Privacy Policy

This Privacy Policy ("Policy") is issued by bh99 ("bh99", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at bh99.cam. This Policy sets out how bh99 collects, uses, stores, shares and protects personal data in connection with your use of the Platform.

By accessing or using the bh99 Platform — including registering an account, making a deposit, placing a bet, or interacting with any feature of the site — you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data as described herein.

bh99 is committed to processing personal data responsibly, proportionately and in accordance with applicable data protection principles. We collect only the data that is genuinely necessary for the provision of our services and the fulfilment of our legal obligations.

The following definitions apply throughout this Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Subject" means the individual to whom the Personal Data relates — in most cases, you as a registered or prospective user of the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, bh99.
• "Third-Party Processor" means any third party engaged by bh99 to process Personal Data on its behalf, under a binding data processing agreement.
• "KYC Data" means identity and verification documents collected as part of the Know Your Customer process, including government-issued ID, proof of address and payment method verification.
• "Cookies" means small text files stored on your device by the Platform that record certain browsing or session information.

bh99 acts as the Data Controller in respect of the Personal Data collected through the bh99.cam Platform. As Data Controller, bh99 determines the purposes for which Personal Data is collected and the means by which it is processed.

Where bh99 engages third-party service providers to process Personal Data on its behalf — for example, payment processors, identity verification providers, or analytics platforms — those providers act as Data Processors under agreements that require them to process data only on bh99's documented instructions and to maintain appropriate security standards.

bh99 does not claim to be a data controller recognised under Pakistani law, nor does it claim that this Policy satisfies any specific Pakistani data protection statute. This Policy reflects the data handling practices applied to all users of the Platform regardless of their location.

The categories of Personal Data collected by bh99 are set out in the table below. Data collected varies depending on the stage of your relationship with the Platform.

bh99 collects Personal Data through the following means:

bh99 processes Personal Data on the following lawful bases:

• Contract Performance: Processing necessary to enter into or perform our contract with you — including account registration, transaction processing and the provision of gaming services.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML and responsible gambling obligations imposed by the operator's licence jurisdiction.
• Legitimate Interests: Processing carried out for the legitimate interests of bh99, including fraud prevention, security monitoring, Platform analytics and business record-keeping — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, informed and specific consent — primarily in relation to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

bh99 uses your Personal Data for the following purposes:

bh99 does not sell, rent or trade your Personal Data to any third party for their own commercial purposes. Personal Data is shared with third parties only in the following limited circumstances:

• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity documents and conduct required regulatory checks. These providers process your data solely on our behalf and under binding data processing agreements.
• Payment Processors: Third-party payment service providers involved in the processing of your deposits and withdrawals. Only the data necessary for the specific transaction is shared.
• Fraud & Security Services: Providers of fraud detection, risk assessment and security monitoring services engaged to protect the Platform and its users.
• Technology Infrastructure Providers: Hosting, cloud storage and content delivery providers who store or transmit data as part of Platform operations, under contractual data protection obligations.
• Legal and Regulatory Disclosure: Where bh99 is required by applicable law, court order or regulatory authority to disclose Personal Data. bh99 will notify you of such disclosure where legally permitted to do so.

All third-party processors engaged by bh99 are required to implement appropriate technical and organisational measures to protect Personal Data and to process it only for the specific purposes for which it has been shared.

The bh99 Platform uses cookies and similar tracking technologies to operate certain Platform features, analyse usage patterns and improve user experience. The categories of cookies used are as follows:

Most web browsers allow you to manage cookie preferences through browser settings, including the option to delete existing cookies or prevent new cookies from being set. However, disabling strictly necessary cookies will impair Platform functionality. For full details on managing cookies, consult your browser's help documentation.

bh99 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal Data associated with an active account is retained for the duration of the account relationship and for a reasonable period following account closure to allow for the resolution of any disputes or regulatory enquiries.
• KYC & Financial Records: Identity verification records, transaction histories and related financial documentation are retained for a minimum of five years following account closure, or longer where required by applicable AML law or regulatory guidance in the operator's licence jurisdiction.
• Responsible Gambling Records: Self-exclusion records, limit histories and related responsible gambling data are retained for a period sufficient to prevent re-registration during an active exclusion period and to comply with applicable responsible gambling obligations.
• Support Communications: Records of support interactions are retained for a reasonable period for complaint resolution and audit purposes.
• Marketing Consent Records: Records of consent and opt-out requests are retained for the duration of the account relationship to demonstrate compliance with consent-based marketing obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

bh99 implements appropriate technical and organisational measures designed to protect Personal Data against unauthorised access, loss, destruction, alteration or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your device and bh99 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Access Controls: Access to Personal Data is restricted to authorised personnel who require access for the purposes described in this Policy, on a need-to-know basis.
• Two-Factor Authentication: Account access can be protected with two-factor authentication, reducing the risk of unauthorised login.
• Monitoring & Intrusion Detection: Platform infrastructure is monitored for security incidents, unusual access patterns and potential breaches.
• Third-Party Security Standards: Third-party processors engaged by bh99 are assessed for their data security practices and are required to meet appropriate standards.

Subject to applicable law and our legitimate operational and legal obligations, you have the following rights in relation to your Personal Data held by bh99:

To exercise any of the above rights, please contact the bh99 support team at the details provided in Section 16. We will acknowledge your request within a reasonable period and aim to fulfil it within a reasonable timeframe, subject to any legal exceptions that apply.

Please note that certain rights may be limited where data retention is required by legal obligation — for example, KYC and AML records required under the operator's licence jurisdiction cannot be deleted on request during the applicable mandatory retention period.

The bh99 Platform is strictly an adults-only service. We do not knowingly collect Personal Data from individuals under the age of 18 years, or the higher minimum age required by the applicable operator licence jurisdiction.

Age verification is a mandatory component of the KYC process. Where bh99 becomes aware that Personal Data has been collected from a minor — whether through a misrepresentation during registration or otherwise — that Account will be closed immediately, any associated funds will be handled in accordance with our Terms & Conditions and the minor's data will be deleted as promptly as reasonably practicable, subject to any legal obligations that require us to retain records of the attempted registration for regulatory purposes.

bh99 operates an online Platform accessible from multiple countries. As a result, your Personal Data may be transferred to and processed in countries other than your country of residence, including countries where data protection laws may differ from those applicable in your jurisdiction.

Where Personal Data is transferred outside the jurisdiction in which it was collected, bh99 takes steps to ensure that appropriate safeguards are in place — including, where applicable, contractual arrangements with Third-Party Processors that require them to maintain data protection standards consistent with the principles set out in this Policy.

By using the bh99 Platform, you acknowledge that your Personal Data may be transferred internationally as described in this section.

bh99 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made to the way in which we collect or use Personal Data, we will notify registered users by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last reviewed" date at the top of this Policy reflects the date on which the Policy was most recently updated. Users are encouraged to review this Policy periodically. Continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way in which your Personal Data has been handled, please contact the bh99 Data Support team using the details below.

Please include your registered Account username and a clear description of your request or concern when contacting us. For data subject access requests, we may require you to verify your identity before we can process the request.