paksup Privacy Policy

01 Introduction

paksup is Pakistan's leading online casino and sports betting platform, offering Pakistani players a comprehensive range of services including cricket betting, PSL markets, live dealer casino games, and a full library of slot titles. As a platform that serves players across Karachi, Lahore, Islamabad, Faisalabad, and beyond, paksup processes personal data as a necessary part of delivering its services in a secure, compliant, and responsible manner.

This Privacy Policy describes how paksup collects, uses, stores, shares, and protects personal data relating to registered players, prospective players who visit the platform without registering, and individuals who contact paksup's customer support team. It also explains the rights that data subjects hold and the process for exercising those rights.

paksup operates under an internationally recognised gaming licence and is bound by the data protection obligations associated with that licence. These obligations are consistent with internationally accepted standards for the protection of personal data in the online gaming industry and form the minimum standard to which paksup holds itself.

02 Data Controller

For the purposes of this Privacy Policy, paksup is the data controller in respect of all personal data collected from players and visitors to the paksup platform. As data controller, paksup determines the purposes for which personal data is processed and the manner in which that processing is carried out.

All enquiries relating to this Privacy Policy, requests to exercise data subject rights, or complaints about paksup's data practices should be directed to the paksup Data Protection team via the contact details provided in Section 14 of this policy.

03 What Data We Collect

paksup collects the following categories of personal data from players and platform visitors:

paksup does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for age or identity verification and only with your explicit consent or as required by law.

04 How We Collect Data

paksup collects personal data through the following channels:

• Directly from you — when you complete the paksup registration form, submit KYC documents, make a deposit or withdrawal, update your account profile, or contact the customer support team.
• Automatically — through server logs, cookies, and similar tracking technologies when you access and use the paksup platform. This includes technical data such as your IP address, device identifiers, and session activity.
• From third parties — from KYC and identity verification partners who confirm the authenticity of documents you provide; from payment processors who confirm successful transactions; and from fraud detection services that help paksup identify unusual account activity.
• From publicly available sources — where necessary for fraud prevention or regulatory compliance, paksup may cross-reference your information against publicly available databases.

05 Purposes & Legal Basis for Processing

paksup processes personal data only where it has a lawful basis for doing so. The following table sets out the primary purposes for which paksup processes player data and the corresponding legal basis for each:

06 Data Sharing & Disclosure

paksup does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa network, Mastercard network, and USDT/blockchain transaction processors receive the minimum data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents submitted by players as part of the paksup account verification process.
• Fraud prevention and security services: Providers that analyse platform activity to detect suspicious patterns, account takeover attempts, and bonus abuse schemes.
• Gaming software providers: Casino game developers whose software is integrated into the paksup platform may receive anonymised or pseudonymised player session data necessary for game functionality and fairness auditing.
• Regulatory and licensing authorities: paksup's licensing authority and any competent regulatory body may require disclosure of player records as part of licence compliance obligations.
• Law enforcement agencies: Where paksup receives a lawful order or court direction requiring disclosure of personal data, paksup will comply with that order to the extent required by law.

All third-party service providers engaged by paksup are required to enter into data processing agreements that obligate them to process personal data only as instructed by paksup, maintain appropriate security measures, and not use paksup player data for any purpose beyond the services they provide to paksup.

07 Data Retention

paksup retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of five years from the date of account closure, as required under AML and gaming licence regulations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the communication, or longer where a dispute or legal proceeding is ongoing.
• Technical and log data: Retained for twelve months from the date of collection, unless a longer retention period is required for security investigation purposes.
• Marketing consent records: Retained for the duration of your consent and for three years after withdrawal of consent, to demonstrate compliance.

Once the applicable retention period expires, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Players who voluntarily close their accounts may request early deletion of data not subject to mandatory regulatory retention periods.

08 Security Measures

paksup implements a layered security architecture to protect player personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security measures include:

• AES-256 encryption for all personal data stored in paksup databases.
• TLS 1.2 or higher encryption for all data transmitted between your device and the paksup platform.
• Tokenisation of payment credentials — full card numbers and mobile wallet credentials are never stored on paksup servers.
• Multi-factor authentication options for player accounts, with mandatory MFA for withdrawal requests above defined PKR thresholds.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments of the paksup platform.
• Intrusion detection and anomaly monitoring systems operating around the clock.
• Formal incident response procedures with defined notification timelines in the event of a data breach.

09 Cookies & Tracking Technologies

paksup uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, and analyse how players interact with the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your language preference, display settings, and responsible gaming tool configurations to personalise your paksup experience.
• Analytics Cookies: Collect anonymised or aggregated data about how players navigate the paksup platform — which pages are visited most, where players drop off, and how features are used. This data is used to improve the platform.
• Security Cookies: Help paksup detect and prevent fraudulent account activity, bot behaviour, and abnormal session patterns.

paksup does not use third-party advertising or behavioural tracking cookies that share your data with external advertising networks. You can manage your cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the paksup platform but will not prevent you from accessing core betting and gaming features.

10 Exercising Your Data Rights

Players wishing to exercise any of their data rights as described in this Privacy Policy should contact the paksup Data Protection team via live chat or by email (see Section 14). To protect your privacy and ensure that data subject requests are fulfilled correctly, paksup will require you to verify your identity before processing any data access, rectification, erasure, or portability request.

paksup will respond to all verified data subject requests within 30 days of receipt. Where a request is complex or involves a large volume of data, paksup may extend this period by a further 60 days and will notify you accordingly within the initial 30-day window.

There is no fee for exercising your data rights under this policy. However, paksup reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive in nature.

11 Protection of Minors

The paksup platform is strictly intended for adults aged 21 and over. paksup does not knowingly collect personal data from any person under the age of 21. All registration attempts undergo age verification checks, and paksup reserves the right to request certified proof of age documentation at any stage of the account lifecycle.

If paksup discovers or reasonably suspects that a registered account belongs to a person under 21, it will immediately suspend the account, void all betting and gaming activity associated with it, and initiate a secure deletion of the minor's personal data in accordance with applicable laws and licence obligations.

Parents and guardians in Pakistan who are concerned that a minor in their household may have accessed the paksup platform should contact our support team immediately via live chat. paksup will cooperate fully and promptly to investigate and resolve any such report.

12 International Data Transfers

As an internationally licensed gaming platform, paksup may transfer personal data to service providers and regulatory authorities located outside Pakistan. Where such transfers occur, paksup takes steps to ensure that your personal data receives an equivalent level of protection to that described in this Privacy Policy.

Mechanisms used by paksup to legitimise international data transfers include contractual data processing agreements with service providers incorporating internationally recognised standard contractual clauses, and transfers to providers operating in jurisdictions that maintain adequate data protection standards as assessed by paksup's licensing authority.

paksup will not transfer personal data to any jurisdiction or entity that does not provide adequate safeguards for the protection of that data. If you have questions about the specific safeguards applied to international transfers of your personal data, you may contact the paksup Data Protection team as described in Section 14.

13 Policy Amendments

paksup reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or changes required by our licensing authority. The "Last Updated" date at the top of this page will always reflect when the most recent revision was made.

Where amendments are material — meaning they significantly affect your rights or how paksup uses your personal data — paksup will notify all registered players by email to their registered address at least seven days before the changes take effect. For minor or clarificatory amendments, paksup may update the policy without prior notice.

Your continued use of the paksup platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. Earlier versions of this policy are available on request by contacting the paksup support team.

14 Contact & Complaints

If you have any questions, concerns, or complaints about how paksup processes your personal data, or if you wish to exercise any of your data rights, please contact the paksup Data Protection team using the following details:

• Live Chat: Available 24 hours a day, 7 days a week directly on the paksup platform. Average response time is 3–5 minutes.
• Email: support paksup.org — please include "Data Privacy Request" in the subject line.

paksup is committed to resolving all privacy-related complaints promptly and fairly. If you are not satisfied with paksup's response to your complaint , you have the right to escalate your complaint to the relevant regulatory authority or data protection supervisory body in the jurisdiction of paksup's licensing authority.