92pk Privacy Policy – How We Protect Your Personal Data

1. Introduction

92pk ("we", "us", "our", "the Platform") is an online gaming and sports betting platform serving users in Pakistan. We understand that privacy is important to our users, and we are committed to being transparent about how we handle personal data.

This Privacy Policy explains what personal information we collect from you when you use 92pk, how that information is used, with whom it may be shared, and how we keep it safe. It also explains your rights regarding your own data and how you can exercise those rights.

This policy applies to all users who register an account, visit the website, download and use the 92pk app, or contact our support team. It covers all services available on the platform, including sports betting on Cricket, PSL, T20, Football and Esports markets, casino games, bingo, fish games, and all associated account and payment functions.

Please read this policy alongside our Terms and Conditions, which govern the overall use of the platform. If there is any conflict between these documents, the Terms and Conditions take precedence on matters related to service use, while this policy is authoritative on matters of data handling.

2. What Personal Information We Collect

We collect different types of information depending on how you interact with 92pk. Below is a breakdown of the main categories:

Registration and Account Information

When you create a 92pk account, we collect:

• Full name as it appears on your national identity document.
• Date of birth — required for age verification (18+ only).
• Mobile number — used for account access, OTP verification, and communications.
• Email address (if provided) — used for account notifications and support communications.
• Username and password — your chosen login credentials. Passwords are stored in hashed form and are never visible to staff.

Identity Verification Documents

To comply with our verification requirements and prevent fraud, we may request:

• A copy of your CNIC (Computerised National Identity Card) or other government-issued ID.
• A selfie or live photo taken at the time of verification.
• Proof of address, such as a utility bill or bank statement, in some cases.

Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Payment method identifiers — for example, the registered mobile number associated with your JazzCash or Easypaisa account, or the last four digits of a bank card.
• Wallet balance history and bonus activity records.

Usage and Behavioural Data

• Games played, bet amounts, bet types, and game session durations.
• Sports markets accessed and betting patterns.
• Features accessed within the account, including responsible gaming tools.
• Pages visited on the platform and time spent on each section.

Technical and Device Data

• IP address — used for security monitoring and fraud detection.
• Device type, operating system, and browser version — helps us optimise the platform experience.
• Unique device identifiers — used to detect multiple accounts on the same device.
• Connection data — network type, approximate location derived from IP (not GPS-level precision).

Support and Communications Data

• Live chat transcripts when you contact our support team.
• Email correspondence related to account queries or disputes.
• Feedback or complaints submitted through the platform.

3. How We Collect Your Information

We collect your personal information through the following means:

• Directly from you: When you register, complete verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically: When you use the platform, our systems automatically record technical and behavioural data such as your IP address, device details, pages visited, and game activity.
• From payment providers: When you transact via JazzCash, Easypaisa, Raast, or bank transfer, those providers may share confirmation data with us to verify and reconcile your transaction. We do not receive your full financial account credentials from these providers.
• From identity verification services: If we use a third-party verification service to process your CNIC or selfie, that service may provide us with a verification result and a confidence score, but does not grant us access to their wider database.
• Via cookies and tracking technologies: As described in the Cookies section below.

4. How We Use Your Personal Data

We use the information we collect for the following purposes. For each purpose, we have identified the legal basis on which we rely:

We do not use your personal data for automated decision-making that produces significant legal effects — for example, we do not automatically approve or deny withdrawals based solely on algorithmic profiling without human review in disputed cases.

5. Sharing Your Personal Data

We do not sell your personal data to any third party. However, there are limited circumstances in which we share your information with trusted parties, always with appropriate safeguards in place:

• Payment processors: JazzCash, Easypaisa, Raast, and bank partners receive the transaction details necessary to process your deposits and withdrawals. They are bound by their own privacy policies and relevant financial regulations.
• Identity verification providers: Third-party KYC (Know Your Customer) services may process your CNIC image and selfie to provide an identity confirmation. These providers operate under strict data processing agreements and may not use your data for their own purposes.
• Technology and hosting providers: Our platform infrastructure partners may have access to technical data as part of hosting and maintaining the service. These are cloud and server partners, not marketing companies.
• Game software providers: For casino games, bingo, and fish games provided by third-party studios, game session data may be shared with the provider for the purpose of game operation, result verification, and dispute resolution.
• Legal and regulatory authorities: We may disclose information where required by law, court order, or where we believe disclosure is necessary to prevent fraud, money laundering, or other illegal activity.

In all cases of data sharing, we apply the principle of minimum necessary disclosure — meaning we share only the information actually required for the specific purpose, nothing more.

6. Payment Data and Financial Security

Given that 92pk handles real PKR transactions, we apply particularly strong controls to financial data:

• We do not store full card numbers on our servers. Card data is tokenised by the payment processor before reaching our systems.
• Mobile wallet account numbers (JazzCash, Easypaisa) are stored in masked form. We retain only enough information to identify the payment method for reconciliation and fraud detection purposes.
• All payment-related data is transmitted over encrypted connections (TLS). No payment data is ever sent over unencrypted channels.
• Transaction logs — including deposit amounts, withdrawal requests, and processing timestamps — are retained for a minimum of five years for fraud investigation and compliance purposes.
• If a chargeback or disputed transaction is raised, relevant transaction data may be shared with the payment provider involved for resolution purposes.

If you believe your payment details have been compromised or used without your authorisation, contact 92pk support immediately via live chat. We will lock your account pending investigation to prevent further unauthorised transactions.

7. Cookies and Tracking Technologies

92pk uses cookies and similar technologies to provide and improve the platform. A cookie is a small text file stored on your device when you visit a website. We use the following types:

• Essential cookies: Required for the platform to function. These handle session authentication, keeping you logged in, and remembering your wallet state during a session. You cannot opt out of these without breaking core platform functionality.
• Analytics cookies: Used to understand how users navigate the platform — which games are popular, where users drop off during registration, and how support features are used. This data is aggregated and anonymised.
• Preference cookies: Remember your settings, such as language preferences and notification options, so you do not have to re-enter them on every visit.
• Security cookies: Help us detect suspicious login attempts and protect accounts from unauthorised access by flagging unusual patterns, such as a new device logging in from a different city.

You can manage or block non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your experience on the platform — for example, you may need to log in again more frequently.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The specific retention periods depend on the type of data:

• Active account data: Retained for as long as your account remains open and active.
• Transaction and financial records: Retained for a minimum of five years after the transaction date for fraud prevention and compliance purposes.
• Identity verification documents: Retained for the duration of your account and for up to five years after closure, in line with standard anti-money laundering practices.
• Support chat transcripts: Retained for up to two years from the date of the conversation.
• Game session logs: Retained for up to two years. Aggregated, anonymised analytics data may be kept longer.
• Marketing preferences: Retained until you withdraw consent or request deletion.

When your account is closed — whether voluntarily or by us — your personal data is not immediately deleted. A retention period applies as described above, after which data is securely deleted or irreversibly anonymised. If you request deletion during the retention period, we will assess the request but may need to retain certain records for legal and compliance reasons.

9. How We Keep Your Data Secure

We implement a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, and disclosure:

• Encryption at rest and in transit: All data stored in our databases is encrypted. All data transmitted between your device and our servers uses TLS encryption.
• Access controls: Only authorised 92pk staff with a legitimate need can access personal data. Access is logged, reviewed, and revoked when no longer required.
• Password hashing: User passwords are never stored in plain text. We use strong hashing algorithms so that even internal staff cannot read your password.
• Fraud monitoring: Automated and manual systems monitor transaction patterns and account activity for signs of fraud, account takeover, and suspicious behaviour.
• Regular security assessments: Our platform undergoes periodic security reviews to identify and address vulnerabilities before they can be exploited.

While we take every reasonable precaution, no internet-based service can guarantee 100% security. If you become aware of any security concern related to your 92pk account — such as a suspected unauthorised login — please contact us immediately via live chat so we can secure your account without delay.

10. Your Rights Over Your Personal Data

You have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or email:

We aim to respond to all data rights requests within 30 days. In some cases — particularly complex or multiple requests — we may take up to 60 days. We will inform you if an extension is needed.

11. Minors and Under-18 Users

92pk is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that an account has been registered by a minor, the account will be suspended immediately, any funds held will be returned to the payment source, and all associated personal data will be deleted as soon as it is no longer required for compliance purposes.

If you are a parent or guardian and believe your child has registered an account on 92pk without your knowledge, please contact us immediately via live chat or email. We take such concerns very seriously and will act quickly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, improvements in our data handling practices, or updates to applicable laws and regulations. When we make changes, the revised policy will be published on this page with an updated "last updated" date at the top.

For material changes — those that significantly affect how your data is used or your rights as a user — we will make reasonable efforts to notify registered users in advance through the platform or via their registered contact details.

Your continued use of 92pk after any update to this policy constitutes acceptance of the revised version. We recommend bookmarking this page and reviewing it periodically, particularly before making significant use of the platform such as a large deposit or withdrawal.

13. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how your personal information has been handled, please get in touch with our support team. We are available around the clock and aim to resolve all privacy queries fairly and promptly.

• Live chat: Available 24/7 directly from the 92pk platform. This is the fastest way to reach us.
• Email: Our support email address is shown in the footer of every page. Include your registered username and a clear description of your request so we can assist you efficiently.
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to resolve them within 30 days.