Stake Bet Privacy Policy — How Your Data Is Collected, Used and Protected

Stake Bet ("stake bet", "we", "us", "our") operates the online gaming platform accessible at stakebet.im. We provide sports betting, casino games, live casino, crash games, esports betting and related services to players in Pakistan. Stake bet is the data controller responsible for the personal information collected through the platform.

This Privacy Policy explains how stake bet collects, uses, stores, protects and — where applicable — shares the personal information of players and visitors who interact with the stake bet platform. It applies to all stake bet services, including those accessed via desktop browser, mobile browser and any dedicated applications.

By creating an account on stake bet or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you don't agree with how we handle your personal data, please do not use stake bet. You can contact us at any time at support@stakebet.im with privacy-related questions.

Stake bet collects personal information in three main ways: information you provide directly, information generated automatically through your use of the platform, and information received from third parties such as payment providers during transaction processing.

Stake bet does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health information or biometric data beyond what is required for standard identity verification (CNIC face photograph). We do not collect or store raw payment card numbers — payment card transactions on stake bet are tokenised at the point of entry by our payment processor and raw card data never touches stake bet's servers.

Stake bet uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose that isn't listed here, and we do not use your data in ways that would be incompatible with the purposes for which you provided it.

• Account Creation and Management: Your identity and contact data is used to create and manage your stake bet account, authenticate your login sessions, and communicate account-related updates such as password resets, security alerts and policy change notifications.
• Identity and Age Verification: We use identity data and verification documents to confirm that you are who you say you are and that you are at least 18 years old. This is both a legal obligation under anti-money laundering regulations and a core commitment to responsible gaming at stake bet.
• Processing Deposits and Withdrawals: Financial data is used to process your PKR transactions — including deposits via JazzCash, Easypaisa, NayaPay, SadaPay, IBFT and card, and withdrawals back to your verified payment method.
• Providing Gaming Services: Gaming activity data is used to run the games and betting markets you use on stake bet, to calculate and pay winnings correctly, and to maintain accurate records of your account balance.
• Regulatory Compliance and Anti-Money Laundering: Stake bet is required to monitor transactions for suspicious activity under applicable regulations. We use financial and gaming activity data to fulfil these obligations. Where required by law, we may report specific activity to regulatory authorities.
• Responsible Gaming Monitoring: Stake bet uses gaming activity data to identify patterns that may indicate problem gambling behaviour. This allows us to proactively offer responsible gaming tools and, in appropriate cases, initiate contact with players we are concerned about.
• Customer Support: Communications data is used to manage your support queries, resolve disputes and maintain records of our interactions with you.
• Security and Fraud Prevention: Device and technical data is used to detect and prevent fraudulent activity, including multiple account registrations, bot usage, payment fraud and account compromise attempts.
• Platform Improvement and Analytics: Anonymised and aggregated data derived from device and gaming activity information is used to understand how players use stake bet and to improve the platform's performance, design and game selection.
• Marketing Communications: With your consent, we may send you promotional communications about stake bet bonuses, new games and special offers. You can withdraw consent at any time by updating your communication preferences in your account settings or by contacting support@stakebet.im.

Stake bet processes your personal data on the following legal grounds, depending on the specific purpose:

• Performance of a Contract: Processing necessary to provide you with the stake bet gaming and betting services you've signed up for — including account management, game provision, payment processing and support.
• Legal Obligation: Processing required to comply with applicable law — including KYC/AML obligations, age verification requirements, and any disclosures required by a regulatory authority or court order.
• Legitimate Interests: Processing for purposes that are in our legitimate business interests and do not unduly override your privacy rights — including fraud detection, security monitoring, platform analytics and responsible gaming monitoring.
• Consent: Processing based on your freely given consent — specifically for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Stake bet does not sell, rent or trade your personal information to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

• Payment Processors: We share financial data with JazzCash, Easypaisa, NayaPay, SadaPay, IBFT-connected banks and Visa/Mastercard processing networks to execute your deposit and withdrawal transactions. These providers operate under strict data protection obligations and are contractually prohibited from using your data for any other purpose.
• Identity Verification Providers: Stake bet uses third-party KYC service providers to verify the identity documents you submit. These providers process your verification data under data processing agreements and are prohibited from retaining or using your data beyond the verification purpose.
• Fraud Detection and Security Partners: We may share device and behavioural data with security partners who assist us in detecting and preventing fraud. All such partners are bound by confidentiality obligations.
• Game Software Providers: In-game activity data is shared with the third-party software providers who supply specific games on stake bet's platform (for example, live casino game providers). This data is used solely to operate the games and maintain game integrity records.
• Regulatory Authorities: Stake bet will disclose personal data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law or a valid legal order. We will notify you of any such disclosure to the extent we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition or sale of all or part of stake bet's business, your personal data may be transferred as part of the transaction. You will be notified of any such transfer and given the opportunity to close your account before the transfer takes effect, if you choose.

Stake bet uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, and understand how players use the site. Here's a straightforward breakdown of what we use and why:

• Strictly Necessary Cookies: These are essential for the stake bet platform to function. They maintain your login session, remember your language preferences, and ensure the bet slip and game interfaces work correctly. You cannot opt out of these cookies without also opting out of using stake bet.
• Performance and Analytics Cookies: These cookies help us understand which pages are visited most, how players navigate stake bet, and where technical issues occur. The data collected is aggregated and anonymised — we cannot identify individual players from analytics data.
• Functionality Cookies: These remember your display preferences, notification settings and game configuration choices, so you don't have to set them again every session.
• Session Security Tokens: Short-lived tokens used to protect your account session from hijacking attacks. These are deleted when you log out of stake bet.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the stake bet platform — for example, disabling session cookies will prevent you from staying logged in. Stake bet does not use third-party advertising cookies or cross-site tracking technologies.

Payment privacy is especially important to Pakistani players, and stake bet takes specific measures to protect your financial data beyond our general security practices.

JazzCash and Easypaisa: When you use JazzCash or Easypaisa on stake bet, we receive a transaction reference and your mobile wallet account identifier. We do not receive or store your JazzCash or Easypaisa PIN or password. All transaction processing happens within those providers' secure environments, and only confirmation data is passed to stake bet.

Bank Transfers (IBFT): For IBFT transactions, stake bet receives your bank account number and IBAN for the purpose of processing the specific transaction and for subsequent withdrawal routing. This information is stored securely and used only for the purpose of processing your transactions on stake bet.

Visa/Mastercard: Card transactions on stake bet are processed through our payment processor using tokenisation. Your actual card number is never transmitted to stake bet's servers — we store only a tokenised reference that allows future withdrawals to the same card without re-entry of card details.

Data security is not an afterthought at stake bet — it is a core operational commitment. We implement layered technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration and disclosure.

• Encryption in Transit: All data transmitted between your device and stake bet is encrypted using TLS 1.3, the current industry standard. The padlock icon in your browser confirms this encryption is active during every session.
• Encryption at Rest: Personal data stored on stake bet's servers — including identity documents, contact information and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within stake bet is restricted on a strict need-to-know basis. Staff access to player records is logged, monitored and subject to regular audit. Administrative access to sensitive systems requires multi-factor authentication.
• Penetration Testing: Stake bet's platform undergoes independent penetration testing at least annually, with critical vulnerabilities addressed on an emergency basis upon identification.
• Data Minimisation: Stake bet collects only the personal data that is genuinely necessary for the purposes described in this policy. We do not retain data beyond the periods set out in Section 9 unless required by law.
• Incident Response: Stake bet maintains a documented data breach response procedure. In the event of a data breach affecting your personal information, we will notify you and relevant regulatory authorities within the timeframes required by applicable law.

Despite our best efforts, no digital platform can guarantee absolute security. We encourage you to take reasonable precautions on your own side — including using a strong, unique password for your stake bet account and enabling any available two-factor authentication.

Stake bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active stake bet account plus a minimum of 5 years after account closure, as required by anti-money laundering regulations.
• Transaction and Financial Records: Retained for a minimum of 7 years after each transaction, in line with financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of your active account plus 5 years after closure. Where AML investigations are ongoing, documents may be retained for longer.
• Gaming Activity Records: Retained for the duration of your active account plus 5 years after closure.
• Customer Support Records: Retained for 3 years after the resolution of the relevant support case.
• Marketing Consent Records: Retained for as long as your account is active and for 2 years following account closure or consent withdrawal, as a record of consent status.
• Cookie and Analytics Data: Session data deleted upon logout. Analytics data is retained in anonymised form for up to 24 months.

When the applicable retention period expires, stake bet deletes or permanently anonymises your personal data. If you request account closure, stake bet will begin the deletion process immediately for data that is not subject to mandatory retention obligations.

Stake bet respects your right to control your own personal data. The following rights are available to you as a stake bet player, and we are committed to responding to all valid requests promptly and without charge:

To exercise any of these rights, contact stake bet at support@stakebet.im, clearly stating which right you wish to exercise and the specific data it relates to. We will acknowledge your request within 5 business days and complete it within 30 days. Where a request is particularly complex, we may extend this to 90 days and will notify you accordingly.

Stake bet is strictly an adult gaming platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and our KYC process requires players to confirm their date of birth with documentary evidence before any withdrawal is processed.

If stake bet becomes aware that personal data has been collected from a player who is under 18 years old, we will immediately close the account, delete all personal data associated with it, and return any deposited funds to the original payment source (excluding any winnings). If you believe a minor has registered on stake bet, please contact us immediately at support@stakebet.im.

Stake bet reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via email to the address on their stake bet account at least 7 days before the updated policy takes effect, where practicable.

The effective date at the top of this page shows when the current version was last updated. Minor clarificatory changes may take effect immediately upon publication without separate notification. We encourage you to review this page periodically — the most current version of the policy is always available at stakebet.im/privacy-policy.

Continuing to use stake bet after a policy update takes effect constitutes acceptance of the updated terms. If you do not accept the changes, you may close your account before the effective date by contacting us at support@stakebet.im.

Privacy questions, data access requests, complaints and any other queries relating to how stake bet handles your personal information should be directed to our dedicated privacy contact:

We take all privacy concerns seriously and commit to a substantive, specific response to every query. If you are unhappy with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection regulatory authority in your jurisdiction.

For all other account-related support, including responsible gaming tools, payment queries and general assistance, our full customer support team is available 24/7 via live chat and email on stake bet.