Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by b393, the operator of the online betting and gaming platform accessible at https://b393.cam (the "Platform"). This Policy sets out how b393 collects, uses, discloses, stores and protects personal data provided by or collected about users of the Platform (hereinafter "you", "your" or "User").

b393 is committed to handling personal data with care and transparency. We recognise that many of our users are located in Pakistan — in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and we have structured this Policy to be as clear and accessible as possible for a Pakistani English-speaking audience.

This Policy should be read alongside our Terms and Conditions and our Responsible Gambling Policy, both of which contain provisions relevant to how we use your data in the context of account management, KYC verification and responsible gambling obligations.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

b393 collects personal data through several means: directly from you during registration and account activity, automatically through your use of the Platform, and from third parties where permitted by law. The categories of data we collect are described below.

3.1 Registration & Account Data

• Full name as it appears on your government-issued identity document.
• Date of birth (for age verification purposes).
• Email address and, where provided, a mobile telephone number.
• Country of residence and, where relevant, city of residence (e.g., Karachi, Lahore, Islamabad).
• Preferred account currency (e.g., PKR).
• Username and encrypted account password.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents, including Pakistani CNIC (Computerised National Identity Card) or passport.
• Proof of address documentation, such as a utility bill or bank statement, where requested.
• Selfie or liveness check images, where required by the verification process.
• Source of funds declarations, where required for enhanced due diligence.

3.3 Transaction & Financial Data

• Deposit and withdrawal amounts, dates, methods and reference numbers.
• Partial payment instrument details (e.g., last four digits of a card, wallet account identifiers) — full payment credentials are not stored by b393.
• Transaction history associated with your account balance, including bet placement, settlement and bonus activity.

3.4 Usage & Technical Data

• IP address and approximate geolocation data derived from IP.
• Device type, operating system, browser type and version.
• Pages visited, features accessed, time spent and interaction patterns within the Platform.
• Session logs, including login timestamps and logout events.
• Error logs and crash reports where relevant to Platform stability.

3.5 Communications Data

• Content of support communications submitted via the Platform's help system or email.
• Complaint records and dispute correspondence.
• Responsible gambling self-assessment responses and limit-setting activity.

b393 uses personal data only for the purposes for which it was collected or for compatible purposes that a User would reasonably expect. The primary purposes for which we process personal data are:

b393 does not use personal data to make fully automated decisions that produce significant legal effects on Users, without providing a means of human review where such decisions are contested.

b393 processes personal data on one or more of the following legal bases, consistent with internationally recognised data protection frameworks:

• Contract Performance: Processing is necessary for the performance of the contract between b393 and the User — including account registration, transaction processing and the provision of Platform services.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including KYC/AML requirements, responsible gambling regulations imposed by the Operator's licensing authority, and fraud prevention obligations.
• Legitimate Interest: Processing is necessary for the legitimate interests of b393, including Platform security, fraud detection, analytics for service improvement and responsible gambling monitoring — provided such interests are not overridden by the User's rights.
• Consent: Where processing is based on consent (such as for optional marketing communications), Users may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Withdrawal of consent does not affect account functionality.

b393 does not sell, rent or trade personal data. We may share personal data with third parties only in the following limited circumstances:

• KYC & Identity Verification Providers: Third-party identity verification services engaged to perform electronic KYC checks. These providers act as data processors under binding data processing agreements and may not use your data for their own independent purposes.
• Payment Service Providers: Payment processing entities necessary to facilitate deposits and withdrawals. Only the minimum data required to process a transaction is shared. Payment method names referenced on the Platform (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are cited as familiar references for Pakistani users only and do not represent confirmed integrations or data sharing arrangements with those specific providers.
• Fraud Prevention & AML Services: Screening services used to check transactions and user profiles against sanctions lists and fraud databases, in compliance with AML obligations.
• Regulatory & Law Enforcement Authorities: Where required by law, court order or a competent regulatory authority, b393 may disclose personal data without prior notice to the User.
• Gaming Software Providers: Game content providers may receive limited account data (such as a user identifier and session token) necessary to deliver game content. They are not provided with full identity or KYC data.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of the Operator's business assets, personal data may be transferred as part of that transaction, subject to the receiving entity assuming equivalent data protection obligations.

b393 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

b393 implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted in transit using industry-standard TLS protocols.
• Encryption at Rest: Sensitive personal data, including KYC documents and payment-related information, is encrypted when stored on our systems.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access to sensitive data are subject to confidentiality obligations.
• Two-Factor Authentication: Where available, b393 encourages Users to enable 2FA to reduce the risk of unauthorised account access.
• Penetration Testing & Audits: The Platform's infrastructure is subject to periodic security reviews and vulnerability assessments.
• Incident Response: b393 maintains an internal data breach response procedure. In the event of a breach likely to affect your rights, we will notify affected Users and relevant authorities in accordance with our obligations.

b393 uses cookies and similar tracking technologies to operate the Platform, remember your preferences and understand how users interact with the site. The following categories of cookies are used:

You may manage or disable optional cookies through your browser settings. Please note that disabling functional cookies may affect your experience — for example, your currency preference or display settings may not be retained between sessions. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

b393 does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the Platform.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by b393:

To exercise any of these rights, please submit a request to our support team using the contact details in Section 14. We may need to verify your identity before processing a data rights request. We will not charge a fee for reasonable requests but reserve the right to charge for manifestly unfounded or excessive requests.

b393 operates as an international platform. Personal data collected from Users may be transferred to and processed in countries other than Pakistan or the country from which the User accesses the Platform. These may include the jurisdiction in which the Operator is incorporated, as well as countries in which our data processors, KYC providers and hosting infrastructure are located.

Where personal data is transferred to countries that may not have data protection laws equivalent to those in the Operator's licensing jurisdiction, b393 implements appropriate safeguards, which may include:

• Binding contractual clauses between b393 and recipient data processors.
• Transferring data only to processors that maintain independently certified data security standards.
• Applying data minimisation principles so that only the minimum necessary personal data is transferred for any given processing purpose.

By using the b393 Platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred internationally as described above. If you have concerns about international transfers of your data, please contact us using the details in Section 14.

The b393 Platform is strictly intended for adults aged 18 and over, or the higher minimum age required by the operator's licence jurisdiction or applicable local law. b393 does not knowingly collect personal data from persons under the minimum eligible age.

As part of the registration and KYC process, b393 takes reasonable steps to verify the age of all Users before permitting access to real-money betting features. Where b393 becomes aware that personal data has been collected from an individual below the minimum eligible age, we will take prompt steps to close the account and securely delete the associated personal data, subject to any overriding legal retention obligations.

b393 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will take reasonable steps to inform registered Users — which may include displaying a prominent notice on the Platform or sending a notification to the registered email address.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and, if you wish, close your account.

Minor clarifications or formatting changes that do not materially affect the substance of this Policy may be made without specific notification to Users.

For any questions, concerns or requests relating to this Privacy Policy or the personal data b393 holds about you — including data access, rectification, erasure or objection requests — please contact our support team. Email addresses below are provided as plain text only and are not clickable links. Please copy the address manually into your email client.

For related policies, please also review the Terms & Conditions and the Responsible Gambling Policy. Common questions about your account and privacy are also addressed in our FAQ.