bet938 Privacy Policy — How We Handle Your Personal Data

1 Introduction

bet938 is an online sports betting and gaming platform serving users in Pakistan. We offer sports betting across cricket, PSL, T20 internationals, football and Esports, alongside a game lobby, live casino, VIP programme and a dedicated mobile app. All transactions are conducted in PKR through trusted local payment channels including JazzCash, Easypaisa, Raast and Bank Transfer.

This Privacy Policy applies to all personal data collected from individuals who visit the bet938 website, register an account, use the mobile app or interact with any part of the platform. It covers what data we collect, the purposes for which we use it, the circumstances under which it may be shared, and the rights that account holders have in relation to their personal information.

We are committed to handling your personal data with care and transparency. This policy is reviewed periodically, and any material changes are communicated to active account holders before they take effect.

2 Personal Data We Collect

bet938 collects personal data through several touchpoints — during registration, throughout account use, and automatically through the platform's technical infrastructure. The categories of data we collect include:

Registration and Identity Data

• Full name and date of birth
• Mobile phone number and email address (where provided)
• Username chosen at registration
• Identity documents submitted for age or identity verification (e.g. CNIC, passport)

Transaction and Financial Data

• Deposit and withdrawal amounts in PKR
• Payment method used (JazzCash, Easypaisa, Raast, Bank Transfer, card type)
• Transaction timestamps and reference numbers
• Account balance history

Betting and Gaming Activity Data

• Bets placed, markets selected, stake amounts and outcomes
• Game lobby sessions, game types played and session durations
• Bonuses claimed and wagering activity
• VIP tier status and points accumulated

Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session logs, login timestamps and platform navigation patterns
• App version (where the bet938 mobile app is used)

3 How We Use Your Personal Data

The data collected by bet938 is used for the following specific purposes. We only process personal data where we have a legitimate reason to do so in connection with operating the platform and serving your account.

We do not use your personal data for automated decision-making that has significant legal or similarly consequential effects on you, beyond standard fraud detection and account security monitoring that is designed to protect you and other users.

4 Data Sharing and Third Parties

bet938 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. Your data may be shared in the following limited circumstances only:

• Payment processors: When you make a deposit or withdrawal, the relevant transaction data is shared with your chosen payment provider — JazzCash, Easypaisa, Raast, your bank or card network — solely to process the transaction.
• Identity verification services: Where identity verification is required, relevant document data may be passed to a trusted verification service provider. These providers are contractually bound to use the data only for verification purposes.
• Platform infrastructure providers: Technical service providers who support hosting, security and platform operations may have access to data in the course of delivering those services. They are bound by confidentiality obligations.
• Fraud and security: In cases of suspected fraud, money laundering or account abuse, relevant account and transaction data may be shared with financial institutions, fraud prevention bodies or appropriate investigative processes where required.
• Legal requirements: If required to do so by an applicable legal process or obligation, bet938 may disclose personal data to the extent strictly required by that obligation.

5 Payment Data and PKR Transactions

All financial transactions on bet938 are processed in Pakistani Rupees. When you deposit or withdraw using JazzCash, Easypaisa, Raast, Bank Transfer or a card, the following applies to how your payment data is handled:

• bet938 does not store full card numbers, mobile wallet PINs or online banking passwords. Payment credentials are handled directly by the relevant payment provider through secure, encrypted channels.
• Transaction reference numbers, amounts, timestamps and payment method types are stored within your bet938 account records for the purpose of balance management, withdrawal processing and dispute resolution.
• PKR transaction records are retained for a period consistent with standard financial record-keeping requirements and are accessible to you through your account history at any time.
• If a withdrawal is subject to identity verification, documents submitted in that process are handled securely and are not retained beyond the period required to complete the verification.

6 Data Security

bet938 takes the security of your personal data seriously and applies a range of technical and procedural measures to protect it from unauthorised access, loss or misuse.

• Encryption in transit: All data transmitted between your device and the bet938 platform is encrypted using TLS (Transport Layer Security). This applies to the website, mobile app and all API communications.
• Access controls: Access to personal data within bet938's internal systems is restricted to staff and systems with a legitimate operational need. All internal access is logged.
• Password security: Account passwords are stored in hashed form. bet938 does not have access to your raw password at any point after it is set.
• Session security: Account sessions have automatic timeout periods. Suspicious login activity from unusual devices or locations may trigger an additional verification step.
• Incident response: In the event of a data security incident that materially affects your personal data, bet938 will notify affected account holders as promptly as reasonably practicable.

While bet938 applies strong security measures, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password, enable any available two-factor authentication, and never share your login credentials with anyone.

7 Cookies and Tracking Technologies

The bet938 website and mobile app use cookies and similar tracking technologies to support platform functionality and improve the user experience. The types of cookies used include:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in as you navigate between sections and security cookies used for fraud prevention. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences, such as your preferred language, odds display format and notification settings, so you do not have to re-enter them each session.
• Analytics cookies: Collect anonymised data about how users navigate the platform — which pages are visited most, where users encounter issues, and how features are used. This data is used to improve the platform and does not identify you individually.
• App tracking: The bet938 mobile app uses equivalent session and analytics identifiers to the cookies used on the website. No cross-app tracking from third-party advertisers is embedded in the bet938 app.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to log in and use the platform. Disabling analytics cookies will not affect your ability to use any feature.

8 Data Retention

bet938 retains personal data only for as long as it is necessary for the purposes outlined in this policy. The general retention principles we apply are:

• Active accounts: Personal and account data is retained throughout the period your bet938 account is open and active.
• Closed accounts: Following account closure, certain data — particularly financial transaction records and identity verification records — is retained for a defined period consistent with standard record-keeping obligations. After this period, data that is no longer required is deleted or anonymised.
• Self-exclusion records: Records of self-exclusion requests are retained beyond account closure to ensure the exclusion can be enforced if re-registration is attempted during the exclusion period.
• Support and dispute records: Communications and records related to resolved disputes or support cases are retained for a reasonable period in case the matter is re-opened or escalated.

9 Your Rights Over Your Personal Data

As a bet938 account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the support team through the platform:

• Right of access: You can request a summary of the personal data bet938 holds on your account. We will provide this within a reasonable timeframe after verifying your identity.
• Right to correction: If any personal data held on your account is inaccurate or out of date, you can request that it be corrected. Some corrections — such as name or date of birth — may require supporting documentation.
• Right to deletion: You can request that your personal data be deleted when it is no longer required for the purposes for which it was collected, subject to any applicable retention obligations (such as financial record-keeping requirements).
• Right to restrict processing: In certain circumstances, you can ask bet938 to restrict how your data is used while a concern or dispute is being resolved.
• Right to withdraw consent: Where data processing is based on your consent — such as receiving promotional messages — you can withdraw that consent at any time through your account notification settings or by contacting support.
• Right to account closure: You can request the closure of your bet938 account at any time. Following closure, data retention obligations as described in Section 8 apply.

10 Minors and Under-18 Access

The bet938 platform is strictly for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover or are informed that an account belongs to a person under 18, that account will be closed immediately, all associated data will be handled in accordance with our data deletion process, and any funds held in the account will be dealt with in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor in your care has created a bet938 account, please contact our support team immediately so we can close the account and remove the associated data without delay.

11 Changes to This Privacy Policy

bet938 reserves the right to update this Privacy Policy at any time. When we make material changes — changes that meaningfully affect how your personal data is used or your rights in relation to it — we will notify active account holders via their registered mobile number or through a notice on the platform before the changes take effect.

Minor or clarificatory updates that do not change the substance of how data is handled may be made without individual notification, though the updated policy will always be available at this page with a revised "last updated" date. We encourage you to check this page periodically if you want to stay informed about how your data is managed.

12 Contact and Privacy Queries

If you have any questions about this Privacy Policy, how your data is used, or you wish to exercise any of the rights described in Section 9, please reach out to the bet938 support team. You can contact us through the support section of the platform or the mobile app.

Our support team handles privacy-related requests separately from general account queries to ensure they receive appropriate attention. When submitting a privacy request, please include your registered mobile number or username so we can locate your account and respond accurately.

We aim to respond to all privacy-related requests within a reasonable period. For requests involving identity verification or document review, additional time may be required to process the request securely.