Privacy Policy — How b9apk Protects Your Data

1 Who We Are

b9apk (referred to throughout this policy as "b9apk", "we", "us", or "our") is an internationally licensed online casino and sports betting platform operating under a licence issued by the International Gaming Authority. b9apk is designed and operated specifically to serve the Pakistani market, offering casino games, sports betting (including PSL cricket and international matches), and related entertainment services in Pakistani Rupees (PKR).

This Privacy Policy applies to all personal data processed by b9apk in connection with your use of the b9apk website, mobile-optimised web application, and all related services (collectively, the "Platform"). It applies regardless of whether you are a registered User, a visitor browsing the Platform without an account, or someone who has contacted our support team.

b9apk is the data controller in respect of the personal data described in this policy. This means we determine the purposes and means by which your personal data is processed. If you have any questions about this policy or about how b9apk handles your data, please refer to Section 14 for our contact details.

2 Data We Collect

b9apk collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are set out below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records (other than self-exclusion data relevant to responsible gaming), or biometric data. If any such data is incidentally received, it will be deleted promptly.

3 How We Collect Your Data

b9apk collects personal data through the following channels:

• Direct interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion. This includes the identity, contact, and financial data described in Section 2.
• Automated technologies: As you interact with the Platform, we automatically collect technical and usage data using cookies, server logs, and similar tracking technologies. Please see Section 8 for full details of our cookie practices.
• Payment providers: When you make a transaction via EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, or Mastercard, we receive confirmation data from those payment processors to verify that your transaction has completed successfully.
• KYC and identity verification services: In order to comply with our anti-money laundering (AML) obligations, we may use third-party identity verification partners to cross-check the documents you submit. These partners may return a verification result to b9apk along with data extracted from the documents provided.
• Fraud prevention agencies: We may receive data from third-party fraud detection services that flag suspicious account activity, duplicate accounts, or high-risk IP addresses.
• Publicly available sources: In limited circumstances, such as during enhanced due diligence on high-value accounts, we may consult publicly available sources such as sanction lists or politically exposed persons (PEP) databases.

4 How We Use Your Data

b9apk uses your personal data for the following purposes. In each case, the use is limited to what is necessary and proportionate to the stated purpose:

• Account creation and management: To register your b9apk account, authenticate your identity at login, and manage your account settings and preferences.
• Service delivery: To provide access to casino games, sports betting markets (including PSL cricket, international T20s, and live casino), and all other platform features you have opted to use.
• Payment processing: To process deposits and withdrawals in PKR via EasyPaisa, JazzCash, and partner banks, and to maintain accurate transaction records for your account statement.
• KYC and AML compliance: To verify your identity, confirm the source of your funds where required, and fulfil our obligations under applicable anti-money laundering regulations. Without this processing, we cannot legally permit you to withdraw funds.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to enforce any deposit, loss, or session limits you have set, and to administer self-exclusion requests. This processing is essential to our duty of care toward Pakistani players.
• Customer support: To respond to your enquiries, resolve account disputes, and maintain a record of support interactions for quality assurance purposes.
• Security and fraud prevention: To detect and prevent unauthorised access to accounts, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.
• Platform improvement: To analyse aggregated usage data, identify bugs, improve game selection, and optimise the user experience for Pakistani players on both mobile and desktop devices.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games or PSL betting markets — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
• Legal compliance: To comply with applicable laws, court orders, regulatory directions, and our international gaming licence obligations.

5 Legal Basis for Processing

b9apk processes your personal data only where a valid legal basis exists. The legal bases we rely on are as follows:

• Contract performance: Processing that is necessary to fulfil our obligations to you under the b9apk Terms and Conditions — including account management, service delivery, and payment processing — is carried out on the basis that it is required to perform a contract with you.
• Legal obligation: Processing for KYC verification, AML compliance, responsible gaming obligations, and record-keeping is carried out because b9apk is legally required to do so under the terms of its international gaming licence.
• Legitimate interests: Processing for fraud prevention, platform security, multi-account detection, and general platform improvement is carried out on the basis of b9apk's legitimate business interest in operating a secure and fair gaming environment. We conduct a balancing test to ensure that our interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications (promotional emails, bonus offers, PSL betting news) is carried out only where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

b9apk does not sell your personal data. We share personal data with third parties only in the circumstances described below, and only to the extent necessary for the specific purpose:

• Payment processors: EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. Each payment partner is bound by their own privacy policy and applicable financial data regulations.
• Identity verification providers: Third-party KYC and AML service providers receive the identity documents and data you submit for verification. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
• Fraud prevention and security services: We share technical and account data with fraud detection services to identify and prevent fraudulent activity, bonus abuse, and unauthorised account access.
• IT and infrastructure providers: Our hosting, cloud storage, and platform infrastructure providers may process your data as part of their service delivery. All such providers are bound by data processing agreements that restrict them from using your data for any purpose other than providing services to b9apk.
• Customer support tools: Our 24/7 live chat and support ticket systems are powered by third-party customer support platforms. Support interactions are stored and processed within these systems under contractual data protection obligations.
• Regulatory and law enforcement authorities: b9apk will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by applicable law, court order, or the direction of our licensing authority. We will notify you of such disclosure where we are legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of b9apk's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

7 Payments, KYC & Financial Data

Given that b9apk handles real-money transactions in PKR, financial data receives a higher level of care and protection. The following specific rules apply to the processing of payment and KYC data:

• EasyPaisa and JazzCash: When you deposit or withdraw via EasyPaisa or JazzCash, b9apk receives a transaction reference number and confirmation of the amount and status. We do not store your EasyPaisa or JazzCash PIN, OTP, or mobile wallet password. These credentials are processed entirely within the respective payment provider's secure environment.
• Bank transfers: For HBL, UBL, Meezan Bank, and Bank Alfalah transfers, b9apk receives your account title, account number, and transaction reference for the purpose of matching the transfer to your b9apk account and processing withdrawals to the correct destination. This information is stored securely and used only for payment processing and AML compliance.
• Card payments: b9apk does not store full card numbers or CVV codes. Card payment data is processed through PCI-DSS compliant payment gateways. b9apk receives only a tokenised reference sufficient to match a card to your account for withdrawal purposes.
• CNIC data: Your Computerised National Identity Card number and scan/photograph are collected solely for the purpose of age verification and identity confirmation as required by our KYC and AML obligations. CNIC data is stored in encrypted form and is accessible only to authorised compliance personnel.
• Transaction records: b9apk maintains a complete record of all deposit and withdrawal transactions on your account. These records are retained for the period specified in Section 10 and may be provided to regulatory authorities upon lawful request.

8 Cookies & Tracking Technologies

b9apk uses cookies and similar tracking technologies to operate the Platform, improve your experience, and understand how visitors interact with our services. The following types of cookies are used:

• Strictly necessary cookies: These are required for the Platform to function correctly. They maintain your login session, remember your language preference, and enable core security features. These cookies cannot be disabled without breaking key Platform functionality.
• Analytics cookies: We use anonymised analytics data to understand which pages are most visited, where users navigate from, and how the Platform performs on different devices. This data is aggregated and does not identify you personally. It helps us improve the b9apk experience for Pakistani users on all devices, from Karachi to Lahore to Faisalabad.
• Functional cookies: These remember your preferences such as display settings, your last visited game category, and whether you have dismissed certain notifications. Disabling them may reduce your convenience on the Platform but will not prevent access.
• Marketing cookies: These are used only with your explicit consent to deliver relevant promotional content and to measure the effectiveness of our marketing communications. You may withdraw consent for marketing cookies at any time via the cookie preference panel.

Most web browsers allow you to control cookies through their settings. Blocking strictly necessary cookies will impair your ability to use the b9apk Platform. For information on managing cookies in your browser, refer to your browser's help documentation.

9 Data Security

b9apk implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• TLS encryption: All data transmitted between your device and the b9apk Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). This protects your login credentials, payment data, and personal information in transit.
• Data encryption at rest: Sensitive personal data — including CNIC scans, financial account details, and KYC documents — is stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Access to personal data within b9apk's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role, and all access is logged and audited.
• Two-factor authentication (2FA): b9apk supports and encourages the use of 2FA on all player accounts to reduce the risk of unauthorised access. Internal system access by b9apk staff requires 2FA as a mandatory control.
• Regular security audits: Our platform infrastructure and application code are subject to regular internal and third-party security assessments, including penetration testing, to identify and remediate vulnerabilities.
• Incident response: b9apk maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected Users and the relevant regulatory authority within the timeframes required by applicable law.

While b9apk takes all reasonable technical and organisational measures to protect your data, no system connected to the internet can be guaranteed 100% secure. You are responsible for maintaining the security of your own account credentials. Do not share your b9apk password with anyone.

10 Data Retention

b9apk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The general retention periods we apply are as follows:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes.

11 Your Privacy Rights

b9apk respects your rights in relation to your personal data. Depending on the applicable data protection framework and your jurisdiction, you may have the following rights:

• Right of access: You have the right to request a copy of the personal data b9apk holds about you, along with information about how it is being used. We will provide this information within 30 days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details (such as your email address or phone number) directly through your account settings.
• Right to erasure: You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Please note that b9apk is required to retain certain data for the periods set out in Section 10 to comply with AML and gaming licence obligations. Where legal retention requirements apply, we cannot fulfil an erasure request in full.
• Right to restriction: You may request that b9apk restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of legitimate grounds.
• Right to object: You have the right to object to processing carried out on the basis of b9apk's legitimate interests. You also have an unconditional right to object to direct marketing processing at any time.
• Right to withdraw consent: Where b9apk processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to data portability: Where processing is based on contract or consent and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please contact our support team using the details in Section 14. We may need to verify your identity before processing your request. We will respond to all valid requests within 30 days. If we are unable to fulfil a request, we will explain the reason in writing.

12 Children's Privacy

b9apk is an adults-only platform. We do not knowingly collect, process, or store personal data from individuals under the age of 21. The b9apk Platform is strictly for users who are 21 years of age or older.

If you are under 21, you are not permitted to register an account or use the b9apk Platform in any capacity. Any account found to belong to a person under 21 will be immediately closed, all funds will be returned to the payment source after due diligence, and all personal data associated with the account will be deleted from our systems as promptly as practicable.

If you believe that a minor has registered an account on b9apk or that a minor has access to an account registered in your name, please contact our support team immediately at [email protected] so that we can take appropriate action without delay.

13 Changes to This Privacy Policy

b9apk reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or gaming licence requirements. When we make material changes, we will:

• Update the "Effective Date" at the top of this page.
• Where reasonably practicable, notify registered Users of significant changes via their registered email address or via an in-platform notification prior to the changes taking effect.
• For changes that materially affect how we use your personal data or reduce your privacy rights, provide a minimum of 14 days' advance notice before the updated policy comes into force.

Your continued use of the b9apk Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated terms, you should stop using the Platform and may request account closure as described in our Terms and Conditions.

We recommend that all b9apk users review this Privacy Policy periodically, particularly before making deposits or sharing additional personal data with the Platform.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of the rights described in Section 11, please contact our support team through the following channels:

We aim to respond to all privacy-related enquiries within 5 business days. For data subject rights requests (access, erasure, portability), please allow up to 30 days for a full response, as required under applicable data protection frameworks. We may request proof of identity before processing your request to ensure your data is not disclosed to an unauthorised party.