Privacy Policy

This Privacy Policy ("Policy") describes how vb999 ("vb999", "Platform", "we", "us", "our") collects, processes, stores, shares and protects personal data relating to users ("User", "you", "your") of the vb999 online entertainment platform accessible at vb999.cam.

vb999 is an English-language online entertainment platform designed for Pakistani users. In operating this platform we collect certain categories of personal data as described in this Policy. We are committed to handling that data responsibly, transparently and in compliance with the data protection principles applicable to our operations.

vb999 does not hold or claim a Pakistani data protection registration and is not affiliated with the Government of Pakistan, the National Database and Registration Authority (NADRA), the State Bank of Pakistan, or any Pakistani financial institution. This Policy should be read alongside the vb999 Terms and Conditions, which govern use of the platform.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, identification number, location data, online identifier or any factor specific to that person's identity.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, vb999 as the platform operator.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual obligation, such as a KYC verification service provider.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — identity and age verification procedures conducted in compliance with anti-money laundering obligations.
• "Cookies" means small text files placed on your device by a web server that record information about your browsing activity on the platform.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or financial information, which requires a higher standard of protection.

vb999 collects the following categories of personal data from users during the registration process, ongoing platform use and KYC verification:

vb999 collects personal data through the following methods:

4.1 Direct Collection

Data you provide directly when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, set responsible gambling limits or respond to promotions. This includes all information entered into platform forms and the documents you submit for identity verification.

4.2 Automatic Collection

Technical and behavioural data collected automatically when you access or use the platform, including through cookies, web server logs, pixel tags and similar tracking technologies. This data includes your IP address, device identifiers, browser type and in-platform interaction patterns.

4.3 Third-Party Sources

In certain circumstances, vb999 may receive personal data from third-party sources including KYC verification service providers, fraud detection services, payment processors and publicly available databases used to verify identity or screen for financial crime risk. Data received from third parties is handled under the same protections as directly collected data.

vb999 processes personal data on the following legal bases, depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to perform the agreement between vb999 and the User — including account creation, transaction processing, dispute resolution and the provision of gaming services.
• Legal Obligation: Processing necessary to comply with applicable anti-money laundering (AML) law, fraud prevention obligations, age verification requirements and other regulatory duties to which vb999 is subject under its licence jurisdiction.
• Legitimate Interests: Processing for purposes of platform security, fraud detection, responsible gambling monitoring and platform improvement, where those interests are not overridden by your data protection rights.
• Consent: Where processing is based on consent — such as marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

vb999 uses personal data collected from Users for the following specific purposes:

6.1 Account Management

To create, maintain and administer your vb999 Account, including processing registration details, verifying your identity, managing your login credentials and enforcing the one-account-per-person rule set out in our Terms and Conditions.

6.2 KYC & Regulatory Compliance

To verify your identity and age in compliance with applicable AML and fraud prevention requirements. This includes reviewing identity documents such as your CNIC or passport, processing proof of address and conducting liveness checks through our verification partner.

6.3 Transaction Processing

To process deposits and withdrawals, record PKR transaction history and manage payment method associations on your Account. Financial data is retained in accordance with applicable AML record-keeping requirements.

6.4 Platform Security & Fraud Prevention

To detect, prevent and investigate fraudulent activity, bonus abuse, money laundering, account takeovers and other prohibited conduct. Technical data including IP address and device identifiers are used in this context to identify unusual access patterns.

6.5 Responsible Gambling

To monitor behavioural data for signs of problematic gambling, enforce responsible gambling limits you have set on your Account, process self-exclusion requests and maintain exclusion records. This data is used in your interest and in accordance with our responsible gambling commitments.

6.6 Customer Support

To respond to your enquiries, resolve disputes, investigate complaints and maintain a record of support interactions for quality assurance purposes.

6.7 Platform Improvement

To analyse aggregated, anonymised behavioural data to understand how users interact with the platform, identify areas for improvement and develop new features. Aggregated data used for this purpose does not identify individual users.

6.8 Marketing Communications

Where you have provided consent, to send you promotional communications about offers, bonuses and platform updates. You may opt out of marketing communications at any time through your account settings or by contacting support. Opting out of marketing does not affect transactional communications relating to your Account.

vb999 does not sell, rent or trade your personal data to third parties. Personal data is shared only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers

vb999 engages third-party service providers who process personal data on our behalf as Data Processors under contractual data processing agreements. These include KYC verification providers, fraud detection services, payment processing infrastructure, game studio providers and cloud infrastructure services. All processors are required to handle data only in accordance with our instructions and to maintain appropriate security standards.

7.2 Legal & Regulatory Authorities

vb999 will disclose personal data to competent regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order, regulatory instruction or where disclosure is necessary to protect the rights, property or safety of vb999 or its users.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of the assets of vb999's operator, personal data held on the platform may form part of the transferred assets. Where such a transfer occurs, you will be notified and the acquiring entity will be bound by obligations consistent with this Policy.

vb999 uses cookies and similar tracking technologies on the platform to enable core functionality, analyse platform performance and, where consented to, support personalisation. The types of cookies used are described below:

• Strictly Necessary Cookies: Required for the platform to function — including session management, authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Performance Cookies: Collect anonymised data about how users interact with the platform — including pages visited, time on site and error events — to help us improve platform performance.
• Functional Cookies: Remember your preferences such as language settings, session configuration and responsible gambling tool configurations across visits.
• Analytics Cookies: Used to understand aggregate user behaviour patterns. Data collected through analytics cookies is anonymised or pseudonymised and does not identify individual users.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to access certain features of the platform. For a full list of cookies used, consult the cookie settings panel accessible within the platform.

vb999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention schedule:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Data subject to an ongoing legal hold or regulatory investigation will be retained for the duration of that hold.

vb999 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser and the vb999 platform is encrypted using TLS (Transport Layer Security). The platform is accessible exclusively over HTTPS.
• Encryption at Rest: Personal data stored on our servers — including KYC documents and financial records — is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a need-to-know basis. Staff and contractors with access to personal data are subject to confidentiality obligations and undergo appropriate background checks.
• Two-Factor Authentication: Two-factor authentication options are available for User Accounts to reduce the risk of unauthorised account access.
• Security Monitoring: The platform undergoes routine security assessments, vulnerability scans and incident response testing.

While vb999 employs robust security measures, no system is entirely impenetrable. You are responsible for maintaining the security of your own Account login credentials and for notifying vb999 promptly if you suspect unauthorised access to your Account.

Subject to applicable data protection law and the specific circumstances of your request, you have the following rights in relation to your personal data held by vb999:

11.1 Exercising Your Rights

To exercise any of the rights listed above, contact the vb999 support team via live chat or email at [email protected] (plain text — not a link). We will respond to valid requests within 30 days of receipt, or notify you if additional time is required for complex requests. We may request identity verification before processing a data rights request to protect against unauthorised access to another person's data.

11.2 Limitations on Rights

Certain rights are subject to limitations. For example, the right to erasure does not apply where vb999 is required by law to retain your data — such as AML record-keeping obligations that require retention for five years from the relevant transaction or account closure date. Where a right cannot be exercised in full, vb999 will explain the applicable restriction in writing.

The vb999 platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction. vb999 does not knowingly collect personal data from individuals under the applicable minimum age.

Age verification is conducted as a mandatory step in the KYC process. vb999 reserves the right to suspend access pending age verification where there are reasonable grounds to question a User's age.

vb999 may transfer personal data to countries outside Pakistan in order to use the services of third-party processors — including KYC verification providers, cloud infrastructure services and game studio platforms — that are located in other jurisdictions.

Where personal data is transferred internationally, vb999 ensures that appropriate safeguards are in place to protect that data to a standard consistent with the protections described in this Policy. Such safeguards may include contractual clauses requiring the recipient to apply equivalent data protection standards, or reliance on adequacy determinations applicable to the destination jurisdiction.

Pakistani users should note that Pakistan's Personal Data Protection framework is evolving. vb999 does not claim compliance with any specific Pakistani data protection legislation unless and until such legislation is enacted and comes into force, and we will update this Policy accordingly.

The vb999 platform may reference or integrate third-party services including payment references (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah), game studio content and KYC verification tools. These third-party services operate under their own privacy policies and terms of service, which are independent of this Policy.

vb999 is not responsible for the privacy practices of third-party providers. References to payment providers and payment infrastructure on the vb999 platform are for user familiarity only — they do not constitute a data sharing arrangement with those providers, nor do they imply that those providers have endorsed vb999 or support gambling transactions.

vb999 reserves the right to update, amend or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform functionality. Material changes will be communicated to Users via a platform notification or, where appropriate, by email to the address registered on your Account.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the vb999 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the platform and may request account closure.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a concern about how your personal data is handled, please contact the vb999 support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the vb999 platform's support section.
• Help Centre: Accessible via the support section of the vb999 website.
• Email (plain text — not a link): [email protected]

All data rights requests should be submitted in writing — either via live chat or email — and should clearly state the nature of the right you wish to exercise and the specific data to which the request relates. We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.