Your Privacy Matters to gashpk

1.1 This Privacy Policy is issued by gashpk ("gashpk", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at gashpk.net. gashpk is the data controller responsible for the personal information of all registered users of the platform.

1.2 This Privacy Policy applies to all personal data collected by gashpk through the gashpk.net website, any associated mobile-optimised pages, and through any direct communications between gashpk and its users, including support correspondence, email, and live chat.

1.3 This policy should be read alongside the gashpk Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between gashpk and its registered users.

1.4 If you have any questions about this Privacy Policy or about how gashpk processes your personal data, please contact our support team at [email protected]. We are available 24 hours a day, 7 days a week.

2.1 Information You Provide Directly. When you register on gashpk, complete your KYC verification, contact our support team, or participate in promotions, you provide us with personal information. This includes your full name, date of birth, CNIC or passport number, email address, mobile number, and the details of your preferred payment method (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank).

2.2 Information Collected Automatically. When you access and use the gashpk platform, we automatically collect certain technical information about your device and browsing activity. This includes your IP address, browser type and version, device identifiers, operating system, session start and end times, pages visited, and in-game activity logs.

2.3 Financial Transaction Data. Every deposit and withdrawal processed on gashpk generates a transaction record. These records include the amount transacted in PKR, the payment method used, the date and time of the transaction, and reference identifiers provided by the payment processor. gashpk does not store full bank account numbers or mobile wallet credentials on its primary servers.

2.4 Responsible Gaming Data. If you use any of gashpk's responsible gaming tools — such as deposit limits, session reminders, or self-exclusion — the details of your choices and the duration of any restrictions applied to your account are recorded and retained for compliance purposes.

2.5 Communications Data. When you contact gashpk's support team via email, live chat, or any other channel, we retain records of those communications including the content of messages and any supporting documentation you provide.

3.1 gashpk uses the personal data it collects for the following purposes:

• Account Management: To create, operate, and maintain your gashpk account, including verifying your identity and age (21+ requirement), managing your account balance, and processing your gaming activity;
• Payment Processing: To process deposits and withdrawals via your chosen payment method and to maintain accurate records of all financial transactions on your account;
• KYC and Fraud Prevention: To verify your identity in accordance with our Know Your Customer procedures, to detect and prevent fraudulent activity, and to comply with anti-money laundering (AML) obligations;
• Customer Support: To respond to your enquiries, resolve complaints, and provide account assistance through our 24/7 support team;
• Responsible Gaming: To monitor gaming patterns that may indicate problematic behaviour, to apply and manage responsible gaming restrictions requested by you or required by our compliance framework, and to send responsible gaming reminders;
• Security: To protect gashpk and its users from unauthorised access, account takeover, and other security threats;
• Legal Compliance: To comply with our legal, regulatory, and tax obligations, including retaining records as required by applicable law;
• Marketing (with consent only): To send you information about gashpk promotions, bonuses, and offers where you have provided explicit consent to receive such communications. You can opt out at any time.

3.2 gashpk will not use your personal data for any purpose not listed in this clause without first notifying you and, where required, obtaining your consent.

4.1 gashpk processes personal data only where a valid legal basis exists. The legal bases applicable to our processing activities are as follows:

• Contractual Necessity: Processing required to fulfil our obligations under the gashpk Terms & Conditions — including account creation, payment processing, and game operation;
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and tax reporting obligations;
• Legitimate Interests: Processing conducted for gashpk's legitimate business interests, such as fraud detection, platform security, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — principally for the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

4.2 Where gashpk relies on legitimate interests as the legal basis for processing, we have conducted a balancing assessment to ensure that our interests do not override your fundamental privacy rights and freedoms. You may request details of this assessment by contacting [email protected].

5.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. gashpk uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, keep your session secure, and analyse how the platform is used.

5.2 Types of Cookies Used by gashpk. gashpk uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the gashpk platform, including maintaining your logged-in session and securing financial transactions. These cookies cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience on gashpk;
• Analytical Cookies: Help us understand how players use gashpk by collecting aggregated, anonymised data about page visits, session duration, and navigation patterns. This data is used solely to improve the platform;
• Responsible Gaming Cookies: Track session duration and gaming activity to support responsible gaming tools including session time reminders and reality checks.

5.3 Managing Cookies. You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gashpk platform. Strictly necessary cookies cannot be refused as they are essential to the operation of the site.

6.1 gashpk does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes under any circumstances. Your data is shared only in the limited circumstances described in this clause.

6.2 Payment Processors. When you make a deposit or withdrawal, your relevant financial details are shared with the applicable payment provider (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank) to facilitate the transaction. These providers process your data under their own privacy policies and are independently responsible for their processing activities.

6.3 Identity Verification Providers. gashpk uses regulated third-party KYC providers to verify the identity and age of registered users. These providers receive only the minimum personal data necessary to complete the verification process.

6.4 Fraud Prevention and AML. gashpk may share data with fraud prevention agencies, law enforcement authorities, or financial intelligence bodies where required to do so by law or where gashpk has a legitimate interest in preventing financial crime.

6.5 Regulatory and Legal Authorities. gashpk will disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by a binding legal order, regulation, or court judgment. gashpk will, where legally permissible, notify affected users of such disclosures.

6.6 Service Providers. gashpk engages trusted third-party service providers to support the operation of the platform, including hosting, analytics, and customer support software. These providers access personal data only as necessary to perform their contracted services and are contractually prohibited from using it for any other purpose.

6.7 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of gashpk's business, user personal data may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer and of any material changes to how their data will be processed.

7.1 gashpk retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.

7.2 Active Accounts. Personal data associated with active gashpk accounts is retained for the duration of the account's existence and for a period of five (5) years following the closure of the account, unless a longer retention period is required by law.

7.3 Financial Transaction Records. Records of all financial transactions — including deposits, withdrawals, and bet history — are retained for a minimum of five (5) years from the date of the transaction in accordance with anti-money laundering regulatory requirements.

7.4 KYC Documents. Identity documents submitted for KYC verification are retained for a minimum of five (5) years following the closure of your account or the date of your last transaction, whichever is later.

7.5 Self-Excluded Players. Where a player has self-excluded from gashpk, their personal data is retained for the duration of the self-exclusion period and for a minimum of five (5) years thereafter, to prevent the re-registration of a self-excluded individual.

7.6 Deletion Requests. Where you request deletion of your personal data, gashpk will comply with your request subject to any overriding legal obligations to retain certain data. Where deletion is not immediately possible due to such obligations, gashpk will restrict all processing of your data to the minimum necessary to fulfil those obligations.

8.1 gashpk takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and gashpk servers;
• Encrypted storage of sensitive personal data including identity documents and payment information;
• Role-based access controls ensuring that only authorised gashpk personnel can access personal data, and only to the extent necessary for their role;
• Regular security audits and penetration testing of the gashpk platform;
• Two-factor authentication options for user accounts to prevent unauthorised access;
• Monitoring systems that detect and flag unusual account activity in real time.

8.2 While gashpk takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying gashpk immediately if you suspect unauthorised access to your account.

9.1 As a gashpk user, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected]:

• Right of Access: You have the right to request a copy of the personal data that gashpk holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that gashpk holds about you;
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, subject to any overriding legal retention obligations;
• Right to Restrict Processing: You have the right to request that gashpk restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved;
• Right to Data Portability: You have the right to receive a copy of certain personal data you have provided to gashpk in a structured, machine-readable format;
• Right to Object: You have the right to object to the processing of your personal data where gashpk relies on legitimate interests as the legal basis for that processing;
• Right to Withdraw Consent: Where gashpk processes your data based on consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

9.2 gashpk will respond to all valid data rights requests within thirty (30) days of receipt. Where a request is particularly complex or numerous, this period may be extended by a further two months, and you will be notified accordingly.

9.3 gashpk will not charge a fee for handling data rights requests, except where requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply.

10.1 gashpk is strictly an adult platform. Our services are intended exclusively for individuals who are twenty-one (21) years of age or older. We do not knowingly collect personal data from anyone under the age of 21.

10.2 If gashpk becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the associated account, delete all personal data collected from that individual, and — where appropriate — report the matter to relevant authorities.

10.3 If you are a parent or guardian and believe that a minor in your care has registered on gashpk or has provided personal data to gashpk, please contact us immediately at [email protected]. We will take prompt action to investigate and resolve the matter.

11.1 gashpk primarily processes personal data within the jurisdictions in which it operates. Where personal data is transferred to third-party service providers located in other countries — for example, technology infrastructure providers or KYC verification services — gashpk ensures that appropriate safeguards are in place to protect your data.

11.2 Appropriate safeguards for international transfers may include contractual clauses that impose equivalent data protection obligations on the receiving party, or the use of service providers that have adopted recognised international data protection frameworks.

11.3 By using the gashpk platform, you acknowledge that your personal data may be transferred to, stored, and processed in countries other than Pakistan. gashpk will always ensure that such transfers are conducted in compliance with applicable privacy standards.

12.1 gashpk may update this Privacy Policy from time to time to reflect changes in technology, regulation, or the services we offer. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

12.2 Material changes to this Privacy Policy — such as changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — will be communicated to registered users via email to the address on record with their account, and a prominent notice will be displayed on the gashpk website for a reasonable period prior to the changes taking effect.

12.3 Your continued use of gashpk following notification of any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you should stop using gashpk and may request closure of your account.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to gashpk's handling of your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Website: gashpk.net

13.2 gashpk is committed to resolving all privacy-related complaints promptly and fairly. If you submit a complaint regarding the handling of your personal data, we will acknowledge your complaint within 48 hours and provide a substantive response within thirty (30) days.

13.3 If you are not satisfied with gashpk's response to your complaint, you have the right to escalate your concern to the relevant data protection authority or regulatory body in your jurisdiction. gashpk will cooperate fully with any such regulatory investigation.

13.4 This Privacy Policy is governed by the laws applicable to gashpk's operating jurisdiction. Any disputes relating to the processing of your personal data that cannot be resolved through our internal complaints process will be subject to the dispute resolution provisions set out in the gashpk Terms & Conditions.