bb98 Privacy Policy

This Privacy Policy is published by bb98 ("bb98", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at bb98.ws. This Policy applies to all users of the bb98 platform, whether accessed via web browser or any other means, including players registered from Pakistan and all other permitted jurisdictions.

This document describes in plain terms how bb98 collects, processes, stores, shares, and protects your personal data. It also explains the rights you hold over that data and how to exercise them. By registering an account on bb98 or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents.

This Privacy Policy should be read alongside the bb98 Terms & Conditions, which govern your overall use of the platform. Where there is any conflict between these two documents in relation to privacy matters, this Privacy Policy shall prevail.

bb98 collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect include the following:

bb98 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where health-related information is voluntarily provided by a player in the context of a responsible gaming self-exclusion request, in which case it is handled with the highest level of care and restricted access.

bb98 collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting support, or filling in any form on the platform.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you interact with the bb98 platform. See Section 07 for full details on cookies.
• Third-party verification providers: Identity and age verification data received from third-party KYC service providers during the mandatory verification process. These providers confirm the authenticity of identity documents and cross-reference them against relevant databases.
• Payment processors: Transaction confirmation data received from integrated payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank during deposit and withdrawal processing.
• Fraud detection services: Risk signals and device fingerprinting data received from fraud prevention partners used to protect the integrity of the platform and safeguard your account.

bb98 does not purchase personal data from data brokers or any other third-party commercial data sources. All data collected by bb98 is sourced through the legitimate means described above.

bb98 processes your personal data only where a valid legal basis exists. The legal bases on which bb98 relies are as follows:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account creation, transaction processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, age verification mandates, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing conducted in pursuit of bb98's legitimate business interests, including fraud prevention, platform security, product improvement, and responsible gaming monitoring — provided such interests are not overridden by your fundamental data protection rights.
• Consent: Where processing is based on your freely given, specific, informed, and unambiguous consent — most commonly in the context of optional marketing communications. You may withdraw consent at any time without affecting any prior processing conducted on that basis.

bb98 uses your personal data for the following purposes, each of which is tied to a lawful basis as described in Section 04:

• Account management: Creating, maintaining, and securing your bb98 account; processing login requests; managing account settings and responsible gaming preferences.
• Identity and age verification: Confirming that you are who you say you are, and that you meet the 21+ age requirement applicable to all bb98 services. Verification is conducted at registration and may be repeated at any point during the account lifecycle.
• Transaction processing: Processing PKR deposits via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; settling withdrawals; maintaining accurate financial records.
• Game and betting services: Operating cricket betting markets (including PSL), live casino tables, slot games, Tower, Monster Hi-Lo, and all other platform features.
• Fraud and security: Detecting and preventing fraudulent activity, unauthorised account access, multiple account abuse, bonus exploitation, and other prohibited conduct as defined in the Terms & Conditions.
• Regulatory compliance: Meeting AML, KYC, and reporting obligations under applicable international gaming regulations and financial crime prevention frameworks.
• Responsible gaming: Monitoring play patterns to identify indicators of problem gambling; applying player-requested limits, cool-off periods, and self-exclusions; contacting players where intervention may be appropriate.
• Customer support: Responding to queries, complaints, and technical issues raised through live chat or email.
• Platform improvement: Analysing aggregated usage data to understand how players interact with bb98, identify technical issues, and develop improved features.
• Marketing (where consented): Sending promotional communications about bb98 offers, bonuses, and new games to players who have opted in to receive such messages. You may unsubscribe at any time.

bb98 does not use personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is required by applicable law or where you have given explicit consent.

bb98 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your data only in the following limited and controlled circumstances:

• KYC and identity verification providers: Your identity documents and personal details are shared with accredited third-party verification providers solely for the purpose of completing the mandatory verification process. These providers are contractually bound to handle your data in compliance with applicable data protection standards.
• Payment service providers: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank as necessary to process deposits and withdrawals. Each provider operates under its own privacy policy and applicable Pakistani banking regulations.
• Fraud prevention and security partners: Technical data and risk signals may be shared with specialist fraud detection services to protect the integrity of the platform and prevent financial crime.
• Game software providers: Where third-party game software is integrated into the bb98 platform, limited gameplay data may be shared with the relevant provider to ensure correct game function and bet settlement. No personally identifiable information beyond what is technically required is shared.
• Regulatory and law enforcement authorities: bb98 will disclose personal data to competent authorities where required to do so by law, court order, regulatory directive, or in connection with a lawful investigation. bb98 will, where legally permitted to do so, notify the relevant account holder of such a request.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of bb98's business assets, personal data held by bb98 may form part of the transferred assets. Affected users will be notified prior to any such transfer and will be informed of any changes to this Privacy Policy that result from it.

bb98 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bb98.ws. Cookies allow the platform to remember your preferences, maintain your session, and collect analytical data about how the platform is used.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bb98 platform and may prevent you from logging in or placing bets. Disabling analytical or marketing cookies will not affect your ability to use core platform features.

bb98 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertising networks.

bb98 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account registration and for a period of five (5) years following account closure, in compliance with AML record-keeping obligations applicable under international gaming licence conditions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial crime prevention regulations.
• KYC and identity verification documents: Retained for the period of the account relationship and for five (5) years after account closure.
• Customer support communications: Retained for three (3) years from the date of the final communication in a given case, or longer where relevant to an ongoing dispute or regulatory matter.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of the consent obtained.
• Technical and usage data: Retained in identifiable form for up to two (2) years, after which it is anonymised and may be retained indefinitely in aggregate form for analytical purposes.

Where data is no longer required and no legal obligation requires its retention, bb98 will securely delete or irreversibly anonymise it. You may request early deletion of certain categories of your data under the rights described in Section 09, subject to applicable legal and regulatory constraints.

As a bb98 player, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting the bb98 support team via live chat or by emailing [email protected]. bb98 will respond to all valid requests within 30 days of receipt.

• Right of access: You may request a copy of all personal data bb98 holds about you, along with information about how it is used, where it comes from, and with whom it has been shared.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by bb98. You may also update certain personal details directly through your account settings panel.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. This right is subject to bb98's legal obligations to retain certain data as described in Section 08.
• Right to restrict processing: You may request that bb98 restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed, or while an objection to processing is under review.
• Right to data portability: You may request that bb98 provide your personal data in a structured, commonly used, machine-readable format for the purpose of transferring it to another service provider, where technically feasible and where processing is based on consent or contractual necessity.
• Right to object: You may object at any time to the processing of your personal data for marketing purposes. You may also object to processing based on legitimate interests, in which case bb98 will assess whether its interests are overridden by your rights in that specific context.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out prior to withdrawal.

bb98 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your browser and bb98's servers is encrypted using TLS 1.2 or higher. Any connection attempting to use an older or less secure protocol is rejected.
• Encryption at rest: Sensitive personal data and financial records stored in bb98's databases are encrypted using industry-standard AES-256 encryption.
• Access controls: Access to personal data within bb98's internal systems is restricted on a strict need-to-know basis. Staff access to player data is logged, monitored, and subject to regular access reviews.
• Password security: Account passwords are never stored in plaintext. bb98 uses a strong one-way hashing algorithm with per-user salting to store password credentials securely.
• Two-factor authentication: bb98 offers optional two-factor authentication (2FA) for player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access.
• Penetration testing: bb98's platform infrastructure undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bb98 maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, bb98 will notify affected players and relevant authorities within the timeframes required by applicable regulations.

Despite these measures, no method of data transmission over the internet or electronic storage is completely secure. bb98 cannot guarantee absolute security but commits to taking every reasonable step to protect your data and to responding promptly and transparently in the event of a confirmed breach.

bb98 operates a strict 21+ age restriction across all services. The platform is not directed at, and does not knowingly collect personal data from, any individual under the age of 21. Age verification is a mandatory step in the account registration process and is enforced through identity document checks.

If bb98 becomes aware that personal data has been collected from a person under the age of 21, whether through a circumvented registration process or any other means, the following actions will be taken immediately:

• The account will be suspended and access to the platform will be revoked.
• All personal data associated with the underage account will be securely deleted, except where retention is required for regulatory reporting purposes.
• Any deposits made to the account will be returned to the originating payment method after deduction of any amounts required to be retained under applicable AML obligations.
• The matter may be reported to relevant regulatory or child protection authorities where required by law.

bb98 operates under an international gaming licence and may process or store certain categories of personal data on servers or through service providers located outside of Pakistan. Where such international transfers occur, bb98 ensures that appropriate safeguards are in place to provide a level of protection for your personal data that is at least equivalent to the protections applicable under the laws of your home jurisdiction.

Safeguards used by bb98 for international data transfers include contractual clauses incorporating internationally recognised data protection standards, transfer impact assessments where required, and the selection of third-party processors that maintain equivalent technical and organisational security standards to those employed by bb98 directly.

By using the bb98 platform, you acknowledge that your personal data may be transferred to, stored in, or processed in jurisdictions outside of Pakistan. bb98 will never transfer your data to a jurisdiction that does not provide adequate protections, and will always ensure that appropriate agreements are in place with any overseas data processor before such a transfer occurs.

bb98 reserves the right to update or revise this Privacy Policy at any time. Changes may be necessary to reflect updates to the platform's services, changes in applicable data protection law, or improvements to our internal data handling practices.

Where a material change is made to this Policy — particularly one that affects how we use your personal data or the rights available to you — bb98 will display a prominent notice within the platform at the time of your next login and update the "Last updated" date at the top of this document. For significant changes, bb98 may also send a direct notification to your registered email address.

Continued use of the bb98 platform following publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the updated Policy, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way bb98 handles your personal data, please contact our support team through any of the following channels:

All data subject requests — including requests for access, rectification, erasure, portability, or objection — must be submitted in writing via email or live chat to allow bb98 to verify your identity and process your request accurately. bb98 commits to acknowledging all data subject requests within 5 business days and resolving them within 30 days of receipt.