Privacy Policy

01 Overview

cashpk ("we", "us", "our") is committed to protecting the privacy of every player who uses our online betting and casino platform at cashpk.bio. This Privacy Policy applies to all users of the cashpk website, mobile-optimised interface, and any related services, including cricket betting, slot games, boxing markets, Lucky Dice, and the cashpk Casino.

By registering an account with cashpk or continuing to use our platform, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with any part of this Policy, please discontinue use of the cashpk platform immediately and contact our support team to close your account.

cashpk operates as the data controller in respect of the personal data you provide to us. We take that responsibility seriously. Our privacy practices are aligned with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, and the requirement to maintain appropriate technical and organisational security measures.

02 Data We Collect

cashpk collects personal data from you in two principal ways: data you provide directly when registering and using the platform, and data collected automatically through your interaction with our website and services.

Data you provide directly:

• Identity Data: Full name, date of birth, CNIC number, and a scan or photograph of your CNIC or other government-issued identity document. This is mandatory for Know Your Customer (KYC) verification prior to real-money activity on cashpk.
• Contact Data: Pakistani mobile number, email address, and city of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad, Peshawar).
• Financial Data: JazzCash or EasyPaisa wallet number, bank account details (HBL, UBL, or Meezan Bank), and transaction history associated with deposits and withdrawals on your cashpk account. We do not store full bank account credentials — payment processing is handled by our regulated payment partners.
• Account Data: Your chosen username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Communications Data: Records of your interactions with cashpk via live chat, email, or any support ticket — including the content of those communications.

Data collected automatically:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage Data: Pages visited on cashpk.bio, features used, bets placed (market, stake, odds, outcome), session duration, and navigation patterns within the platform.
• Cookie Data: Data collected via cookies and similar tracking technologies as described in the Cookies section of this Policy.
• Geolocation Data: Approximate geographic location derived from your IP address. cashpk does not collect precise GPS-level location data unless you have explicitly enabled location services in your device browser.

03 How We Use Your Data

cashpk uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with those for which it was originally collected without first obtaining your explicit consent.

04 Legal Basis for Processing

cashpk processes your personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing your identity, contact, financial, and account data is necessary to perform the contract between you and cashpk — specifically to register your account, accept bets, process payments, and deliver gaming services.
• Legal Obligation: cashpk is required by the conditions of our international gaming licence to verify player identity, conduct anti-money laundering checks, maintain transaction records, and report suspicious activity to regulatory authorities. Processing for these purposes is legally mandated and cannot be declined.
• Legitimate Interests: cashpk processes technical data, usage data, and cookie data under our legitimate interest in maintaining platform security, preventing fraud, improving user experience, and detecting prohibited conduct such as multi-accounting.
• Consent: Where cashpk sends marketing communications or uses non-essential cookies, we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

05 Sharing Your Data

cashpk does not sell, rent, or trade your personal data to any third party for their independent commercial use. Your data is shared only in the following limited circumstances, all of which are necessary to operate the cashpk platform lawfully and effectively:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our Crypto USDT gateway provider receive the minimum financial data necessary to process your deposit and withdrawal transactions. All payment partners are contractually bound to process your data solely for payment purposes and to maintain appropriate security standards.
• Identity Verification Providers: cashpk engages regulated KYC and identity verification service providers to validate CNIC documents and cross-reference identity data against watchlists and politically exposed persons (PEP) databases, as required under our AML programme.
• Fraud Prevention Services: cashpk shares technical data (IP address, device fingerprint) with fraud detection and cybersecurity service providers to identify and prevent account abuse, multi-accounting, and automated bot activity.
• Regulatory Authorities: cashpk discloses player data to our licensing regulatory authority and to law enforcement agencies where we are legally required to do so — for example, in connection with a suspicious transaction report or a formal law enforcement investigation.
• Technology Partners: Cloud hosting providers and platform infrastructure partners may have access to data stored on cashpk servers as part of their contracted service delivery. These partners operate under strict data processing agreements and are not permitted to use your data for any purpose beyond service delivery to cashpk.

06 Cookies & Tracking Technologies

cashpk uses cookies and similar technologies (including local storage and session tokens) to operate the platform, remember your session, and improve your experience. Below is a summary of the cookie categories cashpk uses:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair your ability to use the cashpk platform. Disabling analytics or marketing cookies will not affect your ability to place bets, make deposits, or access any core cashpk feature.

07 Data Retention

cashpk retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our licensing regulatory obligations — whichever period is longer.

• Active Account Data: Retained for the full duration of your cashpk account, plus a minimum of 5 years following account closure. This period is required by our international gaming licence for audit and regulatory inspection purposes.
• KYC / Identity Documents: Retained for a minimum of 5 years from the date of verification or account closure, in accordance with AML record-keeping requirements.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years. This includes JazzCash, EasyPaisa, and bank transfer records.
• Betting History: Individual bet records are retained for a minimum of 3 years following the settlement of each bet, and for the full 5-year post-closure period if the account is closed during that window.
• Communications Data: Live chat transcripts and support email records are retained for 2 years from the date of the interaction, unless they are relevant to an open dispute or regulatory matter.
• Marketing Data (opted-in): Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.

08 Security Measures

cashpk implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and cashpk servers is encrypted using TLS 1.2 or higher. The cashpk.bio domain enforces HTTPS across all pages.
• Encryption at Rest: Sensitive personal data — including CNIC records, payment details, and authentication credentials — is encrypted at rest using AES-256 encryption on cashpk's cloud infrastructure.
• Access Controls: Access to personal data within cashpk is strictly limited to staff and systems that require it to perform their specific function. Role-based access controls are enforced and reviewed quarterly.
• Password Hashing: cashpk does not store plain-text passwords. All passwords are stored as salted cryptographic hashes using industry-standard algorithms.
• Intrusion Detection: cashpk employs automated intrusion detection and anomaly monitoring systems that flag unusual access patterns for immediate investigation by our security team.
• Vendor Security: All third-party data processors engaged by cashpk are required to demonstrate equivalent or higher security standards as a condition of their contract.

09 Your Data Rights

cashpk recognises and upholds the following rights in respect of your personal data. To exercise any of these rights, contact us via live chat or at [email protected]. cashpk will respond to all verifiable data rights requests within 30 days.

• Right of Access: You may request a copy of all personal data cashpk holds about you, including your account details, transaction history, betting history, and KYC records.
• Right to Rectification: If any personal data cashpk holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under applicable gaming licence conditions and AML law.
• Right to Restrict Processing: You may request that cashpk restrict processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to cashpk, where processing is based on consent or contractual necessity.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to cashpk demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing emails, analytics cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

10 Minors & the 21+ Policy

cashpk is strictly an adults-only platform. Our services are not directed at, and are not intended for, any individual under the age of 21. cashpk does not knowingly collect personal data from any person under 21 years of age.

CNIC-based age verification is mandatory before any real-money activity is permitted on the cashpk platform. If cashpk becomes aware — through any means — that a registered account belongs to a person under the age of 21, we will take the following immediate steps:

• Immediately suspend the account and block all access to real-money features.
• Void all bets placed and any winnings derived from those bets.
• Return deposited funds (minus any bonus amounts already used) to the originating payment method.
• Permanently delete the account and all associated personal data, subject only to minimum record-keeping obligations required under AML and gaming licence conditions.
• Report the incident to our regulatory authority as required under our licence conditions.

11 International Data Transfers

As an internationally licensed gaming platform, cashpk may process or store some personal data on servers located outside Pakistan. This may occur in the context of our cloud infrastructure, KYC verification services, or fraud prevention partners operating in other jurisdictions.

Where personal data is transferred internationally, cashpk ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards include contractual data protection clauses included in all agreements with international data processors.

cashpk does not transfer personal data to any jurisdiction unless satisfied that adequate data protection standards — including security controls and limitations on onward transfers — are maintained by the receiving party.

12 Changes to This Policy

cashpk reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our platform's features. The version number and effective date displayed at the top of this document will be updated whenever a new version is published.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — cashpk will notify you via a platform notification and, where possible, an email to your registered address, providing at least 7 days' notice before the updated policy takes effect.

13 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to cashpk's handling of your personal data, please contact our Privacy team through one of the following channels:

• Live Chat: 24/7 live chat available directly within the cashpk platform — the fastest route for urgent privacy concerns.
• Email: [email protected] — privacy-specific queries will be escalated to our data protection team and acknowledged within 2 business days.

If you are not satisfied with cashpk's response to your privacy complaint, you have the right to escalate your complaint to our licensing regulatory authority in accordance with the complaints procedures published by that authority.