bt939 Privacy Policy – How We Protect Your Data in Pakistan

bt939 ("bt939", "we", "us", "our") is an online betting and casino platform serving players in Pakistan and other permitted jurisdictions. The bt939 platform is accessible at https://bt939.ws and includes all associated mobile sites, sub-domains, and services offered under the bt939 brand.

For the purposes of this Privacy Policy, bt939 is the data controller — meaning we are the entity that determines why and how your personal data is processed. If you have any questions about this Privacy Policy or about how bt939 handles your data, contact us at support@bt939.ws.

This Privacy Policy applies to all visitors who browse bt939, all registered players who hold a bt939 account, and anyone who contacts bt939 support or interacts with the platform in any way. By using bt939, you acknowledge that you have read and understood this Privacy Policy.

bt939 collects personal data through several channels: directly from you when you register or use the platform, automatically through technical systems when you visit, and occasionally from third-party verification or payment services. Here is a clear breakdown of what we collect and why.

bt939 uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes beyond those listed below without first obtaining your consent or having a separate legal basis to do so.

• Account management: Creating and maintaining your bt939 account, verifying your identity and age, processing your registration, and managing account security.
• Platform services: Processing bets, running casino games, crediting winnings, and delivering all products offered on the bt939 platform.
• Payment processing: Executing deposits and withdrawals via your chosen payment method (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card), verifying payment ownership, and maintaining financial records.
• Fraud and security: Detecting and investigating suspicious account activity, preventing unauthorised access, identifying duplicate accounts, and protecting the integrity of the bt939 platform.
• Regulatory compliance: Meeting anti-money laundering (AML) obligations, maintaining transaction records as required by applicable law, and responding to lawful requests from competent authorities.
• Responsible gaming: Monitoring play patterns that may indicate problem gambling behaviour, applying player-requested limits, and complying with responsible gaming obligations.
• Customer support: Handling your enquiries, resolving disputes, and maintaining records of support interactions for quality and training purposes.
• Platform improvement: Analysing aggregated usage data (which cannot identify individual players) to improve bt939's features, fix issues, and develop new products.
• Marketing communications: Sending you information about bt939 promotions, bonuses, and new features where you have opted in or where we have a legitimate interest in doing so. You may opt out at any time.

bt939 processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contract performance: Most data processing on bt939 is necessary to deliver the service you signed up for. When you create a bt939 account, you enter into a contract with us, and processing your registration data, bets, and payments is necessary to fulfil that contract.
• Legal obligation: Certain processing — particularly identity verification, AML records, and transaction history — is required by applicable law regardless of your consent. bt939 must retain this data to comply with its legal obligations.
• Legitimate interests: bt939 has legitimate interests in preventing fraud, maintaining platform security, and improving the service we provide. We only rely on this basis where our legitimate interest is not overridden by your privacy rights.
• Consent: For optional communications such as promotional emails or SMS notifications, bt939 relies on your consent. You may withdraw consent at any time and this will not affect the processing that occurred before withdrawal.

bt939 does not sell your personal data. We do not share it with third parties for their own marketing purposes. Your data is shared only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and card payment networks receive the minimum data necessary to process your transactions. All are contractually bound to maintain strict data security standards.
• Game providers: Licensed casino and sports data providers receive anonymised session data necessary to deliver their games and odds services on the bt939 platform. They do not receive your identity or contact information unless technically necessary and consented to.
• Identity verification services: Where bt939 is required to verify your identity, we may share the minimum necessary data with a licensed identity verification provider. This data is used solely for verification and is not retained by the provider beyond the verification process.
• Fraud prevention services: Anonymised device and behavioural data may be shared with fraud detection services to protect the security of the bt939 platform and all its players.
• Regulatory and legal authorities: bt939 will disclose personal data to competent regulatory or law enforcement authorities where required to do so by law, court order, or in connection with an investigation into fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bt939's business, personal data held by bt939 may be transferred as part of that transaction. Players would be notified of any such transfer in advance.

Financial security is especially important to Pakistani players who deposit and withdraw real money on bt939. Here is how we handle payment information specifically.

When you make a deposit via Easypaisa or JazzCash, bt939 receives a transaction reference and confirmation of the amount — it does not store your full wallet credentials or PIN. For card payments processed via our payment gateway partner, full card numbers are never stored on bt939 servers; only a masked version (e.g., XXXX-XXXX-XXXX-1234) is retained for reference purposes.

All payment transaction records are retained for a minimum of five years as required for financial compliance and audit purposes. This retention is a legal obligation and cannot be reduced on individual request, though the data is secured and access-controlled throughout the retention period.

bt939 will never initiate a payment or transfer from your account without your explicit instruction through the withdrawal process. If you receive any communication claiming to be from bt939 and requesting payment details, treat it as fraudulent and contact our support team immediately.

bt939 uses cookies and similar tracking technologies to make the platform function correctly and to improve the experience for players. Below is a clear explanation of what we use and why.

• Essential cookies: Required for basic platform functionality — keeping you logged in, maintaining your session state, and processing bets. These cannot be disabled without breaking core features of bt939.
• Functional cookies: Remember your preferences such as language, odds format, and display settings so you don't have to set them each visit.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate bt939 — which pages are most visited, where sessions end, and which features are used most. This helps us improve the platform. Individual players are not identified in this analysis.
• Security cookies: Help detect unusual patterns that may indicate fraudulent or automated access to bt939.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using bt939, though some features may behave differently. bt939 does not use third-party advertising cookies or behavioural tracking cookies for external advertising purposes.

bt939 takes data security seriously and has implemented layered technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

• All data transmitted between your device and bt939 servers is protected using TLS encryption (HTTPS).
• Personal data stored on bt939 infrastructure is encrypted at rest using AES-256 or equivalent standards.
• Passwords are stored using one-way cryptographic hashing — bt939 staff cannot retrieve your password, only reset it.
• Access to personal data within bt939 is restricted on a need-to-know basis. Staff who do not require access to personal data in their role do not have it.
• bt939 conducts periodic security assessments and vulnerability testing on its infrastructure.
• All bt939 staff who handle personal data receive training on data protection obligations and security practices.

bt939 retains personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the lifetime of your bt939 account plus a minimum of 5 years after account closure.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required for financial compliance and audit obligations.
• Identity verification records: Retained for 5 years from account closure or from the date of verification, whichever is later, in line with AML regulatory requirements.
• Support communications: Retained for 2 years from the date of the interaction unless connected to an ongoing dispute or investigation.
• Technical logs: Retained for up to 12 months and then deleted or anonymised.
• Marketing consent records: Retained until you withdraw consent, plus 1 year thereafter as evidence of the consent history.

When personal data reaches the end of its retention period, bt939 securely deletes or irreversibly anonymises it so that it can no longer be linked to an identifiable individual.

As a bt939 player, you have a number of rights in relation to your personal data. bt939 respects these rights and will respond to any request within 30 days. There is no charge for exercising these rights under normal circumstances.

To exercise any of these rights, contact bt939 support at support@bt939.ws with your registered email address and the specific request. We may ask you to verify your identity before processing certain requests to protect your account security.

bt939 does not knowingly collect personal data from anyone under the age of 18. The platform is strictly for adults. During the registration process, bt939 requires users to confirm that they are 18 or over, and we conduct age verification checks on a risk-based basis.

If bt939 discovers that personal data has been collected from a minor — whether through fraudulent registration or any other means — we will immediately close the relevant account, delete the personal data of the minor, void any associated bets, and refund any real-money deposits made to the payment source from which they originated.

Parents or guardians who become aware that a minor may have registered with bt939 using their details should contact us immediately at support@bt939.ws so that we can investigate and take action promptly.

We also recommend that parents and guardians use parental control software on shared devices or devices accessible to minors to prevent underage access to online betting platforms including bt939.

bt939 may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, changes in applicable law, or feedback from players. The date at the top of this page shows when the most recent revision was made.

For minor updates — clarifications of existing practices, corrections of typographical errors, or additions of new data categories that don't change how your data is fundamentally handled — we will update the policy without direct notification.

For material updates — those that meaningfully change your rights, introduce new types of data processing, or alter how we share data with third parties — bt939 will notify registered players via email to their registered address at least 14 days before the change takes effect. You will have the option to close your account if you do not accept the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by bt939, please get in touch. We take all privacy enquiries seriously and aim to respond within 5 business days for general queries and within 30 days for formal data rights requests.

When contacting us about a data rights request, please include your registered email address and a description of the request. We will ask you to verify your identity before acting on any request that involves accessing, amending, or deleting personal data.