b9apk Privacy Policy — How We Handle Your Personal Data

b9apk is the trading name of the operator responsible for the online casino and sports betting platform accessible at b9apk.biz. b9apk holds an international gaming license that governs the lawful operation of our betting and gaming services and imposes binding data protection standards that we are obligated to meet and maintain.

For the purposes of this Privacy Policy, b9apk is the data controller in respect of the personal data of registered users of the b9apk platform. This means b9apk determines the purposes and means of processing your personal data, and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data rights described in Section 10 of this document, or wish to raise a data-related complaint, you may contact b9apk through the following channel:

b9apk collects personal data in several categories depending on the nature of your interaction with the platform. The following table sets out the main categories of data we process and a description of each:

b9apk collects personal data through the following sources and mechanisms:

3.1 Data You Provide Directly

The primary source of your personal data is information you provide to b9apk directly when you interact with the platform. This includes:

• Completing the b9apk account registration form — including name, Pakistani mobile number, and password creation;
• Submitting KYC verification documents — including CNIC images required before withdrawal activation;
• Making deposits or withdrawals — including providing JazzCash, EasyPaisa, or bank account details;
• Contacting b9apk customer support via live chat, email, or any other communication channel;
• Completing responsible gaming questionnaires, self-assessment tools, or self-exclusion requests;
• Responding to optional surveys or promotional participation forms on the b9apk platform.

3.2 Data Collected Automatically

When you access and use the b9apk platform, certain technical data is collected automatically by our systems without requiring you to enter anything. This includes your IP address, the type of device and browser you are using, which pages you visit within b9apk, how long you spend on each section, which games you open, and technical error logs. This automatic data collection is carried out using server logs, cookies, and similar tracking technologies described in more detail in Section 7 of this Policy.

3.3 Data from Third Parties

b9apk may receive data about you from certain trusted third parties as part of our operational processes. These sources include:

• Identity Verification Providers — third-party KYC services that cross-reference your CNIC details against authoritative databases to confirm identity and age;
• Payment Processors — JazzCash, EasyPaisa, and banking partners who confirm transaction status and flag unusual payment patterns;
• Fraud Prevention Services — specialist providers that analyse device fingerprints, IP histories, and behavioural patterns to identify fraudulent account activity;
• Responsible Gaming Databases — where required by our licensing authority, b9apk may check whether a registering individual appears on a self-exclusion register.

b9apk processes your personal data only where we have a valid legal basis to do so. The legal bases on which we rely are:

• Contractual Necessity: Processing that is necessary to perform our obligations under the b9apk user agreement — including operating your account, processing deposits and withdrawals, settling bets, and providing customer support;
• Legal Obligation: Processing required to comply with b9apk's regulatory obligations under our international gaming license — including KYC verification, AML monitoring, age verification, self-exclusion enforcement, and regulatory reporting;
• Legitimate Interests: Processing carried out for b9apk's legitimate business interests where those interests are not overridden by your data protection rights — including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring;
• Consent: Where processing is not otherwise justified by the above legal bases, b9apk will seek your specific, informed, freely given consent before processing. You may withdraw any consent given at any time by contacting b9apk's data privacy team.

b9apk processes your personal data for the following specific operational purposes:

• Account creation and management — creating, maintaining, and administering your b9apk account throughout its lifecycle;
• Identity and age verification — confirming that you are who you say you are and that you meet the 21-year minimum age requirement before enabling real-money features;
• Transaction processing — executing deposits from and withdrawals to your verified JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank account;
• Responsible gaming monitoring — identifying behavioural patterns that may indicate problem gambling, including unusual session lengths, deposit frequency changes, or self-reported concerns, to enable timely intervention;
• Fraud and security prevention — detecting and preventing duplicate accounts, bonus abuse, identity fraud, money laundering, and unauthorised account access;
• Customer support — responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance;
• Platform communications — sending you transactional messages (deposit confirmations, withdrawal updates, security alerts, OTPs) to your registered Pakistan mobile number or email address;
• Regulatory compliance and reporting — fulfilling b9apk's mandatory reporting obligations to our licensing authority, including suspicious activity reports required under AML frameworks;
• Platform improvement — using aggregated, anonymised analytical data to improve the b9apk user experience, optimise mobile performance for Pakistani device configurations, and develop new features;
• Marketing and promotions — where you have not opted out of receiving them, sending promotional communications about b9apk bonuses, PSL-season offers, new game launches, and loyalty programme updates. These communications will only ever be about b9apk — we will not use your data to market third-party products.

b9apk does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Data sharing occurs only in the following defined and necessary circumstances:

6.1 Service Providers and Processors

b9apk engages third-party service providers who process personal data on our behalf under binding data processing agreements that prohibit them from using your data for any purpose other than performing services for b9apk. These include:

• KYC and identity verification technology providers;
• Payment processing intermediaries facilitating JazzCash, EasyPaisa, and bank transfer transactions;
• Cloud hosting and infrastructure providers on whose secure servers b9apk data is stored;
• Fraud detection and device fingerprinting services;
• Customer communication platform providers (for live chat and email support systems);
• Game software providers (Pragmatic Play, PG Soft, etc.) — who receive limited session and account identifiers necessary to operate their games within b9apk.

6.2 Regulatory and Law Enforcement Authorities

b9apk will disclose personal data to our gaming licensing authority, financial intelligence units, or law enforcement agencies where we are legally required to do so — including in connection with mandatory AML suspicious activity reporting, regulatory audits, or valid legal orders. b9apk will not disclose more data than is strictly required to satisfy the applicable legal obligation.

6.3 Business Succession

In the event of a merger, acquisition, or sale of all or substantially all of b9apk's business assets, your personal data may be transferred to the successor entity as part of the transaction. b9apk will notify affected users prior to such a transfer, and the successor entity will be required to honour the commitments of this Privacy Policy or provide you with adequate notice of any changes.

b9apk uses cookies and similar tracking technologies (including web beacons and device fingerprinting techniques) to enhance platform functionality, maintain session security, and collect the analytical data needed to improve the platform. The categories of cookies used on b9apk are as follows:

• Strictly Necessary Cookies: Essential for the b9apk platform to function — including session authentication cookies that keep you logged in to your account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality;
• Functional Cookies: Store your preferences, such as remembered login details (if you opt to use "Remember this device"), language settings, and preferred display configurations. These can be disabled in your browser settings, though doing so may affect your user experience;
• Analytical Cookies: Used by b9apk to understand how players use the platform — which games are most accessed, where users encounter difficulties, and how navigation flows can be improved. All data collected through analytical cookies is aggregated and anonymised;
• Security Cookies: Used by b9apk's fraud detection systems to identify and flag unusual access patterns, including device changes, geolocation anomalies, and rapid sequential login attempts.

b9apk does not use advertising cookies or tracking pixels that collect data for third-party advertising networks. You can manage cookie preferences through your browser's settings menu. Most modern browsers — including Chrome, Firefox, and Safari on Android — allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent your b9apk account session from functioning correctly.

b9apk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with b9apk's legal and regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the full duration of your account's active status and for a minimum of five (5) years following permanent account closure, in accordance with b9apk's AML and regulatory obligations;
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, or longer where required by applicable regulatory frameworks;
• Transaction and Betting Records: Retained for a minimum of five (5) years following the date of the transaction or bet, to meet AML audit trail requirements and enable regulatory inspection;
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant support matter, for quality assurance and dispute resolution purposes;
• Marketing Preferences and Opt-Out Records: Retained indefinitely to ensure that opted-out users are not inadvertently re-contacted;
• Technical and Security Logs: Retained for twelve (12) months from the date of logging, except where specific logs are required as evidence in an ongoing investigation.

At the end of the applicable retention period, b9apk will securely delete or irreversibly anonymise your personal data. Anonymised data may be retained indefinitely for statistical and analytical purposes without further notice, as it can no longer be used to identify any individual.

b9apk implements a multi-layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and b9apk's servers is encrypted using industry-standard 256-bit SSL/TLS protocols. This applies to all page loads, login sessions, form submissions, and payment interactions;
• Encrypted Data Storage: Sensitive personal data — including CNIC details and payment information — is stored in encrypted form in our secure cloud infrastructure. Encryption keys are managed separately from the encrypted data;
• Access Controls: Access to b9apk systems containing personal data is restricted to authorised personnel only, governed by role-based access controls, strong authentication requirements, and regular access audits;
• Two-Factor Authentication: Account access requires password plus OTP verification when 2FA is enabled, significantly reducing the risk of unauthorised account access even in the event of password compromise;
• Intrusion Detection and Monitoring: b9apk's security infrastructure includes real-time monitoring for anomalous access patterns, with automated alerts and human review processes for suspected security incidents;
• Data Breach Response: In the event of a confirmed personal data breach affecting b9apk users, b9apk will notify the relevant supervisory authority within the timeframe required by our licensing terms and will inform affected users where the breach is likely to result in significant risk to their rights.

As a data subject whose personal data is processed by b9apk, you have the following rights in relation to your personal information. These rights may be subject to conditions and limitations under applicable data protection law and b9apk's regulatory obligations:

To exercise any of the above rights, contact b9apk's data privacy team at support@b9apk.biz with the subject line "Data Rights Request". b9apk will verify your identity before processing any data rights request to ensure your information is not disclosed to unauthorised persons. Requests will be responded to within 14 calendar days and fulfilled within 30 calendar days unless an extension is required and communicated to you.

b9apk's responsible gaming obligations under our licensing framework require us to process certain personal data specifically to protect player welfare. This processing is carried out under both our legal obligation as a licensed operator and our legitimate interest in preventing harm to our players.

Data processed for responsible gaming purposes at b9apk includes:

• Account activity patterns, including session duration, frequency of play, deposit behaviour, and loss levels, analysed against responsible gaming risk indicators;
• Self-assessment questionnaire responses submitted voluntarily by players who are concerned about their gambling behaviour;
• Self-exclusion requests and the records of exclusion periods — retained indefinitely to prevent a self-excluded player from being re-onboarded inadvertently;
• Communications between players and b9apk support relating to responsible gaming concerns, account limits, or exclusion requests;
• Interaction with responsible gaming tools (deposit limit settings, session reminders, reality checks).

b9apk may use this data to proactively contact you if our monitoring identifies patterns that suggest potential problem gambling — even if you have not raised a concern yourself. This outreach is conducted in the genuine interest of player welfare and not for commercial purposes. You may opt out of proactive responsible gaming outreach while retaining access to on-demand responsible gaming tools, by contacting support — though b9apk reserves the right to maintain monitoring obligations required by our licensing authority regardless of opt-out preferences.

For full information on responsible gaming tools available to you as a b9apk player, please visit our Responsible Gaming page.

b9apk's platform and services are strictly intended for individuals who are 21 years of age or older. b9apk does not knowingly collect, process, or retain personal data from individuals under the age of 21.

During the account registration process, b9apk collects date of birth information which is used specifically to screen for underage applicants. Where our KYC process identifies that a registered user is under 21 years of age, the account will be immediately closed, all balances will be handled in accordance with our responsible gaming policy, and the personal data submitted will be retained only for the minimum period required to document and report the underage access incident to our licensing authority, after which it will be deleted.

Parents and guardians concerned about protecting minors in their household from accessing b9apk and similar platforms are encouraged to use parental control software available for Android and iOS devices. Many of the mobile handsets used across Pakistan — including Samsung, Xiaomi, and Oppo devices — include built-in parental control features accessible through device settings.

b9apk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or licensing obligations. The effective date displayed at the top of this document will be updated each time a substantive change is made.

Where changes to this Policy are material — meaning they significantly affect how b9apk processes your personal data or the rights available to you — b9apk will notify registered users via a notification published on the b9apk platform and, where appropriate, via the email address or Pakistan mobile number registered to your account. The notice will summarise the key changes and indicate when the updated Policy takes effect.

Your continued use of the b9apk platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you object to material changes to this Policy, you may request account closure prior to the changes taking effect. b9apk will process account closure requests and any remaining withdrawable balance in accordance with our standard procedures.

Minor corrections — such as typographical fixes, formatting adjustments, or clarifications that do not alter the substance of how b9apk processes personal data — may be made without separate notification, though the effective date will be updated to reflect all changes.

b9apk is committed to resolving privacy concerns promptly and fairly. If you have a concern about how b9apk has handled your personal data, you are encouraged to contact us in the first instance to allow us to address the matter directly:

• Email: support@b9apk.biz — use subject line "Privacy Complaint" for priority routing to our data privacy team;
• Live Chat: Available on the b9apk platform 24/7, with escalation to a data privacy specialist available upon request;
• Response Target: b9apk aims to acknowledge all privacy complaints within 48 hours and to provide a substantive response within 14 calendar days.

If you are dissatisfied with b9apk's response to your privacy complaint, or if we have not responded within a reasonable time, you may escalate your complaint to the data protection supervisory authority associated with b9apk's gaming licensing jurisdiction, or to the dispute resolution body operated by our licensing authority. Contact details for these bodies can be obtained by contacting b9apk's support team directly.