Privacy Policy —
Your Data, Your Rights

Introduction

This Privacy Policy ("Policy") describes how bwt939 ("Platform", "Operator", "we", "us", "our"), operating through the website https://bwt939.cam and any associated mobile applications or services, collects, processes, stores, shares and protects personal data relating to registered users, visitors and other data subjects ("you", "User", "Player").

bwt939 is committed to responsible data handling in accordance with internationally recognised data protection principles. This Policy is incorporated by reference into the bwt939 Terms & Conditions. By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy.

If you do not agree to the practices described in this Policy, please discontinue your use of the Platform and contact our support team to request account closure.

Definitions

Personal Data We Collect

bwt939 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Account Data

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (city, country)
• Username and encrypted password hash
• Account preferences and communication settings

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (e.g., Pakistani CNIC or passport)
• Proof of address documents where required
• Selfie or liveness-check images submitted for facial match verification
• Any additional documents requested to satisfy AML or regulatory obligations

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts in PKR or other supported currencies
• Payment method identifiers (masked card numbers, wallet identifiers — not full card data)
• Transaction timestamps and reference numbers
• Balance history and bonus credit/debit records

3.4 Behavioural & Gaming Data

• Betting history, game session records and wagering activity
• Responsible gambling tool settings (deposit limits, session limits, self-exclusion status)
• Customer support communication records

3.5 Technical & Device Data

• IP address and approximate geolocation data derived from IP
• Browser type and version, operating system, device type
• Session identifiers, page navigation logs and feature interaction data
• Cookie identifiers and analytics data (see Section 7)

How We Collect Personal Data

bwt939 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or submit any form on the Platform.
• Automatically through the Platform: Technical and behavioural data is collected automatically as you navigate and interact with the Platform, through cookies, server logs and analytics tools.
• From third-party KYC providers: Where bwt939 uses a third-party identity verification service to process your KYC documents, that provider may return verification results and risk scores to bwt939.
• From payment processors: Transaction confirmation data and payment status information is received from payment processing partners in the course of handling your deposit and withdrawal requests.
• From fraud and AML screening services: bwt939 may cross-reference account data with third-party fraud detection, sanctions screening or AML compliance databases as part of its regulatory obligations.

Purposes of Processing & Legal Bases

bwt939 processes your personal data only for clearly defined, lawful purposes. The table below sets out our primary processing activities, their purposes and the legal basis for each:

Sharing of Personal Data

bwt939 does not sell, rent or trade your personal data to unaffiliated third parties for their own independent purposes. We may share your data with the following categories of recipients only where necessary and proportionate:

• KYC and Identity Verification Providers: Third-party services engaged to process identity documents and perform age and fraud checks. These providers act as data processors under contractual agreements.
• Payment Processing Partners: Services engaged to facilitate deposits and withdrawals. Payment processor names referenced contextually on the Platform (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) are familiar local payment references for Pakistani users. bwt939 does not claim any of these providers officially support or endorse the Platform.
• Regulatory Authorities: Where required by law, applicable licencing conditions or court order, bwt939 may disclose data to competent regulatory authorities or law enforcement agencies.
• Fraud and AML Screening Services: Third-party compliance services used for sanctions screening, fraud detection and anti-money laundering checks.
• Platform Technology Providers: Hosting, infrastructure, analytics and security service providers engaged to support the operation of the Platform. All such providers operate under data processing agreements with appropriate safeguards.
• Business Transfers: In the event of a merger, acquisition or sale of assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

Cookies & Tracking Technologies

bwt939 uses cookies and similar tracking technologies to operate the Platform, maintain your session, remember your preferences and collect aggregate analytics data. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your login session, security tokens and core platform state. They cannot be disabled without preventing platform use.
• Functional Cookies: Store your preferences such as language settings, responsible gambling tool selections and display options. Disabling these may affect platform usability.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform, which pages are visited most frequently and where errors occur. This data is used solely to improve the Platform experience.
• Security Cookies: Used to detect unusual or suspicious access patterns, including potential account takeover attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. We do not use cookies to deliver third-party advertising or track your activity across unrelated third-party websites.

International Data Transfers

bwt939 operates internationally and may store or process your personal data on servers or through service providers located outside your country of residence. Where data is transferred outside your jurisdiction, bwt939 takes appropriate steps to ensure that such transfers comply with applicable data protection requirements and that adequate safeguards are in place to protect your personal data.

Such safeguards may include data processing agreements incorporating standard contractual clauses, adequacy decisions applicable to the destination country, or other legally recognised transfer mechanisms. If you have questions about cross-border data transfers affecting your data, please contact our support team.

Data Retention Periods

bwt939 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation or licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Legal retention obligations may require us to retain certain data categories for longer periods than our standard operational needs.

Your Data Rights

Depending on applicable data protection law in your jurisdiction, you may hold some or all of the following rights in relation to your personal data. bwt939 will endeavour to respond to valid rights requests within a reasonable timeframe and in accordance with applicable legal requirements.

To exercise any of the above rights, contact the bwt939 support team. We may need to verify your identity before processing a data rights request. Rights are not absolute and may be subject to exemptions under applicable law, including where retention is required for legal compliance or fraud prevention.

Children's Privacy

bwt939 is strictly an adults-only platform. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 18 — or the higher minimum age required by the operator's licence jurisdiction.

If bwt939 discovers or has reasonable grounds to believe that an account has been created by a person under the applicable minimum age, that account will be immediately suspended, any balance will be returned to the funding source (net of any bonuses), and any personal data collected from the minor will be deleted as promptly as possible in accordance with applicable legal obligations.

Security Measures

bwt939 implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption on all data in transit between your device and the Platform.
• Encryption at rest for sensitive data categories including KYC documents and financial records.
• Role-based access controls limiting access to personal data to authorised personnel with a defined operational need.
• Regular security assessments including periodic penetration testing and vulnerability scanning.
• Multi-factor authentication for administrative access to systems containing personal data.
• Incident response procedures including defined timelines for detecting, assessing and notifying relevant parties of data security incidents where required.

No system is entirely immune from security threats. In the unlikely event of a data breach that poses a risk to your rights and freedoms, bwt939 will notify affected users and relevant authorities in accordance with applicable legal requirements.

KYC, AML & Fraud Prevention

bwt939 is required to collect and process certain personal data as part of its Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance obligations. These requirements exist to verify player identities, confirm minimum age, prevent fraud and detect potential money laundering activity.

KYC processing for Pakistani players typically involves submission of a valid CNIC (Computerised National Identity Card) or passport. Where required, proof of address and a liveness check may also be requested. All KYC documents must be submitted through the Platform's secure HTTPS verification portal. bwt939 strictly prohibits sending identity documents through unsecured channels.

Where the Operator has reasonable grounds to suspect money laundering, fraud or other financial crime, applicable regulations may require bwt939 to report the matter to relevant authorities without notifying the User ("tipping-off" restrictions). In such circumstances, bwt939's legal obligations take precedence over its standard transparency obligations under this Policy.

Pakistan-Specific Privacy Context

bwt939 serves users across Pakistan, including in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. Pakistani users are subject to the same data protection standards as all other Platform users.

Payment Data Context: Payment method names referenced on the Platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are familiar local payment references used for contextual clarity. bwt939 does not claim these payment providers officially support the Platform or that they process data on bwt939's behalf unless an active processing relationship exists. Actual payment data processing is handled by the Operator's contracted payment processors under appropriate data sharing agreements.

Regulatory Disclosure: bwt939 does not claim to be regulated by the Government of Pakistan, the PTA, the State Bank of Pakistan or any Pakistani provincial authority. Any data handling obligations applicable to Pakistani-licensed operators are the obligation of such licensed entities. This Policy reflects bwt939's own data handling practices under the applicable licence jurisdiction.

Updates to This Privacy Policy

bwt939 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform. When material changes are made, we will endeavour to notify registered Users by email or through a notice on the Platform prior to the changes taking effect.

The version date displayed at the top of this page indicates when the Policy was last reviewed. We encourage you to review this Policy periodically. Continued use of the Platform after an updated Policy has been published constitutes acceptance of the revised terms.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data, please contact the bwt939 data protection team using the details below. We aim to acknowledge all data-related enquiries within five (5) business days.