apkaka Privacy Policy

apkaka is an international online gaming and sports betting platform operating under an international gaming licence framework. The platform is accessible to eligible players in Pakistan and other permitted jurisdictions, offering cricket betting, PSL markets, live dealer casino games, slot titles, and specialty games including WM Live and Dino Hunter.

For the purposes of this Privacy Policy, apkaka is the data controller responsible for the personal data of registered players and platform visitors. All data processing activities described in this Policy are carried out by apkaka directly or by carefully selected third-party processors acting on apkaka's instructions and bound by appropriate data processing agreements.

If you have any questions about how apkaka processes your personal data, or wish to exercise any of your data subject rights, you may contact the apkaka Data Protection team at any time via the email address provided in Section 15 of this Policy.

apkaka collects personal data across several categories, depending on how you interact with the platform. The following table summarises the main categories of personal data collected and the context in which each category arises:

apkaka collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide directly when completing the account registration form, submitting KYC documents, initiating a deposit or withdrawal, using live chat support, or updating your account profile settings.
• Automated technical collection: Data collected automatically when you access the apkaka platform, including your IP address, device identifiers, browser type and version, operating system, session duration, pages visited, and interaction patterns. This data is collected via server logs, session cookies, and similar tracking technologies as described in Section 7.
• Third-party payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard, the respective payment processor may transmit to apkaka transaction confirmation data, including masked payment identifiers, transaction amounts in PKR, and processing timestamps.
• KYC and identity verification partners: apkaka may use specialist third-party identity verification service providers to assist with document authenticity checks and age verification. These providers process your submitted documents on apkaka's behalf and return a verification result.
• Responsible gaming interactions: Data generated when you engage with apkaka's responsible gaming tools, such as activating a deposit limit, setting a cooling-off period, or initiating a self-exclusion request through the account dashboard.

apkaka uses personal data collected from players for the following specific purposes:

• Account creation and management: To register your apkaka account, maintain your player profile, authenticate your identity at login, and administer your account settings and preferences.
• Identity and age verification: To confirm that you meet the 21+ age requirement and to comply with our international gaming licence obligations, which mandate Know Your Customer (KYC) verification for all registered players prior to the first withdrawal.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, to reconcile transactions, and to maintain accurate financial records as required by applicable regulations.
• Game and betting service delivery: To provide you with access to cricket betting markets, PSL fixtures, live casino tables, slot games, and specialty titles, and to record your gaming activity for account statement and dispute resolution purposes.
• Fraud prevention and AML compliance: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct as described in the apkaka Terms & Conditions. This includes automated screening of transaction patterns and gaming behaviour against risk indicators.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email, and to maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming compliance: To administer deposit limits, loss limits, cooling-off periods, and self-exclusion elections; to monitor gaming patterns for indicators of problem gambling; and to fulfil responsible gaming obligations under our licensing framework.
• Platform improvement and analytics: To analyse aggregated and anonymised usage data in order to improve the apkaka platform's performance, user experience, and product offering. Individual player profiles are not used for general analytics without appropriate anonymisation.
• Direct marketing (with consent): To send you personalised promotional communications, bonus offers, and platform updates via email or SMS, where you have given explicit consent to receive such communications. You may withdraw consent at any time via account settings or by contacting support.
• Legal and regulatory compliance: To comply with obligations imposed on apkaka by applicable laws, our international gaming licence conditions, court orders, and requests from authorised regulatory or law enforcement bodies.

apkaka processes your personal data on the following legal bases, each of which applies to the processing activities described in Section 4:

• Contractual necessity: Processing required to fulfil apkaka's obligations under the player account agreement — including account management, payment processing, and game service delivery — is carried out on the basis that such processing is necessary to perform the contract between apkaka and you.
• Legal obligation: Processing required to comply with applicable laws, regulatory requirements, and licensing conditions — including KYC identity verification, AML transaction monitoring, and responsible gaming tool administration — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to protect the security and integrity of the apkaka platform, prevent fraud, improve platform performance, and conduct internal analytics is based on apkaka's legitimate interests, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing of your personal data for direct marketing purposes, including promotional emails and SMS notifications, is carried out solely on the basis of your freely given, specific, and informed consent. You retain the right to withdraw this consent at any time with immediate effect.

apkaka does not sell, rent, or trade your personal data to unaffiliated third parties. Your personal data may be shared only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive the minimum data necessary to process your transactions. Each payment processor operates under its own privacy policy and applicable financial regulations.
• Identity verification partners: Specialist KYC and document verification providers who process your identity documents on apkaka's behalf under strict data processing agreements. These providers may not use your data for any purpose other than fulfilling the verification service for apkaka.
• Gaming software providers: Game studios and platform providers whose titles are available on apkaka may receive session-level technical data (such as game round identifiers and bet amounts) necessary to deliver the game service. These providers do not receive your identity or contact data.
• Fraud prevention and AML screening services: Third-party compliance and fraud screening vendors who assist apkaka in meeting its AML obligations under the international gaming licence framework. All such vendors are bound by contractual confidentiality and data protection obligations.
• Regulatory and law enforcement authorities: Where apkaka is required by law, court order, or a direction from a relevant licensing authority or financial intelligence unit to disclose player data, apkaka will comply with such requirements and will notify the affected player where legally permissible to do so.
• Group companies: Data may be shared within the apkaka group of companies for internal administrative purposes, including consolidated AML compliance and responsible gaming monitoring, subject to intra-group data processing agreements.

apkaka uses cookies, web beacons, pixel tags, and similar tracking technologies to operate the platform, maintain session continuity, and gather analytics data. The following categories of cookies are used on the apkaka platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, anti-fraud tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, language settings, display choices, and other personalisation options to improve your platform experience between sessions.
• Analytics cookies: Used to collect aggregated data about how players interact with the apkaka platform, including which pages are visited most frequently, session durations, and navigation paths. This data is used in anonymised form to improve the platform.
• Marketing cookies (consent-based): Used only where you have given explicit consent, to track the effectiveness of promotional campaigns and to personalise bonus and offer communications relevant to your gaming preferences on apkaka.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the apkaka platform. Instructions for managing cookies in the most common browsers are available from your browser provider's support documentation.

apkaka retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and licensing obligations. The following retention principles apply:

• Active account data: Personal data associated with an active apkaka account is retained for the lifetime of the account plus a minimum period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC and identity documents: CNIC scans and other identity documents submitted for verification are retained for a minimum of five (5) years from the date of submission, as required by applicable AML regulations under the international gaming licence framework.
• Transaction records: Deposit and withdrawal records, including PKR amounts, payment method identifiers, and timestamps, are retained for a minimum of five (5) years to comply with financial record-keeping obligations.
• Responsible gaming records: Records of self-exclusion elections, deposit limits, and problem gambling flags are retained for a minimum of five (5) years from the date of closure of any self-exclusion period, to prevent re-registration during an active exclusion and to support ongoing responsible gaming obligations.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for the period of the account relationship and for three (3) years thereafter, to evidence compliance with consent obligations.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, for quality assurance and dispute resolution purposes.

apkaka implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS encryption: All data in transit between your device and apkaka's servers is encrypted using Transport Layer Security (TLS) protocol, ensuring that your login credentials, financial data, and personal information cannot be intercepted during transmission.
• Encryption at rest: Sensitive data stored on apkaka's servers — including CNIC information, financial account identifiers, and password hashes — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. apkaka employees and contractors are granted access only to the data categories required for their specific role. All data access events are logged and periodically reviewed.
• Two-factor authentication: apkaka strongly recommends that all players enable SMS-based two-factor authentication (2FA) on their accounts. 2FA adds a material barrier against unauthorised account access even if login credentials are compromised.
• Penetration testing and security audits: apkaka conducts periodic security assessments of its platform infrastructure, including vulnerability scans and penetration tests, to identify and address security weaknesses proactively.
• Incident response: In the event of a data breach that is likely to result in risk to player rights and freedoms, apkaka will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

While apkaka takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying apkaka immediately if you suspect any unauthorised access to your account.

As a registered apkaka player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the apkaka Data Protection team using the details in Section 15:

• Right of access: You may request a copy of all personal data that apkaka holds about you, along with information about how it is processed. apkaka will provide this information within 30 days of your request.
• Right to rectification: If any personal data held by apkaka is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your contact number or email address) can be made directly through your account profile settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. Note that certain data may be retained where required by law, as described in Section 8.
• Right to restrict processing: You may request that apkaka restrict processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing pending apkaka's response to that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that apkaka provide your personal data to you in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling for responsible gaming or fraud detection purposes. apkaka will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent — in particular, the sending of marketing communications — you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The apkaka platform is strictly intended for adults aged 21 years and above. apkaka does not knowingly collect personal data from any individual under the age of 21. The platform employs mandatory age verification as part of the account registration and KYC process, requiring all players to confirm their date of birth and to submit valid CNIC documentation prior to any withdrawal being processed.

If apkaka becomes aware that it has inadvertently collected personal data from an individual who is under 21 years of age, it will take immediate steps to suspend the relevant account, delete the personal data concerned (subject to any mandatory AML retention obligations), and refund any deposits made, subject to verification. Any winnings accrued by an underage account will be forfeited.

apkaka operates as an international online gaming platform and, as a result, your personal data may be transferred to and processed in countries outside Pakistan where apkaka's servers, group companies, or third-party processors are located. Such countries may have data protection laws that differ from those in Pakistan.

Where personal data is transferred internationally, apkaka takes appropriate safeguards to ensure that your data continues to be protected to a standard consistent with this Privacy Policy. Safeguards used by apkaka for international transfers include standard contractual clauses incorporated into data processing agreements with receiving parties, and reliance on adequacy decisions where applicable.

By registering an apkaka account, you acknowledge and consent to the transfer of your personal data to the international locations necessary for the operation of the apkaka platform, subject to the safeguards described in this section.

The apkaka platform may contain links to third-party websites or resources, such as responsible gaming organisations, payment provider portals, or gaming licence authority pages. apkaka is not responsible for the privacy practices, content, or data security measures of any third-party website. This Privacy Policy applies solely to data collected and processed by apkaka within the apkaka platform environment.

apkaka strongly recommends that you review the privacy policy of any third-party website you visit via a link from the apkaka platform before providing any personal data to that third party.

apkaka may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or the services offered on the platform. When material changes are made — such as the introduction of a new category of data collection, a new sharing arrangement, or a change to retention periods — apkaka will provide advance notice to registered players via email to their registered address and/or via a prominent in-platform notification.

The updated Policy will be published on this page with a revised effective date. Your continued use of the apkaka platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with an updated Policy, you must cease using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to apkaka's data processing practices, please contact the apkaka Data Protection team using the following details:

• Email: [email protected]
• Response time: Within 5 business days for acknowledgement; 30 days for substantive response
• Live chat: Available 24/7 inside your apkaka account dashboard for general queries

When submitting a data subject rights request, please include your registered email address, your apkaka Player ID (visible in your account dashboard), and a clear description of the right you wish to exercise or the query you have. This will allow the Data Protection team to locate your records efficiently and respond in the shortest possible time.

apkaka is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with apkaka's response to a privacy concern, you may refer the matter to the relevant supervisory authority or to the dispute resolution mechanism specified under your applicable gaming licence terms.