786sp Privacy Policy

01 Introduction

786sp ("we", "us", "our") is committed to protecting the privacy and security of our players' personal information. This Privacy Policy applies to all users of the 786sp platform accessible at 786sp.net, including the website, any associated mobile interfaces, and all related services (collectively, the "Platform").

This policy explains what personal data 786sp collects, why we collect it, how we process and protect it, with whom we share it, and what rights you have as a data subject. We have written this policy in plain, accessible English so that players across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan can clearly understand how their information is handled.

This Privacy Policy should be read alongside our Terms and Conditions, which govern your use of the 786sp platform as a whole. Where terms used in this policy are defined in the Terms and Conditions, those definitions apply here equally.

02 Data Controller

For the purposes of applicable data protection law, 786sp is the data controller in respect of personal data collected through the Platform. As data controller, 786sp determines the purposes and means by which your personal data is processed.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to our dedicated privacy contact:

03 Data We Collect

786sp collects several categories of personal data in the course of operating the Platform and fulfilling our legal and regulatory obligations. The categories are set out below:

3.1 Identity Data

Full legal name as it appears on your CNIC or passport; date of birth; CNIC or passport number (collected during KYC verification); photograph or scanned identity document submitted for verification purposes; and any additional identity documentation requested under our AML obligations.

3.2 Contact Data

Email address; Pakistani mobile number (including JazzCash or EasyPaisa registered number where relevant); and correspondence records arising from your communications with 786sp support.

3.3 Account Data

Username; account registration date; login timestamps and session records; device identifiers associated with login activity; IP addresses; two-factor authentication records; and account preference settings.

3.4 Financial Data

Deposit and withdrawal transaction records; payment method identifiers (such as the last four digits of a card or a registered JazzCash / EasyPaisa mobile number); transaction amounts in PKR; transaction timestamps; and any documentation submitted in support of source-of-funds verification.

3.5 Gaming Activity Data

Records of all bets placed on the sportsbook, casino games, slots, and live dealer products; stake amounts; bet outcomes; session duration; game titles accessed; and bonus utilisation history. This data is retained as part of our regulatory obligations and responsible gaming framework.

3.6 Technical Data

Browser type and version; operating system; device type (desktop, mobile, tablet); screen resolution; referral URL; pages visited on the Platform; session duration and clickstream data collected via cookies and server logs.

3.7 Communications Data

Records of support tickets, live chat transcripts, email correspondence, and any complaint submissions made to 786sp. These records are retained for quality assurance, dispute resolution, and regulatory compliance.

04 How We Collect Your Data

786sp collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically — when you access and navigate the Platform, our servers and tracking technologies (cookies, pixel tags, session storage) automatically record technical and behavioural data as described in Section 9.
• From payment processors — when you initiate a financial transaction, our payment partners (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, SadaPay, NayaPay, 1LINK, Visa, Mastercard) provide transaction confirmation data to 786sp.
• From identity verification providers — during KYC, 786sp may use third-party identity verification services that cross-reference your submitted documents against relevant registries or databases. These providers operate under strict data processing agreements with 786sp.
• From fraud prevention and AML services — 786sp may receive risk scoring or flagging data from licensed fraud prevention and AML screening providers as part of our regulatory compliance framework.

05 Purpose & Legal Basis for Processing

786sp processes your personal data only where a valid legal basis exists. The primary purposes and corresponding legal bases are set out below:

• Account Creation and Platform Access: Processing is necessary to perform the contract between you and 786sp — i.e., to provide you with a registered account and access to our betting and gaming services.
• Identity Verification (KYC): Processing is required to comply with our legal and regulatory obligations under the terms of our international gaming licence, including mandatory age verification and identity confirmation before withdrawal.
• Anti-Money Laundering Compliance: Processing is required by law. 786sp is obligated to screen transactions, maintain financial records, and report suspicious activity under its AML framework.
• Payment Processing: Processing is necessary to perform the contract — specifically to execute deposits and withdrawals in PKR via your chosen payment method.
• Responsible Gaming Monitoring: Processing is carried out on the basis of legitimate interest and legal obligation. 786sp monitors gaming behaviour patterns to identify and assist players who may be experiencing gambling-related harm.
• Customer Support: Processing is necessary to perform the contract and to pursue the legitimate interest of resolving player queries and complaints in a fair, documented manner.
• Platform Security and Fraud Prevention: Processing is based on legitimate interest — specifically the protection of 786sp's platform integrity and the protection of other players from fraudulent activity.
• Marketing Communications: Where you have opted in to receive promotional communications from 786sp, processing is based on your explicit consent. You may withdraw consent at any time by updating your communication preferences within your account settings or by contacting support.
• Analytics and Platform Improvement: Processing is based on legitimate interest — aggregate and anonymised usage data helps 786sp understand how the Platform is used and where improvements can be made. This data cannot identify individual players.

06 Sharing Your Data

786sp does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Service Providers

786sp engages carefully selected third-party service providers to assist with platform operations. These include payment processors, KYC and identity verification providers, cloud hosting and infrastructure providers, customer support platform vendors, and fraud and AML screening services. All service providers are bound by data processing agreements that restrict their use of your data to the specific service they provide to 786sp.

6.2 Game Providers

When you play casino games or slots on the 786sp Platform, limited session and account data is shared with the relevant game studio or aggregator to enable the game to function, validate bets, and return results. Game providers are licensed gaming studios operating under their own regulatory frameworks and are independently audited for fair play.

6.3 Regulatory and Legal Authorities

786sp may be legally required to disclose personal data to its gaming licensing authority, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction. Such disclosures are made only where required by binding legal obligation and to the minimum extent necessary.

6.4 Business Transfers

In the event that 786sp undergoes a merger, acquisition, asset sale, or restructuring, player data may form part of the transferred assets. In such an event, 786sp will notify affected players via email and this Privacy Policy will be updated to reflect any change in data controller.

07 Data Retention

786sp retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligation:

• Account and Identity Data: Retained for a minimum of five (5) years from the date of account closure, as required by our licensing authority's AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with AML and gaming audit requirements.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of activity, for dispute resolution and responsible gaming audit purposes.
• Customer Support and Communications Records: Retained for two (2) years from the date of the last communication, for quality assurance and dispute resolution.
• Technical and Log Data: Retained for twelve (12) months from the date of collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for two (2) years thereafter as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for aggregate statistical purposes and does not constitute personal data under applicable privacy law.

08 Security Measures

786sp implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the 786sp Platform;
• AES-256 encryption for all sensitive personal data stored at rest, including identity documents and financial records;
• Role-based access controls ensuring that only authorised 786sp personnel with a documented need can access player personal data;
• Multi-factor authentication for all 786sp staff with access to production systems containing player data;
• Regular penetration testing and vulnerability assessments by qualified third-party security professionals;
• Intrusion detection and monitoring systems covering all production environments;
• Incident response procedures with defined escalation and notification timelines in the event of a data breach.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 786sp will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

While 786sp takes every reasonable precaution to secure your data, no method of electronic transmission or storage is completely infallible. You also play a role in keeping your account secure — use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.

09 Cookies & Tracking Technologies

786sp uses cookies and similar technologies (session storage, local storage, pixel tags) on the Platform. The following categories of cookies are in use:

786sp does not use third-party advertising cookies or behavioural targeting cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

10 Minors & Age Policy

786sp strictly prohibits the registration and use of the Platform by individuals under the age of 21. The Platform is intended exclusively for adults aged 21 and over. 786sp does not knowingly collect personal data from individuals under 21 years of age.

As part of our KYC process, all players are required to verify their date of birth using a valid Pakistani CNIC or passport. Where 786sp identifies or reasonably suspects that a player is under 21, the account will be immediately suspended, all data will be reviewed, and the matter will be handled in accordance with our underage gambling procedures.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites. 786sp supports the use of independently operated parental control tools and responsible gaming resources where they are applicable.

11 Your Privacy Rights

As a data subject, you have a number of rights in relation to your personal data held by 786sp. These rights are summarised below. To exercise any of these rights, contact us at [email protected] with the subject line "PRIVACY REQUEST" and include sufficient information for us to verify your identity.

• Right of Access: You have the right to request a copy of all personal data that 786sp holds about you, along with information about how it is used. 786sp will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update most contact and preference data directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Note that this right is subject to our legal and regulatory retention obligations — for example, we cannot delete financial records we are required to retain for AML compliance. Where deletion is not possible in full, we will explain why and delete what we legally can.
• Right to Restrict Processing: You may request that we restrict how we use your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) where processing is based on your consent or on contract performance.
• Right to Object: You may object to processing based on legitimate interest, including profiling for responsible gaming monitoring. We will assess your objection and cease processing unless there are compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

786sp will not charge a fee for handling privacy rights requests in standard circumstances. If a request is manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

12 International Data Transfers

786sp operates under an international gaming licence and may engage service providers whose infrastructure is located outside Pakistan. In such cases, your personal data may be transferred to and processed in jurisdictions other than Pakistan.

Where such transfers occur, 786sp ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards equivalent to those described in this Privacy Policy. 786sp does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing supplementary technical and contractual safeguards.

For further details about specific international transfers and the safeguards in place, you may contact us at [email protected] with the subject line "PRIVACY REQUEST — TRANSFERS".

13 Changes to This Privacy Policy

786sp reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. When material changes are made, we will notify registered players by email to the address on file at least fourteen (14) days before the updated policy takes effect.

The updated Privacy Policy will always be available at 786sp.net/privacy-policy. The "Last Updated" date at the top of this document will be revised each time a new version is published. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

If you do not agree with the revised policy, you must cease using the Platform and request account closure before the effective date of the changes.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 786sp handles your personal data, please get in touch with our privacy team:

786sp takes all privacy-related enquiries seriously. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under our licensing framework.