1Introduction
Ballysbet operates the online gaming platform at ballysbet.click, serving players in Pakistan with PKR-denominated accounts, local payment methods and a game library built for Pakistani tastes. As part of delivering that service, Ballysbet necessarily collects and processes certain personal information about players.
This Privacy Policy is the full explanation of what personal data Ballysbet collects, the purposes for which it is processed, how it is protected, how long it is retained, who it may be shared with, and what rights you hold as a data subject. We've tried to write it in plain language — not legal boilerplate — because we believe Pakistani players deserve a policy they can actually understand and act on.
Ballysbet takes data privacy seriously. Your personal information is not a product — it is not sold, rented or traded to third-party marketers. It is collected specifically to enable the operation of your account, to verify your identity, to process your payments, and to keep the platform secure and compliant. Nothing more.
2Personal Data We Collect
Ballysbet collects personal data in three ways: information you provide directly, information generated automatically through your use of the platform, and in limited cases, information received from third-party service providers such as payment processors.
2.1 Information You Provide Directly
| Data Type | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, CNIC scan (front & back) | Registration & KYC verification |
| Contact Data | Mobile phone number, email address | Registration |
| Authentication Data | Username, hashed password, 2FA codes (not stored) | Account creation & login |
| Payment Data | JazzCash/Easypaisa account numbers, bank account IBAN (last 4 digits only after processing), transaction IDs | Deposits & withdrawals |
| Communications | Support chat transcripts, email content, feedback submitted | Customer support interactions |
| Preferences | Responsible gaming limits you set, notification preferences | Account settings |
2.2 Information Collected Automatically
- Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution and time zone.
- Usage Data: Pages visited, game sessions played (including start time, end time, stakes and results), bet history, login timestamps, session duration.
- Behavioural Data: Click patterns, navigation sequences, features used, promotional offers interacted with.
- Cookie Data: Identifiers stored on your device via cookies and similar technologies — see Section 8 for full details.
2.3 Information from Third Parties
Ballysbet may receive limited data from third-party payment processors (confirmation of transaction status, not full payment credentials), fraud prevention services (risk scores, device fingerprints for fraud screening), and identity verification services used for KYC compliance. In each case this information is received for a specific, limited purpose and is not used beyond that purpose.
3Why We Collect Your Data
Every piece of data Ballysbet collects has a specific, defined purpose. We do not collect data speculatively or for purposes we haven't identified. The table below maps our data categories to the specific purposes they serve:
| Purpose | Data Used |
|---|---|
| Account creation & management | Identity, contact, authentication data |
| Age & identity verification (KYC) | CNIC data, date of birth, identity documents |
| Processing deposits & withdrawals | Payment data, identity data, transaction records |
| Providing gaming services | Usage data, game session records, bet history |
| Fraud prevention & platform security | Device data, IP address, behavioural data, third-party risk scores |
| Customer support | Communications, account data, transaction history |
| Responsible gaming monitoring | Usage data, betting patterns, self-set limits, behavioural data |
| Bonus & promotion administration | Usage data, deposit/withdrawal history, wagering records |
| Legal & regulatory compliance | Identity data, transaction records, communications |
| Platform improvement & analytics | Aggregated, anonymised usage and behavioural data |
4Legal Basis for Processing
Each category of data processing by Ballysbet rests on one or more of the following legal grounds:
- Contract Performance: Processing necessary to deliver the service you've registered for — account management, payment processing, game delivery. Without this processing, the service cannot be provided.
- Legal Obligation: Processing required by applicable laws — KYC/identity verification, anti-money laundering record-keeping, responsible gaming obligations, and responses to legitimate regulatory or law enforcement requests.
- Legitimate Interests: Processing necessary for Ballysbet's legitimate business interests where those interests do not override your fundamental privacy rights — fraud prevention, platform security, service improvement using anonymised data.
- Consent: Where we rely on consent for specific processing activities (such as optional marketing communications), you have the right to withdraw that consent at any time through your account settings or by contacting support.
5Who We Share Your Data With
Ballysbet shares personal data with third parties only where strictly necessary and only for the defined purposes stated in this policy. The categories of third parties who may receive your data are:
- Payment Processors: JazzCash, Easypaisa, NayaPay, SadaPay, bank IBFT networks and card processors receive the payment information necessary to complete transactions. These processors operate under their own privacy policies and applicable financial regulations.
- Identity Verification Providers: Third-party KYC and document verification services that assist with CNIC verification and age confirmation. These services receive only the minimum data required for the specific verification task.
- Fraud Prevention Services: Services that assist with detecting fraudulent activity, account takeover attempts and suspicious transaction patterns. Data shared is limited to device identifiers and behavioural signals necessary for risk scoring.
- Game Providers: Where you play games hosted by third-party software providers, limited technical data (session tokens, game identifiers) may be shared with those providers to deliver the game. Game providers do not receive your identity or payment data.
- Legal & Regulatory Authorities: Ballysbet will share data with law enforcement, regulatory bodies or courts where legally required to do so — for example, in response to a court order, or in the course of an anti-money laundering investigation. We will not share data with authorities beyond what is legally required.
- Professional Advisers: Auditors, lawyers and technical consultants who assist with platform operations may access personal data subject to strict confidentiality obligations.
6Data Security
Ballysbet implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration or destruction. These measures include:
Despite these measures, no internet-connected system can guarantee absolute security. Ballysbet will notify affected players promptly in the event of a data breach that is likely to result in risk to their rights or interests, and will take immediate steps to contain and investigate any such incident.
7How Long We Keep Your Data
Ballysbet retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years post-closure | AML/legal compliance obligations |
| KYC documents (CNIC scans) | Duration of account + 5 years | Regulatory record-keeping requirements |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Bet/game history | 5 years from game date | Dispute resolution, responsible gaming monitoring |
| Customer support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Cookies & technical logs | 13 months (session cookies cleared on browser close) | Platform security, analytics |
| Self-exclusion records | Indefinite | Prevention of re-registration during exclusion period |
When data reaches the end of its retention period and no longer needs to be held for legal or regulatory reasons, Ballysbet securely deletes or anonymises it so it can no longer be attributed to an individual.
8Cookies and Similar Technologies
Ballysbet uses cookies and similar technologies (such as local storage and session identifiers) to operate the platform, remember your preferences, maintain your login session, analyse usage patterns and protect against fraud.
What Are Cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They allow the website to recognise your device on subsequent visits and to maintain state across pages within a single session. Most browsers accept cookies by default — you can configure your browser to reject cookies, but doing so may prevent some Ballysbet features from working correctly, particularly account login and session continuity.
Types of Cookies Ballysbet Uses
| Cookie Type | Purpose | Duration |
|---|---|---|
| Session management, login authentication, security tokens, fraud prevention identifiers. Cannot be disabled without breaking core functionality. | Session to 1 year | |
| Language preferences, display settings, responsible gaming alert thresholds, notification preferences. Enhance your experience but are not strictly necessary. | Up to 1 year | |
| Anonymised usage statistics — which pages are visited most, how long sessions last, which games are most popular. Used to improve the platform. Data is aggregated and not linked to individual identities. | Up to 13 months |
9Your Privacy Rights
As a Ballysbet player, you have the following rights in relation to your personal data. These rights can be exercised by contacting support@ballysbet.click or through the privacy settings in your Ballysbet account where available:
Right to Access
Request a copy of the personal data Ballysbet holds about you. We'll provide this within 30 days of a verified request.
Right to Rectification
Request correction of inaccurate personal data — for example, a misspelled name or incorrect date of birth on your account.
Right to Erasure
Request deletion of your personal data where it is no longer needed for the purposes it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that Ballysbet limits how your data is used — for example, while a dispute about accuracy is being resolved.
Right to Portability
Request your personal data in a structured, machine-readable format so it can be transferred to another service provider.
Right to Object
Object to processing of your data based on legitimate interests. We will assess whether those interests override your rights and respond accordingly.
Withdrawing Consent
Where Ballysbet processes your data on the basis of consent — such as for optional marketing communications — you can withdraw that consent at any time through your account notification settings or by emailing support@ballysbet.click. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
10Children's Privacy
Ballysbet is strictly an adult platform. No person under the age of 18 is permitted to register an account or access any gaming services on Ballysbet. Ballysbet does not knowingly collect personal data from minors.
Age verification is conducted as part of the KYC process for all accounts. Where Ballysbet discovers or has reasonable grounds to believe that a minor has registered, the account will be suspended immediately, all funds will be returned to the source of deposit, and all personal data of the minor will be deleted from our systems within 30 days of discovery.
11Changes to This Privacy Policy
Ballysbet may update this Privacy Policy from time to time. When we make material changes — changes that affect how we collect, use or share your personal data — we will notify active account holders via email and/or an in-platform notification at least 7 days before the changes come into effect.
The "Last Updated" date at the top of this page will be revised whenever changes are made. We recommend reviewing this policy periodically, particularly before engaging with new platform features that might involve additional data processing.
Your continued use of Ballysbet after notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated policy, you should close your account and request deletion of your personal data before the changes take effect.
12Contact & Complaints
For any questions, concerns or requests relating to this Privacy Policy or Ballysbet's handling of your personal data, please contact our privacy team:
If you believe Ballysbet has not handled your personal data in accordance with this policy or applicable law, you have the right to escalate a complaint. We encourage you to contact us directly first — the vast majority of concerns are resolved quickly through direct communication. If you are not satisfied with our response, you may pursue your complaint through applicable legal channels.