Privacy Policy – svipslot Pakistan Data Protection Guide

1Who We Are and Scope of This Policy

This Privacy Policy applies to the svipslot platform, accessible at svipslot.im, including all associated pages, games, mobile interfaces, and communication channels operated under the svipslot brand. References to "svipslot", "we", "us" or "our" in this policy refer to the svipslot platform and its operating entity.

This policy governs the collection, use, storage, and protection of personal data provided by players — referred to as "you" or "your" — when registering, using, or communicating with the svipslot platform. It applies to players based in Pakistan and other jurisdictions where svipslot is accessible.

By registering an account on svipslot, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, please do not register an account or use the svipslot platform.

2Personal Data We Collect

svipslot collects personal data through direct input (information you provide us), automated means (information generated by your use of the platform), and identity verification processes. The categories of data we collect are set out below.

2.1 Registration Data

When you create a svipslot account you provide: your full legal name, date of birth, Pakistani mobile number, email address, and a chosen password. This information is required to create and maintain your account.

2.2 Identity Verification (KYC) Data

Before your first withdrawal, svipslot is required to verify your identity. For this purpose we may collect: a copy of your National Identity Card (CNIC), a selfie or portrait photograph, and proof of address where required by applicable regulations. KYC documents are stored securely and accessed only by our compliance team.

2.3 Financial and Payment Data

When you deposit or withdraw, svipslot records the payment method type (e.g. Easypaisa, JazzCash, bank IBFT), transaction amounts, dates, and reference numbers. We do not store full card numbers, CVV codes or mobile wallet PINs. Card payments are tokenised through our PCI-DSS certified payment processor.

2.4 Gaming Activity Data

svipslot maintains a record of your gameplay activity, including games played, wagers placed, game outcomes, session duration, bonuses claimed and wagering progress. This data is used to manage your account, resolve disputes, detect fraud, and improve our platform.

2.5 Communications Data

When you contact svipslot through live chat, email or other support channels, we retain a record of those communications. This includes queries, complaints, feedback and the responses provided by our team. These records help us resolve follow-up issues and improve our support quality.

2.6 Technical and Device Data

When you access the svipslot platform, our systems automatically collect: your IP address, browser type and version, device type, operating system, referring URLs, pages visited, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance analysis.

3How We Use Your Personal Data

svipslot uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your player account, processing logins, updating your profile and managing account security.
• Identity verification: Confirming your age and identity in compliance with responsible gaming and anti-money laundering obligations.
• Payment processing: Executing deposits and withdrawals in PKR via your chosen payment method and maintaining accurate financial records.
• Gaming operations: Delivering games, recording outcomes, managing bonus eligibility and wagering progress, and settling winnings correctly.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activities.
• Customer support: Responding to your queries, resolving disputes and processing requests including responsible gaming tools.
• Platform improvement: Analysing aggregate usage patterns to improve game selection, payment flows, and the overall player experience on svipslot.
• Legal compliance: Meeting our obligations under applicable laws including anti-money laundering regulations and gaming licence conditions.
• Service communications: Sending transactional notifications such as deposit confirmations, withdrawal status updates, and account verification messages to your registered mobile number or email.

4Legal Basis for Processing

svipslot processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and svipslot — specifically, operating your player account, processing your bets and settling winnings, and managing deposits and withdrawals.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and our gaming licence conditions. KYC verification is the primary example of this category.
• Legitimate interests: Processing carried out to pursue svipslot's legitimate business interests in fraud prevention, platform security, and service improvement, where those interests are not outweighed by your data protection rights. Technical and device data collection is the primary example.
• Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw consent for marketing at any time without affecting any other processing.

5Data Sharing and Third Parties

svipslot does not sell, rent or trade personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Payment Processors

To process deposits and withdrawals, svipslot shares relevant transaction data with payment service providers including Easypaisa, JazzCash, NayaPay, SadaPay and our card processing partner. Each provider processes your data under their own privacy policy and is contractually required by svipslot to maintain appropriate data security standards.

5.2 Identity Verification Providers

svipslot uses a third-party KYC verification service to assist with document verification and age confirmation. This provider receives only the documents and data necessary to complete verification and is contractually prohibited from using that data for any other purpose.

5.3 Game Software Providers

Live casino games and some RNG games on svipslot are powered by third-party game studios. These providers may receive a session identifier and bet data to deliver and settle the game. They do not receive your full personal profile or payment details.

5.4 Legal and Regulatory Disclosures

svipslot may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, a lawful court order, or our gaming licence conditions. We will not disclose more data than is required to comply with the specific legal obligation.

5.5 Business Transfers

In the event of a merger, acquisition or sale of the svipslot platform, player data may be transferred to the acquiring entity as part of the transaction. Players would be notified of any such change and the privacy protections in this policy would continue to apply to their data.

6Cookies and Tracking Technologies

svipslot uses cookies and similar tracking technologies to operate the platform, remember your preferences, keep your session active, and analyse how the site is used. The cookies we deploy fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game display options and notification preferences. These are set only when you interact with a preference control on the svipslot platform.
• Analytics Cookies: Used to collect aggregate data about how players use the platform — which pages are visited most, where users spend time, and where they encounter difficulties. This data is anonymised and used solely to improve the svipslot experience. We do not use third-party advertising cookies or tracking pixels.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the svipslot platform from functioning correctly. Blocking analytics cookies will not affect your ability to play or make transactions.

7Data Retention

svipslot retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for as long as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a period of at least 5 years after account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Financial records including deposit and withdrawal history are retained for at least 5 years from the transaction date.
• Support communications: Records of support interactions are retained for 2 years from the date of the interaction.
• Technical logs: Server access logs and security event logs are retained for up to 12 months.

Where retention is required beyond these periods by a specific legal obligation — for example, an ongoing regulatory investigation — data will be retained for the duration of that obligation and deleted as soon as it expires.

8Security Measures

svipslot applies a layered approach to data security. The technical and organisational measures we maintain include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and svipslot servers is encrypted. The padlock icon in your browser confirms this is active during every session.
• Data encryption at rest: Sensitive personal data and KYC documents stored on our servers are encrypted using industry-standard algorithms.
• Access controls: Personnel access to personal data is granted on a need-to-know basis only. All access is logged. Access rights are reviewed regularly and revoked immediately upon change of role or departure from the organisation.
• Two-factor authentication: Available for all svipslot player accounts and mandatory for administrative access to internal systems.
• PCI-DSS compliance: Our card payment processing is handled through a PCI-DSS Level 1 certified payment processor. We do not store raw card data on svipslot infrastructure.
• Intrusion detection and monitoring: Our security team monitors platform activity 24/7 for unusual patterns that may indicate a breach attempt or fraudulent activity.
• Penetration testing: We conduct regular security testing of the svipslot platform to identify and remediate vulnerabilities before they can be exploited.

9Your Data Rights

As a svipslot player, you have the following rights in relation to your personal data. You may exercise any of these rights at any time by contacting our support team.