Privacy Policy – Casinos Pakistan Data Protection Commitment

1. Introduction

This Privacy Policy describes how Casinos — the operator of the platform at casinos-bangla.com — collects, stores, uses and protects the personal information of players who register and use our betting and live casino services. "Personal data" means any information that can be used to identify you directly or indirectly, including your name, mobile number, CNIC number, payment account details and device information.

Casinos is designed exclusively for adult Pakistani players and all services are provided in Pakistani Rupees. The information we collect reflects the specific requirements of operating a regulated gaming platform in this market — identity verification, payment processing and responsible gaming compliance all require us to hold certain categories of personal data. We collect only what is necessary for these defined purposes and nothing more.

This policy applies to all data collected through the casinos website, through our customer support channels, and through the payment integrations used on the platform including Easypaisa, JazzCash, NayaPay, SadaPay and banking channels. It does not govern the privacy practices of those third-party payment providers — please review their individual privacy policies for details of how they handle your information on their own systems.

Plain language commitment: This policy is written to be read and understood by the people it applies to — casinos players in Pakistan. If any section is unclear, contact support at support@casinos-bangla.com and we will explain it in plain terms.

2. Data We Collect

The personal data casinos collects falls into four broad categories. The table below summarises what is collected, when and why it is required.

Data Category	Specific Information	When Collected
Registration Data	Full legal name, date of birth, Pakistani mobile number, password (hashed — never stored in plain text)	At account registration
Identity Verification (KYC)	CNIC number, CNIC image (front & back), selfie with CNIC, proof of payment method	Before first withdrawal
Financial Data	Payment account numbers (Easypaisa/JazzCash/bank), transaction amounts, deposit and withdrawal history in PKR	On each transaction
Betting & Gaming Activity	Bet history, game sessions, stakes, odds, results, cash-out records, bonus usage	Continuously during platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps, page views	Automatically on platform access
Communications Data	Content of live chat, emails and support tickets submitted to casinos	When you contact support
Responsible Gaming Data	Deposit limits set, cooling-off periods, self-exclusion records, session time preferences	When tools are activated

What We Do Not Collect

Casinos does not collect your CNIC PIN, banking passwords, Easypaisa or JazzCash PINs, or any other authentication credentials beyond the casinos account password you create. Never share these with anyone, including someone claiming to be casinos support.

Identity Data

Name, date of birth, CNIC — required for legal compliance and age verification on the 18+ platform.

Financial Data

PKR transaction history and payment method identifiers — required for processing deposits, withdrawals and detecting fraud.

Activity Data

Bet history and game sessions — required for responsible gaming monitoring, dispute resolution and account management.

Technical Data

IP address and device info — required for fraud prevention, security monitoring and platform performance optimisation.

Support Data

Communications with casinos support — retained for quality monitoring, dispute resolution and training purposes.

RG Data

Responsible gaming tool settings — retained to enforce limits you have set and to monitor for indicators of problem gambling.

3. Why We Use Your Data

Every category of personal data that casinos collects has a specific, defined purpose. We do not collect data speculatively or build profiles beyond what is required for safe and compliant platform operation. Below is a full account of why each type of data is used.

Account Operation and Service Delivery

Your registration data — name, mobile number and date of birth — is used to create and maintain your casinos account, verify that you meet the 18+ age requirement, and ensure that only you can access your account. This is the foundational purpose: without it, there is no account and no service. Your betting and gaming activity data is used to display your bet history, calculate and credit winnings, process bonus wagering, and enable the cash-out feature on your open bets.

Identity Verification and Regulatory Compliance

KYC data — CNIC details and proof of payment method — is collected and verified before withdrawals are processed. This is a regulatory requirement that casinos is obligated to meet under its gaming licence conditions. Identity verification protects you as a player by ensuring that no one else can withdraw funds from your casinos account, and it protects the integrity of the platform by preventing fraudulent use of false identities.

Payment Processing

Financial data — payment account numbers and transaction records — is used exclusively to process your PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card channels. Transaction records are retained for financial reporting, anti-money laundering compliance and to resolve any payment disputes that arise. No financial data is used for marketing purposes.

Fraud Prevention and Security

Technical data including IP address, device identifiers and login timestamps is used to detect suspicious activity, prevent multiple account creation, identify unauthorised access attempts and monitor for patterns consistent with bonus abuse or fraud. This data is processed by casinos' automated security systems and reviewed by the security team when flagged. Fraud monitoring is an essential function — it directly protects your account and the funds it holds.

Responsible Gaming

Your betting activity data and responsible gaming settings are monitored by casinos' responsible gaming system. This system identifies patterns that may suggest a player is developing gambling-related harm — for example, significantly increased deposit frequency, chasing loss behaviour or session duration outliers. Where the system flags a concern, the casinos responsible gaming team may reach out to the player or apply protective measures in accordance with casinos' responsible gaming policy.

Customer Support

Communications data from your support interactions is used to address your queries, resolve disputes and review the quality of casinos' support service. Support records are also used in conjunction with account data when investigating formal complaints. This data is not used for marketing or shared externally except where required for a formal dispute process.

What we do not do with your data: Casinos does not sell your personal data to any third party. We do not share your data with advertising networks, data brokers or marketing companies. We do not use your data to build psychological or behavioural profiles beyond what is needed for responsible gaming monitoring.

4. Who Has Access to Your Data

Casinos does not sell, rent or trade your personal data with any third party. Access to your data is restricted to parties who require it to provide services to you or to fulfil regulatory obligations. The categories of parties who may access your data are described below.

Casinos Internal Teams

Access to player personal data within casinos is on a need-to-know basis only. The customer support team can access account information relevant to resolving your query. The payments team accesses transaction data when processing or investigating deposits and withdrawals. The security and compliance team accesses activity data for fraud monitoring and KYC review. No casinos employee has access to your payment PINs or passwords — these are never visible to anyone, including our own staff.

Payment Service Providers

To process your PKR deposits and withdrawals, casinos shares the minimum required data with the relevant payment service provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or card payment processor. This data is limited to what the payment provider requires to authenticate and complete the transaction. Each payment provider is a separate data controller with its own privacy policy governing how they handle transaction data on their systems.

Gaming Technology Providers

Certain casinos platform functions — including live casino game streams and virtual sports feeds — are powered by certified third-party technology partners. These partners may process limited technical and activity data as part of providing the game service. All such partners are contractually required to handle data in accordance with standards consistent with this privacy policy and to use the data only for the defined service purpose.

Regulatory and Law Enforcement Authorities

Casinos may disclose personal data to regulatory bodies, law enforcement agencies or courts where required by applicable law, regulatory requirement or legal process. This includes reporting obligations under anti-money laundering regulations and compliance requirements under casinos' gaming licence conditions. Casinos will, where permitted by law, notify the affected player before making such a disclosure.

Third-party links: The casinos platform does not contain links to external websites. If you encounter any link appearing to go to an external site from within the casinos platform, do not click it and report it to support immediately — it may indicate an unauthorised modification or phishing attempt.

5. How Long We Keep Your Data

Casinos retains personal data only for as long as necessary to fulfil the purposes described in this policy. Retention periods are determined by operational necessity, regulatory requirements and the applicable statute of limitations for financial and gaming disputes. The standard retention periods by data category are as follows:

Registration and identity data: For the duration of the account relationship, plus a minimum of five years following account closure. This period is required by anti-money laundering and gaming licence regulations.
KYC documents (CNIC images, selfies): Five years from the date of verification or from account closure, whichever is later. These are held in encrypted storage and accessible only to the compliance team.
Transaction and financial data: Seven years from the date of the transaction, in accordance with standard financial record-keeping requirements.
Betting and gaming activity data: Five years from the date of the activity. This period allows for dispute resolution and regulatory review if required.
Technical and device data: Ninety days in rolling logs, after which raw log data is anonymised and retained in aggregate form for security pattern analysis.
Customer support communications: Three years from the date of the interaction, or longer where the communication is related to an unresolved formal complaint.
Responsible gaming records: For the full duration of the account relationship and five years following closure. Self-exclusion records are retained indefinitely so that any future registration attempt can be flagged.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised aggregate data — such as overall platform usage statistics — may be retained indefinitely as it no longer constitutes personal data.

6. How We Protect Your Data

Casinos implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. The key measures in place are described below.

Technical Security Measures

SSL/TLS encryption: All data transmitted between your device and the casinos platform is encrypted using industry-standard TLS. This applies to your login, all financial transactions and all account interactions.
Password hashing: Your casinos account password is stored as a one-way cryptographic hash — it is never stored in readable form and cannot be retrieved by casinos staff, even the technical team. If you forget your password, it must be reset, not retrieved.
Encrypted document storage: KYC documents including CNIC images are stored in encrypted format with access restricted to the compliance team. Encryption keys are managed separately from the data stores.
Intrusion detection: Automated systems monitor for unusual login activity, multiple failed authentication attempts, IP-based anomalies and other indicators of unauthorised access.
Two-factor authentication (2FA): Available on all casinos accounts — strongly recommended for all players. When 2FA is enabled, accessing your account requires both your password and a one-time code sent to your registered mobile number.

Organisational Security Measures

Access to player personal data is restricted on a role-based, need-to-know basis. Staff who have no operational reason to access your data cannot do so.
All casinos staff with access to personal data are trained on data protection obligations and are contractually bound by confidentiality obligations.
Data security practices are reviewed periodically and updated in line with current best practice standards for the gaming and financial services industries.

Your role in security: Technical measures alone cannot fully protect an account if login credentials are shared or compromised at the player's end. Use a strong, unique password for your casinos account, enable 2FA, and never share your login details with anyone — including individuals claiming to be casinos staff. Casinos support will never ask for your password.

7. Your Data Rights

As a casinos player, you have a number of rights over your personal data. These are not bureaucratic formalities — they are genuine rights you can exercise at any time by contacting casinos support. Here is what each right means in practice.

1

Right of Access

You can request a full copy of the personal data casinos holds about you. We will provide this in a readable format within a reasonable period — typically within 30 days of a verified request. Submit your request via email to support@casinos-bangla.com with the subject "Data Access Request".

2

Right to Correction

If any personal data casinos holds about you is inaccurate or incomplete, you have the right to request correction. For registration details, contact support directly. For KYC documents, updated documents will need to be submitted through the verification process.

3

Right to Deletion

You may request deletion of your personal data subject to legal retention requirements. We cannot delete data that is required to be retained under anti-money laundering or gaming licence regulations. Data that is not subject to mandatory retention will be deleted upon a verified request following account closure.

4

Right to Restrict Processing

You can ask casinos to limit how your personal data is used while a dispute or correction request is being resolved. During a restriction period, data will be stored but not used for any other processing purpose beyond the minimum required for security and regulatory compliance.

5

Right to Portability

You can request an export of your casinos personal data — registration information, transaction history and betting records — in a commonly used, machine-readable format such as CSV. This right applies to data you provided directly to casinos and data generated through your use of the platform.

6

Right to Withdraw Consent

Where casinos processes your data on the basis of consent — for example, optional marketing communications — you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal. Contact support or use the account communication preferences to update your settings.

To exercise any of these rights, contact casinos via live chat or email support@casinos-bangla.com. Requests will be acknowledged within 48 hours and actioned within 30 days. Casinos may request identity verification before processing a data rights request to ensure we are communicating with the account holder and not an unauthorised third party.

8. Cookies and Tracking Technologies

The casinos platform uses cookies — small text files stored on your device — to provide essential platform functionality and improve your experience. Below is a full account of the cookies used and what they do.

Strictly Necessary Cookies

These cookies are required for the platform to function and cannot be disabled. They include:

Session cookies that maintain your logged-in state during a platform session
Security cookies that support anti-fraud and CSRF protection functions
Bet slip cookies that retain your current bet selections during a session

Functional Cookies

These cookies remember your preferences to improve your experience — for example, your preferred language setting, whether the live chat widget should remain open, and your last-visited section of the platform. Disabling these cookies will not prevent access to the platform but may mean your preferences are not remembered between sessions.

Analytics Cookies

Casinos uses anonymised analytics data to understand how players use the platform — which pages load slowly, which features are used most and where technical errors occur. This data is aggregated and anonymous; it cannot be linked back to individual player accounts. Analytics cookies are used for platform improvement purposes only and not for individual player profiling.

You can manage cookie settings through your browser. Most browsers allow you to view, delete and block cookies. Note that blocking strictly necessary cookies will prevent the casinos platform from functioning correctly. Anonymised analytics data is not considered personal data and is retained in aggregate form for platform development purposes.

9. Minors — Strictly 18+ Platform

The casinos platform is strictly for adults aged 18 and over. Casinos does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the account registration process — by submitting a date of birth and agreeing to the Terms and Conditions, you confirm that you are at least 18 years old.

CNIC-based identity verification, required before any withdrawal, provides a further layer of age confirmation. Pakistani CNICs are only issued to individuals aged 18 and over — a valid CNIC submission therefore confirms eligibility by definition. Any account where it is discovered that the holder is under 18 will be suspended immediately and the account balance returned to the originating payment source after investigation.

If you are a parent or guardian and believe that a minor has registered a casinos account using false information, contact casinos support immediately via live chat or at support@casinos-bangla.com. We will investigate and act promptly on any credible report of underage account use.

10. Changes to This Privacy Policy

Casinos may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, platform functionality or data processing practices. The "Last Updated" date at the top of this page reflects when the current version was published.

When material changes are made — those that meaningfully affect how your data is collected, used or shared — casinos will notify registered players via notification in the account dashboard and via the registered mobile number or email address on file, at least 7 days before the revised policy takes effect. This gives you time to review the changes before they apply to your account.

Minor updates — including typographical corrections, formatting improvements and clarifications that do not alter the substance of how data is processed — may be made without advance notice. We recommend reviewing this policy periodically. The current version is always accessible at casinos-bangla.com/privacy-policy. Continued use of the casinos platform after a policy update takes effect constitutes acceptance of the revised version. If you do not agree with any changes to the Privacy Policy, contact support to discuss your options or request account closure in accordance with the Terms and Conditions.

11. Contact and Data Queries

For any question, concern or request related to this Privacy Policy or your personal data, casinos can be contacted through the following channels:

Live Chat: Available 24/7 on the casinos platform — fastest route for account-related data queries and straightforward requests.
Email: support@casinos-bangla.com — for formal data rights requests, include "Data Rights Request" in the subject line along with your registered mobile number (not password). Responses within one working day in most cases.
Formal Privacy Complaint: If you believe casinos has not handled your personal data appropriately, submit a formal complaint by email with the subject "Privacy Complaint — [Registered Mobile Number]". Formal complaints are acknowledged within 48 hours and receive a written response within 10 working days.

If you are not satisfied with casinos' response to a privacy complaint, you may refer the matter to the relevant data protection authority or dispute resolution body under casinos' applicable gaming and regulatory framework. Details of the relevant authority will be provided in casinos' formal complaint response where applicable.

This Privacy Policy is governed by applicable law and forms part of the overall agreement between you and casinos alongside the Terms and Conditions. Reading both together gives you a complete picture of your rights and obligations as a casinos player.