bit393 Privacy Policy

Last Updated: 1 January 2026

This Privacy Policy ("Policy") describes how bit393 ("we", "us", or "our") collects, uses, stores, and discloses personal information about you when you access or use the bit393 website, mobile application, and any associated services (collectively, the "Platform"). By registering an account or using the Platform, you confirm that you have read, understood, and consent to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the bit393 Platform.

1 Introduction

bit393 is Pakistan's leading online casino and sports betting platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. As a platform that handles financial transactions and personally identifiable information, we take our data protection obligations extremely seriously. This Policy has been prepared to give you clear, honest visibility into our data practices — written in plain language wherever possible, with legal precision where required.

We act as the data controller for the personal information you provide to us. This means we determine the purposes for which your data is processed and the means by which that processing takes place. Where we engage third-party service providers to process data on our behalf, those providers act as data processors under our instruction and are contractually obligated to handle your data with the same level of care and confidentiality that we apply ourselves.

2 Data We Collect

bit393 collects personal information that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we may collect include:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC / passport number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address	Account communications, transaction alerts, support
Financial Data	Bank account details, JazzCash / EasyPaisa wallet IDs, transaction history	Processing deposits and withdrawals, fraud prevention
Technical Data	IP address, device type, browser type, operating system, session logs	Platform security, fraud detection, performance optimisation
Usage Data	Pages visited, games played, bets placed, session duration	Personalisation, responsible gaming monitoring, product improvement
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, quality assurance

We collect only the minimum data necessary for each stated purpose. We do not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, unless specifically required by law.

3 How We Collect Your Data

bit393 collects your personal information through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically: When you access or interact with the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar technologies.
• From third parties: We may receive information about you from identity verification providers, payment processors (such as JazzCash, EasyPaisa, HBL, and UBL), fraud prevention agencies, and regulatory bodies where we are legally required or permitted to do so.

4 How We Use Your Data

bit393 uses the personal information we collect for the following purposes:

• Account management: To create, maintain, and manage your bit393 account, including processing your registration details and verifying your identity.
• Service delivery: To allow you to access and use all features of the Platform, including cricket betting, live casino games, slots such as those in our Slot section, fishing games like King of Fishing, and card games like Dragon Tiger Luck.
• Payment processing: To facilitate deposits and withdrawals via your chosen payment method, and to maintain accurate transaction records.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and other legal and regulatory requirements.
• Responsible gaming: To monitor your gaming behaviour and intervene where necessary to prevent or address problem gambling, including enforcing deposit limits, cooling-off periods, and self-exclusion requests.
• Customer support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bit393 products and services, where you have provided your consent to receive such communications.
• Platform improvement: To analyse usage patterns and feedback in order to improve the design, performance, and content of the bit393 Platform.

5 Legal Basis for Processing

bit393 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing that is required to perform our contract with you — i.e., to provide you with the services you have registered to access.
• Legal obligation: Processing that is required for us to comply with applicable laws and regulations, including AML, KYC, and age verification requirements.
• Legitimate interests: Processing that is in our legitimate business interests, such as preventing fraud, securing the Platform, and improving our products — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

bit393 does not sell, rent, or trade your personal information to third-party marketers. We may, however, share your data with the following categories of recipients in specific, controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard — solely for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and document verification services engaged to confirm your identity and age in compliance with regulatory requirements.
• Fraud prevention agencies: Organisations that assist us in detecting and preventing fraudulent activity, money laundering, and other financial crimes.
• Technology and hosting providers: Cloud infrastructure, data storage, and platform technology vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Government agencies, regulators, courts, or law enforcement bodies where we are legally required or compelled to disclose information.
• Professional advisers: Lawyers, auditors, and consultants bound by professional confidentiality obligations, where disclosure is necessary for their legitimate services.

All third-party data processors engaged by bit393 are contractually required to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

7 Cookies & Tracking Technologies

bit393 uses cookies and similar tracking technologies (such as pixel tags and web beacons) to enhance your experience on the Platform and to collect analytical data. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and remembering your preferences. These cannot be disabled without affecting core functionality.
• Performance & analytics cookies: Used to collect anonymised data about how visitors use the Platform, helping us identify areas for improvement. This data is aggregated and does not identify individual users.
• Functionality cookies: Allow the Platform to remember choices you have made (such as language or display preferences) to provide a more personalised experience.
• Marketing cookies: Used — only with your consent — to deliver relevant promotional content. These cookies track your activity across sessions to build a profile of your interests.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the Platform. For a full list of cookies in use, please refer to our Cookie Notice available within your account settings.

8 Data Retention

bit393 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention principles are as follows:

• Active account data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, in compliance with applicable AML and financial record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for a minimum of five (5) years following the conclusion of the customer relationship.
• Customer support communications: Retained for a period of two (2) years from the date of the final communication, unless a longer period is required for dispute resolution.
• Marketing data: Retained until you withdraw your consent or request deletion, whichever is earlier.
• Technical logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

bit393 implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Strong encryption and hashing algorithms for stored passwords and sensitive account information.
• Role-based access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable legal requirements.

While bit393 takes all reasonable steps to protect your data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You also play an important role in keeping your account safe — please use a strong, unique password and never share your login credentials with anyone.

10 Your Privacy Rights

Depending on applicable law and your circumstances, you may have the following rights with respect to your personal data held by bit393:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to erasure: In certain circumstances, you may request the deletion of your personal data. Note that this right may be limited where retention is required by law or for legitimate business purposes such as fraud prevention.
• Right to restriction: You may request that we limit the processing of your data in certain circumstances, such as while a dispute regarding its accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling, or to direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected]. We will acknowledge your request within 48 hours and aim to provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for the delay.

11 Children's Privacy

The bit393 Platform is strictly for adults. We do not knowingly collect personal data from individuals under the age of 21 years. Our registration process includes age verification checks specifically designed to prevent minors from creating accounts.

If you believe that a minor has provided us with personal information or has registered on the Platform in violation of our age requirements, please contact us immediately at [email protected]. Upon confirmation, we will take immediate steps to delete the relevant data and close the account. bit393's responsible gaming commitment extends to the absolute protection of minors from gambling-related harm.

12 Marketing Communications

With your prior consent, bit393 may send you promotional emails, SMS messages, or in-app notifications about bonuses, new games, special events, and other updates related to the Platform. You retain full control over these communications at all times:

• You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any promotional email, or by updating your notification preferences in your account settings.
• You may also contact [email protected] directly to request removal from our marketing lists.
• Opting out of marketing communications will not affect the delivery of transactional messages relating to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

bit393 does not engage in unsolicited bulk messaging or spam. All marketing communications are sent only to players who have opted in to receive them at the time of registration or subsequently through their account settings.

13 Changes to This Policy

bit393 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes to this Policy, we will:

• Post the revised Policy on this page with an updated "Last Updated" date.
• Send a notification to your registered email address where the changes are significant and may materially affect your rights.

We encourage you to review this Policy periodically to stay informed about how bit393 is protecting your information. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit393 handles your personal data, please reach out to our dedicated privacy support team:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 48 hours for general queries; within 30 days for formal data rights requests

Please include "Privacy Request" in the subject line of your email, along with your registered username and a clear description of your query or request. This helps our team prioritise and route your message to the appropriate specialist without delay.