b9gam Privacy
Policy

1. Data Controller

For the purposes of this Privacy Policy, b9gam — the operator of the b9gam.app platform — is the data controller in respect of all personal data collected from registered users, prospective users, and visitors to the platform. b9gam operates under international gaming license standards and processes personal data in accordance with the applicable data protection framework governing its operations.

As data controller, b9gam determines the purposes for which personal data is collected, the manner in which it is processed, and the technical and organisational measures applied to protect it. All data processing activities conducted by b9gam are documented in an internal data processing register that is reviewed at minimum annually.

2. Personal Data We Collect

The personal data b9gam collects from Pakistani players and other users falls into the following categories, depending on the nature of your interaction with the platform:

b9gam does not intentionally collect sensitive personal data beyond what is required for KYC compliance (which may include identification documents that contain data such as national identity numbers). Where such data is collected for KYC purposes, it is processed solely for identity verification and regulatory compliance and is not used for any other purpose.

3. How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data b9gam holds about you is information you provide directly during account registration, the KYC verification process, cashier operations (deposits and withdrawal requests), communications with our support team, and when you configure responsible gaming tools within your account settings.

3.2 Data Collected Automatically

When you access the b9gam platform — including simply visiting the website without logging in — certain technical data is collected automatically by our systems and web analytics infrastructure. This includes your IP address (which may indicate approximate geographic location), your device type and operating system, the browser you are using, the pages you visit within the platform, the duration of your session, and the source through which you arrived at b9gam.

This technical data is collected through server logs, session tracking technologies, and the cookies described in Section 9 of this policy. It is used for platform security, fraud prevention, performance optimisation, and aggregate analytics purposes.

3.3 Data from Third-Party Verification Services

b9gam may use regulated third-party identity verification services to assist with KYC processing. These services may confirm the authenticity of identity documents provided during the KYC process and may provide additional verification signals. Such services are contracted to process data solely for b9gam's KYC purpose and are not permitted to retain or use your data independently.

3.4 Data from Payment Processors

When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, b9gam receives transaction confirmation data from the relevant payment processor. This typically includes a transaction reference number, the amount, the timestamp, and a masked version of your payment account identifier. b9gam does not receive or store complete bank account PINs or passwords.

4. Purposes of Processing

b9gam processes personal data for the following specific, documented purposes:

• Account Management: Creating, maintaining, and administering your b9gam account, including authentication, password reset, and session management.
• Service Delivery: Enabling you to place bets on cricket, PSL, baseball, UFC, and other markets; access live casino tables; play slot games; and participate in promotions.
• Payment Processing: Processing PKR deposits via JazzCash, EasyPaisa, and other supported payment channels; processing verified withdrawals; maintaining accurate account balance records.
• KYC & Identity Verification: Verifying your identity and age (minimum 21 years) in compliance with international gaming license requirements and anti-money laundering obligations.
• Fraud Prevention & Security: Detecting and preventing fraudulent transactions, account takeover attempts, money laundering, bonus abuse, and other prohibited activities.
• Regulatory Compliance: Meeting reporting obligations under applicable anti-money laundering and counter-terrorism financing regulations applicable to the jurisdiction of b9gam's gaming license.
• Responsible Gaming: Operating the deposit limit, session alert, cooling-off, and self-exclusion tools; monitoring for indicators of problem gambling behaviour; and taking appropriate protective action where warranted.
• Customer Support: Handling your queries, complaints, dispute resolution requests, and account-related communications efficiently and accurately.
• Platform Improvement: Analysing aggregate, anonymised usage data to improve platform performance, user experience, game library curation, and payment infrastructure.
• Marketing Communications (where consented): Sending you information about b9gam promotions, bonus offers, and new features via SMS or email, where you have provided consent to receive such communications.

5. Legal Basis for Processing

For each processing activity, b9gam relies on one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and b9gam — i.e., to operate your account, process your bets, and handle your deposits and withdrawals in PKR. Without this processing, b9gam cannot deliver its services to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification requirements, anti-money laundering regulations, and gaming license conditions imposed by the relevant regulatory authority.
• Legitimate Interests: Processing conducted for b9gam's legitimate business interests, including fraud detection and prevention, platform security, audit and record-keeping, and aggregate analytics — where those interests are not overridden by your privacy rights.
• Consent: Where b9gam relies on your consent as the legal basis for processing — most notably for direct marketing communications — you may withdraw that consent at any time by contacting support or via your account communication preferences.

6. Sharing Your Data

6.1 b9gam Does Not Sell Your Data

b9gam does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. This is an absolute commitment, not a conditional one.

6.2 Service Providers (Data Processors)

b9gam engages regulated third-party service providers who process personal data on b9gam's behalf under strict contractual data processing agreements. These providers are permitted to process your data only for the specific purpose for which they have been engaged and under the instructions of b9gam. Categories of service providers include:

• Identity verification and KYC processing services
• Payment processing and fraud detection infrastructure providers (including JazzCash, EasyPaisa, and banking API services)
• Encrypted data storage and cloud hosting providers
• Customer support platform providers (live chat infrastructure)
• SMS gateway providers (for OTP and account notifications)
• Third-party game studios whose certified games are available in the b9gam casino and slot library
• Security and fraud monitoring services

6.3 Regulatory and Law Enforcement Disclosures

b9gam may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or the conditions of b9gam's gaming license. Such disclosures are made only to the extent required and are not broader than the legal or regulatory obligation demands.

6.4 Business Transfers

In the event that b9gam undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by b9gam may be transferred to the acquiring entity as part of the transaction. In such an event, b9gam will provide registered users with notice via their registered contact details prior to any such transfer.

7. Data Retention

b9gam retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following general retention guidelines apply:

• Account & Registration Data: Retained for the duration of your active b9gam account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering regulatory requirements applicable to gaming operators.
• KYC / Identity Documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, in accordance with regulatory obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required for AML compliance and audit purposes.
• Betting and Gaming History: Retained for a minimum of two (2) years from the date of each wagering activity.
• Support Communications: Retained for two (2) years from the date of each communication, unless the communication relates to a dispute or legal claim, in which case it is retained until the matter is fully resolved.
• Technical / Log Data: Typically retained for ninety (90) days for routine monitoring purposes; longer where specific security incidents require extended investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it permanently unidentifiable. Anonymised and aggregated data that cannot be used to identify any individual may be retained indefinitely for analytics purposes.

8. Security Measures

b9gam applies comprehensive technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and b9gam's servers is encrypted using Transport Layer Security (TLS) with 256-bit AES encryption — the same standard used by major international financial institutions.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm such that b9gam staff cannot retrieve your actual password under any circumstances.
• Encrypted Data Storage: Personal data stored in b9gam's databases is encrypted at rest. KYC document storage uses isolated, access-controlled encrypted storage environments.
• Access Controls: Internal access to personal data is restricted to authorised staff members on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: b9gam offers optional SMS-based 2FA for all registered accounts and strongly recommends its activation. All administrative and staff accounts accessing platform infrastructure require 2FA as a mandatory control.
• Intrusion Detection & Monitoring: b9gam's infrastructure is subject to continuous security monitoring, automated intrusion detection, and regular third-party penetration testing to identify and remediate vulnerabilities.
• Data Breach Response: b9gam maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, affected users will be notified via their registered contact details as expeditiously as possible and in accordance with applicable regulatory obligations.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They serve a range of functions from keeping you logged in during a session to helping website operators understand how their platform is being used. b9gam uses cookies and similar tracking technologies on the b9gam.app platform.

9.2 Cookies b9gam Uses

• Essential Cookies: Required for the b9gam platform to function. These include session authentication cookies that keep you logged in during an active session, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies. These cannot be disabled without preventing the platform from working correctly.
• Functional Cookies: Remember your preferences such as language settings, last selected game categories, and user interface configurations. These improve your experience but are not strictly required for platform operation.
• Analytics Cookies: Used to understand how the b9gam platform is used in aggregate — which pages are visited most, where users encounter friction, and how the platform performs across different device types. Data collected through analytics cookies is aggregated and anonymised.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and bot activity.

9.3 Managing Cookies

You may configure your browser to refuse all cookies or to alert you when cookies are being set. Note that disabling essential cookies will prevent you from logging in to your b9gam account and using the platform's core features. Instructions for managing cookies are available in the help documentation of your specific browser (Chrome, Firefox, Safari, Samsung Internet, etc.).

10. Your Privacy Rights

b9gam recognises and respects your rights in relation to your personal data, subject to applicable law and any overriding regulatory retention obligations. The rights available to you include:

To exercise any of the above rights, submit your request via live chat on the b9gam platform or email [email protected] with the subject line "Privacy Rights Request." b9gam will acknowledge receipt within five (5) business days and complete the request within thirty (30) days. Identity verification may be required before any data access or deletion request is actioned.

Please note that certain rights — in particular the right to erasure — may be limited where b9gam is required by applicable AML regulation or its gaming license conditions to retain specific categories of data for defined periods. Where this is the case, b9gam will explain the specific reason for the limitation.

11. Minors & Age Policy

The b9gam platform is strictly prohibited to individuals under the age of 21. b9gam does not knowingly collect, process, or store personal data from anyone under this minimum age threshold.

b9gam encourages parents and guardians in Pakistan and elsewhere to use appropriate internet parental control tools on devices accessible to minors. If you believe a minor has registered a b9gam account, contact us immediately via live chat or at [email protected] so that we can investigate and take appropriate action without delay.

12. International Data Transfers

b9gam's platform infrastructure, including data storage servers, may be located in jurisdictions outside Pakistan. Where personal data is transferred to or processed in a country that does not maintain data protection standards equivalent to those applicable to b9gam's operations, b9gam ensures that appropriate safeguards are in place, including contractual data transfer agreements with the relevant third-party processors that impose equivalent data protection obligations.

All international transfers of personal data by b9gam are conducted solely for the purposes described in this Privacy Policy and subject to the security measures described in Section 8. b9gam does not transfer personal data to countries for purposes unrelated to the operation of the b9gam platform.

13. Third-Party Services & Game Providers

The b9gam platform integrates games from certified third-party game studios. When you launch and play a game from a third-party provider through the b9gam interface, the game software may collect certain technical and gameplay data directly. This data is subject to the privacy practices of the relevant game provider in addition to this b9gam Privacy Policy.

b9gam selects game providers that maintain internationally recognised data protection standards. However, b9gam is not responsible for the independent privacy practices of third-party game studios beyond what is covered in b9gam's contractual agreements with those providers.

This Privacy Policy applies only to the b9gam platform. If you navigate to any external website via a link (note: b9gam's policy is not to include external links within platform pages other than those necessary for regulatory or licensing compliance), the privacy practices of that external site are governed exclusively by that site's own privacy policy.

14. Changes to This Privacy Policy

b9gam reviews this Privacy Policy at minimum annually and updates it whenever there is a material change to our data practices, applicable law, or regulatory requirements. Material changes include — but are not limited to — changes to the categories of data we collect, new purposes for which existing data is processed, changes to how data is shared with third parties, or changes to user rights and how they can be exercised.

When this Privacy Policy is materially updated, b9gam will notify all registered users via the mobile number or email address registered on their account at least fourteen (14) days before the changes take effect. The notification will summarise the key changes and direct you to the updated policy on b9gam.app.

Non-material updates — such as typographical corrections, clarifications that do not change the substance of our data practices, or updates required by changes in applicable law that take immediate effect — may be made without advance notice. The "Last Updated" date at the top of this document always reflects the date of the most recent revision.

Your continued use of the b9gam platform after any update to this Privacy Policy constitutes your acceptance of the revised version. If you do not agree with the changes, you should discontinue use of b9gam and submit an account closure request as described in the Terms & Conditions.

15. Contact & Complaints

15.1 Contacting b9gam About Privacy

For any question, concern, or request related to this Privacy Policy or to your personal data as processed by b9gam, you may contact us through the following channels:

• Live Chat: Available 24/7 directly on the b9gam platform after login. Use the subject category "Privacy / Data Request" for routing to the appropriate team.
• Email: [email protected] — use the subject line "Privacy Policy Query" or "Data Subject Request" as applicable. Responses within 24 hours for general queries; within 4 hours for urgent security matters.

15.2 Raising a Complaint

If you believe that b9gam has processed your personal data in a manner inconsistent with this Privacy Policy or applicable data protection law, we strongly encourage you to first raise the matter with b9gam directly so that we have the opportunity to address your concern. b9gam takes all privacy complaints seriously and will investigate and respond within thirty (30) calendar days of a formal complaint being received.

If you remain unsatisfied following b9gam's internal complaint process, you may escalate the matter to the relevant data protection or gaming regulatory authority applicable under b9gam's operating jurisdiction.