bef939 Privacy Policy — How We Protect Your Personal Data

1Who We Are — Data Controller

bef939 is the data controller responsible for the personal data of players who use the bef939 online gaming and sports betting platform. As data controller, bef939 determines the purposes and means by which your personal data is processed. We are committed to handling your data lawfully, fairly, and transparently in accordance with applicable international data protection principles.

bef939 operates under internationally recognised gaming regulations and processes personal data as required to fulfil our regulatory and contractual obligations to players, payment processing partners, and licensing authorities. Any data processing performed by bef939 is governed by this Privacy Policy, which is reviewed and updated as required to reflect changes in our operations or applicable legal standards.

2Personal Data We Collect

bef939 collects personal data through several channels — directly from you during registration and account management, automatically through your use of the platform, and from third-party identity verification and payment processing partners. The categories of data we collect are as follows:

2.1 Registration Data

When you open a bef939 account, we collect: your full legal name, date of birth, Pakistani mobile number, email address, home address, and CNIC (Computerised National Identity Card) number. This data is required to create and maintain your account and to comply with Know Your Customer (KYC) obligations under our licensing framework.

2.2 Identity Verification Documents

To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, bef939 may request copies of documentary evidence including: CNIC scan, proof of address (utility bill or bank statement), and payment method verification documents. These documents are processed by our regulated KYC verification partner and stored securely.

2.3 Financial Data

bef939 collects records of your deposit and withdrawal transactions, the payment methods used (including JazzCash wallet identifier, EasyPaisa mobile number, or bank account details as applicable), transaction amounts in PKR, and timestamps. We do not store full payment card numbers or passwords for third-party financial applications.

2.4 Gaming Activity Data

We collect records of all gaming sessions on bef939, including: games played, bet amounts, win/loss outcomes, sports betting selections, session duration, and IP address at the time of each session. This data is used for account management, responsible gaming monitoring, fraud prevention, and regulatory reporting.

2.5 Technical & Device Data

bef939 automatically collects technical information when you access the platform, including: IP address, device type and operating system, browser type and version, screen resolution, device identifier, and network information. This data is used for security monitoring, fraud detection, platform optimisation, and user experience improvement.

2.6 Communication Data

Records of your communications with bef939 support — including live chat transcripts, email correspondence, and any complaint submissions — are retained for quality assurance, staff training, and dispute resolution purposes.

3How bef939 Uses Your Personal Data

bef939 uses personal data collected from Pakistani players for the following specific purposes:

• Account administration: Creating, maintaining, and managing your bef939 account, including processing your login sessions, balance management, and account preferences.
• Identity verification: Conducting KYC checks as required under our licensing obligations to confirm your identity and age (21+).
• Payment processing: Facilitating deposits via JazzCash, EasyPaisa, Raast, and bank transfers, and processing withdrawal requests to your verified payment method.
• Fraud prevention and security: Monitoring account activity for unusual patterns, investigating potential fraud, preventing unauthorised account access, and complying with AML/CTF obligations.
• Responsible gaming: Monitoring gaming behaviour to identify patterns potentially indicative of problem gambling and to administer responsible gaming tools (deposit limits, self-exclusion, reality checks).
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance with account-related issues via live chat and email.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications.
• Legal compliance: Meeting our obligations under applicable gaming regulations, financial crime prevention legislation, and data protection requirements.
• Platform improvement: Analysing aggregated and anonymised usage data to improve bef939's game lobby, payment flows, mobile interface, and overall user experience for Pakistani players.

4Legal Bases for Processing

bef939 processes your personal data only where a valid legal basis exists. The legal bases we rely upon for each category of processing are as follows:

• Contractual necessity: Processing required to perform our contract with you — including account creation, payment processing, game access, and customer support.
• Legal obligation: Processing required to comply with applicable law — including KYC verification, AML/CTF reporting, data retention requirements imposed by our gaming licence, and age verification.
• Legitimate interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and improving our services — where those interests are not overridden by your own data protection rights.
• Consent: Processing for marketing communications, optional cookies, and any processing not covered by the bases above — where we have obtained your freely given, specific, and informed consent. You may withdraw consent at any time without adverse consequences.

5Data Sharing with Third Parties

bef939 does not sell your personal data. We share personal data with third parties only where this is necessary for legitimate operational, legal, or contractual purposes. The categories of third-party recipients are:

5.1 Payment Processors

To process your JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank transactions, we share transaction data with the relevant payment service providers. These providers process data under their own privacy policies and are required to maintain appropriate security standards.

5.2 Identity Verification Providers

bef939 uses regulated third-party KYC service providers to verify player identities and conduct AML screening. These providers receive the personal and documentary data required to perform verification checks under contractual data processing agreements with bef939.

5.3 Game Software Providers

Licensed game software suppliers whose content is hosted on bef939 may receive anonymised gaming session data for the purposes of game performance monitoring and regulatory compliance. These providers do not receive your personal identity data unless specifically required under their own licensing obligations.

5.4 Regulatory and Law Enforcement Authorities

bef939 will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory demand. Such disclosures are made on the minimum data necessary basis and are recorded internally.

5.5 Professional Advisers

Legal counsel, auditors, and compliance consultants engaged by bef939 may access personal data on a strictly confidential, need-to-know basis for purposes of legal advice, financial audit, or compliance review.

6Cookies & Tracking Technologies

bef939 uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. The categories of cookies we use are:

6.1 Strictly Necessary Cookies

These cookies are essential for the bef939 platform to function and cannot be disabled. They manage your login session, maintain your account state, enable the live chat interface, and support payment processing security. No consent is required for strictly necessary cookies.

6.2 Analytics Cookies

With your consent, bef939 uses analytics cookies to understand how players navigate the platform — which game categories are most visited, where users encounter difficulty in the deposit flow, and how mobile performance compares across devices. This data is processed in aggregate and anonymised form. You may decline analytics cookies without affecting platform functionality.

6.3 Preference Cookies

Preference cookies remember your settings and choices — such as language preference, game lobby filters, and notification settings — so you do not need to reconfigure them each time you log in to bef939.

6.4 Cookie Management

You can manage your cookie preferences at any time via your browser settings or through the cookie preference centre accessible on the bef939 platform. Disabling non-essential cookies will not prevent you from accessing the core features of bef939.

7Data Security

bef939 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bef939 servers;
• Encryption of stored sensitive data including identity verification documents and payment records at rest;
• Multi-factor authentication systems for staff accessing player data in administrative systems;
• Role-based access controls limiting internal access to personal data on a strictly need-to-know basis;
• Intrusion detection systems and continuous security monitoring of the bef939 platform infrastructure;
• Regular penetration testing and security audits conducted by independent qualified security professionals;
• Incident response procedures that include notification protocols in the event of a confirmed data breach.

While bef939 implements all reasonably practicable security measures, no online system can guarantee absolute security. You are also responsible for maintaining the security of your bef939 login credentials and should never share your password or OTP codes with any third party.

8Data Retention

bef939 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, after which it is securely deleted or anonymised. The principal retention periods applicable to bef939 player data are:

• Active account data: Retained for the duration of the player's active account relationship with bef939.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure, as required under AML/CTF regulatory obligations.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in accordance with financial record-keeping requirements.
• Gaming session records: Retained for a minimum of three (3) years for regulatory and responsible gaming audit purposes.
• Support communications: Retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of the consent, plus three (3) years following withdrawal of consent, as evidence of lawful processing.

Requests to delete data prior to the expiry of legally required retention periods will be considered on a case-by-case basis, but bef939 may be unable to fulfil deletion requests where retention is mandated by law or regulatory requirement.

9Your Data Protection Rights

As a bef939 player, you hold the following rights in respect of your personal data. These rights may be exercised by contacting the bef939 support team. We will respond to all valid requests within thirty (30) days of receipt.

To exercise any of the above rights, please contact the bef939 support team via live chat or by emailing [email protected]. Please note that this email address is displayed for identification purposes only and is not a clickable link. Include your registered mobile number and a description of your request. Identity verification may be required before your request is processed.

10Children & Minors — Strict 21+ Policy

If bef939 becomes aware that personal data has been collected from an individual under the age of 21 — whether through self-reporting, parental notification, or verification failure — we will immediately suspend the account, delete or anonymise all associated personal data to the extent permitted by law, and report the matter to relevant authorities where legally required.

Parents and guardians who believe that a minor in their care may have registered a bef939 account or provided personal data to bef939 should contact our support team immediately. We take such reports seriously and will act without delay.

11International Data Transfers

bef939 operates an internationally distributed platform infrastructure. This means your personal data may be transferred to and processed in countries outside Pakistan. Such transfers are made to countries where bef939 operates server infrastructure, where our third-party KYC and payment processing partners are located, or where our licensing authority requires data to be held.

In all cases, bef939 ensures that international data transfers are subject to appropriate safeguards — including contractual data processing agreements with receiving parties that impose data protection standards consistent with applicable international requirements. We do not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal information.

Where you have questions about the specific countries to which your data may be transferred, you may submit a query to the bef939 support team and we will provide a response tailored to your account.

12Amendments to This Privacy Policy

bef939 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or regulatory guidance, or improvements to our platform operations. When material changes are made to this Policy, bef939 will notify registered players via the mobile number or email address associated with their account, with a minimum of seven (7) days' notice before the revised Policy takes effect.

The date at the top of this Privacy Policy ("Effective Date") indicates when the current version came into force. We encourage Pakistani players to review this Policy periodically to remain informed of how bef939 handles their personal data. Continued use of the bef939 platform following the effective date of a revised Policy constitutes acceptance of the revised terms.

All previous versions of the bef939 Privacy Policy are archived internally and can be made available upon written request to our support team.

13Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which bef939 processes your personal data, please contact our support team through any of the following channels:

• Live Chat: Available 24/7 via the bef939 platform — the fastest route to a response on any privacy-related query.
• Email: [email protected] — displayed here for informational purposes; this is a plain-text address and is not a clickable link.

bef939 commits to acknowledging all privacy-related enquiries within 48 hours and to providing a substantive response within 30 days. Complex requests — particularly those involving large volumes of personal data or requiring cross-departmental review — may take longer, in which case we will provide an interim status update within the initial 30-day period.

Where you believe bef939 has not handled your personal data in accordance with this Policy or applicable law, and your complaint has not been satisfactorily resolved through our internal process, you retain the right to escalate your complaint to the relevant supervisory authority or seek a legal remedy through courts of competent jurisdiction.