bit393 Privacy Policy

01 Introduction

This Privacy Policy describes how bit393 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", or "the Player") who access or use the bit393 online casino and sports betting platform at bit393.net.

bit393 is committed to safeguarding the privacy of all its registered players and website visitors. We process personal data in accordance with applicable data protection legislation and industry best practices for the online gaming sector.

This Privacy Policy should be read in conjunction with the bit393 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and bit393.

02 Data Controller

bit393 is the data controller responsible for the personal data of all registered players and website visitors. As data controller, bit393 determines the purposes and means by which your personal data is processed in connection with your use of the platform.

If you have any questions about how bit393 handles your personal data, or if you wish to exercise any of your rights as described in this Privacy Policy, you may contact our Data Protection team using the contact details set out in Article 16 below.

03 Personal Data We Collect

bit393 collects personal data that is necessary, relevant, and proportionate to the purposes for which it is processed. The categories of personal data we collect include, but are not limited to, the following:

• Identity Data: Full legal name, date of birth, CNIC (Computerised National Identity Card) number, and government-issued photographic identification submitted during KYC verification.
• Contact Data: Pakistani mobile phone number, email address, city of residence, and province. This information is collected at registration and used for account communications and two-factor authentication.
• Financial Data: JazzCash account number, EasyPaisa mobile wallet number, and bank account details for HBL, UBL, or Meezan Bank as provided for the purpose of processing PKR deposits and withdrawals. bit393 does not store full bank card numbers or CVV codes.
• Transaction Data: Records of all PKR deposits, withdrawal requests, bet placements, game play sessions, bonus credits, and wagering activity conducted through your bit393 account.
• Technical Data: IP address, browser type and version, device identifier, operating system, screen resolution, and session timestamps collected automatically when you access the bit393 platform.
• Usage Data: Information about how you interact with the platform, including pages visited, games played, features accessed, session duration, and navigation paths.
• Communications Data: Records of your correspondence with the bit393 support team via live chat, email, or any other support channel.
• Marketing Preferences: Your communication preferences and opt-in or opt-out choices regarding promotional emails, SMS notifications, and bonus offers.

bit393 does not intentionally collect sensitive personal data such as health information, religious beliefs, or political opinions. If any such information is provided voluntarily by a player in the context of a support communication, it will be handled with the highest level of care and will not be used for any purpose other than responding to the relevant support query.

04 How We Collect Your Data

bit393 collects personal data through the following channels:

• Direct Collection: Information you provide voluntarily when creating an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, and server logs when you visit or interact with the bit393 platform. See Article 11 for full details of our cookie practices.
• Third-Party Sources: Identity and fraud verification data received from regulated KYC and AML compliance service providers. bit393 uses this data solely to verify player identities and comply with anti-money laundering obligations.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank when you initiate deposits or withdrawals.

05 How We Use Your Personal Data

bit393 uses your personal data for the following purposes:

• Account Registration and Management: To create, maintain, and administer your bit393 player account, including processing your registration details and verifying your identity in accordance with our KYC obligations.
• Age Verification: To confirm that you meet the mandatory minimum age requirement of 21 years before granting access to any betting or gaming services on the platform.
• Transaction Processing: To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions on your account.
• Platform Services: To provide access to sports betting markets (including PSL and international cricket), live casino games, slot titles, e-sports betting, and coin market features available on the bit393 platform.
• Customer Support: To respond to your queries, complaints, and requests submitted through live chat, email, or other support channels.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other forms of prohibited conduct as defined in the bit393 Terms & Conditions.
• Responsible Gaming: To monitor player activity for indicators of problem gambling and to implement responsible gaming tools including deposit limits, session limits, cool-off periods, and self-exclusion where appropriate.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering regulations, licensing conditions, and any lawful requests received from regulatory or law enforcement authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have given your explicit consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: To analyse usage patterns and player behaviour on an aggregated, anonymised basis to improve the platform's features, performance, and user experience.

06 Legal Bases for Processing

bit393 processes your personal data on one or more of the following legal bases:

• Contract: Processing is necessary for the performance of the agreement between you and bit393, including account registration, transaction processing, and provision of platform services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering checks, and age verification.
• Legitimate Interest: Processing is necessary for the legitimate interests of bit393, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement, provided those interests are not overridden by your privacy rights.
• Consent: Processing is based on your explicit consent, particularly in relation to marketing communications and the use of non-essential cookies. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

07 Data Sharing & Disclosure

bit393 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the circumstances described below:

• Payment Processors: We share your financial data with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely for the purpose of processing your PKR deposits and withdrawals. These providers operate under their own data protection policies and are contractually required to handle your data securely.
• KYC and Identity Verification Partners: We engage regulated third-party identity verification service providers to assist with CNIC verification, age verification, and AML screening. These providers are bound by strict data processing agreements and confidentiality obligations.
• Game Software Providers: When you play third-party casino games or slots on the bit393 platform, limited technical session data may be shared with the relevant game provider to facilitate gameplay. No personally identifiable information beyond a pseudonymous session identifier is shared for this purpose.
• Legal and Regulatory Authorities: bit393 may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities where required by law, court order, or where disclosure is necessary to protect the legal rights or safety of bit393 or other players.
• Professional Advisers: We may share personal data with our legal, accounting, and auditing advisers on a strictly confidential basis where necessary to obtain professional advice in connection with the operation of the platform.

08 International Data Transfers

As an online platform serving Pakistani players, bit393 may transfer personal data to service providers and technology partners located outside of Pakistan. Where such international transfers occur, bit393 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual protections through data processing agreements that impose obligations equivalent to those under applicable data protection law.
• Transfer to countries or organisations that have been assessed as providing an adequate level of data protection.
• Use of standard contractual clauses or equivalent mechanisms as approved by the relevant data protection authority.

Where technically and commercially feasible, bit393 prefers to use data hosting and processing infrastructure located within or near the South Asian region to minimise the need for international data transfers involving your personal data.

09 Data Retention

bit393 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal data associated with an active bit393 player account is retained for the duration of the account relationship.
• Closed Accounts: Following voluntary account closure, bit393 retains your personal data for a minimum period of five (5) years to comply with anti-money laundering record-keeping obligations and to facilitate the resolution of any disputes that may arise after closure.
• KYC and Identity Documents: Copies of CNIC and other identity documents submitted during KYC verification are retained for the duration of the account relationship and for a minimum of five (5) years following account closure.
• Transaction Records: Full records of all PKR deposits, withdrawals, bets, and gaming transactions are retained for a minimum of seven (7) years in accordance with financial record-keeping requirements.
• Marketing Data: Where you have withdrawn consent to receive marketing communications, your opt-out preference is retained indefinitely to ensure we do not inadvertently contact you again.
• Support Communications: Records of live chat and email support interactions are retained for three (3) years from the date of the interaction.

Where personal data is no longer required for any legitimate purpose and the applicable retention period has expired, bit393 will securely delete or irreversibly anonymise the data in accordance with our internal data disposal procedures.

10 Data Security

bit393 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the bit393 platform is protected using 256-bit Transport Layer Security (TLS/SSL) encryption. This applies to all platform interfaces including desktop browsers and mobile browsers.
• Encryption at Rest: Sensitive player data stored on bit393 servers, including identity and financial data, is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to player personal data within bit393 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular review.
• Two-Factor Authentication: bit393 accounts are protected by two-factor authentication linked to your registered Pakistani mobile number. We strongly recommend that all players keep this feature enabled at all times.
• Penetration Testing: The bit393 platform undergoes regular independent security audits and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: bit393 maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to affect your rights and interests, you will be notified without undue delay in accordance with applicable requirements.

11 Cookies & Tracking Technologies

bit393 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a website you visit. Cookies allow the platform to recognise your device, remember your preferences, and provide a consistent experience across sessions.

bit393 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the bit393 platform. These cookies enable core functions such as session management, login authentication, and security. They cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymous, aggregated information about how players interact with the bit393 platform, including pages visited, time spent, and errors encountered. This data is used exclusively to improve platform performance.
• Functional Cookies: Used to remember your preferences and personalisation settings, such as your preferred language, game history, and responsible gaming limit configurations.
• Marketing Cookies: Used to deliver relevant promotional content within the bit393 platform based on your activity and preferences. These cookies are only placed with your consent.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of some platform features. bit393 will respect any opt-out choices made through your browser or through our in-platform cookie preference centre.

12 Your Privacy Rights

As a bit393 player, you have the following rights in relation to your personal data, which you may exercise at any time by contacting our Data Protection team using the details in Article 16:

• Right of Access: You have the right to request a copy of the personal data bit393 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly through your bit393 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligations to retain certain data for regulatory and AML compliance purposes as described in Article 9.
• Right to Restrict Processing: You have the right to request that bit393 temporarily restricts the processing of your personal data while a rectification or objection request is being assessed.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bit393 in a structured, commonly used, machine-readable format, where processing is based on consent or contract.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interests, including profiling carried out for responsible gaming monitoring purposes. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

13 Children & Minors

The bit393 platform is strictly intended for adults aged 21 years and above. bit393 does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Our registration process includes mandatory age verification, and all player accounts are subject to ongoing KYC checks to confirm eligibility.

If bit393 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all associated funds will be handled in accordance with our Terms & Conditions, and the personal data in question will be securely deleted without undue delay.

14 Third-Party Services

The bit393 platform may integrate with third-party game providers, payment processors, and technology services to deliver a complete gaming experience. When you interact with third-party game content embedded within the bit393 platform, certain technical session data may be processed by those providers in accordance with their own privacy policies.

bit393 carefully selects its third-party partners and requires all partners to maintain data protection standards consistent with our own. However, bit393 is not responsible for the data practices of independently operated third-party services. We encourage you to review the privacy policies of any third-party service providers whose products you interact with through the platform.

bit393 does not embed third-party social media buttons, advertising trackers, or analytics tools that would transmit your personal data to social media platforms or advertising networks without your explicit consent.

15 Changes to This Privacy Policy

bit393 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The most current version of this Privacy Policy will always be available at bit393.net/privacy-policy.

Where a change to this Privacy Policy is material — meaning it significantly affects your rights or the way we process your data — bit393 will notify registered players by email or via a prominent notice within their account dashboard prior to the change taking effect. Continued use of the bit393 platform following such notification will constitute acceptance of the updated Privacy Policy.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit393 processes your personal data, please contact our Data Protection team using the following details:

• Email: [email protected]
• Live Chat: Available 24/7 through your bit393 account dashboard
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to formal data subject access requests within 30 days.

If you are not satisfied with how bit393 has handled your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. bit393 takes all privacy complaints seriously and will cooperate fully with any regulatory investigation.