Perabet Privacy Policy — How We Handle Your Personal Data

1. Introduction

Perabet operates perabet.cash as an online betting and casino platform primarily serving players in Pakistan. As a data controller, Perabet is responsible for deciding how and why personal data about you is processed. "Personal data" means any information that can identify you directly or indirectly — your name, CNIC number, phone number, email address, financial details and even your IP address all count.

This Privacy Policy covers all personal data processing activities carried out by Perabet in connection with your registration, use of our betting and casino products, participation in promotions and any communications between you and our support team. It does not cover third-party websites or services that may be linked from Perabet — those have their own privacy policies which we have no control over.

Perabet is committed to handling personal data responsibly, keeping it secure and using it only for the purposes described in this policy. We do not sell personal data. We do not use your data for anything we have not told you about here.

2. Data We Collect

Perabet collects several categories of personal data depending on how you use the platform. Here is a clear breakdown:

Registration & Identity Data

• Full name as it appears on your CNIC
• Date of birth
• National Identity Card (CNIC) number
• Residential address (city, province)
• Email address
• Mobile phone number
• Username and encrypted password

Financial & Payment Data

• Easypaisa, JazzCash, NayaPay or SadaPay account number associated with your Perabet account
• Bank account details for IBFT transfers (account title, IBAN)
• Visa/Mastercard details (card number is tokenised — Perabet does not store raw card numbers)
• Transaction history: deposits, withdrawals, amounts, timestamps

Verification & KYC Data

• CNIC scan or photograph (front and back)
• Proof of address documents
• Selfie photograph for liveness verification where required

Usage & Technical Data

• IP address and approximate geolocation
• Device type, operating system and browser version
• Session duration, login timestamps and activity logs
• Games played, bet amounts and game outcomes
• Bonus usage history and wagering progress

Communications Data

• Live chat transcripts with the Perabet support team
• Email correspondence with Perabet
• WhatsApp and Telegram messages sent to Perabet support channels

3. How We Collect Your Data

Perabet collects personal data through the following channels:

• Directly from you: When you register a Perabet account, fill in your profile, submit KYC documents, make a deposit or withdrawal, contact support or participate in a promotion.
• Automatically: When you browse perabet.cash or use the mobile platform, our servers automatically log certain technical data including your IP address, device information, pages visited and session duration. This happens through standard web server logs and cookies.
• From payment providers: When you initiate a deposit or withdrawal, your payment provider (Easypaisa, JazzCash, your bank, etc.) shares transaction confirmation data with Perabet to allow us to credit or process your account correctly.
• From identity verification services: Where Perabet uses a third-party KYC service to verify your identity, that service may share the results of the verification check with us. We do not receive raw biometric data beyond what is necessary for the verification outcome.
• From fraud prevention tools: Perabet uses third-party fraud detection services that analyse transaction patterns and device fingerprints to identify potentially fraudulent activity.

4. Why We Use Your Data

Perabet uses personal data for specific, clearly defined purposes. We do not use your data for anything not listed here.

5. Legal Basis for Processing

Perabet processes your personal data under the following legal grounds:

• Contract performance: Processing your registration data, identity, payment details and game play data is necessary to provide the Perabet service you signed up for. Without this processing, we cannot maintain your account, accept deposits, process withdrawals or deliver betting and casino services.
• Legal obligation: Perabet is required by its operating licence conditions to verify player identity (KYC), retain financial records, screen for money laundering and cooperate with regulatory and law enforcement requests. This processing is not optional — it is a legal requirement.
• Legitimate interests: Perabet processes certain technical and usage data under legitimate interests — specifically, to keep the platform secure, prevent fraud, detect bonus abuse and improve the quality of our service. Where we rely on legitimate interests, we have assessed that our interests do not override your right to privacy.
• Consent: Marketing communications and the use of non-essential cookies are based on your consent. You can withdraw consent at any time without affecting your ability to use Perabet.

6. Sharing Your Data

Perabet does not sell your personal data. We do not share it with third parties for their own marketing purposes. We share data only in the following circumstances:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banks (for IBFT) and card networks (Visa/Mastercard) receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy and data protection frameworks.
• Identity verification providers: Third-party KYC services receive the documents and data necessary to verify your identity. They are contractually bound to use this data only for verification and not for any other purpose.
• Fraud prevention services: Perabet works with fraud detection partners who process device data, IP addresses and transaction patterns to identify suspicious activity. This data is shared in anonymised or pseudonymised form where technically possible.
• Game software providers: When you play a casino game or crash game on Perabet, the game provider's servers process your bets and return results. Providers receive a session token and bet data but do not receive your full personal profile.
• Regulators and law enforcement: Perabet will share personal data with regulatory authorities, financial intelligence units or law enforcement where legally required to do so — for example, in relation to anti-money laundering investigations or court orders. We are legally obligated to cooperate fully with such requests.
• Business successors: In the event of a merger, acquisition or restructuring of the Perabet business, your personal data may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections.

All third parties who receive personal data from Perabet are required to maintain the confidentiality of that data and to use it only for the specific purpose for which it was shared.

7. Payment Data Security

Financial data receives enhanced protection at Perabet given its sensitivity.

• Perabet does not store raw payment card numbers. Card details are tokenised by our payment processor — Perabet stores and processes only the token, never the actual card number.
• Easypaisa and JazzCash account numbers are stored in encrypted form in Perabet's database and are only decrypted within our secure payment processing environment.
• IBFT bank account details (IBAN, account title) are used solely for processing the specific withdrawal request for which they were provided and are not retained beyond the period necessary for that transaction plus our regulatory record-keeping obligations.
• All financial transactions between your device and Perabet's servers are encrypted via 256-bit SSL (TLS 1.3 or higher). This is the same encryption standard used by Pakistan's leading commercial banks.
• Perabet's payment processing environment undergoes periodic security audits. Staff with access to financial data are background-checked and operate under strict access controls.

8. Cookies & Tracking Technologies

Perabet uses cookies and similar technologies to make the platform work correctly and to understand how players use it. Here is what we use and why:

Essential Cookies

These are required for the Perabet platform to function. They keep you logged in, maintain your session security and remember your language preferences. You cannot opt out of essential cookies — without them, perabet.cash will not work correctly.

Analytics Cookies

Perabet uses anonymised analytics to understand which pages are most visited, how long players spend on different sections and what device types are most common. This data helps us improve the platform — for example, optimising the mobile layout for the device types most commonly used by Pakistani players. Analytics data is anonymised and cannot be used to identify you personally.

Preference Cookies

These cookies remember choices you have made on Perabet — such as your preferred game category, display settings or notification preferences. They make your return visits faster and more relevant.

Marketing Cookies (Opt-in Only)

If you have opted in to receive marketing communications from Perabet, marketing cookies may be used to track which promotions you have viewed and whether you have clicked on a promotional link. This helps us send you more relevant offers and avoid repeating promotions you have already seen.

You can manage your cookie preferences at any time by adjusting your browser settings. Note that disabling essential cookies will affect the functionality of perabet.cash.

9. Data Retention

Perabet keeps personal data for as long as is necessary to fulfil the purposes described in this policy or as required by applicable law and our licensing conditions.

After the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymised data — which cannot be used to identify any individual — may be retained indefinitely for statistical analysis and platform improvement purposes.

10. Security Measures

Perabet takes the security of your personal data seriously and maintains technical and organisational measures designed to protect it against unauthorised access, alteration, disclosure or destruction.

• 256-bit SSL / TLS 1.3 encryption on all data transmitted between your device and Perabet's servers — the same standard used by Pakistan's banking sector.
• Encrypted database storage for sensitive personal data including identity documents, payment details and authentication credentials. Passwords are hashed using bcrypt — they are never stored in plain text.
• Role-based access controls — Perabet staff only access the personal data their role requires. No single employee has access to the full data set for any player account.
• Two-factor authentication for all Perabet staff access to internal systems.
• Periodic security audits by independent third-party specialists covering infrastructure, application and payment processing environments.
• Intrusion detection systems monitoring Perabet's servers around the clock for anomalous activity.

Despite these measures, no internet-based service can guarantee absolute security. If you believe your Perabet account has been compromised, contact support@perabet.cash immediately. Perabet has an incident response procedure in place and will notify affected players promptly in the event of a data breach that affects their rights.

11. Your Privacy Rights

As a Perabet player, you have the following rights regarding your personal data. To exercise any of these rights, contact support@perabet.cash. We will respond within 30 days.

12. Protection of Minors

Perabet's services are strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we discover or are informed that a registered player is under 18, we will immediately suspend the account, initiate a full review and delete or restrict the processing of the personal data associated with that account in compliance with our responsible gaming obligations and legal requirements.

If you are a parent or guardian and have reason to believe your child has registered a Perabet account, contact us immediately at support@perabet.cash. We will investigate and act within 24 hours.

13. International Data Transfers

Perabet is an international platform and some of the third-party service providers we work with — including game software providers, KYC verification services and fraud detection tools — may process data outside Pakistan. Where personal data is transferred internationally, Perabet ensures that appropriate safeguards are in place:

• We only transfer personal data to countries and organisations that provide an adequate level of data protection, as assessed under applicable standards.
• Where an adequacy decision does not apply, we use contractual protections — specifically, standard data protection clauses in our agreements with international service providers — to ensure your data is handled to the same standard it would be within Pakistan.
• Game providers receive only session and bet data (not full personal profiles) and are prohibited by contract from using this data for any purpose other than delivering the game service.

14. Changes to This Privacy Policy

Perabet may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements or platform features. When we make material changes, we will notify you by email (to the address registered on your Perabet account) and by posting a prominent notice on perabet.cash before the changes come into effect.

The "Last Updated" date at the top of this page always shows when the policy was most recently revised. We encourage you to review this page periodically. Continued use of Perabet after any updated Privacy Policy comes into effect constitutes your acceptance of the updated terms.

15. Contact Us About Privacy

If you have any question about this Privacy Policy, want to exercise your data rights or need to report a privacy concern, please get in touch with the Perabet Privacy Team:

• Email: support@perabet.cash — mark your message "Privacy Request" in the subject line for fastest routing.
• Live chat: Available 24/7 from within your Perabet account — select "Privacy / Data Request" from the support topic menu.
• Response time: Perabet will acknowledge privacy requests within 5 business days and provide a full response within 30 days. Complex requests may take up to 60 days — we will notify you if this is the case.

If you are not satisfied with how Perabet has handled your privacy request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.