Overview: by999 takes your privacy seriously. This Policy applies to all Pakistani players who register, use, or access by999. We collect only what is necessary, protect it seriously, and never sell it to anyone. By using by999, you confirm that you have read and understood this Privacy Policy.
1. Who We Are
by999 is an online gaming platform operated at by999.click, providing digital gaming services to players in Pakistan. When this Policy refers to "by999", "we", "us", or "our", it means the platform operator responsible for processing your personal data under this agreement.
by999 is the data controller for the personal information you provide when registering and using the platform. As data controller, we are responsible for deciding how and why your data is processed, and for ensuring that processing complies with applicable data protection principles.
Our data protection contact is reachable at support@by999.click. If you have any questions about this Privacy Policy or about how by999 handles your personal data, please use this contact before escalating to any other avenue.
2. Data We Collect
by999 collects personal data in three main ways: directly from you when you register and use the platform; automatically from your device and browsing activity; and from third parties such as payment processors and identity verification providers. Here is a precise breakdown of what we collect and when.
2.1 Registration & Account Data
- Full legal name as it appears on government-issued ID
- Date of birth (to verify you are 18 or older)
- Pakistani mobile number or email address
- Account username and hashed (never plaintext) password
- Country and city of residence
- Preferred language
2.2 Identity Verification (KYC) Data
- Copy of valid CNIC (Computerised National Identity Card)
- Proof of address (utility bill, bank statement) where required
- Selfie or liveness check for high-value account verification
- Payment method ownership documents where applicable
2.3 Financial & Transaction Data
- Deposit and withdrawal amounts, dates, and methods
- Easypaisa, JazzCash, NayaPay, SadaPay, or bank account identifiers (not full account credentials)
- Card last four digits and card issuing bank (for card deposits)
- Transaction reference numbers and payment processor responses
2.4 Gaming Activity Data
- Games played, bets placed, and results received
- Session start and end times
- Bonus offers accepted, wagering progress, and bonus outcomes
- Game preferences and favourite categories
2.5 Technical & Device Data
- IP address and approximate geographic location
- Device type, model, and operating system
- Browser type and version
- App version (where applicable)
- Session logs and error reports
2.6 Communications Data
- Content of support tickets and live chat conversations
- Email and SMS correspondence with by999
- Complaint and dispute records
What We Do Not Collect: by999 does not collect your full payment account credentials (mobile wallet PINs, internet banking passwords, or full card numbers). Payment authentication is handled directly by the relevant payment provider — by999 only receives confirmation of the transaction, not your payment credentials.
3. Why We Collect It — Our Purposes
by999 collects personal data for specific, legitimate purposes. We do not collect data speculatively or hold it longer than necessary. Below is a clear explanation of why each category of data is collected.
| Purpose |
Data Used |
Is It Optional? |
| Account creation & login | Registration data | No — required |
| Age & identity verification (KYC) | KYC documents, date of birth | No — required for withdrawals |
| Processing deposits & withdrawals | Financial & transaction data | No — required |
| Delivering and improving games | Gaming activity, device data | No — required |
| Fraud prevention & security | IP, device, transaction history | No — required |
| Customer support | Communications, account data | No — when support is requested |
| Responsible gaming monitoring | Gaming activity, session data | No — required by platform commitments |
| Sending account notifications | Email/mobile number | No — transactional messages |
| Sending promotional communications | Email/mobile number | Yes — opt-out available |
| Platform performance analytics | Device, session, error data | Partially — see Cookie Policy |
by999 does not use your personal data for any purpose that is not described in this Policy. If we ever wish to use your data for a new purpose, we will update this Policy and notify you as described in Section 11.
4. Legal Basis for Processing
by999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Most data processing at by999 is necessary to fulfil our contract with you — your account agreement. Without processing your registration data, KYC documents, and payment information, we simply cannot operate your account or process your transactions.
- Legitimate Interests: by999 processes certain data — such as device information and session logs — on the basis of legitimate interests, specifically fraud prevention, security monitoring, and platform improvement. We have assessed that these interests do not override your privacy rights.
- Legal Obligation: Certain data processing activities — particularly KYC verification and transaction record-keeping — are required by applicable laws and regulatory obligations that by999 must comply with.
- Consent: Where by999 sends you optional promotional communications or uses non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the legality of processing carried out before withdrawal.
5. How We Store & Secure Your Data
by999 takes data security seriously — not as a compliance exercise but as a genuine operational priority. Pakistani players trusting us with personal and financial information deserve the same standards they would expect from any established financial service.
1
256-Bit SSL Encryption in Transit
All data transmitted between your device and by999's servers is encrypted using 256-bit TLS. This means your login credentials, payment information, and session data cannot be intercepted during transmission — whether you are on a Wi-Fi connection in Lahore or a mobile network in Balochistan.
2
Encryption at Rest
Sensitive personal data stored in by999's databases — including KYC documents, payment identifiers, and account credentials — is encrypted at rest. Encryption keys are managed separately from the data they protect and are rotated on a scheduled basis.
3
Access Controls & Internal Authorisation
Access to by999's player data is restricted on a strict need-to-know basis. Only by999 staff roles that require access to specific data categories are granted that access. All internal access is logged and audited. Customer support agents can see account data relevant to support requests but cannot access full KYC documents without escalated authorisation.
4
Intrusion Detection & Monitoring
by999's infrastructure runs continuous intrusion detection and anomaly monitoring. Unusual access patterns, failed authentication attempts, and potential data exfiltration events trigger automated alerts and manual review. by999 maintains an incident response plan for data security events.
5
Password Security
by999 never stores your password in plaintext. Passwords are hashed using a strong cryptographic algorithm before storage. Even by999's internal technical staff cannot retrieve your password — only a reset process can change it. We strongly recommend using a unique, strong password for your by999 account.
Your Role in Security: Data security is a shared responsibility. by999 secures our infrastructure, but you are responsible for keeping your by999 login credentials private, using a strong unique password, and reporting any suspected unauthorised account access immediately to support@by999.click.
6. Sharing Your Data — Who Sees It
by999 does not sell your personal data. We do not share it with advertisers, data brokers, social media platforms, or any commercial entity whose primary interest is marketing to you. The categories of third parties who may access your data at by999 are limited and specific:
- Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and card payment networks receive the minimum data necessary to process your deposit or withdrawal — typically a transaction amount, reference number, and your registered payment account identifier.
- Identity Verification Providers: KYC checks may be conducted through a third-party identity verification partner who processes your CNIC and supporting documents to confirm your identity. These providers are contractually bound to handle your data only for this purpose.
- Fraud Prevention Services: by999 may share device fingerprint and transaction pattern data with fraud detection service providers who help identify suspicious activity. This data is processed for security purposes only.
- Cloud Infrastructure Providers: by999's data is hosted on secured cloud infrastructure. Our hosting partners process data only as directed by by999 and under strict data processing agreements.
- Legal and Regulatory Authorities: by999 will disclose player data to law enforcement, financial regulators, or other government authorities when required by applicable law or a valid legal order. We will notify you of such disclosures where we are legally permitted to do so.
No Commercial Data Sales: by999 has never sold player data to any third party for commercial purposes and will not do so. This is a firm operational commitment, not a conditional statement.
7. Cookies & Tracking Technologies
by999 uses cookies and similar technologies on our website and applications. A cookie is a small text file stored on your device that helps the platform remember information about your visit — for example, keeping you logged in or remembering your display preferences.
| Cookie Type |
Purpose |
Required? |
| Essential |
Session management, login authentication, security tokens, CSRF protection |
Yes — platform cannot function without these |
| Functional |
Remembering language preferences, display settings, game lobby filters |
Yes — required for normal platform functionality |
| Analytics |
Aggregated, anonymised platform usage statistics used to improve by999 |
No — opt-out available |
| Performance |
Error tracking, page load monitoring, crash reporting |
No — opt-out available |
by999 does not use advertising cookies or allow third-party advertising networks to place cookies on your device through our platform. You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use by999's core features.
8. Your Privacy Rights
by999 recognises and supports your rights over your personal data. You can exercise any of the following rights by contacting by999 support at support@by999.click with your request and sufficient identity verification to confirm the request is from the account holder.
Right of Access
You can request a copy of the personal data by999 holds about you. We will provide this in a structured format within a reasonable timeframe.
Right to Rectification
If any personal data by999 holds about you is inaccurate or incomplete, you have the right to request correction. Most profile data can be updated directly from your account settings.
Right to Erasure
You may request deletion of your personal data. by999 will comply where deletion is not prevented by legal retention obligations (such as transaction records required for financial compliance).
Right to Restrict Processing
In certain circumstances you can request that by999 restrict processing of your data — for example, while the accuracy of data you have disputed is being verified.
Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data to port to another service.
Right to Object
You may object to processing based on legitimate interests. by999 will assess whether our interests override your rights and respond accordingly. You can always opt out of marketing communications without objecting to all processing.
by999 will acknowledge rights requests within 72 hours and respond substantively within 30 calendar days. If your request is complex or voluminous, we may extend this period by a further 30 days and will notify you if this extension is necessary. Rights requests should be submitted to support@by999.click with "Privacy Request" in the subject line.
9. Data Retention — How Long We Keep It
by999 retains personal data only for as long as necessary to fulfil the purposes it was collected for, or as required by applicable legal and regulatory obligations. Once data is no longer required, it is securely deleted or anonymised.
- Active account data — Retained for the lifetime of your account plus a minimum hold period after account closure.
- KYC and identity documents — Retained for a minimum of 5 years after account closure or the last transaction, as required by financial compliance obligations.
- Financial transaction records — Retained for a minimum of 5 years to comply with anti-money laundering record-keeping requirements.
- Gaming activity logs — Retained for up to 3 years after your last login for responsible gaming monitoring and dispute resolution purposes.
- Customer support records — Retained for 3 years after the closure of each support interaction.
- Marketing consent records — Retained for as long as you remain opted in, plus a reasonable period after opt-out to demonstrate compliance.
After Account Closure: When your by999 account is closed (by you or by the platform), active processing of your data stops immediately. However, certain records will be retained for the periods above as required by law. These retained records are stored in restricted access archives and are not used for any commercial purpose.
10. Children's Privacy
by999 is strictly for adults aged 18 and over. We do not knowingly collect, process, or store personal data from anyone under the age of 18. by999 actively verifies player ages through date-of-birth confirmation at registration and formal KYC verification before processing significant withdrawals.
If by999 discovers or is notified that data from an underage individual has been collected — for example, because a minor provided false date-of-birth information during registration — that account will be immediately suspended, all associated data will be deleted (except where retention is required for compliance purposes), and any funds will be returned to the payment method used to deposit them.
If you believe a minor is using by999 or has accessed your account, please contact support@by999.click immediately. We treat underage access as a serious matter and respond accordingly.
11. Changes to This Privacy Policy
by999 may update this Privacy Policy from time to time as the platform evolves, as legal requirements change, or as we improve our data practices. When material changes are made, we will notify registered players through:
- A notification in your by999 account dashboard on next login
- An email to your registered address if the changes are significant
- An updated "Last Updated" date at the top of this page
Continued use of by999 after notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using by999 and may request account closure. We will not retroactively change the way we handle data you have already provided without explicit notification and, where required, your renewed consent.
Recommendation: We suggest bookmarking this page and reviewing it whenever you receive a policy update notification from by999. The current version is always the one accessible at by999.click/privacy-policy.
12. Contact Us About Privacy
If you have any questions, concerns, or requests related to this Privacy Policy or to how by999 handles your personal data, please reach out through the following channels:
- Email: support@by999.click — use "Privacy Request" or "Data Question" as your subject line for the fastest routing.
- Live Chat: Available 24/7 from your by999 account dashboard for general privacy questions.
by999 takes privacy enquiries seriously and will acknowledge all emails within 72 hours. Formal rights requests (access, erasure, portability) will receive a substantive response within 30 calendar days as described in Section 8.
This Privacy Policy was last reviewed and updated in June 2025. It applies to all players of by999 from Pakistan and to all data processing activities described herein.
