Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how bat939 ("Platform", "we", "us", "our") collects, processes, stores, shares and protects personal data in connection with your use of the bat939 website at https://bat939.cam and all related services. bat939 is an English-language online gaming information platform providing educational content about casino games, sports betting, bonus terms and responsible gambling practices, primarily serving users based in Pakistan and other permitted jurisdictions.

We recognise that data privacy is a matter of trust and that you are entitled to clear, honest information about how your personal data is handled. This Policy is written in plain English to make it as accessible as possible. Where we use technical or legal terms, we have defined them in Section 2.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which govern your relationship with bat939 in full.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, either directly or in combination with other data held by bat939.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — for this Platform, that is bat939.
• "Data Processor" means any third-party organisation that processes Personal Data on bat939's behalf and under bat939's documented instructions.
• "User" or "you" means any individual who visits, browses or holds a registered account on the bat939 Platform.
• "KYC" means Know Your Customer — the identity and document verification process applied to account holders before withdrawals or limit adjustments are processed.
• "Cookies" means small text files placed on your device by the bat939 Platform or authorised third-party services to enable core functionality, analytics and security.
• "Sensitive Data" means categories of Personal Data requiring enhanced protection — including financial records, identity documents and data revealing health information.
• "Applicable Law" means any law, regulation or official guidance applicable to bat939 in the jurisdiction of its incorporation and operation, and where relevant, the laws of the user's own jurisdiction.

3. Data We Collect

bat939 collects Personal Data through several channels. The categories below describe the data collected, the source and the reason for collection.

3.1 Account Registration Data

When you create an account on bat939, we collect the following information you provide directly:

• Full legal name;
• Date of birth (for age verification);
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar) and country;
• Email address;
• Mobile phone number;
• Chosen username and securely hashed password.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that users meet the minimum age requirement, bat939 may collect:

• Copies of government-issued identity documents (e.g., Pakistani National Identity Card / CNIC, passport);
• Proof of residential address (e.g., recent utility bill or bank statement);
• Source-of-funds documentation (e.g., salary slip or bank statement) for higher-value accounts.

3.3 Financial and Transaction Data

In connection with deposits and withdrawals, bat939 collects:

• Transaction amounts in PKR or other applicable currency;
• Payment method reference information (e.g., masked card numbers, mobile wallet identifiers, or bank account references). References to payment services such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are made as contextual identifiers only and do not imply those providers endorse or are affiliated with bat939;
• Transaction timestamps and unique reference numbers.

3.4 Technical and Device Data

When you visit the Platform, we automatically collect certain technical information from your device and browser:

3.5 Communications Data

When you contact bat939 via support email or any platform messaging feature, we retain records of that correspondence — including message content, timestamps and any attachments — to assist with query resolution, quality assurance and compliance record-keeping.

3.6 Responsible Gambling Data

Where you set deposit limits, loss limits, session time reminders or request self-exclusion, bat939 records those preferences and applies them to your account. This data is processed specifically to protect your wellbeing and is not used for marketing profiling.

4. Legal Basis for Processing

bat939 processes Personal Data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to register your account, process transactions, provide support and deliver the core platform services you have requested.
• Legal Obligation: Processing necessary to comply with anti-money laundering regulations, age verification requirements, financial record-keeping obligations and any lawful instructions from competent authorities in the jurisdiction of bat939's operation.
• Legitimate Interests: Processing for fraud prevention, platform security, internal analytics and business improvement where those interests are not overridden by your privacy rights.
• Consent: Where bat939 processes data for purposes not covered by the above grounds — most notably, direct marketing communications — we will seek your explicit consent beforehand and honour any withdrawal of that consent promptly.

5. How We Use Your Data

bat939 uses the Personal Data collected for the following specific purposes:

5.1 Account Management

To create, maintain and administer your account; to authenticate your identity at login; to apply and enforce account limits and access controls; and to process closure requests in accordance with our Terms & Conditions.

5.2 Transaction Processing

To facilitate deposits and withdrawals; to verify payment method ownership; to conduct required source-of-funds checks; and to maintain accurate financial records for compliance and audit purposes.

5.3 Identity and Age Verification

To verify that registered users are at least 18 years of age — or the higher minimum required by the applicable operator jurisdiction — and to confirm the accuracy of registration details provided. bat939 is a strictly adults-only platform.

5.4 Fraud Prevention and Platform Security

To detect and investigate suspicious activity, unauthorised account access, multi-accounting attempts, bonus abuse patterns and any other conduct that may constitute a breach of our Terms & Conditions or applicable law.

5.5 Responsible Gambling

To apply and enforce deposit limits, loss limits, session reminders and self-exclusion requests; to monitor usage patterns that may indicate problem gambling behaviour; and to reach out proactively where our responsible gambling tools suggest a user may benefit from additional support.

5.6 Customer Support

To receive, process and respond to support enquiries submitted in English — and Urdu on request — via our support email address; to maintain records of communications for quality assurance purposes; and to escalate unresolved complaints through the formal dispute procedure described in our Terms & Conditions.

5.7 Platform Improvement and Analytics

To analyse aggregated usage data to understand how users navigate the Platform, which content is most accessed, and where technical improvements may be beneficial. Analytics processing uses aggregated and pseudonymised data where possible.

5.8 Legal and Regulatory Compliance

To comply with applicable laws in bat939's operational jurisdiction; to respond to lawful requests from competent authorities; to maintain the financial and identity records required under anti-money laundering regulations; and to enforce our contractual rights where required.

5.9 Marketing Communications (Consent-Based Only)

Where you have explicitly opted in to receive promotional communications from bat939, we may use your email address to send information about new game guides, promotional offers and platform updates. You may withdraw marketing consent at any time by updating your account preferences or contacting our support team.

6. Data Sharing

bat939 does not sell, rent or trade your Personal Data to third parties for their own commercial purposes. We share Personal Data only in the limited circumstances described below:

6.1 Service Providers and Data Processors

bat939 engages trusted third-party service providers to assist with operating the Platform. These include:

• Payment gateway operators (for processing deposits and withdrawals);
• Identity and age verification services (for KYC processing);
• Cloud hosting and infrastructure providers (for secure data storage);
• Analytics service providers (for aggregated, pseudonymised usage data);
• Customer support software providers (for managing support ticket workflows).

All service providers are required to process Personal Data only on bat939's documented instructions, under contractual data protection obligations equivalent to those imposed on bat939 itself.

6.2 Legal and Regulatory Authorities

bat939 may disclose Personal Data to law enforcement agencies, regulatory authorities or courts where required to do so by applicable law, a valid legal order, or where bat939 believes disclosure is necessary to prevent fraud, protect the safety of users, or defend bat939's legal rights.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of bat939's business or assets, Personal Data held by bat939 may be transferred to the successor entity, subject to that entity assuming equivalent privacy protection obligations. Users will be notified of any such transfer where practicable.

7. Cookies & Tracking Technologies

bat939 uses cookies and similar tracking technologies to operate core platform functions, maintain security and improve user experience. The table below summarises the categories of cookies used on the Platform:

bat939 does not use advertising or third-party retargeting cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may prevent the Platform from functioning correctly.

8. Data Retention

bat939 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing dispute or regulatory investigation, bat939 will retain only the data strictly necessary for that purpose and will delete it promptly upon resolution.

9. Your Rights

Subject to applicable law and certain limited exceptions, you hold the following rights in respect of the Personal Data bat939 holds about you. To exercise any of these rights, contact our support team using the details in Section 14.

bat939 will acknowledge data rights requests within five business days and endeavour to respond substantively within thirty calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty days, informing you of the extension within the initial response.

10. Security Measures

bat939 implements a layered set of technical and organisational security measures to protect Personal Data from unauthorised access, loss, alteration or destruction:

• Encryption in Transit: All data transmitted between your device and the bat939 Platform is protected by TLS (Transport Layer Security) encryption;
• Encryption at Rest: Sensitive Personal Data and financial records stored on bat939 servers are encrypted using industry-standard algorithms;
• Access Controls: Access to Personal Data within bat939's systems is restricted on a strict need-to-know basis and is subject to role-based access controls and multi-factor authentication for administrative users;
• Password Hashing: User passwords are never stored in plain text — they are hashed using a robust one-way hashing algorithm before storage;
• Infrastructure Security: bat939's server infrastructure is hosted in secure data centres with physical access controls, continuous monitoring and regular third-party security assessments;
• Incident Response: bat939 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to users, bat939 will notify affected users and the relevant supervisory authority within the timeframes required by applicable law.

11. Children's Privacy

The bat939 Platform is strictly an adults-only service. We do not knowingly collect Personal Data from individuals under the age of 18, or under the higher minimum age required by the relevant operator's license jurisdiction. All registration attempts are subject to age verification controls.

If bat939 becomes aware that Personal Data has been collected from a person below the applicable minimum age without verifiable parental consent, that account will be closed immediately, all associated data will be securely deleted, and any funds held in that account will be handled in accordance with applicable regulatory requirements.

12. International Data Transfers

bat939 operates internationally and may transfer Personal Data to countries outside the jurisdiction in which you reside, including to countries where data protection laws differ from those applicable in your location. When Personal Data is transferred internationally, bat939 takes appropriate safeguards to ensure it continues to receive the standard of protection to which it is entitled under applicable privacy law.

Safeguards bat939 relies upon for international transfers include:

• Contractual data protection clauses incorporated into agreements with Data Processors in receiving countries;
• Transfers to jurisdictions with data protection frameworks that have been assessed as providing an adequate level of protection;
• Additional technical and organisational measures applied where required to supplement contractual safeguards.

Pakistani users should be aware that by registering on bat939, you consent to your Personal Data being processed and stored in countries outside Pakistan where bat939 or its service providers operate. bat939 does not represent that this cross-border processing is regulated or approved by any Pakistani authority.

13. Policy Amendments

bat939 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we provide. Where changes are material — meaning they significantly affect how we collect, use or share your Personal Data — bat939 will provide reasonable advance notice by displaying a prominent notice on the Platform homepage or by sending a notification to your registered email address.

Minor clarifications or corrections that do not affect the substance of our data processing practices may be made without specific notification. The "Last Updated" date at the top of this page will always reflect the date the most recent version came into effect.

Your continued use of the bat939 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised terms, you should stop using the Platform and may request account closure in accordance with our Terms & Conditions.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bat939 has handled your Personal Data, please contact our support team. We respond to all privacy-related enquiries in English, and Urdu is available on request.

When contacting us about a data rights request, please include your registered username or email address so we can locate your account. We may ask for additional verification to confirm your identity before processing the request — this is solely to protect your data from unauthorised third-party access.