bit339 Privacy Policy
— Your Data, Your Rights

bit339 collects personal data in several categories, depending on how you interact with the platform. The table below summarises the main categories of personal data we process:

bit339 collects personal data through several distinct channels, all of which are disclosed to you at the point of collection:

• Account registration: When you create a bit339 account you directly provide identity and contact data including your name, date of birth, Pakistani mobile number, and email address.
• KYC verification: When requested, you upload identity documents such as your CNIC, passport, or proof of address to complete the verification process required by our licensing obligations.
• Deposits and withdrawals: When you transact through payment providers like JazzCash, EasyPaisa, HBL, or Meezan Bank, those providers share transaction reference data with bit339 to reconcile your wallet balance.
• Platform activity: As you use bit339 — browsing games, placing bets on PSL fixtures, spinning slots, or accessing live dealer tables — our systems automatically record usage data to support responsible gaming monitoring and fraud detection.
• Cookies and tracking technologies: bit339 uses cookies and similar technologies on its web interface. See Section 7 for full details of our cookie practices.
• Customer support interactions: When you contact bit339 via live chat or email, your communications are recorded for quality assurance and dispute resolution purposes.
• Third-party verification services: bit339 may use third-party identity verification or fraud screening services that return data signals to us in connection with a specific account check. These services do not receive more data than is necessary for the check.

bit339 processes your personal data only where a valid lawful basis exists. The primary lawful bases we rely on are: contractual necessity (processing required to provide you with the bit339 service), legal obligation (processing required by our gaming licence, AML regulations, or other applicable law), legitimate interests (fraud detection, security, platform improvement), and consent (marketing communications, non-essential cookies).

The specific purposes for which bit339 processes your personal data are:

• Creating and managing your bit339 account.
• Verifying your identity and age (21+ requirement) as mandated by our international gaming licence.
• Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20.
• Complying with Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.
• Detecting, investigating, and preventing fraud, bonus abuse, collusion, and other prohibited activities.
• Monitoring gaming activity to support responsible gaming tools, including deposit limits, self-exclusion, and cool-off periods.
• Providing customer support via live chat and email.
• Sending transactional communications (account alerts, withdrawal confirmations, security notifications).
• Sending marketing communications where you have given explicit consent, and suppressing such communications during self-exclusion periods.
• Improving platform performance, game selection, and user experience.
• Complying with requests from licensing authorities, courts, or law enforcement agencies where legally required.

bit339 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only in the following strictly defined circumstances:

• Payment processors: Transaction data is shared with payment service providers (such as JazzCash, EasyPaisa, and partner banking institutions including HBL and UBL) solely to process your deposits and withdrawals.
• Game software providers: When you play a game on bit339, the relevant game provider may receive your session identifier and stake data to operate the game and return results. Game providers are contractually prohibited from using this data for any other purpose.
• Identity verification services: KYC document data may be shared with licensed identity verification partners to authenticate your CNIC or passport against official records.
• Fraud prevention and security: Technical data (IP address, device fingerprint) may be shared with fraud detection service providers to identify suspicious activity and protect the platform.
• Licensing authority: bit339's licensing authority may request access to player data as part of its regulatory oversight functions. We are legally obligated to comply with such requests.
• Law enforcement: bit339 will disclose personal data to police, financial intelligence units, or other government authorities where legally required to do so — for example in connection with a court order, criminal investigation, or AML reporting obligation.
• Professional advisers: Lawyers, auditors, and insurers acting on bit339's behalf may access limited personal data under strict confidentiality obligations.

All third parties to whom bit339 discloses personal data are required to process that data lawfully, maintain appropriate security standards, and use it only for the specified purpose. bit339 remains responsible for ensuring these contractual obligations are enforced.

bit339 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our licensing obligations. The general retention periods we apply are as follows:

When the applicable retention period expires, bit339 will securely delete or anonymise the relevant data so that it can no longer be associated with your identity. Anonymised aggregate data (e.g. statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data.

bit339 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and bit339 servers.
• AES-256 encryption for sensitive data stored at rest in our databases.
• Two-factor authentication (2FA) available and encouraged for all bit339 accounts, using your registered Pakistani mobile number.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. bit339 staff cannot access your account data unless required for their specific operational role.
• Penetration testing: bit339 engages independent security researchers to conduct regular penetration tests on the platform infrastructure.
• Incident response: bit339 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with the notification requirements of our licensing jurisdiction.

While bit339 takes every reasonable precaution to secure your data, no internet-based service can guarantee absolute security. You also play an important role in protecting your own data — please keep your bit339 password strong and unique, enable 2FA, and never share your login credentials with anyone.

bit339 uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, display settings, and last-visited game lobby. These improve your experience but are not strictly required.
• Analytics cookies: Collect anonymised data about how users navigate bit339 — which pages are visited most, session duration, and common exit points. This data helps us improve the platform. You may opt out of analytics cookies via the cookie settings in your account dashboard.
• Security cookies: Used to detect fraudulent login attempts and unusual activity patterns. These are considered necessary for platform security and cannot be disabled.

bit339 does not currently use third-party advertising or retargeting cookies. We do not place tracking pixels that report your browsing activity to external advertising networks.

You can manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may impair the functionality of the bit339 platform, particularly session management and 2FA flows.

As a bit339 player, you hold a number of rights in respect of your personal data. bit339 is committed to honouring these rights promptly and transparently. You may exercise any of the following rights by contacting [email protected] or via the live chat from your account dashboard:

bit339 will respond to all rights requests within 30 calendar days. In complex cases this may be extended by a further 30 days, in which case we will inform you of the extension and the reason for it.

bit339 is strictly an adults-only platform. The minimum age to register and use bit339 is 21 years old. bit339 does not knowingly collect personal data from any person under the age of 21, and does not permit anyone under 21 to register or use the platform in any capacity.

As part of our KYC verification process, all players are required to provide proof of age — typically via a CNIC (which displays date of birth) or passport. Accounts that cannot verify age compliance will be suspended pending verification, and any deposits held in such accounts will be refunded to the originating payment method without permitting any gambling activity.

If bit339 discovers or is notified that a person under the age of 21 has registered and provided personal data, we will immediately suspend the account, delete all personal data associated with that account to the extent permitted by law, and return any funds to the account holder's parent or guardian upon verified request.

bit339 will only send you promotional communications — including emails about bonuses, PSL betting promotions, new slot releases, and reload offers — where you have given your explicit consent to receive such communications at the point of registration or via your account settings.

You may withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link in any marketing email we send you.
• Updating your communication preferences directly in your bit339 account dashboard under Settings > Notifications.
• Contacting bit339 support via live chat or emailing [email protected] and requesting removal from marketing lists.

Important: Opting out of marketing communications does not affect transactional messages. bit339 will continue to send you account-related notifications (security alerts, withdrawal confirmations, KYC requests, responsible gaming communications) regardless of your marketing preferences, as these are necessary for the operation of your account.

Players who have activated a self-exclusion through the responsible gaming tools will be automatically suppressed from all marketing communications for the duration of the exclusion period. This suppression is applied across email and any other registered communication channels.

bit339 operates internationally and your personal data may be stored or processed on servers located outside Pakistan. Where data is transferred to countries that do not provide a level of data protection equivalent to that required by our licensing jurisdiction, bit339 ensures appropriate safeguards are in place — such as standard contractual clauses or binding corporate rules — before any transfer takes place.

Specifically, data may be transferred to the jurisdiction in which bit339's licensing authority is located, to the data centres hosting the platform infrastructure, and to the registered offices of key third-party service providers (payment processors, game providers, KYC services). All such transfers are governed by data processing agreements that require the recipient to apply adequate data protection standards.

By registering on bit339, you acknowledge that your personal data may be transferred internationally in the manner described above. If you have concerns about international data transfers, you may raise them with the bit339 data protection contact listed in Section 12.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bit339 has handled your personal data, please contact our data protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in the subject line to ensure your message is routed to the correct team.
• Live chat: Available 24/7 from your bit339 account dashboard. Average response time is 3–5 minutes.

bit339 will acknowledge all privacy-related requests within 72 hours and aim to resolve them within 30 calendar days. If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the licensing jurisdiction, or to seek independent legal advice.