Super Pak Privacy Policy – How We Protect Your Data

This Privacy Policy explains how Super Pak ("we", "us", "the Platform") collects, uses, stores and protects the personal data of every player who registers, visits or interacts with the Super Pak platform at superpak.onl. It applies to all services available under the Super Pak brand, including casino games, slots, live casino, sports betting, bingo, crash games and the Super Pak mobile app.

We understand that privacy is a serious concern for players in Pakistan. When you entrust us with your personal details — your name, CNIC, mobile number, payment information — you have every right to know exactly what happens to that data. This policy is written in plain, straightforward English so that every Super Pak player can understand it without needing a legal background.

By creating a Super Pak account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree, please do not register or continue using the platform. You may contact our support team at any time if you have questions about how your data is handled.

Super Pak collects personal data through several channels: directly from you when you register or update your account, automatically when you use the platform, and from third-party verification providers when identity checks are performed. Below is a breakdown of the categories of data we collect.

We do not collect data that is not relevant to the operation of the platform. We do not collect information about your religion, political views, medical history or any other sensitive personal category unless it is directly relevant to a responsible gaming assessment that you have voluntarily initiated.

The data Super Pak collects is used for specific, legitimate purposes. We do not use your data for anything that falls outside the purposes listed below. If we ever intend to use your data for a new purpose, we will update this Privacy Policy and notify you accordingly.

• Account management: To create, maintain and secure your Super Pak account, verify your identity and process login requests.
• Transaction processing: To handle PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and card payments, and to maintain a correct transaction history for your account.
• KYC and fraud prevention: To verify that you are who you say you are, to prevent underage gambling, to detect and block fraudulent activity, and to carry out anti-money laundering checks as required.
• Platform personalisation: To remember your game preferences, language settings and responsible gaming limits so your experience on Super Pak is consistent across sessions and devices.
• Customer support: To respond to your queries, investigate complaints and resolve disputes. Support chat transcripts are retained so that we can review the history of any issue if it escalates.
• Responsible gaming: To monitor betting and gaming patterns for signs of problem gambling, to apply limits or cooling-off periods you have set, and to act appropriately if we identify a player who may be at risk.
• Platform improvement: To analyse usage patterns — which games are most played, where players encounter problems, how navigation flows are used — so we can continuously improve the Super Pak experience.
• Marketing communications: To send you information about promotions, new games, PSL season offers and other Super Pak news — but only if you have opted in to receive marketing. You can opt out at any time via your account settings or by contacting support.
• Legal compliance: To comply with any obligations that apply to us, to respond to lawful requests from authorities and to protect our legal rights where necessary.

Super Pak does not sell, rent or trade your personal data. We share your data only in the limited circumstances described below, and in each case we apply contractual safeguards to ensure your data is handled responsibly by the receiving party.

• Payment processors: JazzCash, Easypaisa, Raast and banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers have their own privacy policies which apply to data they process independently of Super Pak.
• Identity verification providers: Third-party KYC services receive the identity documents you submit — CNIC, selfie — for the sole purpose of verifying your identity. They are contractually prohibited from using this data for any other purpose.
• Game software studios: Providers such as Pragmatic Play, NetEnt and Hacksaw Gaming receive limited technical data (session tokens, game round IDs) necessary to deliver their games. They do not receive your name, CNIC or payment details.
• Fraud prevention and security services: We may share device fingerprint data, IP addresses and transaction patterns with fraud detection services to protect the platform and all players.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, courts or regulatory bodies when legally required to do so or when we believe disclosure is necessary to protect the rights, safety or property of Super Pak or its players.
• Business transfers: In the event of a merger, acquisition or sale of assets, player data may be transferred to the new entity. We will notify affected players before any such transfer takes effect.

Because Super Pak handles real-money transactions in PKR, identity verification is a necessary part of the platform. KYC (Know Your Customer) checks allow us to confirm your age, verify your identity, prevent fraud and comply with anti-money laundering obligations. Here is what you need to know about how your KYC data is handled:

• KYC documents — including your CNIC scan or photo, proof of address and payment method confirmation — are submitted through an encrypted upload channel. They are stored on secure servers with restricted access.
• KYC documents are reviewed by trained personnel or automated verification systems. Documents are not stored any longer than necessary for verification and ongoing compliance purposes.
• Your CNIC number is stored in encrypted form. It is not displayed in plain text within the Super Pak platform interface after verification is complete.
• Payment method data — such as your JazzCash wallet reference or bank account number — is stored only to the extent needed to process the reverse withdrawal (returning funds to the same source) and to detect potential fraud.
• Super Pak does not store full card numbers. Card payment data is tokenised by the payment processor before it reaches our systems.
• If your KYC verification fails or additional documents are requested, any documents already submitted are retained only for the duration of the verification process. Failed verifications do not result in permanent data storage beyond what is required for fraud prevention records.

Super Pak uses cookies and similar tracking technologies (such as local storage and session tokens) to provide core platform functionality and to improve the player experience. Below is a summary of the cookie types we use:

Super Pak does not use advertising or retargeting cookies. We do not allow third-party advertising networks to place cookies on superpak.onl. You can manage functional and analytics cookies through your browser settings at any time. Disabling essential or security cookies may prevent the platform from working correctly.

Super Pak retains personal data only for as long as it is necessary for the purposes described in this policy. The retention periods below reflect both operational necessity and our compliance obligations. When data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked back to you.

• Active account data: Retained for the full duration that your account is open and active on the platform.
• Transaction records: Financial transaction records — deposits, withdrawals, bet history — are retained for a minimum of five years from the date of the transaction to satisfy financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years following account closure to comply with anti-money laundering requirements.
• Support communications: Live chat transcripts and support emails are retained for two years from the date of the communication, or longer if they relate to an open dispute or investigation.
• Self-excluded accounts: Records of self-exclusion are retained for the full exclusion period plus an additional period to prevent re-registration during an active exclusion.
• Dormant accounts: If your account has been inactive for 12 months or more and you request closure, your data will be retained for the legally required minimum period before deletion.
• Marketing preferences: Records of your marketing opt-in or opt-out status are retained as long as necessary to honour your preferences.

When we delete data, we do so securely. Personal data is not simply archived or moved to cold storage indefinitely — it is removed from our active systems and permanently deleted in line with our internal data management procedures.

Protecting your personal data is a core responsibility that Super Pak takes seriously. We have implemented a range of technical and organisational measures to keep your data secure. While no system can guarantee absolute security, we continuously review and update our security practices to address emerging threats.

• TLS encryption: All data transmitted between your browser or app and our servers is encrypted using TLS (Transport Layer Security). This protects your login credentials, payment data and personal details from interception in transit.
• Encrypted data storage: Sensitive data at rest — including identity documents, CNIC details and payment references — is stored in encrypted form. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data within Super Pak is strictly limited to personnel who genuinely need it to perform their role. All staff with data access are subject to confidentiality obligations.
• Two-factor authentication: We encourage all players to enable two-factor authentication (2FA) on their Super Pak accounts. 2FA significantly reduces the risk of unauthorised access even if your password is compromised.
• Intrusion detection: Our systems are monitored around the clock for unusual activity, unauthorised access attempts and potential security incidents.
• Penetration testing: We conduct periodic security assessments to identify and address vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to affected players, we will notify impacted users promptly and take immediate steps to contain and remediate the breach.

As a Super Pak player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or by email at [email protected]. We will respond within a reasonable timeframe, typically within 30 days of receiving a valid request.

• Right of access: You can request a copy of the personal data we hold about you, including your account details, transaction history and any KYC documents on file.
• Right to correction: If any personal data we hold about you is inaccurate or out of date, you can ask us to correct it. For account details, many corrections can be made directly in your account settings.
• Right to deletion: You can request that we delete your personal data. We will fulfil this request where there is no overriding legal obligation to retain the data. Note that financial and KYC records must be retained for the minimum periods described in Section 7.
• Right to restrict processing: In certain circumstances, you can ask us to stop processing your data while a dispute or correction request is being resolved, without requiring full deletion.
• Right to object to marketing: You can opt out of marketing communications at any time. Simply update your preferences in your account settings or tell our support team and we will remove you from all marketing lists promptly.
• Right to data portability: You can request a copy of the data you have provided to Super Pak in a structured, machine-readable format, so that you can transfer it to another service if you wish.

Please note that exercising some of these rights — particularly the right to deletion — may result in your Super Pak account being closed, as we may not be able to provide platform services without the relevant data.

Super Pak is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes an age declaration, and KYC verification is used to confirm the age of players where there is any doubt.

If we discover — through KYC verification, a report from a third party or any other means — that an account has been created by or on behalf of a person under 18, we will take the following steps immediately:

• The account will be suspended and then permanently closed.
• Any funds in the account will be returned to the source payment method after a review to confirm no terms violations have occurred.
• All personal data associated with the underage account will be deleted in line with our data deletion procedures, except where retention is required for fraud prevention or legal compliance.
• The matter will be reviewed by our compliance team to determine whether any further action is appropriate.

If you are a parent or guardian and you believe your child has created a Super Pak account, please contact us immediately via live chat or at [email protected]. We will investigate and act swiftly.

Super Pak may update this Privacy Policy from time to time to reflect changes in the platform, our data practices or applicable legal requirements. When we make changes, the "Last Updated" date at the top of this page will be revised to show the date the new version took effect.

For significant changes — for example, a new category of data being collected, a new third-party processor being added, or a material change to how we use your data — we will notify registered players via email or through an in-platform notification before the changes come into effect. This gives you the opportunity to review the updated policy before it applies to you.

Your continued use of Super Pak after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.

We recommend bookmarking this page and checking back periodically, especially after any extended absence from the platform. Archived versions of previous policies are available on request from our support team.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Super Pak has handled your personal information, please do not hesitate to get in touch. We take all privacy enquiries seriously and aim to respond promptly.

• Live chat is the fastest way to reach us and is available around the clock directly from within your Super Pak account.
• For formal data rights requests or privacy complaints, email us at [email protected] with the subject line "Privacy Request" so it is routed to the right team straight away.
• Please include your registered username and a clear description of your request or concern so we can assist you as efficiently as possible.
• We aim to acknowledge privacy-related contacts within 24 hours and to resolve them fully within 30 days, or sooner for straightforward requests.