b939 Privacy
Policy

01 Who We Are

b939 is an online casino and sports betting platform accessible at b939.vip, operated under an international gaming licence. References to "b939", "we", "us", or "our" throughout this Privacy Policy refer to the b939 platform and its operating entity.

b939 is the data controller in respect of all personal data collected through the b939 platform. This means b939 determines the purposes and means by which your personal data is processed. Where b939 engages third-party service providers to process data on its behalf, those parties act as data processors and are contractually bound to process your data only in accordance with b939's documented instructions.

If you have any questions or concerns about how your personal data is handled, you may contact b939's data protection team at any time. Contact details are provided in Section 13 of this policy.

02 Data We Collect

b939 collects personal data in the following categories, depending on how you interact with the platform:

b939 does not collect special category data (as defined under applicable data protection frameworks) such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where expressly required by our responsible gaming obligations — for example, recording a self-exclusion request.

03 How We Use Your Data

b939 uses the personal data we collect for the following specific purposes:

• Account creation and management: To register your b939 account, verify your identity, and maintain accurate account records.
• Service delivery: To allow you to deposit funds, place bets, play casino games, participate in promotions, and withdraw winnings.
• KYC and age verification: To confirm that you meet b939's 21+ age requirement and that the identity you have provided is genuine and matches your payment methods.
• Payment processing: To initiate and reconcile deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, USDT, Raast / 1LINK, and OTC Cash.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes in accordance with applicable anti-money laundering laws.
• Responsible gaming: To monitor betting patterns and identify players who may be exhibiting signs of problem gambling, and to enforce deposit limits, cool-off periods, and self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyse usage patterns and technical performance in order to improve the b939 platform experience for all players.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive such communications and only via the channels you have opted into.
• Legal and regulatory compliance: To meet our obligations under applicable gaming, financial, and data protection regulations, and to respond to lawful requests from regulatory or law enforcement authorities.

04 Legal Basis for Processing

b939 processes your personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to perform the contract between you and b939 — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws — including KYC / AML obligations, gaming licence conditions, and responses to lawful regulatory authority requests.
• Legitimate interests: Processing carried out to pursue b939's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw this consent at any time without detriment to your account or service access.

Where b939 relies on legitimate interests as the legal basis for processing, we have conducted a balancing test to confirm that our interests do not override your fundamental rights. Documentation of these assessments is maintained internally and available to the relevant supervisory authority upon request.

05 Sharing Your Data

b939 does not sell or rent your personal data. We may share your data with the following categories of third parties only where strictly necessary and subject to appropriate contractual data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment gateway providers, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to validate your government-issued ID documents and match your selfie to your photo ID.
• Game content providers: Casino game software studios and live dealer operators whose games are made available on the b939 platform. These providers may receive limited gameplay data (e.g., player ID, session token) for the purpose of operating the game.
• Cloud infrastructure providers: b939 uses reputable cloud hosting and content delivery services to operate the platform. These providers process data on b939's behalf under data processing agreements.
• Fraud and AML screening services: Specialist third-party compliance tools used to screen transactions and player profiles for indicators of financial crime.
• Regulatory and law enforcement authorities: Where b939 is legally required to disclose information — for example, in response to a court order, regulator request, or pursuant to gaming licence obligations — we will comply with such requests and notify the affected player where permitted by law.

06 Data Retention

b939 retains personal data for defined periods based on the purpose for which it was collected and applicable legal retention requirements:

Upon expiry of the applicable retention period, b939 will securely delete or anonymise your personal data so that it can no longer be associated with you as an identifiable individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

07 Cookies & Tracking Technologies

b939 uses the following categories of cookies and similar tracking technologies when you access the platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to collect anonymised data about how players interact with the b939 platform — for example, which pages are visited most frequently and where errors occur. This data is used solely to improve platform performance.
• Functional cookies: Used to remember your platform preferences, such as language settings, display preferences, and last-visited game category, so you do not have to reconfigure them on every visit.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing attacks, and session hijacking attempts.

b939 does not use third-party advertising or retargeting cookies that track your browsing activity across websites outside of b939.vip. We do not participate in cross-site tracking networks or data management platforms that build behavioural advertising profiles.

08 Data Security

b939 implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport security: All connections to b939.vip are secured via TLS 1.3. HTTP connections are automatically redirected to HTTPS. HSTS headers are enforced to prevent protocol downgrade attacks.
• Data encryption at rest: Sensitive data — including KYC documents, payment details, and identity records — is encrypted at rest using AES-256 encryption. Encryption keys are managed via a dedicated key management service with role-based access controls.
• Password security: Player passwords are stored as salted hashes using a modern key-derivation function. b939 staff never have access to your plaintext password.
• Access controls: Access to player personal data within b939's internal systems is restricted to staff with a documented business need. All internal data access is logged and subject to periodic audit.
• Two-factor authentication: b939 supports 2FA on player accounts and mandates it for all internal staff accounts with access to personal data.
• Penetration testing: b939 conducts regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: b939 maintains a documented data breach incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, b939 will notify the relevant supervisory authority within 72 hours and will notify affected players without undue delay where required by law.

While b939 implements industry-standard security measures, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your b939 account credentials and for notifying b939 support immediately if you suspect unauthorised access to your account.

09 Your Rights

Under applicable data protection law, you have the following rights in relation to the personal data b939 holds about you. To exercise any of these rights, contact b939 support at [email protected] with the subject line "Data Subject Request". b939 will respond within 30 calendar days of receipt.

• Right of access: You may request a copy of the personal data b939 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data b939 holds about you. For basic account details such as email address or phone number, you may update these directly within your b939 account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. Note that b939 may be required to retain certain data under AML or gaming licence obligations even after an erasure request — in which case b939 will inform you of the specific legal basis for retention.
• Right to restriction of processing: You may request that b939 restrict processing of your data in certain circumstances — for example, while you contest the accuracy of the data or where you have objected to processing based on legitimate interests.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that b939 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object at any time to processing of your personal data where b939 relies on legitimate interests as the legal basis. b939 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where b939 processes your data on the basis of consent — primarily for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Children & Minors

b939 operates a strict 21+ age policy. The b939 platform is not intended for, and must not be used by, any person under the age of 21. b939 does not knowingly collect personal data from individuals under the age of 21.

Where b939 identifies or receives credible information that a user under the age of 21 has registered an account or submitted personal data, b939 will:

• Immediately suspend the account pending investigation.
• Permanently close the account upon confirmation that the player is underage.
• Void all wagers placed and forfeit all winnings generated during the period of underage use.
• Return deposited funds to the original payment method where technically feasible.
• Securely delete all personal data associated with the underage account as soon as legally permissible.

11 International Data Transfers

b939 is operated under an international gaming licence and its technical infrastructure spans multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Pakistan, including countries where the data protection laws may differ from those in Pakistan.

Where b939 transfers personal data internationally, we ensure that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all third-party processors that include standard contractual clauses or equivalent transfer mechanisms requiring the recipient to maintain the same standard of data protection as b939.
• Transfer impact assessments conducted for transfers to jurisdictions that do not offer an equivalent level of data protection to that required under our licensing framework.
• Encryption of data in transit and at rest, regardless of the jurisdiction in which it is processed or stored.

b939 does not transfer your CNIC or other Pakistani government-issued identity document data outside of the KYC verification process. Payment data shared with Pakistani payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) is processed within Pakistan's banking infrastructure in accordance with the State Bank of Pakistan's applicable data localisation requirements.

12 Updates to This Privacy Policy

b939 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our gaming licence obligations. The "Last Updated" date at the top of this document will be revised whenever a change is made.

Where changes are material — for example, where we introduce a new category of data collection, a new sharing arrangement with third parties, or a new processing purpose — b939 will notify registered players via the email address on record or via an in-platform notification at least 14 calendar days before the change takes effect.

For minor, non-material changes — such as typographical corrections, clarifications to existing provisions, or updates to contact details — b939 may update this policy with immediate effect and without prior notice.

Your continued use of the b939 platform following the effective date of any Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with the revised policy, you should close your account and cease using the platform.

13 Contact & Data Protection

If you have any questions, concerns, or complaints regarding this Privacy Policy or b939's data processing practices, or if you wish to submit a data subject request, please contact us through the following channel:

• Email: [email protected]  (plain text — not a clickable link)
• Subject line: "Privacy Policy Enquiry" or "Data Subject Request" as applicable
• Response time: b939 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 calendar days.
• Live Chat: Available 24/7 via the b939 platform for general privacy questions

If you are not satisfied with b939's response to a privacy concern or data subject request, you have the right to escalate your complaint to the relevant supervisory authority in your jurisdiction, or to the regulatory body under whose jurisdiction b939's gaming licence is issued.