Planbet Privacy Policy — How We Handle Your Data

Planbet (referred to as "Planbet", "we", "us" or "our" throughout this Policy) operates the online betting and gaming platform available at planbet.ws. Planbet is the data controller for all personal information collected through the platform. This means Planbet determines the purposes and means of processing your personal data.

This Privacy Policy applies to all players who register an account, visit the Planbet website or use any Planbet service — whether on desktop or mobile. It covers all personal data collected from Pakistani players and anyone else who interacts with Planbet through any channel including the website, customer support and promotional communications.

Planbet collects only the personal data that is necessary to operate your account, process your transactions, comply with legal obligations and improve your experience on the platform. Below is a clear breakdown of every category of data Planbet may collect.

Planbet does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health information unless specifically required for a responsible gaming assessment and you have provided it voluntarily. When we do not need data, we do not collect it — that's the straightforward policy at Planbet.

You provide most of this data directly — during registration, KYC verification, payment processing and customer support interactions. Some technical data is collected automatically when you use the Planbet platform, as described in the Cookies section below.

Every piece of data Planbet collects is used for a specific, documented purpose. We do not use your data in ways you haven't been told about. The main purposes for which Planbet processes your personal data are:

• Account management: Creating and maintaining your Planbet account, verifying your identity, processing your login sessions and managing account security.
• Processing transactions: Handling deposits and withdrawals in PKR through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments. Planbet needs your financial data to process these transactions accurately and securely.
• Providing betting and gaming services: Recording your bets, settling markets, calculating winnings, applying bonuses and making all Planbet games and sports markets available to you.
• Customer support: Responding to your queries, resolving complaints and providing assistance with account issues. Planbet keeps records of support interactions so we can provide consistent, informed help.
• Legal and regulatory compliance: Anti-money laundering (AML) checks, KYC verification, age verification, fraud prevention and compliance with any other applicable regulatory requirement.
• Responsible gaming: Monitoring account activity for patterns that may indicate problem gambling, applying player-requested limits and exclusions, and providing responsible gaming tools effectively.
• Platform improvement: Analysing usage patterns — in anonymised and aggregated form — to improve the Planbet platform, fix technical issues and develop new features that Pakistani players will find useful.
• Marketing communications: Sending promotions, bonus offers and platform news to players who have opted in. You can unsubscribe from marketing communications at any time — opting out does not affect your ability to use Planbet.

Planbet does not use automated decision-making that produces legal or similarly significant effects based solely on automated processing of your data, except where this is a standard part of fraud prevention systems operating under human oversight.

Planbet processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfil the agreement between you and Planbet — operating your account, processing payments, settling bets. Without this processing, Planbet cannot provide its service to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML regulations, age verification requirements and KYC obligations. Planbet has no discretion to avoid these obligations.
• Legitimate interest: Processing carried out for Planbet's legitimate business interests where these are not overridden by your own rights — for example, fraud detection, platform security monitoring and anonymised analytics for product improvement.
• Consent: Processing based on your specific, informed consent — primarily for marketing communications and optional cookies. You may withdraw consent at any time without affecting the legality of processing already carried out.

Planbet does not sell your personal data to any third party. Full stop. We do not trade your information or pass it to advertisers, data brokers or any organisation that would use it for commercial purposes unrelated to providing you with Planbet's services.

There are, however, categories of third parties with whom Planbet shares specific data where it is necessary to operate the platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and Visa/Mastercard processors receive the transaction data needed to process your deposits and withdrawals. These processors are contractually bound by data protection obligations.
• Identity verification providers: Third-party KYC and AML service providers who assist Planbet in verifying player identities and screening against sanctions and politically exposed persons lists, as required by regulation.
• Technology providers: Cloud hosting, platform infrastructure and cybersecurity service providers who process data on Planbet's behalf under strict data processing agreements. They act only on Planbet's instructions.
• Game providers: Where you play games from third-party providers available through Planbet, those providers receive the game-session data necessary to operate the game. They do not receive your full account or payment details.
• Regulatory and legal authorities: Government bodies, law enforcement or regulatory authorities where Planbet is legally required to disclose information — for example, in response to a court order or an AML investigation.

Payment data on Planbet is handled with the highest level of security. When you make a deposit via Easypaisa, JazzCash or any other supported method, the transaction is processed through encrypted channels. Planbet stores transaction references and amounts but does not store full card numbers or wallet PINs — these remain with your payment provider.

KYC (Know Your Customer) verification is required before your first withdrawal on Planbet and may be required at other points as part of ongoing compliance obligations. When you submit KYC documents — typically a copy of your CNIC and a selfie — these are:

• Transmitted over 256-bit SSL encrypted connections.
• Reviewed by authorised Planbet compliance staff or our approved KYC partner.
• Stored in an access-controlled, encrypted document management system.
• Retained for the period required by applicable AML regulations.
• Never shared with any party other than our contracted KYC verification provider and regulatory authorities when legally required.

If you have concerns about the security of your KYC documents submitted to Planbet, contact support and we will provide full information on where your documents are stored and who has access to them.

Planbet uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. Planbet uses cookies to make the platform work, to remember your preferences and to understand how players use the site so we can improve it.

Planbet does not use advertising cookies or share cookie data with advertising networks. You can control non-essential cookies through the cookie preference centre on the Planbet website. Disabling analytics or functional cookies will not prevent you from using Planbet — only essential and security cookies are strictly necessary for the platform to function.

Most mobile browsers allow you to manage cookie settings in the browser's privacy or site settings menu. Clearing cookies will log you out of your Planbet session and reset your preference settings.

Planbet retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. In practice this means:

• Active account data: Retained for the full duration of your Planbet account being active, plus an additional period after closure as required by AML and regulatory obligations — typically five years from the date of last transaction.
• KYC documents: Retained for a minimum of five years from account closure in compliance with anti-money laundering regulations. Planbet does not retain KYC documents beyond what is legally required.
• Transaction records: Retained for a minimum of five years from the date of each transaction, as required by financial regulations applicable to payment processing and gaming operations.
• Customer support communications: Retained for three years from the date of the last interaction, to allow for complaint escalation and ongoing account management.
• Marketing consent records: Retained until you withdraw consent, plus one year thereafter as evidence of your consent decision.
• Analytics data: Anonymised and aggregated — not linked to individual players — and may be retained indefinitely as it contains no personal information once anonymised.

When data reaches the end of its retention period on Planbet, it is securely deleted or permanently anonymised. We do not retain data "just in case" — if there is no lawful reason to keep it, we delete it.

Data security is not an afterthought at Planbet — it is built into every layer of the platform. Here is what Planbet does technically and organisationally to protect your personal information:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the Planbet platform is encrypted using industry-standard 256-bit SSL/TLS protocols. This includes your login credentials, payment data and KYC documents.
• Encrypted data storage: Personal data and KYC documents stored in Planbet's systems are encrypted at rest. Even if storage infrastructure were compromised, the data would be unreadable without the encryption keys.
• Access controls: Access to personal data within Planbet is limited to staff who need it for their specific role. Access is controlled by role-based permissions and requires multi-factor authentication for privileged accounts.
• Intrusion detection: Planbet's infrastructure is monitored continuously for suspicious access patterns, unusual data movements and attempted breaches. Automated alerts are triggered by anomalous activity.
• Regular security assessments: Planbet conducts regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited.
• Staff training: All Planbet staff with access to personal data receive regular training on data protection obligations and secure data handling practices.

In the unlikely event of a data breach that poses a risk to your rights or freedoms, Planbet will notify affected players promptly and take all necessary steps to contain the breach and prevent recurrence. If you suspect your Planbet account has been compromised, contact support immediately — do not wait.

As a Planbet player, you have meaningful rights over your personal data. These rights are set out below. To exercise any of them, contact Planbet's Data Protection team at support@planbet.ws. We will respond within 30 days of receiving your request — and usually much sooner.

Planbet's age verification process is designed to prevent minors from accessing the platform. During registration and KYC, we verify that players are at least 18 years old using government-issued identification. If a parent or guardian believes their child has created a Planbet account, they should contact us immediately at support@planbet.ws so we can take immediate action.

Planbet reviews this Privacy Policy regularly and may update it to reflect changes in our data practices, applicable regulations or operational requirements. When we make material changes, we will notify registered players via the email address on their Planbet account and post a clear notice on the platform.

Minor or clarificatory changes may be made without a formal notification — the "last updated" date at the top of this Policy will always reflect when it was last changed. We encourage you to review this Policy periodically. If you continue using Planbet after an updated Policy is published, you are accepting the revised terms as they relate to new data collected from that point.

If you disagree with any change to this Privacy Policy and do not wish to continue using Planbet under the updated terms, you may close your account by contacting support. Planbet will process any outstanding balance in your account as set out in the Terms and Conditions.