sp786 Privacy Policy — How We Handle Your Personal Data

1. Who We Are

sp786 operates the online gaming and sports betting platform available at sp786.ws ("the Platform"). For the purposes of this Privacy Policy, sp786 acts as the data controller in respect of the personal data collected from users of the Platform. This means sp786 determines the purposes and means by which your personal data is processed.

sp786 operates under an international gaming licence. The Platform is designed primarily to serve players in Pakistan and processes all transactions in Pakistani Rupees (PKR). If you have any questions about how sp786 handles your personal data, the contact details for our privacy team are provided at the end of this policy.

2. Personal Data We Collect

sp786 collects the following categories of personal data from you, depending on how you interact with the Platform:

Account Registration Data

• Full legal name
• Date of birth
• Mobile phone number (used for account verification and OTP)
• Email address
• Username and password (password is stored in hashed form — sp786 cannot read your password)

Identity Verification (KYC) Data

• CNIC (Computerised National Identity Card) number and scan or photograph
• Proof of address documentation
• Proof of payment method ownership (e.g. screenshot of Easypaisa or JazzCash account in your name)
• Selfie or liveness check image where requested for enhanced verification

Payment and Transaction Data

• Mobile wallet identifiers (Easypaisa, JazzCash, NayaPay, SadaPay account numbers registered to you)
• Bank account details for IBFT transfers
• Masked card numbers (last 4 digits only) for Visa/Mastercard transactions
• Transaction history — deposit amounts, withdrawal amounts, dates, and statuses

Gaming Activity Data

• Bet history — game played, stake amount, outcome, and payout
• Session data — login times, session duration, and game activity during each session
• Responsible gaming settings you have applied to your account

Technical Data

• IP address
• Device type, operating system, and browser version
• Referring URL and pages visited within sp786
• Cookie and session identifiers (see Section 9)

3. How We Collect Your Data

sp786 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically through the Platform: When you use sp786, our servers automatically log technical data including your IP address, device details, and page activity. This happens in the background as part of normal platform operation.
• Through cookies and similar technologies: sp786 uses cookies to maintain your login session, remember your preferences, and analyse how the Platform is used. See Section 9 for full details.
• From third-party verification providers: When KYC verification is conducted through a third-party identity verification service, sp786 receives a verification result and, where applicable, the data submitted as part of that process.
• From payment providers: When you make a deposit or withdrawal, the relevant payment provider (e.g., Easypaisa, JazzCash) confirms transaction completion to sp786. sp786 receives transaction confirmation data, not your payment credentials.

4. How sp786 Uses Your Personal Data

sp786 processes your personal data for the following purposes:

5. Legal Basis for Processing

sp786 processes your personal data under the following legal bases:

• Contract performance: Processing necessary to create your account, deliver the gaming services you have requested, and process your deposits and withdrawals.
• Legal obligation: Processing required to comply with our gaming licence conditions, anti-money laundering regulations, Know Your Customer requirements, and responsible gaming obligations imposed by our licensing authority.
• Legitimate interests: Processing for fraud detection, platform security, and aggregate analytics that help sp786 improve its services. In each case, sp786 has assessed that these interests do not override your privacy rights.
• Consent: Processing for marketing communications, including promotional emails and SMS. You can withdraw this consent at any time without it affecting your ability to use sp786.

6. Data Sharing

sp786 does not sell your personal data. sp786 shares personal data with third parties only in the following circumstances:

Payment Processors

When you make a deposit or withdrawal, the relevant transaction details are shared with your chosen payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network). Each payment provider operates under its own privacy policy and is bound by applicable financial services data protection standards.

Identity Verification Providers

When KYC verification is required, sp786 uses a certified third-party identity verification service. Your identity documents and verification data are processed by this provider solely for the purpose of confirming your identity for sp786's regulatory compliance requirements.

Game Providers

When you play a game from a third-party provider such as Evolution Gaming, Pragmatic Play, or Spribe, minimal technical data (including a session token and your display name or player ID) is shared with that provider to enable game functionality. Game providers do not receive your payment details, CNIC, or full contact information.

Fraud Detection and Security

sp786 uses third-party fraud detection tools that may process IP address data, device fingerprint data, and behavioural patterns to identify fraudulent activity. These tools operate under strict data processing agreements with sp786.

Regulatory and Legal Requirements

sp786 may disclose your personal data to regulatory authorities, law enforcement agencies, or other legally authorised bodies where required to do so by applicable law, court order, or our gaming licence conditions. sp786 will notify you of any such disclosure where legally permitted to do so.

7. Data Retention

sp786 retains personal data for the following periods:

After the applicable retention period, sp786 securely deletes or anonymises personal data. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for analytical purposes.

8. Data Security

sp786 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• TLS encryption on all connections between your device and sp786's servers, so data in transit is always protected.
• Password hashing — your account password is stored as a one-way cryptographic hash. sp786 staff cannot read your password. If you forget it, a reset is required — it cannot be retrieved.
• OTP-based authentication for login, withdrawals, and sensitive account changes.
• Access controls — sp786 staff have access to personal data only on a need-to-know basis. Access is logged and reviewed regularly.
• PCI-DSS compliant payment processing — card data is handled through certified payment processors and is never stored on sp786's own servers.
• Regular security reviews including vulnerability assessments and penetration testing of the platform infrastructure.

In the event of a data breach that is likely to result in a risk to your rights or freedoms, sp786 will notify you and the relevant authorities in accordance with our obligations under applicable law. sp786 will aim to notify affected players within 72 hours of becoming aware of a qualifying breach.

9. Cookies and Tracking Technologies

sp786 uses cookies and similar technologies on the Platform. A cookie is a small file placed on your device when you visit a website. sp786 uses the following categories of cookies:

• Essential cookies: Necessary for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery attacks. These cannot be disabled without breaking the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred games, and display options. These improve your experience but the Platform will still function without them.
• Analytics cookies: sp786 uses analytics tools to understand how players use the Platform — which pages are visited, where players encounter difficulties, and how long sessions last. This data is collected in aggregate and is not linked to your identity. It is used to improve the Platform over time.
• Responsible gaming cookies: Used to enforce session limits and time-out reminders that you have set in your account. These are functional and security-related.

sp786 does not use third-party advertising or retargeting cookies. You will not see sp786 banner advertisements following you around the internet as a result of visiting the Platform.

You can manage cookie settings in your browser. Blocking all cookies will prevent sp786 from functioning correctly, as session management relies on essential cookies. Blocking functional and analytics cookies will not affect your ability to play or transact on the Platform.

10. Your Privacy Rights

As a registered player at sp786, you have the following rights regarding your personal data. These rights can be exercised by contacting sp786 at support@sp786.ws — no special form is required.

11. Children and Minors

sp786 is strictly an adults-only platform. Registration requires that you confirm you are 18 years of age or older. sp786 does not knowingly collect personal data from individuals under the age of 18.

If sp786 discovers or has reasonable grounds to suspect that an account has been registered by or on behalf of a minor, the account will be immediately suspended and closed, and all deposits will be returned to the source where required by law. Any winnings generated during such a period will be forfeited.

If you believe that a minor may be using or attempting to use sp786, please contact us immediately at support@sp786.ws. sp786 takes the protection of minors extremely seriously and will act immediately on any credible report.

12. International Data Transfers

As an online platform, sp786 uses infrastructure and service providers that may be located in different countries. This means that your personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, sp786 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this policy.

Safeguards used by sp786 for international data transfers include:

• Data processing agreements with all third-party processors that include contractual obligations to maintain appropriate technical and organisational security measures.
• Use of service providers who maintain internationally recognised security certifications such as ISO 27001 or SOC 2.
• Minimisation of the data transferred to each service provider — each provider receives only the data necessary for the specific service they deliver.

13. Changes to This Privacy Policy

sp786 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we use your personal data, sp786 will also notify registered players via email to the address on file.

We encourage you to review this Privacy Policy periodically. Your continued use of sp786 following any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you may request account closure as described in our Terms and Conditions.

14. How to Contact sp786 About Privacy

For any question, concern, or request related to this Privacy Policy or the personal data sp786 holds about you, please contact our support and privacy team through the following channels:

• Email: support@sp786.ws (use subject line "Privacy Request" for data rights requests)
• Live Chat: Available 24/7 at sp786.ws — for general privacy questions, live chat is the fastest channel

sp786 aims to respond to all privacy-related enquiries within 5 business days, and to formal data rights requests within 30 days as required by applicable law. If a request is complex or involves a large volume of data, sp786 may extend this period by a further 30 days and will notify you if this extension applies.

If you are not satisfied with the outcome of a privacy request or complaint, you have the right to escalate the matter to the relevant data protection supervisory authority for the jurisdiction in which sp786 holds its gaming licence. Details of the relevant authority are available on request from the support team.