Karachisata Privacy Policy

1Introduction

Karachisata ("we", "our", or "us") operates the online betting and gaming platform available at karachisata.net and through our mobile application ("Platform"). We are committed to protecting and respecting the privacy of everyone who uses the Platform. This Privacy Policy explains what personal data we collect from you, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it.

This Policy applies to all users of the Platform, whether you are a registered account holder, a visitor browsing our website, or someone who contacts us through our support channels. Please read this Policy carefully alongside our Terms and Conditions, which govern your use of the Platform more broadly.

We only collect and process personal data in ways that are fair, transparent, and proportionate. We do not collect data we do not need, and we do not keep data for longer than is necessary for the purposes described in this Policy or required by applicable law.

2Data We Collect

We collect personal data from you in several ways — directly when you register or interact with the Platform, automatically through your use of the Platform, and occasionally from third parties such as payment providers and identity verification services.

Information you give us directly:

• Full legal name and date of birth (required for account registration and age verification).
• Contact details — email address and mobile number.
• Residential address (required for identity verification and withdrawal processing).
• Payment information, including JazzCash account details, Easypaisa mobile wallet numbers, Raast IDs, bank account details, and card numbers where applicable. Card numbers are tokenised and we do not store the full card number on our servers.
• Copies of identity documents (such as your CNIC) submitted during our KYC verification process.
• Communication records — any messages you send to our support team via live chat or email.

Information collected automatically:

• Device information — device type, operating system version, browser type, and unique device identifiers.
• IP address and approximate location derived from it.
• Browsing and activity data — pages visited, games played, bets placed, deposit and withdrawal history, and session duration.
• Cookie data and similar tracking technologies as described in Section 8.

Information from third parties:

• Identity and fraud verification data from third-party KYC and AML screening providers.
• Transaction confirmation data from payment processors including JazzCash, Easypaisa, and Raast.

3How We Use Your Data

We use the personal data we collect for the following purposes:

• Account management: To create and maintain your Karachisata account, verify your identity and age, and ensure only one account exists per player.
• Transaction processing: To handle PKR deposits and withdrawals via your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer, or card — and to maintain accurate records of your financial transactions on the Platform.
• Platform delivery: To provide the betting and gaming services you use, including sports markets for cricket, PSL, T20, and football, as well as casino, bingo, and fish games.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multiple account creation, bonus abuse, and other prohibited conduct as described in our Terms and Conditions.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of your interactions with our support team.
• Legal and compliance obligations: To meet our anti-money laundering (AML) and know-your-customer (KYC) obligations, and to respond to lawful requests from authorities where required.
• Responsible gaming: To monitor your gaming activity and, where patterns suggest potential harm, to offer responsible gaming tools proactively or reach out through our support team.
• Platform improvement: To analyse how players use the Platform and to identify areas for improvement in user experience, product design, and performance.
• Marketing communications: To send you promotional offers, bonus notifications, and PSL season updates — but only where you have opted in to receive such communications. You can opt out at any time.

We do not use your data for any automated decision-making that produces legal or similarly significant effects on you without a human review step available on request.

4Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: Processing your identity, contact, and financial data is necessary to provide the services you signed up for — without it, we cannot operate your account or process your transactions.
• Legal obligation: KYC and AML checks, age verification, and data retention for financial records are required by applicable legal and regulatory requirements.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and service improvement are carried out in our legitimate interest and in the interest of the wider player community. We apply a balancing test to ensure these interests do not override your privacy rights.
• Consent: Marketing communications are sent only on the basis of your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

5Sharing Your Data

We do not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: We share necessary transaction data with JazzCash, Easypaisa, Raast, and other payment service providers to process your deposits and withdrawals. These providers are subject to their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: We use third-party KYC services to verify your identity and age when you register or when a withdrawal triggers a verification requirement. These providers process your data solely for verification purposes.
• Fraud and AML screening services: Your data may be checked against fraud databases and AML watchlists as part of our compliance procedures.
• Technology and infrastructure providers: We use cloud hosting, analytics, and customer support software provided by third parties. These providers act as data processors and are contractually required to process your data only on our instructions and to maintain appropriate security standards.
• Legal authorities: We will disclose your personal data to law enforcement or other government authorities where we are legally required to do so, or where we have a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any person, or comply with a legal process.

All third parties with whom we share personal data are required to implement and maintain appropriate technical and organisational security measures. We do not permit our service providers to use your data for their own marketing or analytical purposes.

6Data Retention

We retain your personal data for as long as your account is active and for a period after account closure as required by our legal and compliance obligations. The table below outlines our standard retention periods by data category:

When data reaches the end of its retention period it is securely deleted or anonymised. Anonymised data — which cannot be linked back to you in any way — may be retained indefinitely for statistical and analytical purposes.

7Security

Protecting your personal data is something we take very seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your browser or app and our servers is encrypted using TLS (Transport Layer Security). Look for the padlock icon in your browser's address bar when using the Platform.
• Encryption at rest: Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest.
• Access controls: Access to personal data is restricted to staff and systems that genuinely require it. All staff with access to player data are subject to confidentiality obligations and regular security training.
• Monitoring and auditing: We conduct regular security reviews and penetration tests to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights, we will notify affected players promptly and take immediate steps to contain and remediate the incident.

While we take every reasonable precaution, no system is completely immune to security threats. You also have an important role to play — please use a strong, unique password for your Karachisata account and do not share your login credentials with anyone.

8Cookies & Similar Technologies

Karachisata uses cookies and similar tracking technologies on the website and mobile app to improve your experience, keep you logged in, and understand how players interact with our Platform. A cookie is a small text file stored on your device by your browser when you visit a website.

We use the following types of cookies:

• Essential cookies: These are necessary for the Platform to function. They manage your login session, remember your language preferences, and ensure security features work correctly. You cannot opt out of essential cookies without affecting your ability to use the Platform.
• Functional cookies: These remember your preferences — such as your preferred deposit method or game lobby layout — so you do not have to reconfigure them every visit.
• Analytics cookies: These help us understand which pages are most visited, where players spend the most time, and which features generate the most engagement. This data is aggregated and does not identify you individually. We use this information to make the Platform better.
• Marketing cookies: Where you have consented to marketing communications, these cookies help us show you relevant promotional content related to new games, PSL betting markets, or seasonal bonus offers. You can withdraw this consent at any time.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will affect your ability to log in and use the Platform normally. For detailed guidance on managing cookies in your specific browser, refer to the browser's help documentation.

9Your Rights

You have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at the email address in Section 12. We will respond within 30 days and will not charge a fee for standard requests.

10Children & Minors

Karachisata is strictly an adults-only platform. We do not knowingly collect, store, or process personal data belonging to any person under the age of 18. Registration on the Platform requires confirmation that you are 18 or over, and we carry out age verification checks as part of our standard KYC process.

If we discover that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account. Any deposits made by a minor will be returned to the original payment source, and any winnings generated during the period will be forfeited.

If you are a parent or guardian and believe that your child has registered on Karachisata, please contact our support team immediately at the contact details in Section 12. We treat such reports with the highest priority.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we collect or use personal data, changes in applicable law, or improvements to our practices. The most current version will always be available on this page, and the "last updated" date at the top of the page will reflect when changes were last made.

Where changes are material — for example, if we begin using your data for a new purpose or sharing it with a new category of third party — we will notify you by email or through an in-platform notification before the change takes effect. For minor updates such as clarifications or corrections to wording, we will update the Policy without individual notification.

We encourage you to review this Policy periodically so that you remain informed about how your data is being handled. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.

12Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how we have handled your personal information, please get in touch with us. Our team handles all privacy queries with care and will respond within 48 hours for general queries and within 30 days for formal data rights requests.

Please include your registered email address and a clear description of your request or concern. If you are submitting a data access or deletion request, we may need to verify your identity before processing the request — this is to protect you and ensure we only share or delete data in response to legitimate requests from the account holder.

If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to our complaints manager by requesting escalation in your correspondence. We are committed to resolving all privacy queries fairly and transparently.