Privacy Policy — How Sloat PK Handles Your Personal Data in Pakistan

This Privacy Policy applies to all personal data collected and processed by Sloat PK — the online gaming and sports betting platform operated at sloatpk.bet. It covers every interaction you have with Sloat PK: registering an account, making a deposit in PKR, placing a cricket bet, playing poker or Aviator, contacting our support team, or simply browsing the platform.

When you register at Sloat PK, you enter into a data relationship with us. This policy is our commitment to explaining that relationship in full. We want every Pakistani player to feel confident about what happens to their information — not because we are legally required to say so, but because transparency is a genuine value at Sloat PK.

This policy should be read alongside our Terms and Conditions, which govern the overall relationship between you and Sloat PK. In the event of any conflict between these documents, the Terms and Conditions take precedence with respect to account rules, and this Privacy Policy takes precedence with respect to data handling.

Sloat PK collects personal data in three ways: information you provide directly, information generated by your activity on the platform, and — in limited circumstances — information from third-party verification services we use to confirm identity.

Information you provide directly:

• Full legal name as per your national identity card (CNIC)
• Date of birth — required to verify you are 18 or older
• Pakistani mobile phone number
• Email address
• Home address (required at the withdrawal verification stage)
• CNIC number and copy (required for KYC verification before large withdrawals)
• Payment account details — Easypaisa or JazzCash mobile number, bank account number for IBFT, or card details for Visa/Mastercard transactions

Information generated by your platform activity:

• Login timestamps and session duration
• Device type, operating system version, and browser type
• IP address and approximate geolocation derived from it
• Betting history — all bets placed, markets selected, and outcomes
• Game history — all casino, poker, Aviator, and fishing game sessions
• Deposit and withdrawal transaction history including amounts in PKR
• Bonus claims and wagering activity
• Customer support conversation history

Sloat PK uses the personal data we collect for specific, defined purposes only. We do not use your data for purposes beyond what is described here without first seeking your consent.

• Account creation and operation: Your name, mobile number, email, and date of birth are used to create and maintain your Sloat PK account, verify your identity, and ensure you are eligible to use the platform.
• Processing PKR transactions: Your payment account details are used to process deposits and withdrawals in Pakistani Rupees. These details are passed only to the relevant payment processor (Easypaisa, JazzCash, or your bank) and are never stored in their full form on Sloat PK servers after transaction completion.
• Fraud prevention and security: Device data, IP address, and login history are analysed to detect suspicious activity, prevent account takeover, and identify potential fraud. This is done to protect you as much as it is done to protect the platform.
• Responsible gaming monitoring: Betting history and session data are used to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, our responsible gaming team may proactively reach out to offer support tools.
• Customer support: When you contact Sloat PK support, your account information and transaction history are used to resolve your query accurately and efficiently.
• Platform improvement: Aggregated, anonymised activity data is used to understand how Pakistani players use the Sloat PK platform and to improve the product. This data cannot be traced back to any individual player.
• Legal and regulatory compliance: Certain data — particularly identity documents and transaction records — must be retained to comply with anti-money-laundering (AML) requirements.
• Marketing communications: If you have opted in to marketing, your email and mobile number may be used to send you information about Sloat PK promotions, new games, and special offers. You can opt out at any time via account settings or by replying STOP to any SMS.

Sloat PK processes your personal data on the following legal grounds, which align with standard data protection principles applied globally:

• Contractual necessity: Most data processing at Sloat PK is necessary to perform the contract between you and us — that is, to operate your account, process your PKR deposits and withdrawals, and enable you to bet and play games.
• Legal obligation: Identity verification data and transaction records are retained because we are legally required to maintain them for AML compliance and fraud investigation purposes. We cannot waive these requirements regardless of any player request.
• Legitimate interests: Security monitoring, fraud detection, and responsible gaming monitoring are carried out on the basis of Sloat PK's legitimate interests in maintaining a safe and fair platform — provided those interests do not override your fundamental rights.
• Consent: Marketing communications and non-essential cookies are only used where you have given explicit consent. You may withdraw this consent at any time.

Sloat PK does not sell your personal data. We do not share it with advertisers, data brokers, or marketing companies. The only circumstances in which your data is shared with a third party are the following:

• Payment processors: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or a bank transfer, the necessary transaction data is shared with that payment provider to complete the transfer. These providers have their own privacy policies and data security standards.
• KYC verification providers: Where identity verification is required before a withdrawal, your name, date of birth, and CNIC details may be shared with a third-party KYC verification service. These providers are contractually bound to use your data solely for verification and to delete it after the process is complete.
• Game software providers: Our casino, fishing game, poker, and Aviator game providers may receive anonymised session data for technical support and RNG audit purposes. No personally identifiable information is included in this data.
• Legal and regulatory authorities: Sloat PK may be required to disclose data to law enforcement agencies or regulatory bodies in response to a valid legal request. We will notify you of any such disclosure where legally permitted to do so.

Sloat PK keeps your personal data only for as long as it is necessary for the purpose it was collected, or as required by law. The following retention periods apply:

• Active account data (name, contact details, preferences): Retained for the lifetime of your active Sloat PK account plus a minimum of 12 months after account closure.
• Transaction records (PKR deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of the transaction, in compliance with AML regulations.
• KYC documents (CNIC copies, identity verification records): Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support conversation history: Retained for 2 years from the date of the conversation, after which transcripts are anonymised.
• Marketing opt-in records: Retained for the duration of your account plus 1 year, to demonstrate consent was obtained.
• Anonymised analytics data: Retained indefinitely in anonymised, aggregated form that cannot be used to identify any individual player.

When data is no longer required for any of the above purposes and no legal obligation to retain it exists, Sloat PK securely destroys or permanently anonymises it.

Sloat PK applies multiple layers of technical and organisational security measures to protect your personal data. These include:

• TLS encryption on all connections: Every page of the Sloat PK platform is served over HTTPS with current TLS standards. All data transmitted between your device and our servers is encrypted in transit.
• Encrypted data storage: Sensitive data — including identity documents and payment details — is encrypted at rest in our databases. Encryption keys are managed separately from the data they protect.
• Strict access controls: Only specific, authorised Sloat PK staff members can access player personal data, and only to the extent necessary for their role. All access is logged and regularly audited.
• Two-factor authentication (2FA): All Sloat PK staff accounts with access to player data require 2FA. Players are strongly encouraged to enable 2FA on their own accounts via the security settings page.
• Regular penetration testing: Sloat PK's security infrastructure is subjected to regular penetration testing by independent security professionals to identify and close vulnerabilities before they can be exploited.
• Incident response plan: In the event of a confirmed data breach that may affect Pakistani players, Sloat PK will notify affected users within 72 hours of becoming aware of the incident and take immediate steps to contain and remediate the breach.

Sloat PK uses cookies and similar tracking technologies to operate the platform correctly and to improve your experience. Below is a transparent breakdown of every cookie category we use and why.

You can manage cookie preferences via your browser settings. Disabling essential cookies will prevent the Sloat PK platform from functioning correctly. Disabling analytics cookies will not affect your ability to bet, play games, or manage your account.

As a player registered at Sloat PK, you have the following rights over your personal data. To exercise any of these rights, contact us at support@sloatpk.bet with "Data Rights Request" in the subject line. We will respond within 30 days.

Sloat PK is an adults-only platform for players aged 18 and above. We do not knowingly collect personal data from any person under the age of 18. If we discover or have reason to believe that data has been collected from a minor, that account will be suspended immediately, all data will be deleted, and the matter will be escalated appropriately.

Parents and guardians are responsible for ensuring that minors in their household cannot access the Sloat PK platform. We recommend using parental control software to restrict access to online gaming platforms on shared devices. If you believe a minor has registered at Sloat PK, please contact support@sloatpk.bet immediately with details so we can investigate and take action.

Sloat PK may update this Privacy Policy from time to time to reflect changes in our data practices, updates to legal requirements, or improvements to how we communicate privacy information. When material changes are made — for example, changes to what data we collect, how we use it, or who we share it with — we will notify all registered Sloat PK players by email and by a notice in the platform dashboard at least 7 days before the changes take effect.

Minor changes — such as formatting improvements, spelling corrections, or clarifications that do not alter the meaning of any section — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. We recommend checking this page periodically.

For any question, concern, or formal request related to your personal data and how Sloat PK handles it, please contact us using the details below. All privacy-related queries are handled by a dedicated team member — not a general support queue — and we commit to responding within 7 business days for formal data rights requests.