DarazPlay Privacy Policy – How We Protect Your Data in Pakistan

DarazPlay is an online gaming platform operated at darazplay.wine, serving players across Pakistan. This Privacy Policy ("Policy") explains how DarazPlay collects, processes, stores and protects the personal information of every person who visits the website or holds a registered account — referred to throughout this document as "you," "the player" or "the account holder."

DarazPlay takes its privacy obligations seriously. We are committed to handling your personal data with care, transparency and respect. This Policy is written in plain English so that any Pakistani player — regardless of their technical background — can understand exactly how their information is being used.

By creating a DarazPlay account or using the platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms and Conditions and Responsible Gaming policy, which together form the complete set of rules governing your use of DarazPlay.

DarazPlay collects personal information in two main ways: information you provide directly when using the platform, and information collected automatically as you interact with the website or mobile interface.

2.1 Information You Provide Directly

• Registration details: Your full name (as it appears on your CNIC), Pakistani mobile number, date of birth and the password you choose for your account.
• KYC documents: Where verification is required, a copy of your CNIC (front and back), a recent selfie photograph, and — in some cases — proof of address or source of funds documentation.
• Payment information: Your Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account details, bank account number for IBFT transfers, or the last four digits of your Visa/Mastercard debit card. DarazPlay does not store full card numbers; these are handled by our certified payment processor.
• Support communications: Any messages, emails or live chat transcripts you exchange with the DarazPlay support team.
• Responsible gaming information: Any limits, cool-off periods or self-exclusion requests you submit through the responsible gaming tools.

2.2 Information Collected Automatically

• Device information: Device type (mobile, tablet, desktop), operating system version, browser type and version, screen resolution and unique device identifiers.
• Usage data: Pages viewed, games played, session duration, betting and gaming activity, deposit and withdrawal history, bonus claims, and navigation paths through the platform.
• Network data: IP address, approximate geographic location derived from IP address, and internet service provider.
• Cookie data: Information stored via cookies and similar technologies on your device. See Section 7 for full details.

DarazPlay uses your personal information only for specific, legitimate purposes related to operating the platform and serving Pakistani players. We do not use your data for any purpose that conflicts with what is stated here, and we never sell your personal information to any third party.

DarazPlay does not use automated decision-making — meaning no algorithm alone makes a significant decision about your account without human review. If your account is flagged by an automated system (for example, for unusual activity), a member of the DarazPlay team will review the case before any action is taken.

Because DarazPlay handles real PKR transactions, we have specific obligations around payment data and identity verification. This section explains exactly how that works.

4.1 Payment Processing

All PKR transactions on DarazPlay — deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, and all withdrawals — are processed through certified payment gateways. DarazPlay does not store your full card numbers, wallet PINs, or bank internet banking credentials. Payment details are transmitted directly to the payment processor over encrypted connections and are never visible to DarazPlay staff in raw form.

DarazPlay records the following transaction data for each deposit and withdrawal: the transaction amount in PKR, the payment method used, the transaction reference number, the date and time, and the outcome (success or failure). This data is retained as part of your account record for the duration required by our data retention policy (see Section 8).

4.2 KYC Verification Documents

When DarazPlay requests KYC documents — typically before processing withdrawals above a certain threshold or when unusual activity is detected — the following applies:

• Documents are submitted through an encrypted upload channel and stored on secure servers with restricted access.
• KYC documents are reviewed only by authorised DarazPlay compliance staff. They are not shared with any third party except as required by law (see Section 5).
• Document images are never used for any purpose beyond identity verification and fraud prevention.
• Players who do not wish to complete KYC may request account closure at any time, and any balance will be returned subject to standard verification procedures.

DarazPlay does not sell, rent or trade your personal information to any third party for marketing or commercial purposes. Full stop. Your data is yours, and DarazPlay treats it that way.

DarazPlay does share limited, necessary data with trusted service providers who help operate the platform. Every such provider is bound by strict data processing agreements and is not permitted to use your data for any purpose beyond the specific service they provide to DarazPlay.

• Payment processors: To process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and card networks. Only the minimum data needed for each transaction is shared.
• KYC verification providers: Where automated identity verification tools are used to check documents, the relevant document image and extracted data are shared with the provider solely for the purpose of that verification check.
• Game software providers: The third-party game studios whose titles appear on DarazPlay may receive your username and game session data to enable gameplay, detect cheating, and validate results. They do not receive your financial or identity information.
• Platform analytics providers: Anonymised or aggregated usage data may be shared with analytics tools to help DarazPlay understand how the platform is used and improve it. This data cannot be used to identify individual players.
• Legal and regulatory authorities: DarazPlay will disclose personal data to law enforcement, regulatory bodies or courts where required to do so by applicable law, a court order, or where DarazPlay has a good-faith belief that disclosure is necessary to prevent fraud, protect our rights, or ensure player safety. Where possible, DarazPlay will notify the affected player before disclosing their data to authorities.

DarazPlay takes the security of your personal data seriously and implements technical and organisational measures designed to protect it from unauthorised access, loss, alteration or disclosure. Here is a straightforward account of the security measures in place:

• Encryption in transit: All data transmitted between your device and DarazPlay's servers is encrypted using TLS (Transport Layer Security) 1.2 or higher. The padlock in your browser's address bar confirms this connection is active.
• Encryption at rest: Personal data and financial records stored on DarazPlay's servers are encrypted using AES-256, the same standard used by major international banks.
• Access controls: Access to systems holding personal data is restricted to authorised DarazPlay staff only, using role-based permissions. Staff access is logged and regularly audited.
• Password security: Account passwords are stored as salted cryptographic hashes — meaning DarazPlay cannot read your password, only verify it. Use a strong, unique password for your DarazPlay account.
• Two-factor authentication: DarazPlay supports OTP (one-time password) verification via your registered Pakistani mobile number as an additional security layer on login and withdrawal.
• Fraud monitoring: Automated systems monitor account activity for signs of unauthorised access or unusual transaction patterns. Suspicious activity triggers an alert for human review before any funds are moved.
• Third-party audits: DarazPlay's security practices are periodically reviewed by independent security professionals.

While DarazPlay takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong password, never share your login details with anyone, and contact DarazPlay support immediately if you believe your account has been compromised.

DarazPlay uses cookies — small text files stored on your device — and similar technologies to make the platform work properly, understand how it is being used, and improve the experience for Pakistani players.

Types of Cookies We Use

• Essential cookies: These are necessary for the platform to function. They maintain your login session, remember your game preferences, and enable secure payment flows. You cannot opt out of these without disabling the platform entirely.
• Analytics cookies: These help DarazPlay understand how players navigate the platform — which games are most popular, where players encounter issues, and how performance can be improved. The data collected is aggregated and anonymised.
• Preference cookies: These remember your settings, such as your preferred language, notification preferences, and responsible gaming limits you have set.
• Marketing cookies: If you have consented to receiving promotional communications, these cookies help DarazPlay present relevant offers. You can opt out at any time through your account settings.

Managing Cookies

You can control cookie settings through your browser's privacy settings. Most modern browsers allow you to view, manage and delete cookies. Note that disabling essential cookies will affect the functionality of DarazPlay — some features may not work correctly without them.

To opt out of marketing communications (including those informed by cookie data), log in to your DarazPlay account and update your notification preferences under account settings. You can also contact the support team to opt out.

DarazPlay retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and in compliance with any legal obligations that require us to keep records for specific periods.

• Active accounts: Your personal data is retained for as long as your DarazPlay account remains active. During this time it is used to provide the gaming service, process transactions, handle support requests, and comply with regulatory requirements.
• Closed accounts: Following account closure, DarazPlay retains your account record, transaction history and KYC documentation for a period of five years. This retention is required for financial compliance, fraud investigation and anti-money laundering purposes.
• Support communications: Chat logs and email exchanges with the support team are retained for up to two years from the date of the conversation.
• Analytics data: Anonymised usage analytics data is retained indefinitely, as it contains no personally identifiable information.
• Self-exclusion records: If you have used DarazPlay's self-exclusion tool, a record of your exclusion is retained for the full exclusion period plus five years, to prevent inadvertent re-registration.

After the relevant retention period expires, your personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

As a DarazPlay player, you have a number of rights over your personal data. DarazPlay is committed to making it straightforward for you to exercise these rights. All requests can be submitted through the support team at support@darazplay.wine.

To exercise any of these rights, contact DarazPlay support at support@darazplay.wine. We will verify your identity before processing any request and aim to respond within 30 days. Complex requests may take up to 60 days; we will inform you if this is the case.

DarazPlay is strictly for adults aged 18 and over. We do not knowingly collect, process or store personal data from individuals under the age of 18. If DarazPlay becomes aware that a minor has created an account or submitted personal data, that account will be immediately suspended, all associated data will be deleted as soon as legally permissible, and the matter will be referred to our responsible gaming team.

If you are a parent or guardian and believe that a minor under your care has accessed DarazPlay, please contact our support team immediately at support@darazplay.wine. We will investigate and take immediate action. DarazPlay also strongly encourages parents and guardians to use device-level parental controls to prevent minors from accessing online gaming platforms.

DarazPlay may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable law, or improvements to our data protection practices. When material changes are made, we will notify active players by:

• Displaying a prominent notification banner on the DarazPlay platform for at least 14 days following the update.
• Sending a notification to your registered Pakistani mobile number where the changes are significant.
• Updating the "Last updated" date at the top of this page.

Continued use of DarazPlay after an updated Privacy Policy has been published and notified constitutes your acceptance of the revised Policy. If you do not agree with any change, you have the right to close your account and request deletion of your data (subject to mandatory retention obligations).

The most current version of this Privacy Policy is always available at darazplay.wine/privacy-policy. We recommend bookmarking this page and reviewing it periodically, particularly after DarazPlay sends a change notification.