Privacy Policy — bn9 Platform

bn9 ("the Platform", "we", "us", "our") operates the online casino and sports betting platform available at bn9.app. bn9 is the data controller responsible for the personal information collected from players and visitors who access and use our platform, including Pakistani users across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other regions of Pakistan.

This Privacy Policy governs the collection, processing, storage, sharing, and protection of personal data by bn9 in connection with the provision of our gaming and betting services. It applies to all registered account holders, prospective players, and casual visitors to the bn9 website.

By registering an account with bn9 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the platform and do not create an account.

bn9 collects personal data that is necessary to provide our online casino and sports betting services responsibly and in compliance with applicable regulatory requirements. The categories of personal data we collect are as follows:

We apply the principle of data minimisation: bn9 only collects data that is directly necessary for the purposes listed above. We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, or health data) unless specifically required by applicable law.

bn9 collects personal data through a number of channels, both directly from players and automatically through the operation of our platform:

• Account Registration: When you create a bn9 account, you directly provide identity and contact data including your name, date of birth, email address, and Pakistani mobile number.
• KYC Verification: When you submit documentation to verify your identity (such as a CNIC copy or proof of address), we collect and process the personal data contained in those documents.
• Deposits & Withdrawals: Financial data is collected when you initiate transactions through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20.
• Gameplay: Our platform automatically records your gaming activity as you play casino games, place sports bets, or interact with live dealer tables.
• Cookies & Tracking Technologies: Technical data is collected automatically through cookies, web beacons, and similar technologies when you browse the bn9 website. See Section 07 for full details.
• Customer Support Interactions: When you contact our support team via live chat or email, we record the content of those communications to assist with your query and improve our service.
• Responsible Gaming Tools: If you use bn9's responsible gaming tools such as deposit limits, self-exclusion, or session reminders, we record these settings and activations as part of your account profile.

bn9 uses the personal data collected from Pakistani players for the following specific and legitimate purposes:

• Account Management: To create, maintain, and administer your bn9 player account, including processing login authentication and managing your account preferences.
• Age & Identity Verification: To confirm that you are aged 21 or over, as required by our responsible gaming obligations, and to verify your identity in compliance with Know Your Customer (KYC) standards.
• Service Delivery: To provide the core casino gaming and sports betting services you have registered to use, including processing bets, settling wins, awarding bonuses, and managing your PKR wallet balance.
• Payment Processing: To process deposits and withdrawals through your chosen Pakistani payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20) accurately and securely.
• Fraud & AML Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, bonus abuse, and other prohibited activities on the platform.
• Responsible Gaming: To monitor gaming activity for patterns that may indicate problem gambling behaviour, and to administer the responsible gaming tools available to players including self-exclusion, deposit limits, and session reminders.
• Customer Support: To respond to your queries, complaints, and requests efficiently and accurately through our live chat and email support channels.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve the features, performance, and user experience of the bn9 platform.
• Legal Compliance: To fulfil bn9's obligations under applicable laws, regulations, and licensing requirements, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: Where you have explicitly opted in, to send you personalised promotional communications about bn9 bonuses, PSL season special offers, new game launches, and platform updates via email or SMS.

bn9 processes personal data only where a valid legal basis exists. The following legal bases apply to our data processing activities:

• Contractual Necessity: The majority of our data processing — account management, payment processing, bet settlement, KYC verification — is necessary to perform the contractual obligations arising from your player agreement with bn9 under these Terms & Conditions.
• Legal Obligation: Certain processing activities, including AML transaction monitoring, identity verification, and data retention for regulatory audit purposes, are required by applicable law and licensing conditions. bn9 cannot waive these obligations at a player's request.
• Legitimate Interests: bn9 processes technical data and gaming activity logs based on our legitimate interest in maintaining platform security, preventing fraud, and improving service quality. We ensure these interests do not override your fundamental privacy rights.
• Consent: Marketing communications and non-essential cookie placement are based entirely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

bn9 does not sell, rent, or trade your personal data to third parties for commercial purposes. Data sharing is limited to the following specific categories of recipients, each bound by contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 processing partners receive the minimum financial data necessary to execute your deposit and withdrawal transactions.
• KYC & Identity Verification Providers: Where bn9 uses third-party identity verification services to process your CNIC and documentation, those providers act as data processors under contractual agreements that prohibit them from using your data for any other purpose.
• Fraud Prevention Services: bn9 may share technical data (such as IP addresses and device fingerprints) with fraud prevention and anti-money laundering database providers to cross-reference against known risk indicators.
• Game Software Providers: Casino game providers whose titles are available on bn9 may receive anonymised session data for technical integration and game performance purposes. These providers do not receive personally identifiable information.
• Regulatory & Law Enforcement Authorities: bn9 will disclose personal data to government agencies, regulatory bodies, or law enforcement authorities where legally required to do so — for example, in response to a court order, regulatory investigation, or mandatory AML reporting obligation.
• Corporate Transactions: In the event of a merger, acquisition, or sale of bn9's assets, player data may be transferred to the successor entity. Players will be notified of any such change in accordance with applicable data protection requirements.

All third-party data processors engaged by bn9 are required to process your data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection laws.

The bn9 website uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by your browser when you visit our site. bn9 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential to the operation of the bn9 platform. They enable core functions such as player login sessions, security token management, and shopping cart / wallet state. These cookies cannot be disabled without breaking core site functionality.
• Functional Cookies: These allow the platform to remember your preferences — such as your preferred language, display settings, and saved game categories — to provide a more personalised experience on return visits.
• Analytical Cookies: bn9 uses analytics tools to collect aggregated, anonymised data about how players interact with the platform — which pages are visited most frequently, typical session durations, and navigation paths. This data helps us improve the site experience. You may opt out of analytical cookies through your account settings or browser.
• Security Cookies: Used for fraud detection, bot mitigation, and maintaining session integrity across the bn9 platform.

bn9 does not use third-party advertising cookies or allow external ad networks to place tracking cookies on our platform. We do not build advertising profiles based on player data.

bn9 retains personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, or as required by applicable regulatory obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active bn9 account is retained for the duration of the player's registration, plus a minimum period of 5 years following account closure to meet anti-money laundering record-keeping requirements.
• Financial Transaction Records: Deposit and withdrawal records, including associated payment method data, are retained for a minimum of 5 years from the date of the transaction in accordance with AML compliance standards.
• KYC Documentation: Identity verification documents (CNIC copies, proof of address) are retained for 5 years following account closure. Original document images are securely deleted once this period expires.
• Customer Support Logs: Live chat transcripts and support email correspondence are retained for 2 years from the date of the interaction, unless the subject matter relates to an ongoing dispute or legal matter, in which case records are retained until the matter is fully resolved.
• Responsible Gaming Records: Self-exclusion records and deposit limit settings are retained for a minimum of 5 years to prevent re-registration by excluded players and to demonstrate regulatory compliance.
• Marketing Consent Records: Records of your marketing opt-in or opt-out decisions are retained for the duration of your account and 2 years thereafter, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is either securely deleted or permanently anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical analysis.

bn9 respects your rights in relation to the personal data we hold about you. The following rights are available to all registered players, including those based in Pakistan:

• Right of Access: You have the right to request a copy of the personal data bn9 holds about you. We will provide this in a structured, commonly used format within 14 business days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly through your account settings, or contact support for other corrections.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is subject to overriding legal obligations — bn9 is required to retain certain data (such as financial transaction records) for regulatory compliance periods regardless of erasure requests.
• Right to Restriction of Processing: You may request that bn9 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your personal data in a portable, machine-readable format, and to transmit that data to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests, including any profiling related to that basis. bn9 will assess the objection and cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

The bn9 platform is strictly intended for adults aged 21 and above. bn9 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Our registration process and KYC verification procedures are specifically designed to enforce this age restriction.

If bn9 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to:

• Permanently close the relevant account without delay.
• Securely delete all personal data associated with the minor's account from our active systems.
• Return any deposited funds to the payment source used, where technically feasible.
• Forfeit any bonus amounts or winnings generated on the account.

bn9 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes the following safeguards:

• Encryption: All data transmitted between your browser or app and the bn9 platform is protected by TLS 1.3 encryption. Sensitive data stored on our servers — including identity documents and financial records — is encrypted at rest using AES-256.
• Access Controls: Access to personal player data within bn9's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required for their specific role.
• Two-Factor Authentication: Players are strongly encouraged to enable two-factor authentication (2FA) on their bn9 accounts. bn9 staff accounts that access player data require 2FA as a mandatory security control.
• Intrusion Detection: bn9 operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Audits: Our platform undergoes periodic security assessments and penetration testing by qualified independent security professionals.
• Incident Response: bn9 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player privacy, affected players will be notified promptly and relevant authorities informed in accordance with applicable requirements.

While bn9 takes all reasonable precautions to protect your data, no internet transmission or electronic storage method is completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for using a secure network connection when accessing the bn9 platform.

bn9 operates internationally, and your personal data may be stored or processed on servers located outside Pakistan. Where personal data is transferred to servers or service providers in other countries, bn9 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable international data protection frameworks.

Safeguards used for international transfers include:

• Standard contractual clauses incorporated into agreements with all data processors operating outside Pakistan.
• Restricting international transfers to jurisdictions that maintain adequate data protection standards under recognised international frameworks.
• Implementing encryption and pseudonymisation measures on data transferred internationally to minimise risk in transit.

If you have questions about the specific countries to which your data may be transferred, or the safeguards in place for such transfers, please contact our privacy team at [email protected].

bn9 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made.

Where changes are material — meaning they significantly affect how we collect or use your personal data — bn9 will provide advance notice via the email address associated with your account and/or a prominent notice on the bn9 website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the bn9 platform following the publication of any revised policy constitutes your acknowledgement of the changes. If you object to any revision, you should cease using the platform and contact our team to discuss your account closure options.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data bn9 holds about you, our privacy team is available to assist through the following channels:

When contacting us regarding a data rights request, please include your registered bn9 username and a clear description of your request so our team can verify your identity and process your request efficiently. We may ask for additional verification before actioning sensitive data requests such as erasure or data portability.

bn9 is committed to resolving all privacy concerns promptly and transparently. We treat every privacy enquiry with the same seriousness and discretion that we apply to the security of the platform itself.