b939 Privacy Policy
How We Collect, Use & Protect Your Data

b939 is the operator of the online casino and sports betting platform accessible at b939.app. b939 acts as the Data Controller in respect of all personal data collected from Players through the Platform. As Data Controller, b939 determines the purposes and means by which personal data is processed and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

b939 operates under an international gaming license issued by a recognised offshore gaming regulatory authority. Full licensing details are available on the About Us page and from the b939 support team upon written request to [email protected].

For all privacy-related enquiries, requests, and complaints, the b939 Data Protection contact is reachable at [email protected] with "Privacy" in the subject line. All privacy correspondence receives a substantive response within 30 calendar days of receipt.

This Policy applies to all personal data collected by b939 in connection with the operation of the Platform, including data collected through: (a) account registration; (b) identity verification and KYC procedures; (c) deposit and withdrawal transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, SadaPay, USDT TRC20, and Retail Cash OTC; (d) gaming activity including casino play, sports betting, and PSL wagering; (e) customer support communications; (f) marketing opt-ins and promotional participation; and (g) use of the b939 website including cookies and device data.

This Policy does not apply to data practices of third-party websites, payment processors, or game studio providers that may be linked to or integrated with the Platform. b939 is not responsible for the privacy practices of third parties and recommends that Players review the privacy policies of any third-party services they use in connection with b939.

b939 collects the following categories of personal data from Players:

The majority of personal data b939 holds about you is information you provided voluntarily at the point of registration, during the KYC verification process, when making deposits or withdrawals through the cashier, or when contacting b939 support by live chat or email. This includes your name, date of birth, Pakistani mobile number, CNIC details, and payment method information.

When you access b939.app, technical data is automatically collected about your device and connection. This includes your IP address, the type of device and browser you are using, your operating system, the pages you access, the time and duration of each session, and details of any technical errors that occur. This data is collected using cookies, server logs, and similar technologies as described in Section 8.

In certain circumstances, b939 may receive personal data about you from third parties, including: (a) identity verification and KYC service providers who cross-reference your submitted documents against national and international databases; (b) payment processors who confirm transaction details associated with your JazzCash, EasyPaisa, or bank transfer deposits; (c) anti-fraud and anti-money laundering screening services; and (d) publicly available sources including sanctions lists and Politically Exposed Persons (PEP) databases where b939 has a legal obligation to screen against these lists.

b939 processes personal data only where a valid legal basis exists. The applicable legal bases are as follows:

• Contractual Necessity: Processing required to perform the contract between you and b939 — including account management, payment processing, and provision of gaming services — is carried out on the basis of contractual necessity. Without this processing, b939 cannot provide the Platform to you.
• Legal Obligation: Processing required to comply with applicable law — including anti-money laundering (AML) compliance, KYC verification, record-keeping obligations under b939's gaming license, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for b939's legitimate business interests — including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: Processing of data for marketing communications is carried out only where you have given explicit, informed, and freely withdrawable consent. Consent for marketing can be withdrawn at any time without affecting your ability to use b939.

b939 uses collected personal data for the following purposes:

• Creating and managing your b939 Account, including login authentication and account security.
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, SadaPay, USDT TRC20, and Retail Cash OTC.
• Verifying your identity and age (21+) as required by b939's gaming license and AML compliance framework.
• Providing access to casino games, live dealer tables, slot games, table games, and sports betting markets including PSL cricket odds.
• Calculating, crediting, and managing bonus balances, wagering requirements, and VIP programme benefits.
• Monitoring gaming and financial activity for fraud, money laundering, account abuse, and other prohibited conduct as defined in the b939 Terms and Conditions.
• Operating b939's responsible gaming programme, including monitoring for signs of problem gambling behaviour and facilitating deposit limits, cooling-off periods, and self-exclusion where appropriate.
• Providing customer support via live chat and email, including handling complaints and dispute resolution.
• Sending transactional communications including deposit confirmations, withdrawal status updates, and security alerts — these are not marketing and are sent regardless of marketing opt-in status.
• Sending marketing communications including bonus offers, PSL odds promotions, and new game notifications — only to Players who have opted in to such communications.
• Complying with legal obligations under b939's gaming license, AML regulations, and any lawful requests from regulatory or law enforcement authorities.
• Improving the Platform through analysis of aggregated and anonymised usage data.

b939 does not sell, rent, or trade your personal data to third parties. Personal data is shared with third parties only in the following circumstances:

b939 shares personal data with carefully selected third-party service providers who process data on b939's behalf under strict contractual confidentiality and data security obligations. These include: payment processors facilitating JazzCash, EasyPaisa, and bank transfer transactions; KYC and identity verification service providers; independent RNG auditors; hosting and infrastructure providers; and live dealer studio operators whose games appear in the b939 live casino section.

b939 may disclose personal data to regulatory authorities, law enforcement agencies, or other governmental bodies where required to do so by applicable law, court order, or where b939 reasonably believes disclosure is necessary to prevent fraud, money laundering, or other criminal activity. b939 will notify affected Players of such disclosures where legally permitted to do so.

In the event that b939 undergoes a corporate restructuring, merger, acquisition, or sale of assets, player personal data may be transferred to the relevant successor entity as part of that transaction. Players will be notified of any such transfer and of any changes to data processing that result from it, with a reasonable opportunity to close their Account if they do not wish for their data to be processed by the successor entity.

b939.app uses cookies and similar tracking technologies to operate core Platform functionality, maintain your login session, prevent fraud, and — where you have consented — analyse usage patterns to improve the Platform experience.

You may adjust your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your b939 Account. Disabling analytical or marketing cookies does not affect your ability to use any b939 service. Most Pakistani mobile browsers (Chrome for Android, Samsung Internet, Safari on iOS) provide accessible cookie management controls in their Settings menu.

b939 retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods driven by legal and regulatory compliance requirements:

• KYC and identity verification documents: Minimum 5 years from Account closure, as required by anti-money laundering compliance frameworks applicable to b939's gaming license.
• Financial transaction records (deposits, withdrawals, wager history in PKR): Minimum 5 years from the date of each transaction.
• Account data (registration information, gaming history, support records): Duration of Account plus 3 years following Account closure.
• Marketing opt-in records: Duration of the consent period. Deleted within 30 days of withdrawal of consent or Account closure, whichever occurs first.
• Technical logs (IP addresses, session data): Up to 12 months from collection, subject to shorter retention where data is no longer needed for fraud or security investigation purposes.
• Self-exclusion records: Retained for the duration of the self-exclusion period plus 2 years to prevent re-registration during the exclusion window.

Following expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical analysis and Platform improvement purposes.

b939 recognises and respects the following data subject rights. These rights may be exercised by contacting [email protected] with "Privacy Rights Request" in the subject line, along with a description of the right you wish to exercise. b939 will respond within 30 calendar days and may request identity verification before processing the request.

b939 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed. These measures include: 256-bit SSL/TLS encryption for all data transmitted between players and b939.app; one-way cryptographic hashing of all account passwords; role-based access controls restricting internal access to personal data on a strict need-to-know basis; regular security vulnerability assessments; intrusion detection monitoring on all Platform infrastructure; and encrypted storage for KYC documents and financial records.

Despite these measures, no internet-based system can guarantee absolute security. b939 cannot warrant that data will never be compromised by events entirely outside its control, including sophisticated cyberattacks or telecommunications infrastructure failures affecting Pakistani carriers. In the event of a personal data breach that poses a risk to player rights, b939 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Players are strongly encouraged to use a strong, unique password for their b939 Account, to enable SMS two-factor authentication from Account security settings, and to avoid logging in on shared or public devices where possible. These steps significantly reduce the risk of unauthorised account access, particularly when using public Wi-Fi networks in cities like Karachi, Lahore, or Islamabad.

b939 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly restricted to adults aged 21 and over. Age verification is conducted as part of the KYC process and is a condition of withdrawal eligibility. Where b939 discovers or has reasonable grounds to suspect that a registered player is under the age of 21, the Account will be immediately suspended, all balances will be withheld pending review, and any personal data associated with the underage player will be handled in accordance with applicable child data protection requirements, including prompt deletion where no legal retention obligation applies.

If you believe that a person under the age of 21 has registered on b939 using false information, please contact b939 immediately at [email protected] with the subject line "Underage Account Report". b939 takes such reports seriously and will investigate promptly.

b939 is an internationally operated platform. Personal data collected from Pakistani players may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which b939's gaming license is issued and countries where b939's service providers (including KYC verification services and live dealer studio operators) are based. Such transfers are conducted under appropriate contractual safeguards — including standard contractual clauses or equivalent mechanisms — designed to ensure that your personal data receives protection equivalent to that described in this Policy, regardless of where it is processed.

b939 does not transfer personal data to countries or organisations that cannot provide an adequate level of data protection, and maintains a register of international transfers subject to periodic review. Players who wish to obtain information about specific transfer mechanisms in place may submit a written request to [email protected].

The b939 Platform integrates with third-party services including payment processors, live dealer studios, and slot game providers. While b939 selects service providers carefully and maintains data processing agreements with all providers who handle personal data on its behalf, b939 is not responsible for the independent privacy practices of those third parties in their own right.

b939 does not include links to external third-party websites that operate independently from the b939 Platform. However, where Players navigate away from b939.app to any third-party site or service — including mobile banking apps used for JazzCash or EasyPaisa deposits — b939 has no control over the data collection or privacy practices of those third parties. Players should review the privacy policies of their payment providers and mobile banking applications independently.

b939 reserves the right to update or revise this Privacy Policy at any time. Where changes are material — meaning they affect how personal data is used, shared, or retained in a way that impacts player rights — b939 will provide at least 14 days' advance notice by publishing the updated Policy at b939.app/privacy-policy and, where practicable, by notifying registered players via their registered email address or in-account notification.

Non-material changes (such as corrections to typographical errors, clarifications that do not alter the substance of data practices, or updates reflecting new regulatory requirements that are legally mandatory) take effect immediately upon publication. The "Last Updated" date at the top of this Policy will be revised to reflect all amendments. Continued use of the Platform following the effective date of any change constitutes acceptance of the revised Policy.

b939 recommends that Players review this Privacy Policy periodically, particularly if they have questions about how their personal data is being handled. The most current version of this Policy is always available at b939.app/privacy-policy.

For all privacy-related queries, data subject rights requests, or concerns about how b939 handles your personal data, please contact the b939 Data Protection team:

• Email: [email protected] — please include "Privacy" or "Data Request" in the subject line.
• Live Chat: Available 24/7 at b939.app. Identify your query as a "privacy matter" to the support agent for appropriate routing.
• Response Time: Privacy queries receive a substantive response within 30 calendar days. Urgent matters (such as suspected unauthorised access to your Account) are escalated and typically responded to within 4 business hours.

If you are not satisfied with b939's handling of a privacy concern after raising it directly with the b939 team, you may escalate the matter to the data protection supervisory authority in the relevant jurisdiction, or to the dispute resolution body associated with b939's gaming license. b939 will cooperate fully with any such supervisory process.