This Privacy Policy ("Policy") describes how x939 collects, uses, stores, protects, and shares information about users of the x939 platform, accessible at x939.net. By registering an account or using any x939 service, you acknowledge that you have read and understood this Policy. We take the privacy of Pakistani players seriously — your data is handled with the same care we apply to every other aspect of the x939 platform.
Six core principles that define how x939 treats your personal information — and the practical protections we maintain every day.
All data exchanged between your device and x939's servers is encrypted in transit using TLS 1.3 with 256-bit AES — the same standard used by HBL and Meezan Bank for internet banking. Your login, CNIC data, and payment details cannot be intercepted in transit.
x939 does not sell, rent, or trade your personal data to third parties for marketing or advertising purposes. Data shared with service providers is strictly limited to what is necessary for them to deliver their function.
x939 collects only the personal data necessary for account operation, KYC compliance, payment processing, and responsible gaming obligations. We do not collect data categories beyond what our licence and operational functions require.
Personal data and KYC documents stored by x939 are encrypted at rest and maintained on access-controlled infrastructure. Storage security standards are reviewed periodically as part of x939's licence compliance programme.
Registered x939 users have the right to access, correct, export, and request deletion of their personal data, subject to legal retention obligations. These rights can be exercised by contacting x939 support at any time.
All x939 data processing activities are conducted in accordance with the data protection requirements of our international gaming licence. Compliance is audited as part of the licence renewal process.
This Privacy Policy ("Policy") is published by x939 ("x939," "we," "us," "our") — the operator of the online betting and gaming platform available at x939.net. This Policy explains what personal data we collect from users of the x939 platform ("you," "your," "user"), the purposes for which we process it, the legal bases on which we rely, how long we retain it, who we share it with, and what rights you hold in relation to your data.
This Policy applies to all services offered by x939, including the sports sportsbook (cricket, PSL, T20, UFC, and other markets), the live casino, online slot games, fishing games, and all account management and payment functions. It applies to users accessing x939 from any location, including all major cities in Pakistan such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi.
For the purposes of this Privacy Policy, x939 acts as the data controller — meaning we determine the purposes and means of processing your personal data. x939 operates the platform under an international gaming licence that imposes binding data protection obligations, including requirements for data minimisation, purpose limitation, storage limitation, and security.
If you have any questions about how x939 processes your personal data, or wish to exercise any of the rights described in Section 12 of this Policy, please contact our data protection team using the details set out in Section 16.
x939 collects the following categories of personal data in connection with account registration, ongoing account management, payment processing, KYC verification, and responsible gaming obligations:
x939 collects personal data through the following channels:
x939 processes your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Name, DOB, mobile number, email, password |
| Age verification (21+ enforcement) | Date of birth, CNIC |
| Identity verification (KYC) | CNIC / passport scan |
| Deposit and withdrawal processing | Payment identifiers, transaction records |
| Anti-money laundering (AML) compliance | Transaction history, KYC documents, source of funds |
| Responsible gaming obligations | Betting/gaming activity, session data, RG tool settings |
| Account security and fraud prevention | Login history, IP addresses, device identifiers |
| Customer support | Account data, communication history |
| Platform analytics and improvement | Aggregated usage data (anonymised where possible) |
| Marketing communications | Email, mobile number (opt-in only) |
Marketing communications from x939 are only sent where you have provided explicit consent at registration or through your account notification settings. You may withdraw consent at any time by updating your preferences in account settings or by contacting support.
x939 processes personal data on the following legal bases:
x939 does not sell or trade your personal data. We share personal data only in the following limited circumstances:
x939 engages third-party service providers who process personal data on our behalf. These providers are contractually bound to use your data only for the purpose of delivering the specific service for which they were engaged and to maintain security standards consistent with this Policy. Service provider categories include:
x939 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction issued under x939's operating licence. x939 will notify affected users of such disclosure where permitted by law to do so.
In the event of a merger, acquisition, or sale of all or part of x939's business, personal data held by x939 may be transferred to the acquiring entity. Users will be notified of any such transfer and any change to this Privacy Policy that results from it.
x939 operates as an internationally licensed platform. Some personal data processed by x939 — including data held by our cloud infrastructure providers and game studio partners — may be stored or processed in countries outside Pakistan. In all such cases, x939 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy, including:
x939 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by legal and regulatory obligations. The following general retention standards apply:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years after closure |
| KYC and identity documents | Duration of account + 5 years after closure (licence requirement) |
| Transaction and payment records | 5 years from the date of the transaction (AML requirement) |
| Betting and gaming activity logs | Duration of account + 3 years after closure |
| Customer support communications | 3 years from the date of the communication |
| Marketing consent records | Until withdrawal of consent + 1 year |
| Session and technical logs | 13 months from the date of the session |
Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised aggregated data may be retained for statistical and analytical purposes beyond the retention period.
x939 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
x939 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small data file placed on your device by the x939 platform when you access it.
You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will impair the functionality of the x939 platform and may prevent login and account access. x939 does not use third-party advertising cookies or participate in cross-site tracking programmes.
Registered x939 users have the following rights in relation to their personal data, exercisable by contacting x939 support using the details in Section 16:
Request a copy of the personal data x939 holds about you, along with information about how it is used.
Request correction of inaccurate personal data. Some corrections require re-verification of KYC documents.
Request deletion of your personal data, subject to legal retention obligations under x939's gaming licence and AML regulations.
Request that x939 restrict processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.
Receive a copy of your data in a commonly used, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including marketing communications where consent has been given.
x939 will respond to verified data rights requests within 30 days of receipt. Where requests are complex, x939 may extend this period by a further 30 days and will notify you accordingly. Identity verification may be required before processing a data rights request.
Where x939 becomes aware that personal data has been submitted by a person under the age of 21, that account will be immediately suspended, the data will be securely deleted, and any funds deposited will be returned subject to verification that no bonuses or winnings are involved. If you believe that a minor has registered an x939 account, please contact x939 support immediately using the details in Section 16.
x939 enforces the 21+ age restriction through CNIC-based KYC verification, which is mandatory before any withdrawal is processed. Age verification is the foundation of x939's responsible gaming programme and is non-negotiable.
The x939 platform may contain links to third-party websites or services in certain contextual situations (for example, links to responsible gaming support organisations referenced in the x939 Responsible Gaming page). x939 is not responsible for the privacy practices of third-party websites and this Policy does not apply to any data collected by those third parties.
x939 encourages you to review the privacy policies of any third-party websites you visit from links within the x939 platform. x939 does not endorse any third-party privacy practices and accepts no liability for data processing conducted by third parties.
x939 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, x939 will:
Continued use of the x939 platform following notification of an updated Privacy Policy constitutes acceptance of the changes. If you do not agree with any amendments, you should cease using the platform and contact support to initiate account closure and data deletion, subject to applicable retention obligations.
If you have questions, requests, or concerns about this Privacy Policy or the way x939 processes your personal data, please contact us through any of the following channels:
This Privacy Policy was last reviewed and updated on 1 January 2026. x939 reserves the right to update this Policy in accordance with Section 15 above.
256-bit encryption, no data sales, CNIC-secured accounts — bet on cricket, play the casino, and spin the slots knowing your information is protected.