Privacy Policy — paksupar

In this Privacy Policy, the following terms carry the meanings set out below unless the context requires otherwise:

• "paksupar", "we", "us", "our" — refers to the paksupar platform and its operators, accessible at paksupar.net.
• "Player", "you", "your" — any individual who visits, registers on, or otherwise uses the paksupar platform.
• "Personal Data" — any information that identifies or could reasonably identify a living individual, including name, email address, CNIC number, device identifiers, and financial account details.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, sharing, or deletion.
• "Controller" — the entity that determines the purposes and means of Processing Personal Data. paksupar acts as the Controller in respect of all data collected through the Platform.
• "Processor" — a third party that processes Personal Data on behalf of paksupar under a written data-processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the Processing of your Personal Data for a stated purpose.
• "KYC" — Know Your Customer procedures required to verify identity and age, including submission of government-issued identity documents.

paksupar is an online gaming and sports betting platform operated under international licensing standards and targeted at adult players aged 21 and above across Pakistan — including players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond.

The platform provides cricket betting, live casino games, slots, fishing arcade games, and related entertainment services. All services are accessible via the website at paksupar.net and via mobile browsers on Android and iOS devices.

paksupar is the data controller responsible for the Personal Data of all registered players and website visitors. Any questions relating to this Privacy Policy, or requests to exercise your data rights, should be directed to our support team using the contact details in Section 14.

paksupar collects Personal Data through several channels — directly from you when you register or interact with our platform, automatically through your device and browser, and from third parties such as payment processors. The categories of data we collect are as follows:

3.1 Registration & Identity Data

• Full legal name, date of birth, and residential address.
• CNIC number or passport number (collected during KYC verification).
• Email address and mobile phone number.
• Username and hashed password.

3.2 Financial & Transaction Data

• JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or SadaPay account references (account numbers, wallet IDs — never full card or bank credentials).
• USDT TRC20 wallet addresses, where applicable.
• Deposit and withdrawal amounts, dates, and transaction reference numbers.
• Bonus credits received, wagering history, and promotional participation records.

3.3 Technical & Usage Data

• IP address, device type, operating system, and browser type/version.
• Pages visited, time spent on pages, click paths, and session duration.
• Game session logs, bet placement data, and game outcome records.
• Error logs and platform performance diagnostics.

3.4 Communication Data

• Records of live chat conversations with our customer support team.
• Email correspondence sent to or received from paksupar support addresses.
• Complaint and dispute records.

paksupar uses your Personal Data for the following clearly defined purposes. We do not use your data for any purpose beyond those listed here without first seeking your explicit consent:

paksupar processes your Personal Data under one or more of the following recognised legal bases, consistent with internationally accepted data protection principles:

• Contract Performance: Processing is necessary to deliver the services you have registered for — including account management, gameplay, deposits, and withdrawals.
• Legal Obligation: Processing is required to comply with applicable laws, including anti-money laundering (AML) regulations, KYC requirements, and responsible gaming obligations.
• Legitimate Interest: Processing serves a legitimate business interest — such as preventing fraud, improving platform security, and analysing gameplay patterns to enhance the user experience — provided such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent — for example, to send you promotional emails or SMS messages — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

For any processing activity where we rely on legitimate interest, we carry out a balancing test to ensure that our interests do not override your privacy rights. You may request details of any such assessment by contacting our support team.

paksupar does not sell, rent, or trade your Personal Data to any third party. We share data only in the circumstances described below, and only to the minimum extent necessary:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and our USDT TRC20 processing partner receive only the transaction data required to execute deposits and withdrawals.
• KYC Verification Partners: Identity documents provided during KYC are processed by authorised verification service providers operating under strict confidentiality and data-processing agreements with paksupar.
• Fraud Prevention & AML Services: Transaction and usage data may be shared with third-party fraud detection and anti-money laundering compliance platforms to detect and prevent financial crime.
• Platform Technology Providers: Game content providers, cloud hosting partners, and analytics service vendors may access anonymised or pseudonymised technical data solely for the purpose of delivering platform services.
• Legal & Regulatory Authorities: paksupar will disclose Personal Data to law enforcement, regulatory bodies, or courts when required by applicable law or pursuant to a valid legal process.

paksupar uses cookies and similar tracking technologies (such as local storage and session identifiers) on the platform. The table below summarises the categories of cookies we use and their purpose:

Strictly necessary cookies are set automatically, as they are required for the platform to function. All other cookie categories are set only with your consent, which you may withdraw at any time through your browser settings. Please note that disabling functional cookies may impair certain platform features.

7.1 Do Not Track

paksupar respects browser-level "Do Not Track" (DNT) signals where technically feasible. Where a DNT signal is detected, we limit cookie placement to strictly necessary categories only.

paksupar retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods we apply are:

• Account & Identity Data: Retained for the duration of your active Account, plus a minimum of 5 years following Account closure, in compliance with AML record-keeping obligations.
• Financial & Transaction Data: Retained for a minimum of 7 years from the date of each transaction, consistent with financial record-keeping requirements.
• KYC Documentation: Retained for 5 years following the completion of verification or Account closure, whichever is later.
• Technical & Usage Logs: Retained for up to 12 months, after which they are anonymised or deleted.
• Communication Records: Customer support and live chat transcripts retained for up to 3 years from the date of the conversation.
• Marketing Consent Records: Retained for as long as the consent remains active, plus 12 months following withdrawal as an audit record.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. You may request early deletion of specific data categories where no legal retention obligation applies, by contacting support.

paksupar recognises and supports the following data subject rights. To exercise any of these rights, please contact us using the details in Section 14. We will respond within 30 days of receiving a valid request:

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held on your Account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restrict Processing: You may request that we pause certain processing activities while a dispute or correction request is resolved.
• Right to Data Portability: You may request a machine-readable copy of the Personal Data you have provided to us, for the purpose of transferring it to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interest, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

paksupar's platform and services are strictly for adults. The minimum age to register and use the platform is 21 years. We do not knowingly collect Personal Data from individuals under the age of 21.

During the registration process, all new players are required to confirm their age. KYC verification — which includes submission of a government-issued identity document such as a CNIC or passport — is used to confirm age eligibility for all accounts.

If paksupar becomes aware that a registered Account belongs to an individual under 21 years of age, we will immediately suspend the Account, void any associated balances, and permanently delete all Personal Data associated with that Account. Any individual who provides false age information during registration does so in breach of our Terms and Conditions.

If you believe a minor has registered on our platform, please contact us immediately at [email protected] so we may take appropriate action without delay.

paksupar applies a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS Encryption: All data transmitted between your device and the paksupar platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 Encryption at Rest: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using AES-256 symmetric encryption.
• Access Controls: Access to Personal Data within our organisation is restricted on a strict need-to-know basis. All staff with access to Personal Data are bound by confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts. All internal staff accounts with data access require 2FA as a mandatory security measure.
• Penetration Testing: paksupar conducts regular third-party security assessments and penetration testing of its platform infrastructure.
• Incident Response: In the event of a confirmed data breach that is likely to result in risk to your rights, paksupar will notify affected players and the relevant supervisory authority within the timeframes required by applicable law.

While we take all reasonable steps to protect your Personal Data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

The paksupar platform may, from time to time, reference or display content from third-party service providers — for example, game content providers, payment gateway landing pages, or live chat tools. These third-party services operate under their own privacy policies, which are separate from and independent of this Privacy Policy.

paksupar is not responsible for the privacy practices, data handling standards, or content of any third-party services. We recommend reviewing the privacy policies of any third-party services you interact with. Our liability extends only to data processing activities carried out directly by paksupar as the data controller.

paksupar may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will notify registered Players via email or via a prominent in-platform notification prior to the changes taking effect. Non-material changes (such as typographical corrections or minor clarifications that do not affect your rights) may take effect immediately.

Continued use of the paksupar platform following notification of any update to this Privacy Policy constitutes your acknowledgment of the revised terms. If you do not accept an update, you should discontinue use of the platform and may request Account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the way paksupar handles your Personal Data, please reach out to our team through the following channels:

• Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing. We aim to respond within 4–12 hours.
• Live Chat: Available 24 hours a day, 7 days a week, directly through the paksupar platform. Our support agents are trained to handle privacy-related enquiries with full discretion.

If you are submitting a formal data subject rights request (as described in Section 9), please email us with "Data Rights Request" in the subject line and include your registered email address along with a clear description of your request. We will verify your identity before processing any access, rectification, or deletion request.