kb999 Privacy Policy

About This Policy

This Privacy Policy ("Policy") describes how kb999 ("we", "us", "our", or "the Platform") collects, receives, uses, stores, shares, transfers, and otherwise processes personal data relating to individuals ("you", "your", "the User", "the Player") who access or use the kb999 online casino, sports betting, and related services available at kb999.lat.

This Policy applies to:

• Registered Players who hold an Account on the kb999 platform;
• Visitors to the kb999 website who have not yet registered;
• Individuals who contact kb999 support or otherwise communicate with the platform;
• Applicants for employment or contractor arrangements with kb999 (subject to separate notifications where required).

This Policy should be read alongside the kb999 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall regulatory and contractual framework governing your use of the kb999 platform.

Who We Are — Data Controller

For the purposes of applicable data protection law, kb999 is the data controller in respect of personal data collected through the kb999 platform at kb999.lat. As a data controller, kb999 determines the purposes and means by which your personal data is processed.

kb999 operates under an internationally recognised gaming license, which imposes specific obligations on the platform relating to the collection, processing, retention, and protection of Player personal data. These obligations inform and shape the data practices described in this Policy.

If you have any questions about how kb999 processes your personal data, or if you wish to exercise any of your data subject rights described in Section 12 of this Policy, you may contact us through the support channels listed in Section 15.

Data We Collect

The following table sets out the categories of personal data that kb999 collects, along with examples within each category and the primary purposes for which each category is used. Full details of processing purposes and legal bases are set out in Sections 5 and 6.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs required for KYC), genetic data, or health data except where voluntarily disclosed in the context of a responsible gaming support interaction.

How We Collect Your Data

kb999 collects personal data through the following primary channels:

• Direct collection from you: Data you provide when registering your Account (name, email, date of birth, residential address), completing KYC verification (identity documents, selfie), making deposits or withdrawals (payment method details), contacting our support team, or updating your Account settings;
• Automated technical collection: Data collected automatically when you access the kb999 platform, including your IP address, device fingerprint, browser type, operating system, session duration, pages visited, and click-stream data, collected through server logs, cookies, and similar tracking technologies (see Section 7);
• Third-party payment processors: Confirmation data from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and blockchain networks regarding the status of deposit and withdrawal transactions;
• Identity verification providers: Results and data from third-party KYC and anti-money laundering screening providers who assist in verifying identity documents and checking against sanctions and politically exposed persons lists;
• Game providers: Gaming activity data from third-party game providers whose content is hosted within the kb999 platform, relating to game sessions played by your Account.

Why We Process Your Data — Purposes

kb999 processes your personal data for the following specific purposes:

• Account registration and management: Creating, maintaining, and administering your kb999 Player Account, including verifying your eligibility to register (age 21+, non-prohibited jurisdiction), authenticating your identity at login, and managing your Account settings and preferences;
• Provision of gaming and betting services: Enabling you to access and use casino games, sports betting markets, live dealer tables, and all other features of the kb999 platform for which you are registered;
• Payment processing: Processing deposits and withdrawals through your chosen payment method, reconciling transactions, and maintaining accurate financial records for your Account;
• KYC and anti-money laundering compliance: Verifying your identity, date of birth, and residential address in compliance with the know-your-customer and anti-money laundering obligations imposed by kb999's gaming license;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover attempts, prohibited multi-accounting, and other security incidents affecting the kb999 platform and its players;
• Responsible gaming monitoring: Monitoring gaming activity to identify potential indicators of problem gambling, enforcing responsible gaming limits and self-exclusion requests, and enabling the responsible gaming tools described in our Responsible Gaming Policy;
• Customer support: Responding to your queries, resolving account issues, processing complaints, and providing technical assistance through our 24/7 Urdu and English support channels;
• Marketing and promotions (with consent): Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may withdraw consent at any time through your Account settings or by contacting support;
• Platform improvement and analytics: Analysing aggregated and anonymised usage data to improve the functionality, performance, and user experience of the kb999 platform;
• Legal and regulatory compliance: Maintaining records and providing information as required by our gaming license, applicable anti-money laundering regulations, court orders, or legitimate requests from law enforcement or regulatory authorities.

Legal Bases for Processing

kb999 processes your personal data only where we have a valid legal basis to do so. The legal bases on which we rely are:

• Performance of a contract: Processing your Account registration data, gaming activity data, and financial data is necessary to perform the contract we have with you under the kb999 Terms & Conditions — specifically, to provide you with the gaming and betting services you have signed up for;
• Legal obligation: Processing your identity data, financial data, and gaming activity data is required to comply with the KYC, anti-money laundering, responsible gaming monitoring, and record-keeping obligations imposed by kb999's gaming license and applicable law;
• Legitimate interests: Processing technical data and communications data for fraud prevention, platform security, and customer support quality assurance serves kb999's and our Players' legitimate interests in maintaining a safe, secure, and fair gaming platform. We conduct balancing tests to ensure these interests do not override your fundamental rights and freedoms;
• Consent: Processing your data for direct marketing communications relies on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

Cookies & Tracking Technologies

kb999 uses cookies and similar tracking technologies (collectively "Cookies") on the kb999 platform to enable core platform functionality, enhance user experience, and — with your consent — to analyse usage patterns and serve relevant promotional content. The categories of Cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These Cookies enable login session management, fraud prevention signals, and core security features. They cannot be disabled without disabling core platform functionality and do not require your consent under applicable law;
• Functional Cookies: Enable personalisation features such as remembering your preferred language, game lobby display settings, and responsible gaming limit preferences. These Cookies operate on the basis of our legitimate interest in providing a consistent user experience;
• Analytical Cookies: Collect anonymised or pseudonymised data about how Players navigate and use the kb999 platform — which pages are visited most frequently, where users encounter difficulties, and how session flows proceed. This data is used in aggregated, non-identifying form to improve the platform;
• Marketing Cookies: Used to record your engagement with promotional content and assess the effectiveness of marketing campaigns. These Cookies are deployed only with your consent.

Third-Party Data Sharing

kb999 does not sell your personal data. We share your data with third parties only in the following circumstances, to the minimum extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and blockchain networks receive the transaction data necessary to process your deposits and withdrawals. Each provider is bound by their own privacy obligations and regulatory framework;
• KYC and AML service providers: Third-party identity verification and sanctions screening providers receive the identity documents and data required to complete KYC verification on your Account. These providers are engaged as data processors under written data processing agreements;
• Game content providers: Third-party game developers and studios whose games are hosted on the kb999 platform receive necessary session and wagering data required to operate their game software. Game providers are contractually prohibited from using this data for their own marketing purposes;
• IT infrastructure and hosting providers: Cloud hosting, database management, and security service providers who support the operation of the kb999 platform act as data processors under written agreements and are bound to process data only on kb999's instructions;
• Regulatory and licensing authorities: kb999's gaming license regulator and relevant supervisory authorities may receive Player account, gaming activity, and financial data in the course of regulatory audits, compliance reviews, or specific regulatory requests;
• Law enforcement and government bodies: Where required by applicable law, court order, or legitimate law enforcement request, kb999 may disclose personal data to the relevant authorities. kb999 will, where legally permitted, notify the affected Player of any such disclosure.

International Data Transfers

kb999 is an internationally operated platform and some of our data processors — including cloud hosting providers and game software providers — are located outside your country of residence. When your personal data is transferred outside your home jurisdiction, kb999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that in your home jurisdiction.

Safeguards we rely on for international transfers include:

• Standard contractual clauses (SCCs) or equivalent contractual data protection mechanisms agreed with the receiving party;
• Transfers to recipients in jurisdictions that the relevant supervisory authority has assessed as providing an adequate level of data protection;
• Data processing agreements that impose data protection obligations on the receiving party equivalent to those applicable to kb999 under its gaming license and this Policy.

You may request information about the specific safeguards applicable to any particular international transfer involving your personal data by contacting kb999 via the support channels listed in Section 15.

Data Retention

kb999 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected and to comply with our legal, regulatory, and licensing obligations. The key retention periods we apply are:

• Account and KYC data: Retained for the duration of your Account and for a minimum of five (5) years following permanent Account closure, in compliance with anti-money laundering record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by our gaming license and AML obligations;
• Gaming activity data: Retained for a minimum of five (5) years from the date of the relevant gaming session, as required for regulatory audit purposes;
• Support communications: Retained for two (2) years from the date of the communication for quality assurance and dispute resolution purposes;
• Marketing consent records: Retained for three (3) years from the date consent was given or last renewed, to enable us to demonstrate compliance with consent requirements;
• Technical and security logs: Retained for twelve (12) months from the date of generation, after which they are anonymised or deleted.

Where data is no longer required for its original purpose and no legal retention obligation applies, it is securely deleted using industry-standard deletion methods or irreversibly anonymised so that it can no longer be linked to any individual.

Security Measures

kb999 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, accidental or unlawful destruction, loss, alteration, disclosure, or other unlawful or unauthorised forms of processing. These measures include:

• 256-bit SSL / TLS encryption for all data transmitted between your browser or device and the kb999 platform;
• AES-256 encryption at rest for all sensitive personal and financial data stored in kb999 databases;
• Salted password hashing — your password is never stored in plain text and cannot be recovered by kb999 staff;
• Role-based access control limiting access to personal data to specific authorised personnel on a strict need-to-know basis, with all access logged and regularly audited;
• Multi-factor authentication for all internal staff access to systems holding personal data;
• Intrusion detection and prevention systems and 24/7 security monitoring of the kb999 platform infrastructure;
• Regular security assessments including penetration testing and vulnerability scanning by qualified third-party security specialists;
• Data breach response procedures — in the event of a personal data breach that may pose a risk to your rights and freedoms, kb999 will notify the relevant supervisory authority within 72 hours of becoming aware and will notify affected Players without undue delay where required by law.

Your Rights

Subject to applicable data protection law and certain legal exemptions (including those arising from our AML and gaming license obligations), you have the following rights regarding your personal data held by kb999:

• Right of Access (Subject Access Request): You have the right to request confirmation of whether kb999 processes your personal data and, if so, to receive a copy of that data along with information about how it is processed;
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. Certain data (such as KYC-verified identity information) can only be corrected through the verified identity document update process;
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (in cases based on consent), or where you object to processing and there are no overriding legitimate grounds. This right is subject to retention obligations arising from our gaming license and AML requirements;
• Right to Restrict Processing: You may request that kb999 restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved;
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing processing, we will cease such processing immediately;
• Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, unless necessary for a contract or explicitly consented to.

To exercise any of the above rights, please contact kb999 via the support channels listed in Section 15. We will respond to valid requests within one (1) month of receipt. In complex cases, we may extend this period by up to two (2) further months, with notification.

Children & Minors

The kb999 platform is strictly for adults aged 21 years and above. kb999 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual under 21 through the Account registration process, that Account will be immediately suspended and the data will be securely deleted, subject only to any applicable legal retention requirements relating to the fraudulent registration.

If you are a parent or guardian and believe that a minor has created an Account on the kb999 platform or has provided personal data to kb999, please contact us immediately via the support channels in Section 15. We will investigate the matter promptly and take appropriate action, which will include closure of any Account registered by or for a minor.

Changes to This Privacy Policy

kb999 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements under our gaming license, or the technical capabilities of the platform. The effective date displayed at the top of this Policy will be updated whenever a revised version is published.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — kb999 will notify registered Players by email to the address associated with your Account and by posting a prominent notice on the kb999 platform.

We encourage you to review this Policy periodically to stay informed about how kb999 handles your personal data. Your continued use of the kb999 platform following publication of an updated Policy constitutes your acknowledgement of the changes. If you do not agree with any material change to the Policy, you should contact us to discuss your options, which may include Account closure and withdrawal of your remaining Balance.

Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or wish to raise a concern about how kb999 has handled your personal data, please contact the kb999 support team:

• Support email: [email protected] — marked "Privacy Query" or "Data Subject Request" in the subject line;
• Live chat: Available 24/7 in Urdu and English through the kb999 platform — accessible by logging in to your Account;
• Response time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within one (1) calendar month.

If you are not satisfied with kb999's response to your data protection concern or data subject rights request, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the dispute resolution body designated under kb999's gaming license.

kb999 is committed to resolving all data protection concerns promptly, fairly, and transparently. We take every privacy complaint seriously and conduct a genuine investigation in response to each one.

Last updated: 1 January 2026 — Privacy Policy version PP-2026.1