Privacy Policy
Understanding the odds and the nature of Plinko is natural. So is the question of how safe your personal data is while playing such games online. In Pakistan, the most core legislation, the Prevention of Electronic Crimes Act, or PECA 2016, confers specific rights and control over your information. This page explains your rights and how the gaming sites legally and obligatorily have to abide by the data security guarantees laid out by the Pakistan Telecommunication Authority (PTA). Knowing these guarantees makes you safe and in control.
Content
What Personal Information Gets Collected
Every casino must gather some personal information to create your user account. Pakistani gaming sites must, as defined by PECA 2016, gain your explicit consent before recording any data.
Here is a look at the typical information gathered:
- Your full name, email, phone number, and birth date to confirm your identity;
- Technical details from your device, such as its IP address, type, operating system, and browser version;
- Encrypted payment records, the method you used, and a history of withdrawals, but never full payment details;
- A full history of your gameplay, including bets placed, sessions played, and all wins or losses;
- Your general location;
- Saved copies of any chats, emails, or support tickets you send to the support team.
Pakistan Legal Framework Governing Data Privacy
PECA 2016 is the primary law protecting your personal data from injustice. The Personal Data Protection Bill 2023 (PDPB) is expected to become law soon, promising even more robust protections. PECA 2016, along with the Federal Investigation Agency (FIA) and PTA, imposes punishments on the violators. Section 16(1) of PECA 2016 prohibits unauthorized handling, trafficking, and storage of a person’s identity information. Violators can face 3 years of imprisonment and a 5 million PKR fine. Moreover, all critical personal data must be processed and stored within the borders of Pakistan on local servers.
How User Data Gets Protected
Given the high value placed on protecting your data, Pakistani gaming sites take certain key measures to ensure that your sensitive information is kept safe. All sites take a combination of robust technology and meticulous processes to ensure your data privacy is guaranteed.
Here are the main ways they do it:
- Strong SSL/TLS encryption scrambles all information that travels between your device and the site’s servers;
- Access to the server infrastructure is strictly limited to authorized staff through multi-factor authentication;
- Regular security audits are run every quarter to find potential weaknesses and ensure compliance with PTA rules;
- Automated systems constantly watch out for suspicious activity and flag unusual transactions in real-time;
- Powerful firewalls are in place to block malicious traffic and prevent unauthorized access to the network;
- Encrypted backups of all data are created and stored securely in different locations for disaster recovery.
Data Retention and Deletion Rights in Pakistan
Pakistani law requires gaming sites to retain your information for particular durations. Under PECA Section 16(2), you can ask the PTA to delete your data. But certain data, like records of payments, remains for 5 years after you close your account for financial auditing purposes.
In the table below, you can find the typical retention periods:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| General user data | Up to 2 years | Service provision |
| Transactional records | Up to 5 years | Financial compliance |
| Payment information | Up to 5 years | PECA requirements |
| Account credentials | Until the deletion request | User access |
User Rights Under Pakistani Data Protection Laws
You need to know your rights to manage your own data. In Pakistan, the Constitution grants you the right to privacy. You can exercise this right by contacting the support team for a site in question, or through your account settings. In most cases, they have to respond to your request within 30 days.
You have the right to:
- Access and examine the entire record of your data stored on a site;
- Request corrections to your personal data if it is inaccurate or out of date;
- Request your account to be deleted; however, financial records can be kept for a specified duration for legal compliance;
- Restrict the use of your data for promotional purposes and revoke your consent for any marketing communication;
- Control who gets to use your data, as you are the principal holder of your information.
Third-Party Data Sharing Policies
In some instances, gaming sites have to share some personal information with other parties, but to be clear, your information is never sold for marketing, and the site cannot control the privacy practices of other sites when you use third-party links.
These are the situations when sharing data is necessary:
- For some essential operational functions, partners entrusted with services like payment processing or security systems must be involved;
- For an investigation, the site must legally provide data to law enforcement, such as the FIA or PTA;
- In the case of a business transfer like a sale or merger, the new entity, and therefore the new company, may acquire your data.
- Every partner with third parties must sign a contract that includes strict clauses for confidentiality before they are allowed to see any of your personal information.
Age Restrictions and Children’s Safety in Pakistan
Online casinos in Pakistan can only be accessed by individuals aged 18 and above. This complies with local regulations, including the Prohibition (Enforcement of Hadd) Order of 1979. Under no circumstances will sites collect and keep personal data from minors. In the rare event that such data is identified, it gets erased. Sites will also not accept data involving parental consent as circumventing the age requirement. As such, parents are advised to monitor and check their children’s internet use and online gaming to assist in compliance.