PakClub Privacy Policy 2026

Privacy Policy

Last updated: January 2026

What We Collect

  • Account data: mobile number, password (bcrypt-hashed), referrer code (optional).
  • Identity data (KYC): CNIC photos, selfie, when withdrawing > PKR 50,000.
  • Financial data: deposit/withdrawal records, game wager/win/loss history.
  • Device data: app version, OS version, device fingerprint (for fraud detection).
  • Behavioral data: game play patterns, session length (for responsible-gaming triggers).
  • Cookies: session cookies (login state), one analytics cookie (aggregated only — no per-user tracking).

What We DON’T Collect

  • We don’t sell your data to third parties.
  • We don’t run third-party ad trackers.
  • We don’t access your contacts, photos, or messages outside what you explicitly upload.
  • We don’t track your location beyond country-level (Pakistan/non-Pakistan, for compliance).

How We Use It

  • Service delivery: running your account, processing transactions, hosting games.
  • Fraud detection: identifying multi-accounting, bots, collusion, AML red flags.
  • KYC/AML compliance: verifying identity for large withdrawals as required by law.
  • Customer support: resolving your tickets faster.
  • Aggregate analytics: understanding which games are popular, where players struggle.

Retention

  • Active account data: kept while your account exists + 6 months after closure.
  • Financial records: 7 years (Pakistani tax/AML requirement).
  • KYC documents: 7 years (AML), then deleted automatically.
  • Behavioral logs: 12 months rolling window.

Your Rights

  • Access: request a copy of all data we hold about you (delivered within 14 days).
  • Correction: ask us to correct inaccurate data.
  • Deletion: close your account; we delete within 6 months (financial records retained 7 years for legal compliance).
  • Export: request a JSON export of your wallet ledger and game history.
  • Email [email protected] for any of the above.

Security

  • End-to-end TLS (HTTPS) on every connection; HSTS preloaded.
  • Bcrypt password hashing, no plain-text storage.
  • Encrypted backups, off-site, restored quarterly to verify integrity.
  • 2FA available (recommended) for every account.
  • 24/7 monitoring for unauthorized access; you’ll be notified within 72 hours of any breach affecting your data.

Cookies

PakClub uses two types of cookies: session cookies (essential for login state, expire when you close the browser) and a single aggregated analytics cookie (no personal data — counts page views and session duration only). No advertising cookies, no cross-site tracking, no fingerprint cookies.

Children

PakClub is for adults 18+. We do not knowingly collect data from minors. If you believe we have, contact [email protected] and we’ll delete it within 7 days.

Changes

Material changes to this policy are announced via in-app notice 7 days in advance.

Contact

Privacy questions: [email protected]