betpawa Privacy Policy — How We Collect, Use and Protect Your Personal Data

betpawa operates the online gaming and sports betting platform available at betpawa-khelo.com. For the purposes of this Privacy Policy, betpawa is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used when you interact with our platform.

Our platform is built specifically for players in Pakistan and all data handling practices described in this policy are designed with Pakistani players in mind. We operate in English as our primary platform language and handle all financial transactions in Pakistani Rupees (PKR).

If you have any questions about this Privacy Policy or how betpawa handles your data, you can contact us at any time at support@betpawa-khelo.com. Our support team is available 24 hours a day, seven days a week, and privacy-related queries are handled by a dedicated team member.

betpawa collects personal data through several channels — when you register an account, when you use the platform, when you contact our support team, and automatically through the technical operation of our systems. The types of data we collect are listed below.

betpawa does not collect sensitive personal data such as biometric data, health information, religious beliefs or political opinions. Where identity verification requires a document scan, that data is handled with heightened security and access restrictions.

betpawa collects personal data only for legitimate purposes related to the operation of our platform and the delivery of a safe, fair and personalised gaming experience. We do not collect data out of habit or for vague "platform improvement" reasons that don't translate into concrete benefits for players.

The specific purposes for which betpawa uses your personal data are:

• Account creation and management: To register your betpawa account, authenticate your identity at login and maintain your account settings and preferences.
• Identity verification (KYC): To verify that you are who you say you are, that you are at least 18 years old, and that your payment methods are registered in your own name. This is both a regulatory requirement and a player protection measure.
• Processing transactions: To process your deposits, settle your bets and winning payouts, and handle withdrawal requests back to your Easypaisa, JazzCash or bank account.
• Fraud prevention and security: To detect and prevent fraudulent account activity, money laundering, duplicate account creation and bonus abuse — all of which harm the betpawa community and individual players.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling and to implement responsible gaming tools like deposit limits and self-exclusion at your request.
• Customer support: To respond to your queries, resolve account issues and maintain records of communications for quality and dispute resolution purposes.
• Platform analytics and improvement: To understand how players use betpawa, identify bugs, improve navigation and develop new features that players actually want.
• Marketing communications: To send you relevant promotional offers and updates about betpawa — only where you have given your consent or where we have a legitimate interest in keeping existing players informed.

betpawa processes your personal data on the following legal grounds, depending on the type of processing activity:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process bets and pay out winnings. Without this processing, betpawa cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations — including KYC/AML identity verification requirements and anti-fraud obligations.
• Legitimate interests: Processing necessary for betpawa's legitimate business interests where these are not overridden by your rights — including fraud detection, platform security, and analytics that help us improve the service.
• Consent: Processing based on your explicit opt-in consent — primarily for marketing communications. Where consent is the basis, you can withdraw it at any time by updating your communication preferences in account settings or by contacting support.

betpawa does not sell, rent or trade your personal data to any third party for their own commercial purposes. Full stop. Your data is only shared in the following specific, limited circumstances:

• Payment processors: Your financial data is shared with your chosen payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, Visa/Mastercard networks) solely to process transactions you initiate. These providers have their own privacy policies and security obligations.
• Game providers: Certain game titles on betpawa are provided by third-party game developers and studios. These providers may receive anonymised or session-level data necessary to run the game correctly, but they do not receive your full personal profile.
• Identity verification services: Where betpawa uses a third-party KYC provider to assist with document verification, your identity documents are shared with that provider under strict data processing agreements. They do not retain your documents beyond the verification process.
• Legal and regulatory authorities: betpawa may be required by law, court order or regulatory instruction to disclose certain player data to Pakistani law enforcement authorities, anti-money laundering units or other competent bodies. In such cases, betpawa will comply with the legal requirement.
• Fraud prevention networks: betpawa may share fraud indicators (not full profiles) with industry fraud prevention networks to protect the broader player community from fraudulent actors.

betpawa takes the security of financial data with particular seriousness. When you make a deposit or withdrawal through betpawa, your transaction is processed according to the following security standards:

• All payment pages on betpawa use HTTPS with TLS encryption — your payment details are encrypted in transit between your device and our payment gateway.
• betpawa does not store full card numbers, CVV codes or complete Easypaisa/JazzCash account credentials on its own servers. These are tokenised by the relevant payment gateway at the point of entry.
• betpawa's handling of payment card data meets PCI-DSS (Payment Card Industry Data Security Standard) requirements. This is an internationally recognised security standard specifically for payment data.
• Withdrawal requests are matched against the verified identity on file. betpawa will not process withdrawals to payment methods that cannot be verified as belonging to the registered account holder.

The following payment methods are integrated into betpawa's platform for Pakistani players. Each operates under its own security and privacy terms in addition to betpawa's protections:

betpawa uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit betpawa. Cookies help us keep you logged in, remember your preferences and understand how players use the platform.

betpawa uses three categories of cookies:

You can manage cookie preferences through your browser settings. Most browsers allow you to view, delete and block cookies from specific websites. However, blocking essential cookies will prevent betpawa from functioning correctly and you may not be able to log in or place bets.

betpawa retains your personal data for as long as it is necessary for the purposes it was collected, and no longer. The retention periods we apply are as follows:

• Active account data: Retained for the full duration of your account remaining open on betpawa. If you request account closure, your data enters a retention period as described below.
• Transaction and betting records: Retained for a minimum of five years after your account is closed, in line with anti-money laundering record-keeping requirements applicable in Pakistan.
• Identity verification documents: Retained for a minimum of five years following the completion of KYC verification or account closure, whichever is later.
• Support communications: Retained for three years following the closure of the support ticket or account, for dispute resolution and quality purposes.
• Technical and usage data: Typically anonymised or deleted within 24 months of collection. Aggregated analytics data may be retained indefinitely in non-identifiable form.
• Marketing consent records: Retained until you withdraw consent plus an additional year as evidence of the consent that was given.

After the applicable retention period expires, betpawa will delete or permanently anonymise your personal data so that it can no longer be associated with you as an individual.

betpawa implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. These include:

• SSL/TLS encryption for all data in transit between your device and betpawa's servers
• Encrypted storage for sensitive data at rest on betpawa's servers
• Access controls ensuring staff can only access player data that is necessary for their specific role
• Regular security penetration testing and vulnerability assessments of the betpawa platform
• Multi-factor authentication on all internal betpawa administrative systems
• Incident response procedures to detect, report and respond to personal data breaches promptly
• Staff training on data protection obligations and security awareness

Despite these measures, no internet-based system is entirely immune to security risks. betpawa will notify affected players promptly where a significant data breach occurs that is likely to result in a risk to their rights. You can help protect your own account by using a strong, unique password and not sharing your betpawa login credentials with anyone.

betpawa respects your rights in relation to your personal data. You can exercise any of the following rights at any time by contacting our support team. We will respond to all data rights requests within a reasonable timeframe — typically within 30 days.

To exercise any of the above rights, contact betpawa support at support@betpawa-khelo.com with the subject line "Data Rights Request". We may ask you to verify your identity before actioning the request to ensure we're speaking to the correct account holder.

betpawa is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process requires players to confirm they are 18 or older, and betpawa may request proof of age at any stage.

If betpawa becomes aware that personal data has been collected from a person under 18, we will delete that data immediately, close the account and return any deposited funds to their source. If you are aware of anyone under 18 using betpawa, please contact us immediately at support@betpawa-khelo.com.

betpawa may send you promotional communications about new games, special offers, PSL betting promotions and platform updates. We only do this in the following circumstances:

• You explicitly opted in to receive marketing communications during registration or through your account settings
• You are an existing betpawa player and we are communicating about products or features closely related to what you already use (where permitted by applicable law as a legitimate interest)

Marketing communications from betpawa are typically sent via SMS to your registered mobile number or email to your registered address. Every marketing message includes a clear, one-click unsubscribe option. You can also manage your communication preferences at any time from the notifications section of your betpawa account settings.

betpawa does not engage in cold marketing to non-players and does not share your contact details with third-party marketers. Any promotional communication you receive claiming to be from betpawa but appearing from an unrecognised sender should be treated as suspicious — report it to us immediately.

betpawa may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform message.

We encourage you to review this Privacy Policy periodically. Your continued use of betpawa after any update constitutes acceptance of the revised policy. If you do not agree with a material change, you should stop using betpawa and contact our support team to close your account and arrange the return of your wallet balance.

Minor updates — such as corrections of typographical errors or clarifications that do not change the substantive meaning of any clause — may be made without advance notification.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how betpawa handles your personal data, please get in touch. Our support team is available around the clock and privacy-related matters are treated as a priority.