bad939 Privacy Policy – Your Data, Fully Protected

1. Who We Are

This Privacy Policy is issued by bad939 ("we", "us", "our", "the Company"), the operator of the online casino and sports betting platform accessible at https://bad939.net ("the Platform"). bad939 is the data controller in respect of personal data collected from users who register accounts, visit the Platform, or interact with any bad939 service.

By registering a bad939 account or by continuing to use the Platform after the effective date of this Privacy Policy, you acknowledge that you have read and understood its contents and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform immediately.

2. Data We Collect

bad939 collects the following categories of personal data from registered users and Platform visitors:

2.1 Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth, used to verify that you meet the minimum age requirement of 21 years.
• Computerised National Identity Card (CNIC) number and a copy of your CNIC document where KYC verification is required.
• Passport number or other government-issued identification where CNIC is not available or where enhanced verification is required.

2.2 Contact Data

• Pakistani mobile phone number registered with your bad939 account.
• Email address associated with your bad939 account.
• City and province of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad) where provided during registration or KYC.

2.3 Financial Data

• JazzCash or EasyPaisa mobile wallet account number used for deposits or withdrawals.
• Bank account details (IBAN, account title, bank name) provided for HBL, UBL, or Meezan Bank transfers.
• USDT wallet address where cryptocurrency transactions are conducted.
• Full deposit and withdrawal transaction history, including amounts in PKR, timestamps, and payment method used.

2.4 Technical & Usage Data

• IP address and approximate geographic location derived from your IP at the time of login or transaction.
• Device type, operating system, browser type and version.
• Session duration, pages visited, games played, bets placed, and betting patterns.
• Login timestamps and logout timestamps for all bad939 sessions.

2.5 Communications Data

• Content of support tickets, live chat transcripts, and email correspondence submitted to the bad939 support team.
• Responses to any surveys, feedback requests, or promotional opt-ins where you voluntarily provide information.

3. How We Collect Your Data

bad939 collects personal data through the following means:

3.1 Direct Collection

You provide data directly to bad939 when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or voluntarily participate in surveys or promotional activities on the Platform.

3.2 Automated Collection

When you visit the bad939 Platform, our servers automatically collect technical data including your IP address, browser characteristics, device identifiers, and session behaviour. This is collected through standard server log files and, where applicable, cookies and similar tracking technologies. For full details, see Section 7 (Cookies & Tracking).

3.3 Third-Party Sources

In certain circumstances, bad939 may receive data about you from third-party sources, including:

• Payment processors such as JazzCash and EasyPaisa, who confirm the status and ownership of wallet accounts used for transactions.
• Identity verification service providers engaged to assist with CNIC-based KYC checks.
• Fraud prevention and anti-money laundering screening services that cross-reference account data against watchlists and sanctions databases.

4. Why We Process Your Data

bad939 processes your personal data for the following specific and defined purposes:

5. Legal Basis for Processing

bad939 processes your personal data under one or more of the following recognised legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your bad939 account, process your deposits and withdrawals, and deliver the gaming services you have signed up to use.
• Legal Obligation: Processing required to comply with applicable legal obligations, including anti-money laundering regulations, KYC requirements, and responses to lawful requests from competent authorities.
• Legitimate Interests: Processing carried out to pursue the legitimate interests of bad939, including fraud detection, Platform security, abuse prevention, and service improvement — provided such interests do not override your fundamental privacy rights.
• Consent: Where we rely on your consent as a legal basis — for example, for certain marketing communications — you may withdraw that consent at any time by contacting our support team or updating your account preferences.

6. Sharing Your Data

bad939 does not sell your personal data. We share personal data only in the following defined circumstances and only to the extent necessary for the stated purpose:

6.1 Service Providers

bad939 engages trusted third-party service providers who process data on our behalf under strict contractual data processing agreements. These include payment processors (JazzCash, EasyPaisa, HBL, UBL), identity verification providers, fraud screening services, cloud hosting infrastructure providers, and customer support platform operators. All such providers are contractually prohibited from using bad939 user data for any purpose other than the specific service they are engaged to provide.

6.2 Regulatory & Law Enforcement Authorities

bad939 will disclose personal data to competent regulatory, law enforcement, or governmental authorities where we are legally required to do so, including in connection with AML investigations, court orders, or lawful regulatory requests. We will, where legally permitted, endeavour to notify you of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving bad939, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

7. Cookies & Tracking

bad939 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. bad939 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your bad939 account and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised information about how users interact with the bad939 Platform, including which pages are visited most frequently and where users encounter errors. This data is used exclusively to improve Platform performance.
• Functional Cookies: Used to remember your preferences on the Platform, such as your preferred language, display settings, and game history for session continuity.
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent logins, multi-accounting, and other abusive behaviours on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core bad939 Platform features, including logging in to your account.

8. Data Retention

bad939 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention guidelines apply:

• Active Account Data: Retained for the duration of your relationship with bad939, i.e., for as long as your account remains open and active.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with standard AML record-keeping obligations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years following account closure.
• Support Communications: Customer support transcripts and email correspondence are retained for up to three (3) years following the date of the interaction.
• Technical Log Data: Server log files containing IP address and session data are retained for up to twelve (12) months, after which they are permanently deleted or anonymised.

Upon expiry of the applicable retention period, bad939 will securely delete or permanently anonymise the relevant personal data so that it can no longer be associated with an identifiable individual.

9. Data Security

bad939 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bad939 servers is encrypted using industry-standard TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including CNIC numbers, financial data, and authentication credentials — is stored in encrypted form within our secure server infrastructure.
• Access Controls: Access to personal data within bad939's internal systems is strictly limited on a need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo regular data security training.
• Two-Factor Authentication (2FA): bad939 supports two-factor authentication for player accounts to provide an additional layer of security against unauthorised access.
• Intrusion Detection & Monitoring: Our systems are continuously monitored for suspicious activity, unauthorised access attempts, and anomalous behaviour patterns.
• Penetration Testing: bad939's Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.

10. Your Privacy Rights

As a bad939 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 13:

• Right of Access: You have the right to request a copy of the personal data bad939 holds about you, including what categories of data are held, why they are held, and with whom they have been shared.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by bad939 be corrected or updated without undue delay.
• Right to Erasure: In certain circumstances — for example, where your data is no longer necessary for the purposes for which it was collected — you may request that bad939 delete your personal data. Please note that this right is subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that bad939 restrict the processing of your data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where bad939 processes your data based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling, where your fundamental rights and interests override those interests.

bad939 will respond to all valid privacy rights requests within 30 calendar days of receipt. We may request proof of identity before fulfilling a request to ensure the security of your personal data.

11. Children & Minors

The bad939 Platform is strictly intended for adults aged 21 years and above. bad939 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately suspend the associated account, freeze any funds held within it, and take steps to delete the minor's personal data from our systems as swiftly as possible.

If you are a parent or guardian and you believe that your child has registered a bad939 account or provided personal data to the Platform without your knowledge or consent, please contact our support team immediately so that we can take appropriate action.

12. Changes to This Policy

bad939 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the services we provide. When material changes are made, bad939 will notify registered users via the email address associated with their account and will update the effective date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how bad939 is protecting your personal data. Continued use of the Platform following the publication of a revised Privacy Policy constitutes your acknowledgement and acceptance of the changes.

13. Contact & Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or need to report a data protection concern, please contact the bad939 data support team. Our team is available 24 hours a day, 7 days a week, and will acknowledge your query within 24 hours.

You may reach us via the live chat feature on the bad939 Platform, or by email using the support address displayed in the footer of every page of this website. For formal privacy rights requests, we recommend contacting us by email and clearly stating your account username and the specific right you wish to exercise so that we can process your request efficiently.

bad939 is committed to resolving all data-related queries in good faith and within the timeframes set out in Section 10 of this Privacy Policy. If you remain dissatisfied with the outcome of your privacy request, you may escalate the matter to the relevant data protection or gaming regulatory authority under whose jurisdiction bad939 operates.

For full details of how to contact us, the support email address is displayed as plain text in the footer section of this page for your reference.