sell or commercially trade your personal data. We may share personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, and banking partners receive the data necessary to process PKR transactions you initiate. These providers operate under their own privacy policies and regulatory obligations.
• Identity Verification Providers: Third-party KYC service providers may receive CNIC data to cross-reference against identity databases as part of our licensing-mandated verification process. All such providers are contractually bound to process this data only for the verification purpose.
• Game Studio Providers: Technical session and bet data is shared with game studio providers (such as Pragmatic Play, Evolution Gaming, PG Soft, and others whose games are hosted on the Platform) to the extent necessary to deliver games, calculate outcomes, and resolve game-level disputes. Studios do not receive your identity data.
• Regulatory and Licensing Authorities: vb999 may be required to share personal data with its licensing authority or other regulatory bodies in response to lawful regulatory requests or audit requirements.
• Law Enforcement: In response to a valid legal order, warrant, or regulatory direction from a competent authority, vb999 may disclose personal data without prior notice to the player concerned.
• Fraud Prevention & AML Services: Aggregated transaction and account data may be shared with anti-money-laundering screening services as required by our gaming license compliance obligations.

The vb999 Platform uses cookies and similar tracking technologies to support the following functions:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies (to keep you logged in), security tokens (CSRF protection), and cookies that remember your account preferences. These cookies cannot be disabled without breaking the Platform's core functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which sections are most visited, where users exit, and where load times are longest. This data is used exclusively for Platform improvement. Analytics data is processed in aggregated form and does not identify individual players.
• Functional Cookies: These store your preferences — such as your preferred language setting, default game lobby filter, and responsible gaming reminder frequency — so they persist between sessions without requiring you to re-enter them each time you log in.

You may manage non-essential cookies through your browser settings. Disabling essential cookies will prevent you from using the vb999 Platform. vb999 does not use third-party advertising cookies or cross-site tracking technologies. Your gaming activity on vb999 is not tracked by or shared with advertising networks.

vb999 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by regulatory and legal obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised aggregated data (e.g., aggregated Platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

As a vb999 player whose personal data we process, you hold the following rights in respect of your data. These rights may be exercised by contacting vb999 support via live chat or email with the subject line "Privacy Rights Request":

vb999 implements a layered security architecture to protect personal and financial data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and vb999 servers.
• AES-256 encryption at rest for stored KYC documents, financial records, and account data on our servers.
• Role-based access controls limiting employee access to personal data to only those functions where access is necessary for their job role.
• Two-factor authentication mandatory for all vb999 internal system access.
• Regular independent security audits of our Platform infrastructure as required by our gaming license.
• Intrusion detection systems that monitor for and alert on anomalous access patterns to our servers and databases.
• Secure deletion protocols ensuring that personal data past its retention period is destroyed in a manner that prevents recovery.

Notwithstanding these measures, no online system is completely immune to security risks. In the event of a data security incident that poses a risk to the rights and interests of affected players, vb999 will notify affected individuals without undue delay, and no later than 72 hours after becoming aware of the incident, where required by applicable law.

The vb999 Platform is strictly for individuals aged 21 and above. vb999 does not knowingly collect personal data from any person under the age of 21. Where we identify, through KYC verification or any other means, that personal data belonging to a person under 21 has been collected, we will:

• Immediately suspend the associated account.
• Delete all personal data relating to the underage individual to the extent permitted by overriding legal obligations.
• Return any deposits to the originating payment method.
• Forfeit all winnings accumulated during the period of underage use.

If you are a parent or guardian and believe that a person under 21 in your care has created a vb999 account or provided personal data to the Platform, please contact us immediately at [email protected] with the subject "Underage Account Report." We will investigate and take appropriate action within 24 hours of the report.

As an online gaming platform operating under an international gaming license, some of vb999's operational systems — including game studio servers and identity verification services — may be located outside Pakistan. Where personal data is transferred to third-party service providers operating in other jurisdictions, vb999 ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements requiring third parties to apply data protection standards consistent with this Policy.
• Transfer only to service providers in jurisdictions with adequate data protection frameworks, or under contractual protections equivalent to such frameworks.
• Data minimisation — only the data strictly necessary for the third party's specific service function is transferred.

In all cases, international transfers of personal data are conducted solely in furtherance of providing the gaming services you have registered to use. No international transfer is made for commercial data exploitation purposes.

vb999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory obligations, or Platform features. The updated Policy will be published on this page with a revised "Last Updated" date at the top of the document.

Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — vb999 will provide advance notice via SMS to your registered Pakistani mobile number at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.

We recommend reviewing this Privacy Policy periodically. Previous versions of this Policy are available from vb999 support upon request.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by vb999, please use the following contact channel:

If you have submitted a formal rights request and are not satisfied with vb999's response, you may escalate your concern to the data protection authority or dispute resolution body designated under vb999's international gaming license. Details of the applicable authority are available from vb999 support upon request.