b9com Privacy Policy

1. Introduction & Scope

b9com ("we", "us", "our", "the Company") operates the online gaming platform accessible at b9com.vip (the "Platform"). In the course of providing gaming services, sports betting, live casino, and related digital products to registered players in Pakistan and other permitted markets, b9com collects and processes personal data relating to our users ("you", "the Player", "the User").

This Privacy Policy sets out in full detail: what categories of personal data b9com collects; the purposes and legal bases for which that data is processed; the parties with whom that data may be shared; how long data is retained; the security measures applied to protect it; and the rights available to you as a data subject.

This policy applies to all personal data collected through the Platform, including data submitted at registration, during identity verification, during payment processing, during gameplay, and through any communications you have with b9com's customer support team.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is b9com, the operator of the b9com.vip Platform. The data controller determines the purposes and means of processing personal data collected through the Platform.

All data protection queries, subject access requests, and complaints should be directed to b9com's designated data protection contact using the details provided in Section 15 of this policy. b9com is committed to responding to all data protection enquiries within the timeframes required by applicable law.

3. Data We Collect

b9com collects the following categories of personal data in connection with the operation of the Platform:

Identity & Contact Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (collected to verify the minimum age requirement of 21 years).
• Pakistani National Identity Card (CNIC) number or passport number.
• Residential address, including city (e.g. Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi).
• Email address registered to your b9com account.
• Pakistani mobile number (used for account security and two-factor authentication).

Financial Data

• JazzCash or EasyPaisa mobile wallet identifiers (phone numbers associated with your wallet).
• Bank account details for HBL, UBL, Meezan Bank, or other Pakistani bank transfer payments.
• Masked card details (last four digits, card type) where Visa or Mastercard payments are used.
• Transaction history: deposit amounts, withdrawal amounts, dates, and processing status.

Gameplay & Account Data

• Account username, login credentials (passwords stored in hashed, non-reversible form).
• Game history: titles played, stakes placed, game outcomes, session durations.
• Bonus history: promotions claimed, wagering progress, bonus balances.
• Responsible gaming settings: deposit limits, session limits, cooling-off periods, self-exclusion status.

Technical & Usage Data

• IP address and geolocation data derived from your IP at the time of login.
• Device type, operating system, browser type and version.
• Pages visited on the Platform, features used, and time spent on each page.
• Session logs, error logs, and crash reports.

Communications Data

• Records of all communications between you and b9com support, including live chat transcripts, emails, and support ticket records.
• Survey responses and feedback submitted voluntarily.

4. How We Collect Data

b9com collects personal data through the following means:

• Directly from you: when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically: through cookies, log files, and tracking technologies when you access and use the Platform. See Section 10 for full details on cookies.
• From third-party identity verification providers: b9com uses regulated KYC (Know Your Customer) service providers to verify the identity and age of players. These providers may cross-reference your submitted details against identity databases.
• From payment processors: transaction confirmation data is received from JazzCash, EasyPaisa, bank transfer services, and international card scheme processors to verify the status of deposits and withdrawals.
• From fraud prevention services: b9com uses third-party fraud detection services that may provide risk signals and flagging data associated with your account activity.

5. How We Use Your Data

b9com processes your personal data for the following purposes:

b9com does not use your personal data for any purpose not listed above without first obtaining your explicit consent or where required to do so by law.

6. Legal Basis for Processing

b9com processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and b9com — including account creation, gameplay, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification obligations, and regulatory reporting requirements.
• Legitimate interests: Processing necessary for b9com's legitimate business interests, including fraud detection, Platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

b9com does not sell your personal data to any third party under any circumstances. b9com may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity verification providers: Regulated KYC and age verification service providers used to fulfil b9com's legal obligations.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing partners, for the purpose of completing deposit and withdrawal transactions.
• Fraud prevention services: Third-party risk and fraud detection platforms that help b9com identify and prevent financial crime.
• Game providers: Licensed game software providers whose titles are offered on the Platform may receive anonymised session data necessary to operate and audit their games.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, b9com will disclose personal data to the relevant authority.
• IT infrastructure and hosting providers: Secure cloud hosting and technical infrastructure providers who process data on b9com's behalf under strict data processing agreements.

8. Data Retention

b9com retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in line with financial record-keeping requirements.
• Gameplay records: Retained for a minimum of three (3) years to support dispute resolution, regulatory audits, and responsible gaming monitoring.
• Communications records: Support communications retained for two (2) years from the date of the most recent interaction.
• Technical and usage data: Aggregated and anonymised after 12 months. Identified technical logs retained for up to 12 months for security and debugging purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded individuals.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its reconstruction.

9. Data Security

b9com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data transmitted between your device and the b9com Platform is encrypted in transit using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. b9com employees cannot view or retrieve your password.
• Two-factor authentication: b9com offers 2FA via your registered Pakistani mobile number to add a second layer of security to your account login.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Security monitoring: b9com continuously monitors its systems for suspicious activity, intrusion attempts, and data anomalies.
• Third-party security assessments: b9com's Platform and infrastructure are subject to periodic security assessments to identify and remediate vulnerabilities.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, b9com will notify you and the relevant regulatory authority in accordance with applicable law without undue delay.

10. Cookies & Tracking Technologies

b9com uses cookies and similar tracking technologies on the Platform to deliver core functionality, improve performance, and — where you have provided consent — to personalise your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the Platform — pages visited, time spent, errors encountered — to help b9com improve the service. Analytics data is aggregated and does not identify individual users.
• Session security cookies: Used to detect and prevent fraudulent login attempts and to maintain the integrity of your authenticated session.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. b9com does not use third-party advertising cookies or serve targeted advertisements based on your gameplay behaviour.

11. Your Data Rights

Subject to applicable law and certain exceptions, you hold the following rights in respect of your personal data held by b9com. To exercise any of these rights, contact b9com using the details in Section 15. b9com will respond to all valid requests within 30 days.

12. Protection of Minors

The b9com Platform is strictly for adults aged 21 and above. b9com does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is conducted as part of the mandatory registration and KYC process for all new accounts.

If b9com becomes aware that personal data has been collected from an individual under the minimum age of 21, that account will be immediately suspended, all associated personal data will be securely deleted (except where retention is required by law to record the age violation), and any funds will be dealt with in accordance with b9com's responsible gaming policy.

If you are a parent or guardian and believe that a minor has registered an account with b9com, please contact us immediately using the details in Section 15. b9com will treat all such reports as a priority matter.

13. International Data Transfers

In certain circumstances, b9com may transfer personal data to third-party service providers or infrastructure partners located outside Pakistan. Such transfers may occur in connection with cloud hosting, identity verification, or fraud prevention services.

Where personal data is transferred internationally, b9com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. Such safeguards may include contractual data processing agreements with standard protective clauses, or transfers to jurisdictions that provide an adequate level of data protection as recognised by applicable regulatory guidance.

b9com will not transfer your personal data to any jurisdiction or recipient that cannot provide adequate data protection guarantees, without first obtaining your explicit consent or ensuring that alternative legal safeguards are firmly in place.

14. Policy Amendments

b9com reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, b9com will notify registered players via the Platform or by email to your registered address. The updated policy will display the revised effective date prominently at the top of the document.

Your continued use of the b9com Platform following notification of an updated Privacy Policy constitutes your acknowledgment of the revised terms. Where changes require your renewed consent — for example, new marketing data uses — b9com will seek that consent separately before proceeding. We encourage you to review this policy periodically to stay informed of how your data is protected.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by b9com, please contact our data protection team using the following details:

If you are not satisfied with b9com's response to a data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. b9com will cooperate fully with any such regulatory investigation or inquiry.

For responsible gaming-related data requests — such as confirming your self-exclusion status or requesting deletion of a self-exclusion record after the minimum exclusion period — please identify your request clearly as a responsible gaming matter so it can be prioritised accordingly.