Privacy Policy for bad939

bad939 ("we", "us", "our", "the Company") is an internationally licensed online casino and sports betting platform operating at bad939.com. We are the data controller in respect of all personal information collected from users ("you", "your", "the Player") who register for or use our Platform.

As the data controller, bad939 is responsible for deciding how and why your personal data is processed. We are committed to ensuring that all data processing activities carried out by the Company or on our behalf comply with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

If you have any questions about this Privacy Policy or how bad939 handles your personal data, please contact our Data Protection team at: [email protected]

bad939 collects personal data from you in several ways: directly when you register and use the Platform, automatically as you navigate our services, and in limited circumstances from trusted third-party sources as part of our verification and fraud-prevention processes.

bad939 uses your personal data solely for specific, legitimate purposes that are directly connected to the operation of the Platform and fulfilment of our legal obligations. We do not use your personal data for purposes incompatible with those stated at the time of collection without obtaining fresh consent.

The primary purposes for which we process your personal data are:

• Account Registration & Management: Creating and maintaining your bad939 account, including storing login credentials, account preferences, and responsible gaming settings.
• Identity Verification (KYC): Verifying your age (21+ requirement), identity, and residential address in compliance with anti-money-laundering (AML) and counter-terrorist financing (CTF) regulations.
• Transaction Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, Visa, and Mastercard, and maintaining accurate financial records.
• Regulatory Compliance: Meeting reporting obligations to our licensing authority and responding to lawful requests from regulatory and law enforcement bodies.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeovers, money laundering, match-fixing, and other prohibited activities using automated monitoring tools.
• Customer Support: Responding to your queries, complaints, and account-related requests through live chat, email, and other support channels.
• Platform Improvement: Analysing aggregated usage patterns to improve the design, performance, and content of bad939.com and the mobile platform.
• Marketing Communications: Sending promotional offers, bonus notifications, and news about bad939 services to players who have opted in to receive such communications. You may opt out at any time.
• Responsible Gaming: Monitoring account behaviour to identify potential signs of problem gambling and, where appropriate, proactively contacting players or applying protective measures.

Every data processing activity carried out by bad939 is grounded in one or more recognised legal bases. The applicable legal basis depends on the specific purpose for which the data is being processed:

• Contractual Necessity: Processing your identity, contact, financial, and account data is necessary to perform the contract between you and bad939 — i.e., to provide you with a functional account, process your deposits and withdrawals, and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing your identity and transaction data for KYC, AML, and CTF compliance is required by the terms of bad939's international gaming licence and applicable financial crime prevention regulations. We cannot waive this obligation.
• Legitimate Interests: Processing technical and usage data for fraud prevention, platform security, and product improvement is pursued on the basis of bad939's legitimate interest in operating a secure, fair, and high-quality platform. We balance this interest against your privacy rights when determining what data to collect and how to use it.
• Consent: Processing your data for optional marketing communications, personalised promotions, and non-essential cookies is based on your explicit consent, which you may withdraw at any time without affecting your account.

bad939 does not sell, rent, or trade your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, NayaPay, Visa, and Mastercard processing partners receive the financial data necessary to authorise and settle your PKR transactions. Each processor operates under its own privacy policy and applicable financial regulations.
• Identity Verification Providers: Accredited third-party KYC and AML screening providers receive your identity documents and personal details to conduct the verification checks required under our licensing obligations.
• Game Software Suppliers: Licensed game providers whose titles appear on the bad939 platform receive anonymised session and RNG seed data necessary to run game rounds. They do not receive your name, contact details, or financial information.
• Fraud Prevention Services: Specialist fraud detection platforms may receive technical and transactional data — such as device fingerprints, IP addresses, and betting patterns — to assess risk scores and identify prohibited activity.
• Regulatory & Law Enforcement Authorities: bad939 will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory direction. We will notify you of such disclosures where legally permitted to do so.
• Professional Advisers: Auditors, legal counsel, and compliance consultants may access personal data on a confidential, need-to-know basis in the course of providing professional services to bad939.

All third parties who receive personal data from bad939 are required to maintain appropriate technical and organisational security measures and to process the data only for the purposes for which it was shared.

bad939 operates an internationally licensed platform and may need to transfer your personal data to service providers located outside Pakistan. Where such transfers occur, bad939 takes steps to ensure that your data receives an equivalent level of protection to that applied within our primary jurisdiction.

Safeguards we implement for international data transfers include:

• Standard contractual clauses approved by recognised data protection authorities, incorporated into data processing agreements with all relevant third-party recipients;
• Verification that recipient countries or organisations maintain adequate data protection frameworks;
• Data minimisation — transferring only the specific data fields required by the receiving service provider to perform their designated function.

bad939 uses cookies, pixel tags, local storage, and similar tracking technologies on its website and mobile platform. These technologies help us deliver a functional, personalised, and secure experience to all users.

We categorise our cookies as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with bad939.com — pages visited, session duration, error events — to help us identify and fix performance issues and improve the user experience. Activated only with your consent.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming reminder intervals. Activated only with your consent.
• Marketing Cookies: Track your interaction with bad939 promotional content to allow us to deliver relevant offers. bad939 does not use third-party advertising cookies. Activated only with your explicit consent.

You can manage your cookie preferences at any time through the cookie settings panel accessible from the footer of bad939.com. Please note that disabling certain categories of cookies may affect the functionality of the Platform.

bad939 retains personal data for as long as necessary to fulfil the purpose for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Retention periods are determined on a data-category basis:

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and research purposes, as it can no longer be linked to any individual.

As a data subject, you have a number of rights in relation to the personal data bad939 holds about you. These rights are set out below. To exercise any of them, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days.

The bad939 Platform is strictly intended for adults aged 21 years and over. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the bad939 registration and KYC process, and we apply additional behavioural monitoring to detect any account that may be operated by a minor.

If you are a parent or guardian and believe your child has registered an account on bad939.com, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

bad939 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key measures include:

• Transport Layer Security (TLS): All data transmitted between your device and bad939's servers is encrypted using TLS 1.2 or higher.
• AES-256 Encryption at Rest: Sensitive personal data — including identity documents, financial records, and KYC files — is stored using AES-256 symmetric encryption.
• Access Controls: Access to systems containing personal data is restricted to authorised bad939 personnel and audited service providers, governed by role-based access control policies and multi-factor authentication requirements.
• Intrusion Detection: bad939's infrastructure is monitored 24/7 by automated intrusion detection and prevention systems. Security events are logged, triaged, and escalated according to a defined incident response procedure.
• Regular Security Audits: bad939 undergoes periodic independent security assessments, penetration tests, and vulnerability scans to identify and remediate potential weaknesses before they can be exploited.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bad939 will notify the relevant regulatory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by applicable law.

The bad939 Platform may from time to time contain references to game providers, payment processors, or informational resources hosted on third-party domains. This Privacy Policy applies exclusively to data collected and processed by bad939 through bad939.com and our associated services.

bad939 is not responsible for the privacy practices, security standards, or content of any third-party websites or services. We strongly recommend that you review the privacy policy of any third-party service you interact with before providing them with your personal data. The inclusion of a reference to a third-party service on the bad939 Platform does not constitute an endorsement of that party's privacy practices.

bad939 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or the services we offer. When we make material changes to this Policy, we will take reasonable steps to notify you — for example, by displaying a prominent notice on bad939.com, sending an email notification to your registered address, or presenting an in-platform alert the next time you log in.

The "Last Updated" date at the top of this page and in the page header will always reflect the date on which the most recent version came into effect. We encourage you to review this Privacy Policy periodically to stay informed about how bad939 protects your personal data.

Previous versions of this Privacy Policy are available on request by contacting [email protected]. We retain archived versions for a minimum of five years.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bad939 processes your personal data, please contact our Data Protection team using the details below. We aim to acknowledge all data-related enquiries within 2 business days and to resolve them fully within 30 calendar days.

• Data Protection Team Email: [email protected] (subject line: "Privacy / Data Rights Request")
• Response Time: Acknowledgement within 2 business days; full resolution within 30 calendar days
• Languages Accepted: English

If you are not satisfied with our response, or if you believe that bad939 is processing your personal data in a manner that is inconsistent with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory or regulatory authority in your jurisdiction. bad939 will cooperate fully with any such investigation.