bb98 Privacy Policy

bb98 ("bb98", "we", "us", "our") operates the online gaming and sports betting platform accessible at bb98.bid. bb98 is operated under an international gaming license and provides online casino games, live dealer tables, sports betting markets, and related services to players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, bb98 acts as the data controller in respect of all personal data collected from individuals who visit, register on, or use the bb98 platform ("you", "your", "the player").

This Privacy Policy applies to all personal data processed by bb98 in connection with your use of the platform, including data collected through the bb98 website, mobile-optimised site, progressive web application, customer support channels, and any other bb98-operated service or communication channel.

bb98 collects personal data across several categories depending on your interaction with the platform. The table below sets out the categories of personal data we collect, with examples of the specific data types within each category.

bb98 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) from players. If you voluntarily share such information with our support team, it will be handled with heightened care and used only to address your specific enquiry.

bb98 collects personal data through the following means:

3.1 Directly from You

The majority of personal data held by bb98 is provided directly by you — during account registration, during the KYC verification process, when you make a deposit or withdrawal, when you contact the bb98 support team via live chat, or when you voluntarily update your account preferences or responsible gaming settings.

3.2 Automatically

When you visit or interact with the bb98 platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser type, operating system, session timing data, and navigation behaviour on the platform. This data is collected using server logs, session tracking, and cookies (see Section 8 — Cookies & Tracking).

3.3 From Third Parties

bb98 may receive limited personal data from third-party sources in the following circumstances:

• From payment processors (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank) in connection with deposit and withdrawal transactions — typically consisting of a transaction reference and confirmation of successful or failed payment.
• From identity verification service providers engaged by bb98 to assist with KYC document checks.
• From fraud prevention and anti-money-laundering screening services that bb98 uses to comply with its obligations under its international gaming license.

bb98 processes personal data for the following specific purposes. Each purpose is linked to a legal basis (see Section 5).

• Account creation and management: To register your bb98 account, maintain your account profile, process your login, and manage your account preferences and responsible gaming settings.
• Identity verification (KYC): To verify that you meet the bb98 eligibility criteria — particularly the 21+ age requirement — and to comply with our obligations under bb98's international gaming license.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, Raast, 1LINK, and bank transfer, and to process withdrawal requests to your nominated payment method.
• Game and betting services: To provide access to the bb98 game library and sports betting markets, to record game session data, and to settle bets and credit winnings accurately.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct that would breach our Terms and Conditions or our regulatory obligations.
• Responsible gaming: To apply and enforce responsible gaming limits and self-exclusion settings that you have established on your account, and to identify patterns of play that may indicate problem gambling behaviours.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through the bb98 live chat support function.
• Legal and regulatory compliance: To meet bb98's obligations under its international gaming license, including record-keeping, audit trail maintenance, and reporting obligations.
• Service improvements: To analyse aggregated, anonymised platform usage data to identify and address technical issues, improve the user experience, and optimise the bb98 platform for Pakistani players.
• Direct communications: To send you account-related notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about bb98 offers and promotions.

bb98 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Agreement between you and bb98 — including account management, payment processing, and game service delivery.
• Legal obligation: Processing required to comply with applicable law and regulatory requirements, including anti-money laundering obligations, identity verification mandates, and record-keeping requirements under bb98's gaming license.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional communications — such as promotional emails or marketing messages about bb98 offers — where you have freely given explicit consent. You may withdraw this consent at any time by contacting bb98 support.

bb98 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following specific, controlled circumstances:

6.1 Payment Processors

bb98 shares transaction-related data with payment processors — including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank — as necessary to process your deposit and withdrawal requests. These processors receive only the data required to complete the transaction and are bound by their own applicable data protection obligations.

6.2 Identity Verification Providers

bb98 may share CNIC and other KYC documentation with third-party identity verification service providers engaged to assist with the KYC process. These providers act as data processors under contract with bb98 and are prohibited from using your data for any purpose beyond the verification task.

6.3 Regulatory Authorities

bb98 may be required by its international gaming license to disclose certain player data to the relevant licensing regulatory body upon request. bb98 may also be required to report certain financial transactions to anti-money laundering authorities. Such disclosures are made only where legally required.

6.4 Fraud Prevention and AML Services

bb98 uses specialist fraud prevention and anti-money laundering screening services. Limited data — such as IP address, device fingerprint, and transaction patterns — may be shared with these services for the purpose of detecting and preventing prohibited activity.

6.5 Corporate Transactions

In the event of a merger, acquisition, sale of assets, or restructuring involving bb98, personal data held by bb98 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects the handling of your personal data.

bb98 is required under its international gaming license to verify the identity of all players before processing withdrawal requests. The KYC process at bb98 involves the collection and verification of your Pakistani CNIC (Computerised National Identity Card) as the primary identity document.

Additional documentation may be requested in specific circumstances, including:

• Proof of address (such as a utility bill or bank statement issued in Pakistan within the past three months).
• Proof of payment method ownership — for example, a screenshot confirming ownership of the JazzCash or EasyPaisa account used to deposit.
• Source of funds documentation where required by bb98's AML obligations.

KYC documents are submitted securely through the bb98 platform and are stored with access controls appropriate for sensitive identity documentation. bb98 personnel authorised to access KYC documents are limited to those with a direct operational need — specifically, the compliance and payments teams.

bb98 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve the user experience. A cookie is a small data file stored on your device by your web browser.

8.1 Types of Cookies Used by bb98

• Essential cookies: Required for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Used to remember your preferences — such as language settings and responsible gaming limit configurations — so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the bb98 platform — including which pages are visited most frequently and where technical errors occur. This data is used solely to improve the platform and is not linked to individual player identities.

You can control non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, and Safari on Android and iOS — allow you to view, manage, and delete cookies. Note that disabling essential cookies will prevent you from logging into your bb98 account.

bb98 implements technical and organisational security measures appropriate to the nature of the personal data we hold, including:

• SSL/TLS encryption of all data transmitted between your device and bb98 servers — applicable whether you are using Wi-Fi, Jazz 4G, Zong, Telenor, or Ufone mobile data in Pakistan.
• Encryption of sensitive data at rest, including passwords (stored as salted cryptographic hashes — never in plain text) and KYC documentation.
• Role-based access controls restricting access to personal data to authorised bb98 personnel with a documented operational need.
• Regular security assessments and monitoring of the bb98 platform infrastructure.
• Automatic session timeout for inactive authenticated sessions to reduce the risk of unauthorised account access.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bb98 will notify the affected players within a reasonable timeframe and will take immediate steps to contain and remediate the breach in accordance with our obligations under bb98's licensing framework.

bb98 retains personal data for as long as is necessary for the purpose for which it was collected, or as required to meet legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered bb98 account and for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements applicable under bb98's gaming license.
• KYC documentation: Retained for a minimum of five years following the completion of the verification process, in line with applicable regulatory requirements.
• Transaction records: Retained for a minimum of five years following the transaction date.
• Support communications: Retained for a minimum of three years following the date of the communication, or for the duration required to resolve any associated dispute.
• Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Raw technical logs (including IP logs) are retained for up to 12 months.

When personal data is no longer required, bb98 will securely delete or irreversibly anonymise it so that it can no longer be linked to you as an individual.

Subject to applicable law and the terms of bb98's regulatory obligations, you hold the following rights in relation to your personal data held by bb98. You may exercise any of these rights by contacting bb98 support via the live chat function. We will respond within 30 calendar days of receiving a valid request.

If bb98 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a fraudulent registration or any other means — we will immediately close the relevant account, delete the associated personal data (subject to any mandatory regulatory retention obligations), and forfeit any funds in the account in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor in your household has registered for or accessed the bb98 platform, please contact the bb98 support team immediately via live chat so that we can investigate and take appropriate action.

bb98 operates as an international online gaming platform. As a result, personal data collected from Pakistani players may be processed on servers or by processors located outside of Pakistan. This may include data centres and identity verification processors located in jurisdictions other than Pakistan.

Where personal data is transferred internationally, bb98 ensures that appropriate safeguards are in place to protect your data. These safeguards may include contractual protections (such as standard data protection clauses in agreements with processors) and, where applicable, processing in jurisdictions that maintain adequate data protection standards recognised under bb98's licensing framework.

By registering for and using the bb98 platform, you acknowledge and consent to your personal data being transferred and processed internationally in the manner described in this Privacy Policy.

bb98 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made to how we process your personal data, bb98 will provide reasonable notice — typically through a notice displayed on the platform or a notification to the contact details registered on your account — before the change takes effect.

The "Last Updated" date at the top of this Privacy Policy reflects the date on which the most recent revision was made. The current version of this Privacy Policy is always accessible at bb98.bid/privacy-policy.

Your continued use of the bb98 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to any update, you should cease using the platform and may request account closure through the bb98 support team.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to make a complaint about bb98's handling of your personal data, please contact the bb98 support team using the details below.

bb98 will acknowledge privacy-related enquiries within 48 hours and will endeavour to resolve complaints within 30 calendar days. Where a complaint cannot be resolved through the support team, you may have the right to escalate to the relevant regulatory authority under bb98's gaming license — details of the escalation process are available on request.

For responsible gaming enquiries — including requests to set deposit limits, activate self-exclusion, or access problem gambling resources — please visit the bb98 Responsible Gaming page. For the full legal terms governing your bb98 account, please read our Terms & Conditions.