97pak Privacy Policy —
How We Protect Your Data

97pak processes your personal data for the following specific purposes:

• Account creation and management: To create, maintain, and administer your 97pak player account throughout your relationship with us.
• Identity and age verification: To confirm that you are a real person, that you are 21 years of age or older, and that your account details match your verified identity. This is a mandatory requirement under our operating licence.
• Payment processing: To process deposits from and withdrawals to your registered Pakistani payment methods, including JazzCash, EasyPaisa, and supported bank accounts.
• Anti-money laundering (AML) compliance: To monitor transactions for patterns indicative of money laundering, terrorist financing, or other financial crimes, as required under 97pak's licensing obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, including bonus abuse, identity fraud, collusion, and unauthorised access attempts.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, apply player-requested responsible gaming tools, and enforce the platform's self-exclusion provisions.
• Customer support: To provide effective, personalised support when you contact 97pak with questions, complaints, or account issues.
• Dispute resolution: To investigate and resolve disputes regarding game outcomes, transactions, or bonus application, using your gaming and transaction history as the evidentiary basis.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and user experience of the 97pak Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time.

97pak processes personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between 97pak and the Player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with 97pak's obligations under its operating licence, including KYC verification, AML monitoring, and record-keeping requirements.
• Legitimate interests: Processing necessary for 97pak's legitimate business interests, including fraud prevention, security monitoring, and platform performance improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit, freely given consent — specifically for marketing communications. Consent is obtained at registration and can be withdrawn at any time through your account settings or by contacting support.

97pak does not sell your personal data to any third party. 97pak does share data with third parties in the following specific, controlled circumstances:

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors to the extent necessary to process your deposits and withdrawals. These processors act as independent data controllers for their own payment processing activities.

Where 97pak uses third-party KYC verification services, your CNIC data and supporting verification documents may be shared with those verified partners solely for the purpose of identity confirmation. All such partners are contractually bound to handle your data with appropriate security measures.

Third-party game providers (live casino operators, slot software providers, sportsbook data providers) may receive your player session data — including stake amounts and game outcomes — to the extent necessary to deliver game content and calculate payouts. Game providers do not receive your CNIC, financial account, or contact details.

97pak is obligated to disclose account and transaction data to its licensing authority and to relevant law enforcement agencies where legally required to do so. 97pak will not notify you of such disclosures where doing so would compromise an investigation.

97pak uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the Platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your Platform preferences, such as your preferred language setting, display options, and game lobby filters.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform, which pages are most visited, and where technical errors occur. This data is used exclusively to improve Platform performance.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and brute-force login attempts.

97pak does not use third-party advertising cookies or tracking pixels from social media platforms. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

97pak implements a layered security architecture to protect player data against unauthorised access, loss, or disclosure. Key measures include:

• TLS/SSL encryption on all data transmitted between your device and 97pak's servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC records, KYC documents, and financial transaction data.
• Bcrypt password hashing — your password is never stored in readable form.
• Multi-factor authentication for 97pak staff accessing player data systems.
• Role-based access controls ensuring that staff can only access the data required for their specific job function.
• Intrusion detection and prevention systems monitoring for anomalous access patterns in real time.
• Regular third-party security audits and penetration testing of the 97pak Platform infrastructure.

In the event of a data security incident that is reasonably likely to affect your rights or interests, 97pak will notify you via your registered mobile number as soon as reasonably practicable after the incident is identified and assessed.

97pak retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our operating licence:

• Account and identity data: Retained for the duration of the account and for 5 years after account closure.
• Financial transaction records: Retained for 5 years from the date of the transaction, in accordance with AML record-keeping requirements.
• KYC verification documents: Retained for 5 years after account closure or 5 years from the date of the last transaction, whichever is later.
• Communications records (support chat, email): Retained for 3 years from the date of the communication.
• Gaming activity data: Retained for 3 years from the date of the activity, or for the duration of any active dispute, whichever is longer.
• Technical and device data: Retained for 12 months from collection.

Once the applicable retention period expires, personal data is securely and permanently deleted from all 97pak systems and backup archives.

97pak respects your rights over your personal data. The following rights are available to all 97pak players:

• Right of Access: You may request a copy of all personal data that 97pak holds about you. We will provide this within 30 calendar days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account name corrections require supporting CNIC documentation.
• Right to Erasure: You may request that 97pak delete your personal data, subject to our legal obligation to retain certain data for regulatory purposes as described in Section 8.
• Right to Restriction: You may request that 97pak restrict its processing of your data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Portability: You may request your personal data in a structured, commonly used, machine-readable format for transfer to another service.
• Right to Object: You may object to 97pak's processing of your data for legitimate interests purposes. 97pak will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time through your account settings or by contacting support.

To exercise any of these rights, contact 97pak's data team at [email protected] with the subject line "Data Rights Request." You will need to verify your identity before your request can be processed.

The 97pak Platform is strictly intended for adults aged 21 and above. 97pak does not knowingly collect personal data from individuals below the age of 21. CNIC verification is used as the primary mechanism to confirm that all account holders meet the minimum age requirement.

If 97pak discovers that a player account belongs to an individual below the age of 21, the account will be immediately suspended, all personal data associated with the account will be handled in accordance with applicable regulatory requirements, and the matter may be referred to the relevant authorities.

If you are a parent or guardian and believe that your child (under 21) has accessed or registered on the 97pak Platform, please contact our support team immediately at [email protected].

With your consent, 97pak may send you promotional communications including: bonus offers, deposit match promotions, free spin notifications, PSL and cricket betting specials, VIP programme updates, and platform news. These communications are delivered via SMS to your registered Pakistani mobile number.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your 97pak account settings.
• Contacting support at [email protected] with the subject "Unsubscribe."

Opting out of marketing communications does not affect the delivery of transactional communications — such as deposit confirmations, withdrawal processing updates, and security alerts — which are sent regardless of marketing preferences as they are necessary for account operation.

As an internationally licensed gaming operator, 97pak's infrastructure involves data processing that may occur in jurisdictions outside Pakistan. Specifically, game servers, payment gateway processing infrastructure, and certain cloud hosting services may be located in jurisdictions that have their own data protection frameworks.

Where personal data is transferred to jurisdictions outside Pakistan, 97pak ensures that appropriate safeguards are in place, including: contractual data protection clauses with third-party processors, verification that the receiving jurisdiction offers adequate data protection standards, and encryption of data both in transit and at rest.

Players have the right to request details of the specific safeguards applied to international transfers of their data by contacting 97pak's data team.

97pak reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or platform functionality enhancements.

Where changes to this Privacy Policy are material — meaning they significantly affect how your data is collected, used, or shared — 97pak will notify you via SMS to your registered mobile number and via a prominent notice on the Platform at least 14 calendar days before the updated Privacy Policy takes effect.

Your continued use of the 97pak Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Privacy Policy, you must cease using the Platform and may close your account as described in the Terms & Conditions.

The current version of this Privacy Policy is always available at 97pak.net/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent changes were made.

If you have any questions, concerns, or feedback regarding this Privacy Policy or how 97pak processes your personal data, our data protection team is available to assist you.

• Email: [email protected] (Subject: "Privacy Enquiry")
• Live Chat: Available 24/7 on the 97pak Platform
• Data Rights Requests: [email protected] (Subject: "Data Rights Request")

We aim to respond to all privacy-related enquiries within 48 hours and to action data rights requests within 30 calendar days of verified receipt.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions of the 97pak Privacy Policy.