Your privacy matters to us. This policy explains precisely what personal data 97pak collects, why we collect it, how it is used and what rights you have over your information.
Before you read the full legal text, here are the six core data-privacy principles that govern how 97pak handles every piece of information you share with us.
We collect only the personal data that is strictly necessary to provide our services, complete KYC and AML obligations, and process your transactions in PKR. No data is collected simply because it is convenient.
97pak does not sell, rent or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used only for the purposes described in this Privacy Policy.
All data is transmitted over TLS-encrypted connections and stored on access-controlled infrastructure. KYC documents are handled with heightened security controls and access logging.
We explain every category of data we collect, the legal basis for processing it and how long it is retained. There are no hidden data flows or undisclosed processing activities on the 97pak Platform.
You can request access to your data, correction of inaccuracies, deletion of your account records or a portable export of your information at any time by contacting our support team.
Data is not kept indefinitely. Each category of data has a defined retention period based on legal obligation, operational necessity and your consent. When retention periods expire, data is securely deleted or anonymised.
Request a copy of all personal data we hold about you at any time.
Ask us to correct any inaccurate or incomplete information in your account records.
Request deletion of your personal data, subject to our legal retention obligations.
Receive your data in a structured, machine-readable format for transfer to another service.
Ask us to limit how we process your data while a dispute or request is being resolved.
Object to processing of your data for direct marketing or legitimate-interest purposes.
Request human review of any decision made solely by automated processing that significantly affects you.
Withdraw consent for any processing that is based solely on your consent, at any time.
This Privacy Policy ("Policy") describes how 97pak ("we", "us", "our"), operator of the platform accessible at https://97pak.cam (the "Platform"), collects, processes, stores and shares personal data relating to users ("you", "Player") of the Platform.
We are committed to protecting the privacy of all individuals who interact with the 97pak Platform, whether you are a registered Player in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or anywhere else. This Policy is written in plain English and is intended to be genuinely readable, not just a legal formality.
By registering an account, accessing the Platform or submitting personal data to us in any form, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please do not use the Platform.
Note for Pakistani users: Pakistan does not yet have a comprehensive omnibus data-protection law equivalent to the GDPR. However, 97pak applies GDPR-aligned principles as a baseline standard of personal data handling for all users, including those accessing the Platform from Pakistan.
97pak is the Data Controller in respect of Personal Data collected via the Platform. For all data-related enquiries, access requests, correction requests or complaints, you may contact us using the details set out in Section 15 of this Policy.
Where 97pak engages third-party Data Processors (for example, payment processors, KYC verification providers or cloud infrastructure providers), we do so under written data-processing agreements that require those processors to handle your Personal Data only in accordance with our instructions and to implement appropriate security measures.
The following table sets out the categories of Personal Data we collect, together with examples of the specific data points within each category.
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC / passport number, nationality | Provided by you at registration / KYC |
| Contact Data | Email address, phone number, city of residence (e.g. Lahore, Karachi) | Provided by you |
| Financial Data | Deposit / withdrawal amounts in PKR, payment method type (e.g. bank transfer reference), transaction history | Generated by your Platform activity |
| KYC Documents | CNIC scan or photograph, passport copy, proof of address | Provided by you during verification |
| Technical Data | IP address, device type, browser type and version, operating system, session duration | Collected automatically |
| Usage Data | Pages visited, sports markets browsed, games played, bet history, login timestamps | Collected automatically |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Generated by your interactions with support |
| Preference Data | Language preference, responsible-gambling limit settings, notification preferences | Set by you in account settings |
We do not intentionally collect Special Category Data (such as health information, racial or ethnic origin, or political opinions) unless directly relevant to a responsible-gambling assessment or legal obligation.
We process Personal Data only where we have a valid legal basis for doing so. The primary legal bases we rely on are:
We use your Personal Data for the following purposes:
We do not use your Personal Data to build profiles for sale to third-party advertisers, to make automated decisions that produce significant legal effects without human oversight, or for any purpose incompatible with the purposes listed above.
97pak shares Personal Data only with third parties where there is a specific, lawful reason to do so. The categories of recipients are:
We do not share Personal Data with third parties for their own independent marketing purposes. We do not sell Personal Data.
The Platform is operated by an international entity, and your Personal Data may be transferred to and stored on servers located outside Pakistan. Where such transfers occur, we take appropriate steps to ensure that the receiving jurisdiction provides an adequate level of data protection, or that adequate safeguards are in place (such as standard contractual clauses or equivalent mechanisms), consistent with GDPR-aligned principles.
By using the Platform, you acknowledge that your Personal Data may be transferred internationally for the purposes described in this Policy.
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following indicative retention periods apply:
| Data Category | Indicative Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML / legal obligation |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Financial / Transaction Data | 7 years from transaction date | Legal / audit obligation |
| Communications / Support Data | 3 years from last interaction | Dispute resolution / quality assurance |
| Technical / Usage Data | Up to 2 years | Security and analytics |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Compliance evidence |
When the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregated statistical purposes.
The Platform uses cookies and similar tracking technologies to enable core functionality, improve performance and, where you have provided consent, personalise your experience.
You can control non-essential cookies through your browser settings or through any cookie-consent mechanism displayed on the Platform. Disabling strictly necessary cookies may impair Platform functionality.
97pak implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, loss, alteration or disclosure. These measures include:
While we take every reasonable precaution, no internet-based service can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable obligations.
The Platform is strictly for adults aged 18 or older — or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect Personal Data from anyone under the applicable minimum age. If we discover that we have inadvertently collected Personal Data from a minor, we will delete that data promptly and close the associated account.
If you are a parent or guardian and believe that a minor has registered on the Platform using your or their own details, please contact us immediately at the address in Section 15.
Depending on the applicable law and the specific circumstances of your request, you may have the following rights in respect of your Personal Data:
To exercise any of these rights, please contact us using the details in Section 15. We will respond to all legitimate requests within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 60 days, in which case we will notify you accordingly.
We may need to verify your identity before processing a data-rights request. This is to ensure that your data is not disclosed to an unauthorised third party.
We may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law or Platform functionality. Material changes will be communicated to registered Players via a notice on the Platform or by email to the address registered on your account.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.
For any questions, concerns or requests regarding this Privacy Policy or our handling of your Personal Data, please contact us:
If you are not satisfied with our response to a data-related complaint, you may have the right to lodge a complaint with the data-protection supervisory authority in the jurisdiction in which you are based, or the jurisdiction of the Data Controller. Please contact us first so we have the opportunity to address your concern directly.
Our support team is available around the clock. For data access or deletion requests, email us directly. For general questions, our FAQ covers the most common topics.
Back to Homepage Visit FAQ