gashpk Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by gashpk and applies to all personal data collected through the gashpk website at https://gashpk.com, its associated subdomains, mobile interfaces, and all services, games, and features available thereon (collectively, the "Platform"). This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

gashpk is Pakistan's premier online betting and casino platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and all major cities. We understand that Pakistani users entrust us with sensitive personal and financial information, and we take that responsibility with the utmost seriousness. This Policy is designed to be transparent, comprehensive, and written in plain language so that every user genuinely understands how their data is handled.

By registering an Account, making a deposit, placing a bet, or otherwise using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately.

Data Controller

For the purposes of this Privacy Policy, gashpk is the data controller in respect of all personal data collected through the Platform. As data controller, gashpk determines the purposes for which and the means by which personal data is processed. All data is processed in accordance with internationally recognised data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

Where gashpk engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and customer support platforms — those providers act as data processors under contractual obligations that meet or exceed the standards set out in this Policy. gashpk remains responsible for ensuring that all such processing is conducted appropriately.

Data We Collect

gashpk collects personal data in several ways: directly from you when you register and use the Platform, automatically through your interaction with the Platform, and in limited circumstances from trusted third-party sources for verification purposes. The categories of personal data we collect are described in the table below.

gashpk does not knowingly collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health data, or religious/political affiliation data from our users.

How We Use Your Data

gashpk uses the personal data it collects for the following specific and documented purposes:

• Account Management: To create, maintain, verify, and administer your gashpk Account, including processing your registration, managing your balance, and facilitating your access to Platform features.
• Identity & Age Verification: To confirm that you meet the minimum age requirement of 21 years and to verify your identity as required by our Know Your Customer (KYC) obligations. This is a legal and regulatory requirement that cannot be waived.
• Payment Processing: To process deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and standard bank transfer channels in Pakistani Rupees (PKR).
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited activities that may harm you, other users, or the Platform.
• Responsible Gaming: To monitor gaming behaviour patterns, identify users who may be at risk of problem gambling, administer self-exclusion requests, and enforce deposit limits set by users under our responsible gaming tools.
• Customer Support: To respond to your queries, resolve disputes, and deliver effective support through our live chat and email channels.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have provided explicit consent. You may withdraw this consent at any time through Account settings.
• Legal & Regulatory Compliance: To comply with applicable laws, regulations, licensing requirements, and law enforcement requests where legally mandated.
• Platform Improvement: To conduct anonymised analytics, improve the user experience, test new features, and develop the Platform's product offering.

Legal Basis for Processing

gashpk processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual Necessity: Processing required to perform the contract between you and gashpk — including account creation, payment processing, bet settlement, and customer support — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including KYC verification, AML monitoring, age verification, and responses to lawful regulatory and law enforcement requests — is conducted on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud detection, security monitoring, responsible gaming oversight, and Platform improvement is conducted on the basis of gashpk's legitimate interests, balanced against your rights and interests. gashpk has conducted legitimate interests assessments for all such processing activities.
• Consent: Processing for direct marketing communications and non-essential cookies is conducted solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your Account.

Data Sharing & Disclosure

gashpk does not sell, rent, or trade your personal data with any third party for commercial or marketing purposes. Personal data may, however, be shared in the following limited and controlled circumstances:

• Payment Service Providers: Your financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processing partners solely to the extent necessary to process your requested transactions. All such providers are contractually bound to treat your data confidentially.
• Identity Verification Providers: For KYC and age verification purposes, identity documents may be processed through a licensed third-party verification provider operating under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: gashpk will disclose personal data to licensing regulators, financial intelligence units, or law enforcement authorities where required to do so by applicable law or court order. We will not notify users where such notification is prohibited by law.
• Anti-Fraud Networks: In cases of suspected fraud, match-fixing, or money laundering, gashpk may share relevant data with industry anti-fraud bodies and relevant authorities to protect the integrity of online gaming for all Pakistani users.
• IT & Infrastructure Providers: Service providers who host, maintain, or support the Platform's technical infrastructure may process personal data incidentally. All such providers operate under data processing agreements that prohibit independent use of your data.
• Professional Advisors: In connection with legal proceedings, audits, or regulatory investigations, personal data may be disclosed to legal counsel, auditors, and other professional advisors bound by confidentiality obligations.

Cookies & Tracking Technologies

gashpk uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform to provide, maintain, and improve our services. A cookie is a small text file placed on your device when you visit a website. The types of cookies used by gashpk are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and protection against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as language settings and preferred game categories, to personalise your experience on the Platform. They are active only for the duration of your session unless you select "remember me" at login.
• Analytics Cookies: gashpk uses anonymised analytics data to understand how users interact with the Platform — for example, which game categories are most popular among users from Lahore versus Karachi. This data is aggregated and does not identify you personally.
• Marketing Cookies: Where you have consented, marketing cookies may be used to deliver relevant promotional content about gashpk's offers to you on the Platform. These cookies are only active where consent has been explicitly obtained.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the Platform, including secure login. Clearing cookies will log you out of your current session.

Data Retention

gashpk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply as a general guide:

• Account Data: Retained for the duration of your active account relationship with gashpk, plus a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction in compliance with financial regulatory requirements applicable to licensed gaming operators.
• KYC & Identity Verification Documents: Retained for a minimum of 5 years following account closure, or longer where required by regulatory guidance.
• Customer Support Communications: Retained for 2 years from the date of last contact, unless the communication relates to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for as long as you hold an active account, or until consent is withdrawn, plus 1 year thereafter as evidence of compliance.
• Technical & Log Data: Retained for up to 12 months from the date of collection for security monitoring and fraud detection purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual user. Where anonymisation is not technically feasible, data is rendered inaccessible pending secure deletion.

Your Data Rights

As a gashpk user, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting our support team at [email protected] with the subject line "Data Rights Request":

• Right of Access: You have the right to request confirmation of whether gashpk holds personal data about you, and to receive a copy of that data in a structured, commonly used format. gashpk will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate personal data held about you. For basic account details, you may update information directly through your Account settings without contacting support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing was unlawful. Please note that this right is subject to legal retention obligations — gashpk cannot delete data that must be retained under AML or regulatory requirements.
• Right to Restriction: You have the right to request that processing of your personal data be restricted in certain circumstances — for example, while the accuracy of data is being contested or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Object: You have the right to object at any time to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes. gashpk will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time through Account settings or by contacting support. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

Children & Minors

The gashpk Platform is strictly intended for adults aged 21 years and above. gashpk does not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes a mandatory date-of-birth declaration and age verification step specifically to prevent underage access.

If gashpk becomes aware that personal data has been collected from a person under the age of 21, the following actions will be taken without delay:

• The Account will be immediately suspended and access to the Platform will be blocked.
• All personal data associated with the underage account will be securely deleted, except where retention is required for legal reporting purposes.
• Any funds held in the Account will be handled in accordance with applicable regulations and the circumstances of the case.
• The matter will be reported to the appropriate authorities where required.

Parents and guardians who suspect that a minor in their care has registered on the gashpk Platform are urged to contact our support team immediately via live chat or at [email protected]. We will act promptly on all such reports.

Security Measures

gashpk implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• Transport Layer Security: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS encryption, meeting industry best practice for financial services and online gaming platforms.
• Access Controls: Access to personal data within gashpk's systems is restricted on a strict need-to-know basis. All staff members with access to user data undergo background verification and are bound by confidentiality obligations.
• Two-Factor Authentication: gashpk offers two-factor authentication (2FA) for Account login, providing an additional layer of security beyond your password. We strongly encourage all Pakistani users to enable 2FA through Account settings.
• Intrusion Detection: Our technical infrastructure incorporates real-time intrusion detection systems that monitor for suspicious activity patterns and alert our security team to potential threats 24/7.
• Regular Security Audits: gashpk conducts periodic security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Data Minimisation in Systems: Our internal systems are designed to display only the minimum personal data necessary for each operational role, reducing the risk of unnecessary exposure.

Notwithstanding our security measures, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that poses a risk to users, gashpk will notify affected users without undue delay and take all reasonable steps to contain and remedy the breach.

Policy Updates

gashpk reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, technological developments, regulatory requirements, or the expansion of our services. All updates will be published on this page with a revised Effective Date prominently displayed at the top of the Policy.

Where changes to this Policy are material — meaning they significantly affect how your personal data is collected, used, or shared — gashpk will provide advance notice to registered users via email to the address held on file, or through a prominent notice on the Platform, at least 7 days prior to the changes taking effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must discontinue use of the Platform and may request Account closure through our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to gashpk's data protection practices, our team is here to help. You may reach us through the following channels:

• Live Chat: Available directly on the Platform 24 hours a day, 7 days a week — the fastest way to get answers to any privacy query.
• Email: [email protected] — for formal data rights requests, please use the subject line format described in Section 9 above. Response time is within 5 business days for data protection enquiries.

gashpk is committed to resolving all privacy concerns fairly and transparently. Our support team — available to Pakistani players from Karachi to Peshawar and everywhere in between — is trained to handle data protection queries with the care and professionalism they deserve.