Privacy Policy — 9kbss

This Privacy Policy ("Policy") describes how 9kbss ("Platform", "we", "us", "our"), operating the website accessible at https://9kbss.cam, collects, uses, stores, protects and discloses the personal data of individuals ("User", "you", "your") who access or register on the platform.

9kbss is an online casino and sports betting information platform primarily serving adult players in Pakistan, including users based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar and elsewhere across the country.

We are committed to handling your personal data responsibly, lawfully, and transparently. This Policy is written in plain English so that all users — regardless of their familiarity with data protection language — can understand precisely how their data is managed.

By registering an account on 9kbss, depositing funds, placing a wager, or otherwise using our Services, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, CNIC number, IP address, device identifiers and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transfer or deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, 9kbss.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Sensitive Data" means Personal Data that warrants heightened protection, such as identity document data, financial information, and biometric verification data.
• "Cookies" means small text files stored on your device by a web browser to record session state, preferences, and analytics data.
• "Services" means all features, games, betting markets, account tools, and related functionality accessible through 9kbss.

9kbss acts as the Data Controller for all Personal Data collected through the platform. We determine the purposes for which your data is Processed and the means by which that Processing is carried out.

Where third-party service providers Process data on our behalf — for example, payment processors, identity verification providers, or platform analytics tools — those providers act as Data Processors under contractual agreements that bind them to process your data only according to our documented instructions and to maintain appropriate security standards.

We collect Personal Data in the following categories, depending on the nature and extent of your interaction with 9kbss:

Information you provide when creating an Account, including: full legal name, date of birth, email address, country and city of residence, preferred currency (e.g., PKR), and chosen username.

Documents and information submitted during the KYC process, which may include: scanned CNIC or passport, proof of address (utility bill or bank statement), selfie or liveness photograph, and payment method verification evidence.

Details of deposits, withdrawals, bonus credits and betting activity, including transaction amounts in PKR, timestamps, payment method identifiers, and transaction reference numbers. Note: 9kbss does not store full card numbers or complete wallet credentials — these are processed by PCI-compliant payment processors.

Automatically collected data including: IP address, device type, operating system, browser type, session duration, pages visited, game activity logs, and geolocation data (at country or city level where available).

Records of communications between you and our support team, including live chat transcripts, support email content, and any attachments submitted through official support channels.

Records of any self-exclusion requests, deposit limit settings, cooling-off periods or responsible gambling tool activations associated with your Account.

We process your Personal Data only for the specific, documented purposes listed below. Each purpose is supported by a legitimate legal basis:

• Account Creation & Service Delivery: Processing is necessary to perform the contract between you and 9kbss (i.e., provision of the Services you registered to access).
• Identity Verification & KYC Compliance: Processing is required to comply with legal obligations under anti-money laundering regulations and operator licensing requirements.
• Fraud Detection & Security: Processing is necessary for the legitimate interests of 9kbss and its users in preventing fraud, identity theft, and financial crime.
• Payment Processing: Processing is necessary to perform the deposit and withdrawal services you have requested.
• Responsible Gambling Management: Processing is necessary to comply with responsible gambling obligations and to protect the vital interests of users who may be at risk of gambling harm.
• Customer Support: Processing is necessary to respond to support queries and resolve complaints in accordance with our contractual obligations to you.
• Platform Analytics & Improvement: Processing is based on our legitimate interest in understanding how the platform is used in order to improve its performance, usability and content for Pakistani players.
• Marketing Communications (where opted in): Processing is based on your explicit consent, which may be withdrawn at any time by updating your Account notification settings.

9kbss processes Personal Data using the following methods and systems. All processing operations are governed by internal data handling policies and contractual obligations with Data Processors:

Certain processing activities are carried out automatically, including: real-time fraud detection algorithms triggered by unusual transaction patterns; automated age verification cross-referencing during KYC; and session monitoring for responsible gambling tools such as session time alerts and loss limit triggers.

KYC document review, support ticket resolution, and high-value withdrawal authorisation are handled by trained personnel subject to confidentiality obligations. Manual reviewers access only the minimum Personal Data necessary to complete each task.

We engage third-party Data Processors for specific functions including identity verification, payment processing, and platform analytics. All processors are bound by data processing agreements that limit their use of your data to the purpose for which it was shared and require them to maintain appropriate technical and organisational security measures.

We share Personal Data only in the following limited circumstances:

• Payment Processors: Transaction data is shared with licensed payment processors to facilitate deposits and withdrawals. These processors operate independently and are bound by their own privacy and PCI compliance obligations.
• Identity Verification Providers: KYC data including CNIC, passport images and liveness photographs are shared with certified identity verification providers for the sole purpose of confirming your identity and age.
• Regulatory & Legal Authorities: We may disclose Personal Data to law enforcement, regulatory bodies, financial intelligence units or courts where required to do so by applicable law, a court order, or a formal regulatory request.
• Fraud Prevention Networks: Anonymised or pseudonymised data may be shared with industry fraud prevention consortia where required to identify and prevent financial crime patterns.
• Responsible Gambling Authorities: Where required by operator licensing conditions, self-exclusion status information may be shared with cross-operator responsible gambling databases to give effect to a self-exclusion request.
• Business Succession: In the event of a merger, acquisition or sale of all or part of 9kbss, your data may be transferred to the successor entity, subject to the same data protection commitments described in this Policy.

We retain Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulatory obligation — whichever is longer. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is either securely deleted or permanently anonymised so that it can no longer be attributed to any individual.

9kbss implements layered technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS / HTTPS Encryption: All data transmitted between your device and 9kbss servers is encrypted in transit using current TLS protocols. The padlock icon in your browser confirms an active secure connection.
• Encryption at Rest: Sensitive data stored on our servers, including KYC documents and financial records, is encrypted using industry-standard algorithms.
• Access Controls: Personnel access to Personal Data is governed by role-based access controls. Staff may only access the minimum data necessary to carry out their specific functions.
• Secure KYC Portal: Identity document uploads are processed exclusively through our HTTPS-secured verification portal — users are never asked to send documents via unencrypted email or messaging applications.
• Fraud Monitoring: Automated systems monitor for unusual access patterns, account takeover attempts, and irregular transaction activity in real time.
• Penetration Testing & Audits: The platform undergoes periodic security assessments to identify and remediate vulnerabilities.

9kbss uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and analyse usage patterns. The following categories of cookies may be set:

• Strictly Necessary Cookies: Required for the platform to function — they maintain your login session, remember your language preference, and support security features. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your display preferences, responsible gambling limit settings, and game history to improve your experience across sessions.
• Analytics Cookies: Collect anonymised data about page visits, session durations, device types and navigation paths to help us understand how Pakistani users interact with the platform and where improvements are needed.
• Security Cookies: Detect and prevent fraudulent login attempts, bot activity and session hijacking.

You may manage cookie preferences through your browser settings. Note that disabling Strictly Necessary cookies will impair your ability to use the platform. 9kbss does not use third-party advertising cookies or tracking pixels for cross-site behavioural advertising.

9kbss may transfer Personal Data to third-party processors or infrastructure providers located outside Pakistan. Such transfers may occur when using cloud hosting services, identity verification platforms, or payment processing networks whose data centres are located in other countries.

Where Personal Data is transferred internationally, we take reasonable steps to ensure that an adequate level of protection is maintained, including: contractual safeguards in the form of data processing agreements; transfers to processors operating in jurisdictions with recognised data protection frameworks; and application of technical security controls that meet or exceed the standards described in Section 9 of this Policy.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you hold the following rights with respect to your Personal Data held by 9kbss:

To exercise any of these rights, submit a written request to the contact email listed in Section 16. We will acknowledge your request within a reasonable period and respond substantively within 30 days, or notify you if additional time is required. We may need to verify your identity before processing a rights request.

9kbss is strictly an adults-only platform. We do not knowingly collect Personal Data from persons under the age of 18, or under the higher minimum age required by the operator's license jurisdiction, whichever is greater.

Age verification is a mandatory step during the KYC process. Where we discover that Personal Data has been collected from a minor — whether through misrepresentation at registration or any other means — we will immediately close the associated Account, void any winnings, and delete or quarantine the minor's Personal Data in accordance with applicable safeguarding requirements.

Given that 9kbss's primary user base is in Pakistan, the following specific points apply to Pakistani users:

Pakistani users submitting CNIC documents for KYC purposes should upload documents exclusively through the secure verification portal within their Account. CNIC data is processed solely for identity verification and AML compliance purposes and is not used for any unrelated commercial purpose.

Where 9kbss references payment methods familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — these references are provided for contextual familiarity only. Financial transaction data processed via these methods is handled by the respective payment processors, who maintain their own privacy policies and PCI compliance standards. 9kbss does not share user gambling history with these payment providers. None of these institutions endorse gambling services.

9kbss does not hold a Pakistani gambling license and does not operate under the authority of any Pakistani regulatory body. We do not share user data with Pakistani government authorities except where legally compelled to do so by a valid court order or formal law enforcement request under applicable Pakistani law.

Pakistani users are solely responsible for ensuring that their access to and use of 9kbss complies with applicable Pakistani law, including the Prevention of Gambling Act, 1977, and any other relevant federal or provincial legislation. This Policy does not constitute legal advice.

9kbss reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. When a material change is made, we will update the "Last Reviewed" date at the top of this Policy and, where appropriate, notify registered Users by email or platform notification.

Your continued use of the Services following the publication of an amended Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically, particularly after receiving a notification of change.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which 9kbss handles your Personal Data, please contact our Support team using the details below. We are committed to addressing all data-related queries promptly and in good faith.

When submitting a data rights request, please include: your registered Account username, a clear description of your request (e.g., subject access, erasure, rectification), and sufficient identity information to allow us to verify your identity before processing the request. Do not include CNIC copies or passport images in emails — use the secure verification portal instead.

If you are not satisfied with our response to a data complaint, you may have the right to escalate to a supervisory authority in your jurisdiction. For Pakistani users, relevant oversight bodies may include the Federal Investigation Agency (FIA) Cyber Crime Wing or the Pakistan Telecommunication Authority (PTA), depending on the nature of the complaint.