bb98 Privacy Policy

1. Who We Are

bb98 operates the online casino and sports betting platform accessible at bb98.club (the "Platform"). In the context of this Privacy Policy, "bb98", "we", "us", and "our" refer to the operator of bb98.club. References to "you" and "your" refer to any person who visits, registers on, or uses the Platform. This Policy applies to all personal data processed by bb98 in connection with the operation of bb98.club and all associated services.

2. Personal Data We Collect

bb98 collects personal data in the following categories:

bb98 does not intentionally collect special category data (such as health data, biometric data, or political opinions) as part of its standard operations.

3. How We Use Your Data

bb98 uses the personal data described above for the following purposes:

• To create, verify, and maintain your bb98 account;
• To process deposits and withdrawals in PKR via your selected payment method;
• To verify your identity and age in accordance with KYC requirements;
• To detect, prevent, and investigate fraud, money laundering, and other financial crimes;
• To monitor and enforce compliance with bb98's Terms and Conditions;
• To provide customer support and respond to your enquiries;
• To send you account-related communications including deposit confirmations, withdrawal notifications, and security alerts;
• To operate and improve the bb98 Platform through aggregated analytics;
• To comply with applicable legal and regulatory obligations.

bb98 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Bases for Processing

bb98 processes your personal data on the following legal bases:

• Contractual necessity — processing required to deliver the services set out in the bb98 Terms and Conditions, including account management, payment processing, and game provision;
• Legal obligation — processing required to comply with applicable anti-money laundering, KYC, and financial regulation requirements;
• Legitimate interests — processing conducted for fraud prevention, platform security, and service improvement where these interests are not overridden by your data protection rights;
• Consent — where we rely on your consent for a specific processing activity, such as optional marketing communications, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

bb98 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients where necessary:

• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah, solely for the purpose of processing your deposit and withdrawal transactions;
• Game software providers — only the minimum data required to render and operate games within your bb98 session;
• Identity verification services — third-party KYC providers used to verify identity documents submitted by players;
• Regulatory and law enforcement authorities — where required by applicable law, court order, or to prevent financial crime;
• IT and security service providers — companies that provide hosting, security monitoring, and platform infrastructure services under strict confidentiality obligations.

All third parties who receive personal data from bb98 are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to bb98.

6. KYC & Identity Documents

Pakistani players who submit identity documents — including CNIC copies, passport scans, or utility bills — as part of the bb98 KYC process consent to bb98 retaining those documents for the duration of their account relationship and for a period thereafter as required by applicable regulations. These documents are stored with enhanced security controls, access is restricted to authorised compliance and support staff, and they are used only for the purpose of verifying identity, age, and payment method ownership. bb98 does not share KYC documents with third parties except where legally required to do so.

7. Payment Data

bb98 retains records of transactions — including deposit amounts, withdrawal requests, and payment method identifiers — for audit, anti-fraud, and regulatory compliance purposes. Full payment card numbers are never stored by bb98. Mobile wallet identifiers (e.g., the mobile number associated with a JazzCash or Easypaisa account) are stored in encrypted form and used only to process your transactions and verify that payments are made to and from the same registered individual.

8. Cookies & Tracking Technologies

bb98 uses the following types of cookies and similar technologies:

• Essential cookies — required to maintain your login session and keep your account secure between page visits. These cannot be disabled without preventing access to the Platform.
• Analytics cookies — used to understand how players navigate the bb98 Platform, which pages are most visited, and where technical errors occur. This data is aggregated and anonymised. bb98 uses its own analytics infrastructure and does not embed third-party advertising trackers.
• Preference cookies — used to remember settings such as language or display preferences where applicable.

You can manage or disable non-essential cookies through your browser's privacy settings. Note that disabling essential cookies will prevent normal login and session functionality on bb98.

9. Data Retention

bb98 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimums:

• Account data (identity, contact, and financial records) is retained for a minimum of five years following account closure to comply with anti-money laundering regulatory requirements;
• Transaction records are retained for a minimum of five years;
• Support communications are retained for two years from the date of the most recent interaction;
• KYC documents are retained for the period required by applicable financial regulation, typically five years from account closure.

After the relevant retention period expires, data is securely deleted or anonymised.

10. Data Security

bb98 implements a range of technical and organisational security measures to protect your personal data, including:

• SSL/TLS encryption across all bb98.club web traffic;
• Encrypted storage of sensitive data fields at rest;
• Role-based access controls limiting data access to authorised personnel;
• Regular security assessments of the bb98 Platform infrastructure;
• Two-factor authentication available for player accounts.

No data transmission over the internet is entirely without risk. While bb98 employs commercially reasonable security measures, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights, bb98 will notify affected players and relevant authorities in accordance with applicable requirements.

11. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by bb98:

• Right of access — to request a copy of the personal data bb98 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data, subject to bb98's legal retention obligations;
• Right to restrict processing — to request that bb98 limits how your data is used in certain circumstances;
• Right to object — to object to processing based on legitimate interests;
• Right to data portability — to receive certain data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact bb98 support at [email protected]. We will respond within 30 calendar days of receiving a valid request. We may ask you to verify your identity before processing any request.

12. Children's Privacy

bb98 is an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If bb98 discovers or is notified that personal data belonging to a minor has been collected, the relevant account will be closed immediately, the data will be deleted, and any funds held will be returned via the original deposit method following identity verification. If you believe a minor has registered on bb98, please notify us immediately at [email protected].

13. Changes to This Privacy Policy

bb98 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the mobile number or email address held on file. The date of the most recent revision is displayed at the top of this page. Your continued use of the bb98 Platform following notification of a material change constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by bb98, please contact:

Email: [email protected]

Response time: We aim to acknowledge all privacy-related requests within 5 working days and to provide a substantive response within 30 calendar days.