Privacy Policy

Version: 1.0  |  Last Updated: 12 November 2026

1. Introduction

Welcome to be9 ("we", "us", "our"), operated through the website be9nepal.com (the "Platform"). We are committed to protecting your personal information and respecting your right to privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you hold in relation to your information. It applies to all users who access or register on the Platform, regardless of the device used.

By creating an account, browsing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy. This document should be read alongside our Terms & Conditions and our Responsible Gaming page, which together form the complete legal framework governing your use of be9. If you disagree with any part of this Policy, please discontinue use of the Platform and contact us at support@be9nepal.com.

2. Data We Collect

We collect personal data only to the extent necessary to deliver our services, comply with applicable obligations, and maintain platform security. The categories of data we collect are described below.

2.1. Data You Provide Directly

When you register, verify your identity, or contact us, you may provide:

• Identity data: full name, date of birth, gender, and nationality.
• Contact data: email address, phone number, and postal address.
• Verification documents: government-issued ID (passport, national identity card), proof of address, and, where required, source-of-funds documentation.
• Account credentials: username and encrypted password.
• Financial data: payment method details such as e-wallet identifiers (eSewa, Khalti, IME Pay, PrabhuPay, Fonepay), card details (Visa, Mastercard), bank account references, and transaction records.
• Communications data: messages sent to our support team, chat transcripts, and survey responses.

2.2. Data Collected Automatically

When you use the Platform, we automatically collect:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: pages visited, features used, session duration, clickstream data, and game logs.
• Location data: approximate geographic location derived from your IP address.
• Cookie and tracking data: information gathered through cookies and similar technologies as described in Section 6.

2.3. Data from Third Parties

We may receive personal data from:

• Identity verification providers that confirm your age (minimum 18 years) and identity.
• Payment processors who share transaction status and fraud-screening outcomes.
• Affiliate and marketing partners who refer you to the Platform, subject to their own privacy notices.
• Publicly available sources such as sanctions lists and politically exposed persons (PEP) databases used for compliance screening.

3. How We Use Your Data

We use collected personal data for the following purposes. Each purpose is tied to a legal basis detailed in Section 4.

3.1. Account Registration and Service Delivery

We process your identity, contact, and credential data to create and maintain your account, authenticate your login, process deposits and withdrawals in Nepalese Rupees (NPR) or supported currencies, and provide access to games and other Platform features.

3.2. Identity Verification and Age Checks

We verify that every user is at least 18 years of age before granting access to real-money features. We also conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks using identity and financial data to prevent fraud, money laundering, and terrorist financing.

3.3. Payment Processing

We use financial data to process deposits and withdrawals through supported payment methods, including eSewa, Khalti, IME Pay, PrabhuPay, Fonepay, Visa, Mastercard, Skrill, Neteller, bank transfers, QR payments, and cryptocurrency transactions. Transaction records are retained for audit and compliance purposes.

3.4. Customer Support

Communications data is used to respond to your queries, resolve disputes, and improve service quality. Support interactions may be recorded or logged for training and audit purposes.

3.5. Responsible Gaming

Usage and behavioural data help us monitor for signs of problem gambling and apply responsible gaming tools such as deposit limits, session reminders, and self-exclusion. Full details are set out in our Responsible Gaming page.

3.6. Marketing and Personalisation

Where you have given consent, we may use your contact and usage data to send promotional communications, personalise bonus offers, and present relevant content. You may opt out of marketing messages at any time by using the unsubscribe link in any email or by contacting support@be9nepal.com.

3.7. Security, Fraud Prevention, and Analytics

Technical, usage, and device data help us detect and prevent unauthorised access, abuse, cheating, and fraudulent transactions. Aggregated, anonymised analytics allow us to improve Platform performance and user experience.

4. Legal Bases for Processing

We rely on the following legal bases when processing your personal data:

Where we rely on legitimate interests, we conduct a balancing test to ensure that our interests do not outweigh your fundamental rights and freedoms. You may request details of this assessment by contacting privacy@be9nepal.com.

5. Data Sharing & Third Parties

We do not sell your personal data to third parties. We may share your data only in the circumstances described below, and always subject to appropriate safeguards.

5.1. Service Providers

We engage third-party vendors who process data on our behalf under strict contractual obligations, including:

• Payment processors (e.g., eSewa, Khalti, Skrill, Neteller) to handle financial transactions.
• KYC/AML providers for identity and document verification.
• Cloud hosting and IT infrastructure providers for secure data storage and platform operations.
• Customer support platforms for ticket management and live chat.
• Analytics and security vendors for fraud detection and performance monitoring.

5.2. Regulatory and Legal Disclosure

We may disclose your data to competent authorities, law enforcement agencies, or regulatory bodies when required by law, court order, or in the good-faith belief that such disclosure is necessary to protect the rights, safety, or property of be9, our users, or the public.

5.3. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity. You will be notified prior to any such transfer and given the opportunity to exercise your rights as described in Section 9.

5.4. Affiliate Partners

If you arrived at be9 via an affiliate link, we may share limited technical data (e.g., registration confirmation) with that affiliate solely for commission-tracking purposes. No sensitive or financial data is disclosed to affiliates.

6. Cookies & Tracking Technologies

be9 uses cookies and similar technologies — including pixel tags, local storage objects, and session tokens — to enable Platform functionality and improve your experience.

6.1. Types of Cookies We Use

• Strictly necessary cookies: Essential for core Platform functions such as login sessions, security tokens, and load balancing. These cannot be disabled without impairing the service.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalise your experience.
• Analytical cookies: Collect aggregated usage data to help us understand how users interact with the Platform and identify areas for improvement.
• Marketing cookies: Track browsing activity across sessions to deliver relevant promotional offers and measure campaign effectiveness. These require your prior consent.

6.2. Managing Cookies

You may control or disable non-essential cookies through our cookie consent banner, displayed on your first visit, or through your browser settings. Please note that disabling certain cookies may affect Platform functionality. For detailed instructions on managing cookies by browser type, refer to your browser's help documentation. Withdrawing consent for marketing cookies does not affect consent already given, nor does it prevent necessary cookies from operating.

7. Data Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption: Data in transit is protected using TLS (Transport Layer Security) encryption. Sensitive data at rest, such as passwords and financial records, is stored using strong cryptographic hashing or encryption algorithms.
• Access controls: Access to personal data is restricted on a need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Firewalls and intrusion detection: Network-level protections monitor for suspicious activity and block unauthorised access attempts in real time.
• Regular security audits: We conduct periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses.
• Incident response: We maintain a documented data breach response plan. In the event of a breach likely to result in risk to your rights, we will notify affected users without undue delay.

Despite these measures, no data transmission over the internet or method of storage can be guaranteed to be 100% secure. We encourage you to use a strong, unique password and to keep your account credentials confidential.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The key retention principles we apply are:

• Active accounts: Personal data is retained for the duration of your active account relationship with be9.
• Closed accounts: Following account closure, we retain core identity, transactional, and compliance records for a minimum of five (5) years to meet AML, KYC, and audit obligations. This period may be extended where required by law or ongoing legal proceedings.
• Marketing data: Contact data used for marketing is deleted or anonymised upon withdrawal of consent or upon your request, unless retention is required for another lawful purpose.
• Technical logs: Server and security logs are typically retained for up to twelve (12) months, after which they are deleted or anonymised.

When data is no longer required, we apply secure deletion or anonymisation techniques to ensure it cannot be recovered or linked to any individual.

9. Your Rights

Depending on the laws applicable to you, you may hold the following rights with respect to your personal data. We are committed to honouring these rights promptly and without undue obstacle.

9.1. Right of Access

You have the right to request a copy of the personal data we hold about you, including confirmation of whether we process your data, the categories of data held, the purposes of processing, and recipients with whom data has been shared. We will provide this information within 30 days of a verified request.

9.2. Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account details directly through your account dashboard; for other corrections, please contact us via the details in Section 13.

9.3. Right to Erasure ("Right to Be Forgotten")

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal obligations — for instance, we may be required to retain financial and identity records for the minimum retention period set out in Section 8, even after account closure.

9.4. Right to Restriction of Processing

You may request that we restrict processing of your data in certain circumstances, such as while a dispute over accuracy is being resolved, or where you have objected to processing based on legitimate interests and we are assessing whether our grounds override yours.

9.5. Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

9.6. Right to Object

You have the right to object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately. For other legitimate-interest grounds, we will assess your objection against our compelling interests and notify you of the outcome.

9.7. Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time by contacting us or using the opt-out mechanism provided. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9.8. How to Exercise Your Rights

To submit any data rights request, please email privacy@be9nepal.com with the subject line "Data Rights Request" and include your registered email address and a description of your request. We may need to verify your identity before processing the request to ensure we do not disclose data to an unauthorised person. We aim to respond within 30 days; in complex cases we may extend this by a further 30 days, with prior notice to you.

10. International Data Transfers

be9 and certain of our service providers may store or process personal data in countries outside your country of residence, including countries that may not offer the same level of data protection as your home jurisdiction. Where such transfers occur, we take steps to ensure your data remains protected to a standard equivalent to this Policy by applying appropriate transfer mechanisms, which may include:

• Contractual clauses that impose data protection obligations on the recipient party.
• Ensuring the recipient country benefits from a formal or recognised adequacy determination.
• Implementing binding corporate rules or equivalent arrangements for intra-group transfers.

You may request information about the safeguards applied to international transfers of your personal data by contacting privacy@be9nepal.com. We will provide details of the relevant mechanisms within a reasonable time.

11. Minors

be9 is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. All registrations are subject to mandatory age verification, and accounts found to belong to minors will be suspended immediately and all associated data securely deleted, except where retention is required for legal or regulatory purposes.

If you are a parent or guardian and believe a minor has registered on our Platform without your consent, please contact us immediately at support@be9nepal.com. We will investigate and take appropriate action promptly. Additional information about our commitment to player protection is available on our Responsible Gaming page.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, service features, or applicable law. When we make material changes, we will update the Version number and Last Updated date at the top of this document. We will also notify registered users by email or through a prominent notice on the Platform at least 14 days before material changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the revised Policy. If you do not agree with the changes, you should close your account before they take effect and contact us to exercise any applicable data rights.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out to us through the following channels:

We are committed to resolving all privacy-related complaints fairly and promptly. When you contact us, please include your registered email address, a clear description of your query or request, and any relevant details that may help us respond efficiently. We aim to acknowledge all communications within 72 hours and to resolve substantive matters within 30 days.

Frequently Asked Questions

What personal data does be9 collect from me?

We collect identity data (name, date of birth), contact data (email, phone), verification documents, financial data (payment method details and transaction records), and technical data such as your IP address and usage logs. Full details are set out in Section 2.

Does be9 sell my personal data to third parties?

No. We never sell your personal data. We share it only with service providers necessary to operate the Platform (such as payment processors and KYC providers), and with authorities when legally required. See Section 5 for a full breakdown.

How can I delete my account and have my data removed?

You may request account closure and data erasure by emailing privacy@be9nepal.com. Please note that certain records must be retained for a minimum of five years to satisfy AML and audit obligations, as explained in Section 8.

How do I opt out of marketing emails?

Click the "unsubscribe" link in any marketing email we send, or email support@be9nepal.com with the subject "Unsubscribe". Your request will be processed within five business days.

What payment methods does be9 support, and is my payment data safe?

We support eSewa, Khalti, IME Pay, PrabhuPay, Fonepay, Visa, Mastercard, Skrill, Neteller, bank transfers, QR payments, and cryptocurrency. Payment data is handled by certified processors and protected by TLS encryption. We do not store full card numbers on our servers.

Who should I contact if I am concerned about my gambling behaviour?

If you are worried about your gambling habits, please visit our Responsible Gaming page for self-assessment tools, limit-setting options, and self-exclusion. You can also seek assistance from independent support organisations including Gamblers Anonymous (www.gamblersanonymous.org), Gambling Therapy (www.gamblingtherapy.org), GamCare (www.gamcare.org.uk), Gamban (www.gamban.com), and the National Council on Problem Gambling (www.ncpgambling.org).