92pak8 Privacy Policy

Introduction & Scope

This Privacy Policy ("Policy") is published by 92pak8 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Player", "User", "you", "your") who access, register on, or use the 92pak8 website at 92pak8.org, including all associated subdomains, mobile-optimised interfaces, and any other digital services operated under the 92pak8 brand.

This Policy should be read alongside the 92pak8 Terms & Conditions and Responsible Gaming Policy. Together these documents form the complete contractual and regulatory framework governing your use of the 92pak8 platform. In the event of any conflict between this Policy and any other 92pak8 document in relation to data privacy matters, this Policy shall prevail.

By creating a 92pak8 account, making a deposit, or otherwise using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the 92pak8 platform.

Data Controller

For the purposes of applicable data protection law, 92pak8 is the data controller in respect of all personal data collected through the 92pak8 platform. As data controller, 92pak8 determines the purposes for which and the means by which your personal data is processed.

92pak8 operates under an international gaming licence framework and processes personal data in accordance with the data protection obligations imposed by that regulatory framework. All data processing activities undertaken by 92pak8 are designed to be proportionate, purpose-limited, and compliant with applicable privacy regulations.

Where 92pak8 engages third-party processors to carry out specific data processing activities on its behalf — for example, identity verification providers and payment processors — those processors act under written data processing agreements that require them to handle your data only on 92pak8's documented instructions, and to maintain appropriate security standards.

Data We Collect

92pak8 collects personal data from Pakistani players through several channels: directly from you during the registration process and your subsequent use of the platform; automatically through technical systems as you interact with the platform; and in limited circumstances from trusted third-party sources such as identity verification agencies.

The following table summarises the categories of personal data 92pak8 collects and the primary source of that data:

92pak8 does not intentionally collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. In the event that any such data is incidentally disclosed to 92pak8 through customer support interactions, it will be handled with the highest level of confidentiality and will not be retained beyond the immediate purpose for which it was received.

Purpose & Legal Basis for Processing

92pak8 processes your personal data only where it has a lawful basis for doing so. The following table sets out the main purposes for which your data is processed and the corresponding legal basis:

Data Sharing & Third Parties

92pak8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with carefully selected third parties only where necessary and only under the circumstances described in this section.

Categories of recipients who may receive your data:

• Identity Verification Providers — Third-party KYC and age-verification services that confirm the authenticity of your CNIC and verify that you meet the 21+ age requirement. These providers process your identity data solely for verification purposes under a binding data processing agreement with 92pak8.
• Payment Processors — Services including JazzCash, EasyPaisa, HBL, UBL, SadaPay, and USDT TRC20 network operators receive the minimum financial data necessary to process your deposits and withdrawals. These processors maintain their own privacy notices, which govern their processing activities.
• Game Content Providers — Third-party software studios that supply casino games to the 92pak8 platform may receive your player ID and gaming session data for the purpose of game delivery, result verification, and RNG audit purposes. No additional personal data is shared with game providers.
• Regulatory & Law Enforcement Authorities — 92pak8 may be required to disclose personal data to relevant authorities where mandated by applicable law, court order, or the lawful instructions of a regulatory body. Such disclosures will be made only to the extent strictly required.
• Anti-Fraud & AML Networks — 92pak8 participates in responsible gaming and anti-fraud information-sharing frameworks. Where a player is confirmed to be subject to a self-exclusion order or where fraud is detected, relevant data may be shared with industry bodies for the purposes of platform protection and responsible gaming enforcement.
• Technology & Infrastructure Providers — Hosting, cloud infrastructure, and platform technology vendors who provide the technical underpinning of the 92pak8 service receive access to data only to the extent necessary for service delivery and are bound by strict data processing agreements.

All third-party recipients of 92pak8 player data are required to implement and maintain appropriate technical and organisational security measures, to process data only for specified and agreed purposes, and to comply with applicable data protection law.

Data Retention

92pak8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by the applicable legal and regulatory framework to which the platform is subject.

• Active Account Data: Personal data associated with an active 92pak8 account is retained for the full duration of the account's existence and for a minimum period of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping obligations.
• Financial Transaction Records: Detailed records of all deposits, withdrawals, and betting transactions are retained for a minimum of seven (7) years following the date of the transaction, as required by applicable financial crime prevention regulations.
• Identity Verification Documents: Copies of KYC documents including CNIC copies are retained for the period specified by the regulatory framework applicable to 92pak8's gaming licence — typically five (5) years from account closure or the completion of the relevant business relationship.
• Customer Support Records: Correspondence and live chat transcripts are retained for two (2) years from the date of interaction, unless they are directly relevant to an ongoing dispute or regulatory inquiry, in which case they are retained until the matter is fully resolved.
• Marketing Consent Records: Records of your marketing consent (or its withdrawal) are retained for the duration of your account plus two (2) years, to enable 92pak8 to demonstrate compliance with consent-based marketing obligations.

Cookies & Tracking Technologies

The 92pak8 platform uses cookies and similar browser-based technologies to deliver a consistent, personalised, and secure experience. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses; they are used solely to recognise your browser and store limited session or preference information.

Types of cookies used by 92pak8:

• Strictly Necessary Cookies — Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without materially affecting your ability to use the 92pak8 platform.
• Functional Cookies — Store your language preferences, display settings, and other optional platform configurations to provide a personalised experience across sessions.
• Analytics Cookies — Enable 92pak8 to understand how players navigate the platform — which pages are visited most, where users enter and exit the site, and how platform features are used — using first-party analytics data. This data is aggregated and does not identify you personally.
• Responsible Gaming Cookies — Store data related to your session time reminders and deposit limit settings locally on your device to ensure these controls function correctly even before your account session is fully authenticated.

92pak8 does not deploy third-party advertising cookies, retargeting pixels, or cross-site tracking technologies on its platform. You may configure your browser to refuse or delete cookies; however, doing so may impair the functionality of the 92pak8 platform, including the ability to log in and maintain a session.

Security Measures

92pak8 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to remain effective against evolving security threats.

• All data transmitted between your device and the 92pak8 platform is encrypted using 256-bit TLS/SSL encryption.
• Passwords are stored in hashed form using industry-standard cryptographic hashing algorithms. 92pak8 personnel do not have access to your plain-text password.
• Access to personal data within the 92pak8 organisation is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement are granted access to player data.
• 92pak8 infrastructure is hosted in secure data centres with physical access controls, 24/7 monitoring, and redundant failover systems.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists to identify and remediate potential weaknesses in the platform.
• All 92pak8 staff with access to personal data receive mandatory data security training as part of their onboarding and on an annual refresh basis.

Your Data Rights

Subject to applicable data protection law and certain legitimate restrictions (such as those required for ongoing AML investigations or active regulatory proceedings), registered 92pak8 players hold the following rights in respect of their personal data:

• Right of Access — You may request a copy of all personal data that 92pak8 holds about you, along with information about how that data is being processed. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification — If any personal data 92pak8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure — In certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies — you may request deletion of your personal data. Note that this right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations).
• Right to Restrict Processing — You may request that 92pak8 restrict the processing of your data in specific circumstances, such as where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• Right to Data Portability — Where processing is based on your consent or on a contract, you may request that 92pak8 provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to Object — You may object to processing based on 92pak8's legitimate interests at any time. 92pak8 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent — Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to the 92pak8 Data Protection contact at [email protected] with the subject line "Data Rights Request". 92pak8 will acknowledge receipt within 5 business days and will fulfil the request within 30 days of receipt, subject to identity verification. No fee is charged for standard data rights requests.

Minors & Age Policy

The 92pak8 platform is strictly restricted to individuals who are 21 years of age or older at the time of registration and throughout their use of the platform. 92pak8 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21.

As part of the 92pak8 registration and ongoing account management process, all players are required to provide documentary proof of age in the form of a valid Pakistani CNIC or passport. Accounts where age verification cannot be satisfactorily completed will be suspended pending the provision of valid documentation.

If you are a parent or guardian and believe that a person under your care has registered a 92pak8 account without authorisation, please contact our support team at [email protected] immediately. 92pak8 will investigate and take appropriate action without delay.

Changes to This Privacy Policy

92pak8 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the features and services available on the platform. When material changes are made to this Policy, 92pak8 will notify registered players via email to the address associated with their account and/or via a prominent notification displayed on the 92pak8 platform.

The updated Policy will take effect on the date specified in the notification. Your continued use of the 92pak8 platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the platform and request account closure before the effective date.

The current version number and last-updated date are displayed at the top of this document. 92pak8 recommends that you review this page periodically to remain informed of how your data is being handled.

Contact & Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which 92pak8 handles your personal data, please contact the 92pak8 Data Protection team through any of the channels below. All privacy-related communications should be in English and should include your registered account username (where applicable) to enable prompt handling.