b9game Privacy Policy — Your Data, Your Rights, Our Obligations

b9game is committed to protecting the personal data of every player and visitor who interacts with the b9game platform. This Privacy Policy describes how b9game collects, processes, stores, shares, and protects personal information in connection with the operation of the b9game online casino and sports betting platform, accessible at b9game.vu and its associated sub-domains.

This Policy applies to all individuals who: (a) register or hold a b9game player account; (b) visit the b9game website without registering; (c) contact b9game via live chat, email, or other support channels; or (d) participate in any b9game promotion, tournament, or bonus programme.

This Privacy Policy is incorporated into and must be read alongside b9game's Terms & Conditions. By registering an account or using the Platform, you confirm your acceptance of this Policy.

For the purposes of this Privacy Policy, b9game acts as the Data Controller with respect to all personal data collected through the Platform. As Data Controller, b9game determines the purposes for which and the means by which personal data is processed.

b9game operates under an international gaming authority licence. The licensing jurisdiction's data protection framework applies to all processing activities. Where b9game engages third-party data processors — such as payment gateways, game providers, or identity verification services — those parties act as Data Processors and are subject to contractual data protection obligations imposed by b9game.

For all data protection enquiries, requests, and complaints, players may contact b9game's designated data protection point of contact at support@b9game.vu with the subject line "Data Protection Request."

b9game collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration & Identity Data

Collected when you create a b9game account or complete KYC verification:

• Full legal name (as per CNIC or passport)
• Date of birth
• Registered Pakistani mobile telephone number
• Email address (where provided)
• National Identity Card (CNIC) number and copies of CNIC or passport (for KYC)
• Residential address (where required for KYC)
• Selfie or other biometric verification image (where required)

3.2 Financial & Transaction Data

Collected when you make deposits or withdrawals through b9game:

• JazzCash or EasyPaisa wallet account details (mobile number, transaction reference)
• Bank account details (for HBL, UBL, Meezan Bank, or other bank transfers)
• Raast ID or 1LINK transaction references
• Transaction amounts, timestamps, and reference numbers
• PKR balance history and wagering records

3.3 Gaming Activity Data

• Games played, bet amounts, win and loss records, session durations
• Sports betting selections, market types, odds, and settlement records
• Bonus usage, wagering requirement completion, and promotional participation
• Self-imposed limit settings and responsible gaming tool usage

3.4 Technical & Device Data

• IP address and general geographic location derived therefrom
• Device type, operating system, and browser type and version
• Session timestamps, login frequency, and session duration
• Cookie identifiers and similar tracking data (see Section 11)
• Pakistani mobile network operator (where determinable from device data)

3.5 Communication Data

• Content of live chat conversations with b9game support agents
• Email correspondence submitted to support@b9game.vu
• Any information voluntarily submitted through account settings or feedback forms

b9game collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or update your account settings.
• Automatically during platform use — through cookies, session tracking, server logs, and device fingerprinting technologies that operate when you access the b9game website or game lobby.
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK may share transaction confirmation data with b9game for payment reconciliation and fraud prevention purposes.
• From identity verification providers — b9game may engage third-party KYC service providers who validate identity documents and conduct database checks to fulfil age and identity verification obligations under our gaming license.
• From fraud prevention and AML screening services — b9game may use third-party databases to screen accounts against politically exposed person (PEP) lists, sanctions lists, and other compliance databases.

b9game uses the personal data it collects for the following purposes:

b9game processes personal data on the following legal bases, consistent with applicable data protection frameworks:

• Contract Performance: Processing is necessary to perform the contract between you and b9game — meaning the account registration, gaming services, and payment processing required to provide the platform to you as a registered Pakistani player.
• Legal Obligation: b9game is required to process certain data to comply with legal and regulatory requirements, including KYC and age verification under our gaming licence, AML and counter-terrorism financing obligations, and mandatory reporting to licensing authorities.
• Legitimate Interest: b9game processes certain data — including fraud detection, platform analytics, and responsible gaming monitoring — where it has a legitimate business interest in doing so, provided that interest does not override your fundamental data protection rights.
• Consent: Where b9game relies on your consent as a legal basis — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. See Section 13 for details.

b9game shares personal data with the following categories of third parties:

7.1 Payment Processors

b9game shares transaction data with Pakistani payment providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — for the processing of deposits and withdrawals. These providers receive only the transaction data necessary to process individual payments. All payment processor relationships are governed by data processing agreements.

7.2 Game Providers

Third-party game studios and live casino providers (including but not limited to Pragmatic Play, Evolution Gaming, and NetEnt) may receive a limited player identifier and session token necessary to initialise game sessions. These providers do not receive your full identity or financial data. Game providers operate under contractual obligations that restrict their use of player data.

7.3 KYC & Identity Verification Providers

b9game engages specialist KYC service providers to assist with age verification, identity document validation, and sanctions screening. These providers receive identity data only to the extent necessary to perform verification services and are prohibited from using that data for any other purpose.

7.4 Fraud Prevention & AML Services

b9game may share account and transaction data with fraud intelligence platforms and AML screening databases for the purpose of detecting financial crime. This processing is a legal obligation under our licensing requirements.

7.5 Regulatory Authorities

b9game is required to disclose player account and transaction data to our licensing regulatory authority upon request and to law enforcement agencies where required by a valid legal order. b9game cannot decline legally mandated disclosures.

7.6 IT & Infrastructure Providers

Hosting, cloud infrastructure, and customer relationship management providers may process personal data on behalf of b9game in a data processor capacity. All such providers are subject to contractual data protection obligations and security requirements.

b9game is an international platform and some of the third-party service providers it uses — including game providers, hosting infrastructure, and KYC services — may be located in countries outside Pakistan. Personal data transferred to such third parties is protected by appropriate safeguards, including contractual data protection clauses that require the recipient to process data to a standard consistent with our licensing authority's requirements.

Where personal data is transferred to a jurisdiction without an equivalent level of data protection, b9game ensures such transfers are conducted under Standard Contractual Clauses or equivalent mechanisms that contractually bind the receiving party to protect your data. Pakistani players whose data is transferred internationally retain the same rights under this Privacy Policy as those whose data remains within Pakistan.

b9game retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our gaming licence obligations. The following retention periods apply as general guidelines:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised. Where anonymisation is used, the resulting data (which no longer identifies any individual) may be retained indefinitely for statistical and analytical purposes.

b9game implements technical and organisational security measures proportionate to the sensitivity of the personal data processed and the risks associated with online gaming platforms. These measures include:

• Encryption in transit: All data transmitted between your device and b9game servers is encrypted using TLS 1.2 or higher (HTTPS). This applies to all login sessions, payment transactions, game communications, and support chat interactions.
• Encryption at rest: Sensitive personal data stored in b9game databases — including identity documents, payment details, and passwords — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Personal data is accessible only to b9game employees and contractors who have a legitimate operational need. Access is governed by role-based permissions, mandatory multi-factor authentication, and comprehensive access logging.
• Password security: Account passwords are stored as salted cryptographic hashes. b9game does not have access to the plain-text form of your password.
• Penetration testing: b9game's platform undergoes regular third-party security testing to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights, b9game will notify affected users via their registered Pakistani mobile number or email within 72 hours of becoming aware of the breach, where technically feasible.

b9game uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you access a website. b9game uses the following types of cookies:

11.1 Strictly Necessary Cookies

These cookies are essential for the b9game platform to function. They enable secure login sessions, maintain your game state, and facilitate payment processing. These cookies cannot be disabled without affecting platform functionality.

11.2 Functional Cookies

Functional cookies remember your preferences — such as language settings and display configurations — to provide a more personalised experience during your b9game sessions. These cookies do not track you across external sites.

11.3 Analytics Cookies

b9game uses anonymised analytics data to understand how Pakistani players use the platform — which game categories are most popular, average session lengths, and navigation patterns. This data is aggregated and used only to improve the platform. Personally identifiable information is not used in analytics processing.

11.4 Anti-Fraud Tracking

b9game employs device fingerprinting and session analytics specifically to detect and prevent fraudulent activity — including duplicate account creation and automated bot usage. This tracking is necessary for the integrity of the platform and the protection of all players.

You may adjust your browser settings to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from accessing your b9game account. Most Pakistani mobile browsers (Chrome, Safari, Firefox) allow you to manage cookie preferences in the browser settings menu.

As a data subject, you have the following rights with respect to personal data held by b9game. These rights may be subject to limitations where legal obligations require b9game to retain or process certain data regardless of your request.

To exercise any of these rights, submit a written request to support@b9game.vu with the subject line "Data Rights Request" and include your full name, registered Pakistani mobile number, and a description of the right you wish to exercise. b9game may request identity verification before processing data rights requests. Requests will be acknowledged within 5 business days and responded to within 30 calendar days.

b9game sends marketing communications — including promotional offers, bonus notifications, free spin alerts, and PSL cricket betting market updates — only to players who have provided their explicit consent to receive such communications at the time of registration or subsequently through account settings.

Marketing communications are sent via SMS to your registered Pakistani mobile number and, where you have provided it, to your email address. You may withdraw your marketing consent at any time through the following channels:

• Via your b9game account settings (Marketing Preferences section)
• By replying STOP to any SMS marketing message
• By contacting live support and requesting opt-out
• By emailing support@b9game.vu with the subject "Unsubscribe"

Opt-out requests are processed within 48 hours. Withdrawing marketing consent does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent regardless of marketing preferences as they are necessary for account management.

Age verification is conducted as part of the account registration process and may be required again at any point during the account lifecycle. Where b9game has reasonable grounds to believe that a registered user is below the minimum age, the account will be immediately suspended, personal data will be reviewed, and the account and any associated data will be deleted or blocked without retention beyond what is legally required to document the incident.

If you are a parent or guardian and believe that a minor in your care has registered a b9game account, please contact our support team immediately at support@b9game.vu. We will investigate and take appropriate action within 24 hours of receiving your notification.

b9game is subject to anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under the terms of its international gaming licence. These obligations require b9game to:

• Collect and verify the identity of all registered players before processing withdrawals
• Monitor player transactions for unusual patterns that may indicate financial crime
• Screen players and beneficial owners against PEP (Politically Exposed Person) and international sanctions lists
• Report suspicious transactions to competent authorities where legally required — without notifying the subject of such a report ("tipping off" prohibition)
• Retain transaction and identity records for the minimum periods prescribed by our licensing jurisdiction

b9game cannot provide details of specific AML reports it has made or is considering making, as doing so may constitute a criminal offence under applicable tipping-off provisions. If your account is subject to enhanced due diligence or transaction monitoring, b9game may ask you to provide additional documentation as part of a compliance review.

b9game reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or our licensing obligations. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Where changes to this Policy are material — meaning they affect your rights or meaningfully change how b9game processes your personal data — b9game will notify you via SMS to your registered Pakistani mobile number at least fourteen (14) days before the changes take effect. For non-material changes (such as clarifications or corrections), b9game may update the Policy with immediate effect.

Continued use of the b9game Platform following notification of a Policy update constitutes your acceptance of the revised Policy. If you do not accept the updated terms, you may close your account as described in b9game's Terms & Conditions.

For all privacy-related queries, data rights requests, and complaints, please contact b9game through the following channels:

• Email: support@b9game.vu (Subject line: "Data Protection Request" or "Privacy Complaint")
• Live Chat: Available 24/7 within your logged-in b9game account, in English and Urdu

b9game will acknowledge data protection requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, b9game may extend the response period by a further 30 days, in which case you will be notified of the extension and the reason for it.