Privacy Policy

Introduction

bit339 ("we", "us", "our", "Operator") operates the online gaming platform accessible at bit339.cam. This Privacy Policy describes how bit339 collects, uses, stores, shares and protects the personal data of individuals who visit, register with or otherwise interact with the platform ("you", "Player", "User").

By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontin ue using the platform.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the platform. In the event of any conflict between the two documents, the Terms & Conditions shall take precedence except where this Privacy Policy expressly states otherwise.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or can be used to identify a natural person, directly or indirectly.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure and deletion.
• "Data Controller" — bit339, which determines the purposes and means by which personal data is processed.
• "Data Processor" — a third party that processes personal data on behalf of bit339 under written instructions.
• "KYC" — Know Your Customer identity and document verification procedures.
• "AML" — Anti-Money Laundering policies and obligations applicable to the platform.
• "Cookies" — small text files placed on your device by the platform to enable certain functions and collect usage data.
• "Sensitive Data" — a subset of personal data requiring heightened protection, including financial details, identity documents and payment information.

Data We Collect

bit339 collects personal data from you in a number of ways — directly when you provide it to us, automatically through your use of the platform, and occasionally from third-party sources for verification and fraud-prevention purposes.

3.1 Data You Provide Directly

• Registration Data: Name, date of birth, email address, username, password and country of residence provided when you create an account.
• KYC Documents: Government-issued photo ID (e.g. CNIC/NIC, passport, driving licence), proof of address (e.g. utility bill or bank statement) and, where required, proof of payment method ownership.
• Financial Data: Payment method details, transaction amounts and currency. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah may appear in cashier context for Pakistani users. These providers do not endorse or support bit339.
• Support Communications: Any information you share when contacting our support team by email or live chat, including your name, account details and the nature of your query.
• Responsible Gambling Data: Information you submit when setting deposit limits, loss limits, self-exclusion periods or cooling-off requests.

3.2 Data Collected Automatically

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution and language settings.
• Usage Data: Pages visited, games played, bet amounts, session duration, clickstream data and feature interactions.
• Cookies & Tracking Data: Cookie identifiers and similar tracking technologies as described in Section 9 of this policy.
• Geolocation Data: Approximate location derived from your IP address for jurisdiction verification purposes.

3.3 Data from Third Parties

• Identity Verification Providers: Data returned by third-party KYC and age-verification services to confirm your identity and eligibility.
• Fraud & AML Screening: Results of AML screening and fraud-prevention checks conducted by authorised third-party partners.
• Payment Processors: Confirmation of payment status and basic transaction metadata from payment processing partners.

Lawful Basis for Processing

bit339 processes your personal data on one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e. to create and manage your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable licensing conditions, AML regulations, KYC requirements and other legal or regulatory obligations imposed on the Operator.
• Legitimate Interests: Processing carried out for the Operator's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring and service improvement, where those interests are not overridden by your data-protection rights.
• Consent: Where we rely on your consent — for example, for certain marketing communications or optional data processing activities — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

The personal data we collect is used for clearly defined purposes aligned with the lawful bases described in Section 4. The primary purposes are:

5.1 Account Management & Service Delivery

We use your registration data and identity information to create and manage your account, authenticate your login sessions, process your deposits and withdrawals, settle your bets and gaming activity, and respond to your support requests. Without this processing, we cannot provide you with access to the platform.

5.2 Identity Verification & KYC Compliance

As required by our licensing obligations, we verify the identity, age and address of every registered player. KYC data is used to confirm eligibility, prevent underage gambling and satisfy AML obligations. We may share your KYC documents with authorised third-party verification partners for this purpose.

5.3 Fraud Prevention & Security

Technical data, device identifiers, IP addresses and behavioural data are analysed to detect and prevent fraudulent activity, account takeover attempts, money laundering, bonus abuse and other prohibited activities. This processing is necessary for the integrity of the platform and the protection of all players.

5.4 Responsible Gambling

We monitor usage patterns and account behaviour to identify indicators of problem gambling. Data gathered through this monitoring — including session lengths, deposit frequency and loss patterns — may be used to trigger responsible gambling interventions, apply cooling-off periods or restrict account activity where necessary to protect the player.

5.5 Marketing Communications

Where you have opted in to receive marketing, we may use your email address and preferences to send you promotional content about bit339 offers, games and features. You may unsubscribe from marketing communications at any time by using the unsubscribe link in any marketing email or by contacting support. Opting out of marketing does not affect transactional or account-related communications.

5.6 Platform Improvement & Analytics

Aggregated and anonymised usage data helps us understand how players interact with the platform, identify areas for improvement and develop new features. This data does not identify you personally once anonymised.

Data Sharing & Disclosure

bit339 does not sell your personal data to third parties. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose.

6.1 Service Providers & Data Processors

We engage trusted third-party service providers who process data on our behalf under written data-processing agreements. Categories of service providers include:

• Identity verification and KYC partners
• Payment processing and gateway providers
• Fraud detection and AML screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Analytics and platform performance services

6.2 Legal & Regulatory Obligations

We may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies or courts where we are required to do so by applicable law, court order or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, your personal data may be transferred to the relevant acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

Data Retention

bit339 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable licensing, legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active life plus any mandatory post-closure retention period required by the Operator's licensing jurisdiction.
• KYC & Identity Documents: Retained for a minimum of five years following account closure, or longer if required by applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of five years in accordance with standard AML and financial record-keeping requirements.
• Support Communications: Retained for up to three years following resolution of the relevant query, or longer if the matter is subject to ongoing dispute or legal proceedings.
• Marketing Consent Records: Retained for as long as necessary to demonstrate compliance with consent requirements, and for a reasonable period following withdrawal of consent.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted.

Data Security

bit339 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response and data breach notification procedures in accordance with applicable regulatory requirements.

While bit339 takes all reasonable precautions, no system is entirely immune to security risks. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

Cookies & Tracking Technologies

bit339 uses cookies and similar technologies — including pixel tags, web beacons and local storage — to operate the platform, improve user experience, and gather analytical data. The main categories of cookies used are:

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies may prevent the platform from functioning correctly. For analytical and marketing cookies, you may withdraw consent at any time through your browser or account settings. Note that third-party cookies set by game software providers embedded in the platform are subject to those providers' own cookie policies.

International Data Transfers

bit339 operates under an international licensing jurisdiction and may transfer your personal data to countries outside your country of residence, including countries that may not have data-protection laws equivalent to those in your jurisdiction. Where such transfers occur, bit339 applies appropriate safeguards to ensure your data remains protected, including:

• Contractual clauses with data processors that impose data-protection obligations equivalent to those applied by the Operator.
• Processing agreements that restrict third-party processors from using your data for any purpose other than providing the contracted service to bit339.
• Technical security measures as described in Section 8 that apply regardless of the location where data is stored or processed.

By using the platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan. bit339 does not represent that any such transfer complies with Pakistani data-protection law, and Pakistani users access the platform entirely at their own legal risk.

Your Rights

Depending on the data-protection laws applicable in your jurisdiction and the Operator's licensing jurisdiction, you may have some or all of the following rights in relation to your personal data:

• Right of Access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data in certain circumstances — for example where the data is no longer necessary for its original purpose, subject to our legal retention obligations.
• Right to Restriction of Processing: The right to request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: The right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, where processing is based on consent or contract.
• Right to Object: The right to object to processing based on legitimate interests, including profiling, where your individual circumstances override the Operator's legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Please note that some rights may be limited or subject to exceptions where compliance would conflict with our legal obligations, licensing requirements or the rights of other individuals.

Children's Privacy

The bit339 platform is strictly for adults aged 18 or above, or the higher minimum age required by the Operator or the applicable license jurisdiction, whichever is greater. We do not knowingly collect, process or store personal data belonging to individuals below the applicable minimum age.

If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account or provided personal data to bit339, please contact our support team immediately.

Third-Party Links & Services

The bit339 platform may contain links to third-party services or integrate third-party game software provided by independent game studios. bit339 is not responsible for the privacy practices of any third-party provider. Each third-party provider operates under its own privacy policy and data-protection obligations.

We recommend reviewing the privacy policy of any third-party service you interact with, including game providers whose software is embedded within the platform. bit339 has no control over and accepts no responsibility for the content or data practices of third-party providers.

Policy Amendments

bit339 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or licensing requirements. Material changes will be communicated to registered players via email or a prominent notice on the platform prior to taking effect, where reasonably practicable.

The "Last Updated" date at the top of this page will be revised whenever the policy is amended. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact our support team using the details below. All privacy-related correspondence should be submitted in English for efficient handling.

bit339 aims to acknowledge all privacy-related requests within 48 hours and to resolve them within a reasonable period depending on the complexity of the request. We serve players across Pakistan including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, and our support team handles queries in both English and Urdu.