b339 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by b339, the operator of the online gaming platform accessible at b339.app and its associated subdomains and mobile interfaces ("Platform"). This Policy applies to all users of the b339 Platform, including registered account holders, visitors browsing without an account, and any individual who contacts b339 through any available support channel.

b339 is committed to protecting the personal data of its users in accordance with internationally recognised data protection principles and the requirements of its gaming licence. This Policy explains in plain language what data we collect, why we collect it, how it is used, who it may be shared with, how long we keep it, and what rights you hold over your information.

By registering a b339 account, accessing the Platform, or otherwise engaging with b339's services, you acknowledge that you have read, understood, and accepted the data processing practices described in this Policy. This Policy should be read together with b339's Terms and Conditions and Responsible Gaming Policy, which together form the complete legal framework governing your relationship with b339.

2. Data We Collect

b339 collects personal data through multiple channels during the course of your interaction with the Platform. The categories of personal data we collect are set out below, along with the context in which each category is typically obtained.

2.1 Registration & Account Data

When you create a b339 account, you are required to provide the following information: full legal name, date of birth, residential address, email address, and a chosen username and password. This information is collected directly from you during the registration process and forms the foundation of your account profile.

2.2 Identity Verification (KYC) Data

To comply with b339's anti-money laundering (AML) obligations and age verification requirements, b339 collects documentary evidence of identity. This typically includes copies of government-issued identification documents such as your CNIC (Computerised National Identity Card), passport, or driving licence, as well as proof of residential address in the form of a utility bill or bank statement dated within the required period. Biometric data (such as a selfie for liveness verification) may also be collected where required by b339's KYC provider.

2.3 Financial & Transaction Data

b339 collects details of all financial transactions conducted through the Platform, including deposit amounts, withdrawal requests, payment method details (such as JazzCash wallet numbers, EasyPaisa account references, HBL or UBL bank account details, or USDT TRC20 wallet addresses), transaction timestamps, and transaction statuses. Full payment instrument numbers are not stored on b339's servers — card and account details are processed by b339's licensed payment processing partners.

2.4 Gaming Activity Data

b339 records all gaming activity on the Platform, including game sessions played, bet amounts placed in PKR, game outcomes, wagering history, bonus activity, and session durations. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting purposes.

2.5 Technical & Device Data

When you access the Platform, b339 automatically collects certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is collected through server logs and cookies as described in Section 5.

2.6 Communications Data

If you contact b339 via live chat, email, or any other support channel, b339 retains records of those communications, including the content of messages, timestamps, and any supporting documentation you provide. This data is used to manage your support requests, improve service quality, and maintain an audit trail for dispute resolution.

3. How We Use Your Data

b339 processes your personal data only for specified, legitimate purposes. The primary legal bases on which b339 relies for processing are: performance of a contract (your account agreement with b339), compliance with legal obligations (regulatory and AML requirements), legitimate interests (fraud prevention, platform security, service improvement), and consent (marketing communications, where applicable).

b339 does not use your personal data for automated individual decision-making that produces legal or similarly significant effects, except where such processing is required for AML compliance or fraud screening purposes. Where automated screening produces a flag, a human reviewer assesses the matter before any account action is taken.

4. Data Sharing & Third Parties

b339 does not sell your personal data to any third party under any circumstances. b339 may share your personal data with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Processing Partners

To process deposits and withdrawals in PKR through JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20, b339 shares the minimum necessary financial data with licensed payment processing partners. These partners are contractually bound to process your data solely for payment facilitation purposes and are prohibited from using it for any other purpose.

4.2 KYC & Identity Verification Providers

b339 uses accredited third-party KYC and identity verification service providers to validate the identity documents submitted by players during the verification process. These providers process KYC data under strict data processing agreements and are prohibited from retaining or using your documents beyond the scope of the verification task.

4.3 Regulatory & Law Enforcement Authorities

b339 is obligated under its international gaming licence and applicable AML regulations to report certain activities and player data to relevant regulatory authorities and, where legally required, to law enforcement agencies. Such disclosures are made only where b339 is legally compelled to do so and only to the extent required.

4.4 Technology & Infrastructure Providers

b339 uses third-party cloud hosting, content delivery, and platform infrastructure providers to operate the Platform. These providers may process technical and account data as part of their service to b339, and are bound by data processing agreements that restrict their use of your data to infrastructure provision only.

4.5 Game Content Providers

Certain casino games available on the b339 Platform are provided by third-party game studios. These providers may receive anonymised session and gameplay data for the purposes of game integrity verification and RTP auditing. No directly identifiable personal data (such as your name or CNIC details) is shared with game content providers.

5. Cookies & Tracking Technologies

b339 uses cookies and similar tracking technologies (collectively "cookies") on the Platform to ensure proper functionality, maintain your session security, remember your preferences, and gather anonymised analytics data that helps b339 improve the Platform experience. This section explains the types of cookies used and your options for managing them.

b339 does not deploy third-party advertising cookies, social media tracking pixels, or cross-site behavioural targeting technologies. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent Platform functionality. For full details of the cookies currently in use on the Platform, refer to the cookie preference centre accessible within your b339 account settings.

6. Data Retention

b339 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by regulatory, legal, or licensing obligations. The following general retention periods apply:

• Account & Registration Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with AML regulatory requirements applicable under b339's international gaming licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the completion of the KYC process, or five (5) years from account closure, whichever is later.
• Financial & Transaction Records: Retained for a minimum of five (5) years following each transaction, as required for financial regulatory compliance and audit purposes.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session, or longer where a dispute or regulatory investigation is open.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the last communication in a given support thread, or longer where the communication relates to a formal dispute.
• Technical & Device Logs: Retained for up to twelve (12) months from the date of collection, unless retained longer as part of a fraud or security investigation.

At the expiry of applicable retention periods, b339 will securely delete or irreversibly anonymise your personal data in accordance with industry-standard data destruction procedures. Anonymised aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and product development purposes.

7. Data Security

b339 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• Transport Encryption: All data in transit between your device and b339 servers is encrypted using TLS 1.2 or higher, enforced across all Platform interfaces including the website and any mobile-optimised interfaces.
• Data-at-Rest Encryption: Sensitive stored data, including KYC documents, financial records, and account credentials, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to systems holding personal data is restricted to b339 personnel who require that access to perform their job functions. Access is controlled via role-based permissions, multi-factor authentication, and regular access reviews.
• Intrusion Detection & Monitoring: b339's infrastructure is continuously monitored for anomalous activity and potential security threats. Automated alerting systems notify the security team of any suspicious events for immediate investigation.
• Penetration Testing: b339 conducts regular independent penetration testing and vulnerability assessments of its Platform infrastructure to identify and remediate security weaknesses proactively.
• Incident Response: b339 maintains a documented data breach response plan. In the event of a data breach affecting your personal data, b339 will notify affected players and relevant regulatory authorities in accordance with applicable legal requirements and within the timeframes required.

8. Your Data Rights

As a b339 account holder, you hold a set of rights over your personal data. b339 is committed to facilitating the exercise of these rights promptly and transparently. Your rights are set out below:

• Right of Access: You have the right to request a copy of the personal data b339 holds about you. b339 will provide this information in a structured, commonly used format within 30 days of a verified request.
• Right to Rectification: If personal data held by b339 is inaccurate or incomplete, you have the right to request that it be corrected. For certain data elements (such as email address), you may update this directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Note that this right is subject to important limitations — b339 is legally required to retain certain data for regulatory and AML compliance purposes, and those records cannot be deleted on request during the applicable retention period.
• Right to Restrict Processing: You may request that b339 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests.
• Right to Data Portability: Where b339 processes your personal data on the basis of contract performance or consent, and that processing is carried out by automated means, you may request a copy of your data in a machine-readable format for transfer to another service.
• Right to Object: You have the right to object to b339 processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though b339 may continue processing where it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where b339 relies on your consent to process personal data (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact b339 customer support via live chat or by email to the address provided in Section 11 of this Policy. b339 may need to verify your identity before processing your request. b339 will respond to all verified data rights requests within 30 days, and will notify you if a longer period is required for complex requests.

9. Minors & Age Restriction

The b339 Platform is strictly for individuals aged 21 years and above. b339 does not knowingly collect, process, or retain personal data from any individual under the age of 21. The collection of personal data from minors is absolutely prohibited under b339's responsible gaming policy and its international gaming licence terms.

b339 employs age verification controls at registration and as part of the KYC process to enforce the 21+ requirement. Where b339 has reason to believe that an account holder may be under 21 years of age, the account will be suspended immediately pending verification, and any balance held will be frozen until the matter is resolved. If it is confirmed that an account holder is under 21, the account will be permanently closed, all associated data will be handled in accordance with applicable legal requirements, and any deposits received will be returned to the source payment method.

10. Changes to This Policy

b339 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect your privacy rights or b339's data processing practices — b339 will provide advance notice to registered account holders via a Platform notification or by email to your registered address, where practicable.

The most current version of this Privacy Policy will always be accessible at b339.app/privacy-policy. The effective date at the top of the Policy will be updated each time a revised version is published. It is your responsibility to review the Policy periodically to stay informed about how b339 protects your data.

Your continued use of the b339 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept a material change to this Policy, you should cease using the Platform and may request account closure in accordance with the procedure described in b339's Terms and Conditions.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or b339's data processing practices, please contact b339 using the details below. b339's customer support team is available 24/7 via live chat on the Platform and will direct your privacy-related enquiry to the appropriate internal team.

• Live Chat: Available 24/7 directly on the b339 Platform — the fastest way to reach the support team.
• Email: [email protected] — for formal data rights requests and written privacy enquiries. Please include "Privacy Enquiry" in the subject line of your email to ensure prompt routing.

b339 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days. For complex data rights requests that require additional time to process, b339 will notify you of the extended timeline within the initial 30-day period.