bt939 Privacy Policy — Your Data, Your Rights

bt939 is an online gaming platform operated exclusively for Pakistani players. When this Privacy Policy refers to "bt939", "we", "us", or "our", it means the operating entity behind the bt939 platform accessible at bt939.biz.

bt939 acts as the data controller for all personal information collected through the platform. That means we are responsible for deciding what data is collected, how it is used, and how long it is kept. If you have any question about how bt939 handles your data, the contact details are at the end of this policy in Section 14.

This Privacy Policy applies to all registered bt939 players in Pakistan, visitors to the bt939 website, and anyone who contacts bt939 support. It covers data collected through the website, mobile browser access, and any bt939 applications.

bt939 collects only the information that is genuinely needed to operate the platform, verify player identity, process payments, and comply with applicable legal obligations. We do not collect data for its own sake.

bt939 does not collect sensitive personal data such as biometric information, racial or ethnic origin, religious beliefs, or health information — except where a player voluntarily discloses a health-related reason for activating responsible gaming tools, in which case this is treated with the highest level of confidentiality.

bt939 collects your personal data through the following channels:

• Direct from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to a survey.
• Automatically: Technical data and usage data are collected automatically when you access bt939 using cookies, server logs, and analytics tools. This data does not identify you personally on its own.
• From payment providers: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, we receive confirmation data from the payment provider to verify and record the transaction.
• From identity verification services: bt939 may use third-party KYC providers to verify your CNIC details. These providers confirm identity data but do not retain your documents on bt939's behalf.
• From fraud prevention services: Technical data is cross-referenced with fraud prevention databases to protect all bt939 players from account takeovers and financial crime.

bt939 does not purchase data from marketing companies or data brokers, and does not source personal data from social media platforms without your explicit action (such as choosing a social login option if available).

Every piece of data bt939 collects has a specific purpose. Below is an honest breakdown of how your data is used:

• Running your account: Name, mobile number, and date of birth are needed to create, verify, and maintain your bt939 player account. Without this, the service cannot function.
• Processing transactions: Financial data is required to accept deposits and pay out withdrawals in PKR via your chosen payment method. bt939 cannot process a JazzCash withdrawal without a reference to your account.
• Identity verification (KYC): CNIC details are used to verify that you are who you say you are, that you are over 18, and that you are not on a self-exclusion list. This protects you and complies with anti-fraud obligations.
• Fraud prevention and security: Technical data including IP address and device identifiers helps bt939 detect suspicious activity, prevent account takeovers, and identify multiple accounts registered by the same person.
• Personalisation: Usage data helps bt939 understand which features Pakistani players use most and least, so we can improve the platform. bt939 does not build invasive behavioural profiles for commercial purposes.
• Support and dispute resolution: Communications data from support interactions is retained so that if a complaint or dispute is raised later, there is an accurate record of what was discussed and agreed.
• Responsible gaming monitoring: Transaction and gaming history is used to identify patterns that may indicate a player is experiencing harm, so that bt939 can proactively offer responsible gaming tools where appropriate.
• Legal compliance: bt939 may be required to retain or disclose certain data in response to a lawful request from a regulatory or law enforcement authority.
• Marketing communications: With your consent, bt939 may send you information about promotions, bonuses, and new games. You can withdraw this consent at any time. See Section 12.

bt939 processes your personal data based on one or more of the following legal grounds depending on the specific use:

• Contract performance: Processing your registration data, payment data, and transaction history is necessary to provide the bt939 service you have signed up for. Without this processing, bt939 cannot operate your account.
• Legal obligation: Identity verification, age verification, anti-money laundering checks, and record retention are required by applicable legal and regulatory obligations. bt939 must perform these activities regardless of your preferences.
• Legitimate interests: Fraud prevention, platform security, technical data logging, and responsible gaming monitoring are carried out based on bt939's legitimate interest in protecting players and the integrity of the platform.
• Consent: Marketing communications, optional analytics cookies, and personalisation beyond what is strictly necessary are processed only where you have given explicit, freely withdrawable consent.

bt939 does not sell, rent, or trade your personal data to any third party. Period. Data is shared only in the following limited circumstances and only to the extent strictly necessary:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive only the transaction data they need to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services used to verify your CNIC details receive the minimum data needed to perform verification. These providers are contractually bound to handle your data securely and only for the verification purpose.
• Fraud prevention services: Technical and identity data may be cross-referenced with industry fraud prevention databases. These providers process data strictly to identify and prevent fraud.
• Regulatory and law enforcement authorities: bt939 will disclose data to competent authorities when required to do so by a valid legal process. bt939 will notify you of such a disclosure unless prohibited from doing so by law.
• Technology service providers: Hosting, cloud infrastructure, and analytics providers may process technical data on bt939's behalf. These providers are bound by strict data processing agreements and are not permitted to use bt939 player data for their own purposes.

bt939 uses cookies and similar technologies to keep the platform running smoothly and to understand how players use it. Here is a plain breakdown of what we use and why:

Essential cookies cannot be disabled as they are required for the platform to function. Analytics and preference cookies are only set where you have provided consent through the cookie banner shown on your first visit. You can review and update your cookie preferences at any time through your browser settings or by contacting support.

bt939 does not use third-party advertising cookies or tracking pixels that share your behaviour data with advertising networks.

bt939 takes the security of your personal data seriously. We employ technical and organisational measures appropriate to the risk, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bt939 servers. The padlock icon in your browser confirms this is active.
• Encrypted data storage — sensitive data including financial information and identity documents is stored in encrypted form at rest.
• Access controls — bt939 staff access to player data is restricted on a strict need-to-know basis. Not all staff have access to all data categories.
• Regular security reviews — bt939 conducts periodic security assessments of its infrastructure and third-party integrations.
• Fraud monitoring — automated systems monitor for unusual patterns that may indicate a data breach or account compromise.
• Segregated fund accounts — player PKR balances are held in accounts separate from bt939's operational funds.

No security system is impenetrable. In the unlikely event of a data breach that poses a risk to your rights, bt939 will notify affected players promptly and take immediate remediation steps.

bt939 retains your personal data for as long as your account is active and for a period after closure as required by applicable legal, regulatory, and anti-money laundering obligations. Here is a practical guide to our retention periods:

• Active account data: Retained for the duration your bt939 account is open.
• Transaction and bet records: Retained for a minimum of 5 years after the transaction date, in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support communications: Retained for 3 years from the date of the last interaction, in case a complaint or dispute arises later.
• Technical and usage logs: Anonymised after 12 months. IP address records retained for up to 24 months for fraud investigation purposes.
• Responsible gaming records: Self-exclusion status is retained for the duration of the exclusion plus 5 years, to prevent premature re-registration.
• Marketing consent records: Retained while consent is active and for 2 years after withdrawal, as a record that consent was properly obtained and withdrawn.

Once retention periods expire, data is securely deleted or irreversibly anonymised. bt939 does not retain data "just in case" — there must be a lawful basis for continued retention.

As a bt939 player, you have the following rights regarding your personal data. You can exercise any of these rights by contacting support@bt939.biz. bt939 will respond within 30 days.

Exercising any of these rights will not affect your ability to use bt939 except where the exercise makes it technically impossible to continue providing the service (for example, deleting account data required for login).

bt939 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age is verified during the registration process, and additional KYC checks may be triggered at any point.

If bt939 discovers that a player under 18 has registered an account, the account will be immediately suspended, all deposits returned (net of any bonuses utilised), and all winnings forfeited. Any personal data collected from an underage player will be deleted promptly except where retention is required by legal obligation.

bt939 may send you promotional communications about bonuses, new games, PSL season offers, and platform updates. These communications are sent only where you have given explicit consent during registration or at a later point in your account settings.

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email or SMS.
• Updating your notification preferences in your bt939 account settings.
• Contacting support at support@bt939.biz and requesting removal from the marketing list.

Opting out of marketing will not affect essential communications — bt939 will still send you transaction confirmations, security alerts, account notifications, and responsible gaming messages regardless of your marketing preference. These are part of running your account, not marketing.

bt939 does not engage in cold calling or send unsolicited WhatsApp messages. If you receive a communication purportedly from bt939 through an unofficial channel, treat it with caution and contact support to verify.

bt939 may update this Privacy Policy from time to time to reflect changes in our data practices, new platform features, or evolving legal requirements. When material changes are made, bt939 will notify registered players by email or through a prominent notice on the platform at least 7 days before the updated policy takes effect.

The effective date displayed at the top of this page always reflects the date of the most recent revision. We encourage you to review this page periodically. Continued use of bt939 after an updated policy takes effect constitutes acceptance of the revised terms.

We will not reduce your rights under this Privacy Policy without explicit notice and, where required, renewed consent.

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how bt939 has handled your personal information, the easiest way to reach us is:

• Email: support@bt939.biz
• Language: Urdu or English — your choice
• Response time: Within 2 business days for privacy queries; within 30 days for formal data rights requests

bt939 takes privacy complaints seriously. If you raise a concern, we will investigate it thoroughly and get back to you with a clear response. If you are unsatisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.