Privacy Policy

// Section 01

1. Introduction

This Privacy Policy ("Policy") is issued by 786sp, accessible at https://786sp.cam ("786sp", "we", "us" or "our"). It governs the collection, processing, storage and disclosure of personal data obtained from individuals ("Users", "you" or "your") who access or use the 786sp platform and its associated services.

786sp is an English-language online betting and casino information platform serving users in Pakistan and other permitted jurisdictions. We recognise that users in Pakistan — whether browsing from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar — have a right to understand clearly how their personal information is handled. This Policy is written in plain, professional English to fulfil that commitment.

This Policy should be read alongside our Terms & Conditions, which govern the broader relationship between you and 786sp. In the event of any conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.

786sp does not claim to operate under the supervision of any Pakistani governmental data authority. Users in Pakistan are advised to be aware of the Prevention of Electronic Crimes Act, 2016 (PECA) and the Personal Data Protection Bill (pending legislation) as part of the evolving data protection landscape in Pakistan.

// Section 02

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• Personal Data: Any information relating to an identified or identifiable natural person — including name, email address, date of birth, IP address, device identifiers and financial account references.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction, whether by automated means or otherwise.
• Data Controller: The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, 786sp acts as the Data Controller in respect of personal data collected directly through the platform.
• Data Processor: A third party that processes personal data on behalf of the Data Controller, subject to contractual obligations and data protection standards.
• KYC Data: Identity and age verification documents submitted by Users as part of the Know Your Customer process — including CNIC copies, passport scans and supporting proof-of-address documentation.
• Cookies: Small data files placed on a User's device by the platform for functionality, performance and analytics purposes.
• Third Party: Any individual, company or organisation that is not 786sp or the User, including payment processors, analytics providers and regulatory bodies.

// Section 03

3. Data We Collect

786sp collects personal data through several channels — directly from Users during registration and platform use, automatically through technical systems, and in some cases from third-party service providers. The categories of data we collect are set out below.

We do not intentionally collect sensitive personal data beyond what is necessary for KYC compliance and responsible gambling obligations. We do not collect biometric data beyond the liveness-check selfie required by the verification process.

// Section 04

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, 786sp relies on the following lawful grounds:

• Contractual Necessity: Processing that is necessary to fulfil our contractual obligations to you — including account management, deposit and withdrawal processing, and KYC verification — is carried out on the basis of contract performance.
• Legitimate Interests: We process certain data — including technical and usage data — to pursue our legitimate interests in operating a secure, functional and improved platform. We balance these interests against your rights and freedoms before relying on this basis.
• Legal Obligation: Certain processing — particularly KYC and anti-money laundering (AML) record-keeping — is carried out to comply with applicable legal requirements imposed on gambling platforms and financial service operators.
• Consent: Where we rely on your consent — such as for non-essential cookies or direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent may limit certain platform features.

// Section 05

5. How We Use Your Data

786sp uses the personal data we collect for the following specific purposes:

5.1 Account & Platform Operation

To create and manage your registered account, authenticate your identity at login, provide access to platform features, process deposits and withdrawal requests (subject to operator terms), and maintain accurate account records.

5.2 Identity Verification & Fraud Prevention

To verify your age and identity through the KYC process, to comply with anti-money laundering (AML) obligations, to detect and prevent fraudulent or abusive account behaviour, and to identify and investigate suspicious financial transactions.

5.3 Customer Support

To respond to support enquiries submitted via live chat or email ([email protected]), to investigate and resolve account-related disputes, and to maintain records of communications for quality assurance purposes.

5.4 Responsible Gambling

To implement and maintain the responsible gambling tools you have elected — including deposit limits, session timers and self-exclusion arrangements — and to monitor account activity where required to fulfil responsible gambling obligations.

5.5 Platform Improvement & Analytics

To analyse aggregate usage patterns, improve platform performance and user experience, identify technical issues and optimise content — particularly for users accessing the platform on mobile devices from across Pakistan.

5.6 Legal Compliance

To comply with applicable laws, regulations and lawful requests from competent authorities, and to establish, exercise or defend legal claims in connection with platform operations.

// Section 06

6. Data Sharing & Disclosure

786sp does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share personal data only in the following limited and controlled circumstances:

• Service Providers & Data Processors: We engage trusted third-party service providers to assist with platform operations — including hosting infrastructure, KYC verification technology providers, analytics tools and payment reference processing. These providers act as Data Processors under contractual obligations and may only process your data on our documented instructions.
• The Associated Operator: Where 786sp operates in connection with a licensed gambling operator, certain account and verification data may be shared with that Operator to enable account functionality, KYC compliance and payment processing. The Operator's own privacy practices apply to data processed under their own systems.
• Legal Authorities: We may disclose personal data to law enforcement agencies, regulatory authorities or courts where required by applicable law, where we have a good-faith belief that such disclosure is necessary to protect the safety of users or third parties, or to comply with a valid legal process.
• Business Succession: In the event of a merger, acquisition or transfer of substantially all of 786sp's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Users will be notified of any such transfer where required by applicable law.

Payment method references on the platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual references for Pakistani users only. 786sp does not share personal data with these payment providers unless a User specifically engages in a transaction that directly involves them through the Operator's cashier system.

// Section 07

7. International Data Transfers

As an online platform, 786sp may store and process personal data on servers located outside Pakistan. When personal data is transferred to jurisdictions that may not offer an equivalent level of data protection to Pakistan, we take steps to ensure that appropriate safeguards are in place.

These safeguards may include:

• Standard contractual clauses or data processing agreements with Data Processors that impose equivalent protection obligations;
• Technical and organisational security measures — including encryption in transit and at rest — applied to all international data transfers;
• Transfers to jurisdictions that have been recognised as providing an adequate level of data protection.

If you require further information about the international transfer mechanisms applicable to your personal data, you may contact us using the details set out in Section 15 of this Policy.

// Section 08

8. Data Retention

786sp retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or contractual obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the active account relationship and for a defined period thereafter — typically five (5) years — to meet legal record-keeping requirements and to facilitate dispute resolution.
• KYC & Verification Data: Retained for the period required by applicable anti-money laundering legislation and operator compliance obligations — typically a minimum of five (5) years from the date of the relevant transaction or account closure.
• Communication & Support Records: Retained for a period sufficient to allow resolution of any related dispute — generally three (3) years from the date of the last communication.
• Technical & Usage Data: Retained in identifiable form for up to twenty-four (24) months from collection. Aggregate anonymised data may be retained indefinitely for analytical purposes.
• Responsible Gambling Records: Self-exclusion and limit-setting records are retained for the full duration of any active restriction and for a defined period thereafter, to prevent circumvention of those arrangements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures. Where you request erasure of your data in advance of the retention period, we will assess that request in accordance with your rights as described in Section 11.

// Section 09

9. Cookies & Tracking Technologies

786sp uses cookies and similar tracking technologies to ensure the platform functions correctly, to analyse usage patterns and to improve the overall user experience. A cookie is a small text file placed on your device by the platform when you visit.

You may manage or withdraw consent for non-essential cookies at any time through your browser's cookie settings. Disabling essential cookies may affect the functionality of your account and certain platform features. Please note that restricting cookies does not make your browsing anonymous — your IP address and device data may still be collected through other technical means.

// Section 10

10. KYC & Verification Data

Know Your Customer (KYC) verification requires the collection of sensitive identity documents. 786sp treats KYC data with the highest level of care and applies the following specific protections:

• Secure Upload Only: All KYC documents must be submitted exclusively through the platform's secure, HTTPS-encrypted verification portal. Documents sent by email, WhatsApp, social media or other unsecured channels will not be accepted and should not be sent.
• Access Controls: KYC data is accessible only to authorised verification personnel and compliance officers on a strictly need-to-know basis. Access is logged and audited.
• No Public Disclosure: KYC documents are never publicly disclosed, displayed or shared with third parties except as required for AML compliance, lawful regulatory requests or the operator's verification process.
• Encryption at Rest: Stored KYC documents are encrypted using industry-standard encryption protocols to protect against unauthorised access in the event of a data security incident.
• Prohibition on Document Falsification: Users must submit only genuine, unaltered documents. Submitting falsified or doctored identity documents constitutes fraud and may be reported to relevant authorities.

// Section 11

11. Your Privacy Rights

Subject to applicable law and any overriding legal obligations (such as AML record-keeping requirements), Users of 786sp have the following rights in relation to their personal data:

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to all verifiable requests within thirty (30) calendar days. In complex cases, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

We may need to verify your identity before processing a rights request to ensure that personal data is not disclosed to an unauthorised party. Identity verification for this purpose does not constitute a new round of KYC processing.

// Section 12

12. Protection of Minors

786sp is strictly an adults-only platform. Access is prohibited for individuals under 18 years of age, or the higher minimum age required by the operator or license jurisdiction applicable to the specific gambling service offered. We do not knowingly collect personal data from minors.

As part of the KYC process, we verify the age of all registered users before enabling account functionality associated with gambling services. Where we become aware — through verification, complaint or other means — that a minor has registered on the platform, we will immediately suspend the account, delete all associated personal data (except where retention is required by law to evidence the breach) and notify the operator.

// Section 13

13. Security Measures

786sp implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or destruction. These measures include, but are not limited to:

• HTTPS / TLS Encryption: All communications between your device and 786sp are encrypted in transit using Transport Layer Security (TLS), preventing interception of your login credentials, KYC documents and payment references.
• Encryption at Rest: Sensitive data stored on our servers — particularly KYC documents and financial reference data — is encrypted using industry-standard protocols.
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis. Administrative access is protected by multi-factor authentication and monitored through activity logs.
• Intrusion Detection: We operate network monitoring and intrusion detection systems to identify and respond to suspicious activity directed at our infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, we will notify affected users and relevant authorities in accordance with applicable law.

While we apply rigorous security measures, no online system can be completely immune from security risks. You are encouraged to use a strong, unique password for your 786sp account, enable any available multi-factor authentication, and to notify us immediately if you suspect any unauthorised activity on your account.

// Section 14

14. Updates to This Privacy Policy

786sp reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform services. When material changes are made, we will:

• Update the "Last Reviewed" date displayed at the top of this page;
• Notify registered Users via the email address associated with their account where the changes are significant;
• In some cases, request renewed consent where processing changes require it.

Your continued use of the 786sp platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. We encourage you to review this page periodically so that you are always aware of how we handle your personal data.

// Section 15

15. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of your data rights as described in Section 11, please contact the 786sp data team using the details below.

For questions about our platform terms, please see our Terms & Conditions. For responsible gambling guidance, visit our Responsible Gambling page. For common questions, see our FAQ.