92koko Privacy Policy

This Privacy Policy ("Policy") is published by 92koko ("we", "us", "our", "92koko") and applies to all personal data processed in connection with your use of the 92koko platform at 92koko.net, including its mobile applications, customer support channels, and any related services (collectively, the "Platform").

By registering an account, making a deposit, or otherwise using any 92koko service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

This Policy should be read alongside the 92koko Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the Platform.

92koko collects the following categories of personal data from users of the Platform:

Identity Data: Full legal name, date of birth, gender, CNIC number, and copies of government-issued identification documents submitted for KYC verification.

Contact Data: Pakistani mobile number (required for OTP and account communications), email address, and mailing address where provided for address verification purposes.

Financial Data: Payment method details including JazzCash account numbers, Easypaisa mobile wallet numbers, bank account details (HBL, UBL, Meezan Bank, Bank Alfalah), card details (Visa/Mastercard — tokenised; full card numbers are never stored by 92koko), and USDT TRC20 wallet addresses. Deposit and withdrawal transaction history.

Account & Gameplay Data: Login credentials (passwords stored as salted hashes, never in plain text), bet history, game session records, responsible gaming limit settings, bonus eligibility and usage records, and account correspondence history with support.

Technical Data: IP address, device type, operating system, browser type and version, screen resolution, session duration and timestamps, geolocation data (country/city level), and referral source data.

Communications Data: Records of all communications between you and 92koko customer support, including live chat logs, email correspondence, and call recordings where applicable.

92koko collects personal data through the following mechanisms:

• Direct provision by you: Data you enter during registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional opt-ins.
• Automated collection: Technical and behavioural data collected automatically through your use of the Platform, including via cookies, web beacons, and server logs.
• Third-party sources: Identity and fraud screening data from KYC/AML verification providers; payment processing data from JazzCash, Easypaisa, and banking partners; geolocation data from IP resolution services; and device fingerprinting data from fraud prevention partners.

92koko uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 92koko account; processing deposits and withdrawals; verifying your identity; and communicating account-related information.
• Platform operation: Enabling gameplay, processing bets, settling winnings, calculating bonus eligibility, and delivering customer support.
• Legal & regulatory compliance: Satisfying KYC and AML obligations; responding to regulatory enquiries; retaining transaction records as required by applicable law; and age verification.
• Fraud prevention & security: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, and unauthorised account access.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling; applying deposit limits and self-exclusion restrictions; and communicating responsible gaming information.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to users who have opted in, or where legitimate interest applies under applicable law.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the Platform's design, performance, and game selection.

92koko processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between 92koko and the user, including account creation, transaction processing, and dispute resolution.
• Legal obligation: Processing required to comply with applicable KYC, AML, age verification, and financial reporting obligations.
• Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing for direct marketing communications and optional personalisation features, where you have expressly opted in.

92koko does not sell, rent, or trade your personal data. We share data with third parties only in the following circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa/Mastercard networks, and crypto processing services receive financial data necessary to process your transactions.
• KYC/AML providers: Identity verification and anti-money laundering screening partners receive identity documents and personal data as necessary to complete regulatory compliance checks.
• Game providers: Pragmatic Play, PG Soft, Evolution, Ezugi, and other licensed game providers may receive session identifiers and bet data necessary to deliver and settle games.
• Fraud prevention services: Device fingerprinting and IP intelligence providers receive technical data to assist in detecting fraudulent activity.
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts may receive data where 92koko is legally required to disclose it.

All third-party service providers engaged by 92koko are required to maintain confidentiality and to process personal data only for the purposes for which it was shared.

92koko retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: All personal and account data is retained for the duration of the account's active status.
• Closed accounts: Transaction records, KYC documentation, and account correspondence are retained for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping obligations.
• Self-excluded accounts: Identity data for self-excluded users is retained for the duration of the exclusion period to prevent re-registration, and for five (5) years thereafter for compliance purposes.
• Marketing data: Where consent is withdrawn, marketing preference records are retained to ensure opt-out preferences are honoured.

Data that is no longer required and is not subject to a retention obligation is securely deleted or anonymised.

92koko implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed. These measures include:

• TLS 1.2 or higher encryption for all data in transit between user devices and 92koko servers.
• Salted hashing of passwords; plain-text passwords are never stored by 92koko.
• Tokenisation of payment card data; full card numbers are processed through PCI-DSS compliant payment processors and are not retained on 92koko's servers.
• Access controls limiting personal data access to authorised 92koko personnel with a legitimate need to access it.
• Regular security assessments and vulnerability testing of the Platform.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. 92koko cannot guarantee absolute security and is not liable for breaches that occur despite reasonable security practices, unless resulting from 92koko's gross negligence.

In the event of a data breach that poses a material risk to affected users, 92koko will notify affected users and relevant authorities in accordance with applicable law.

Subject to applicable law and 92koko's legitimate interests and legal obligations, you have the following rights in respect of your personal data held by 92koko:

• Right of access: You may request a copy of the personal data 92koko holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that 92koko restricts its processing of your data in certain circumstances, such as where the accuracy of the data is contested.
• Right to object: You may object to processing based on legitimate interest, including direct marketing. Objection to direct marketing will be honoured without condition.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact 92koko at the email address in Section 13. 92koko will respond to verified requests within 30 days. Identity verification will be required before processing rights requests.

92koko uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Session management, authentication, and security functions. These cannot be disabled as they are required for the Platform to function.
• Functional cookies: Remembering user preferences such as language, display settings, and "remember me" login state.
• Analytics cookies: Aggregated data on how users navigate and use the Platform, used to identify areas for improvement. This data is not linked to individual identities.
• Fraud prevention cookies: Device fingerprinting and session consistency verification used to detect and prevent fraudulent access.

You can control non-essential cookies through your browser settings. Disabling functional or analytics cookies may affect your experience of the Platform. Strictly necessary and fraud prevention cookies cannot be disabled without preventing Platform access.

92koko is strictly an 18+ platform. We do not knowingly collect personal data from persons under 18 years of age. Age verification checks are conducted as part of the KYC process, and 92koko reserves the right to request documentary proof of age at any point.

If 92koko determines or reasonably suspects that an account is operated by a person under 18, the account will be suspended immediately, all funds will be held pending investigation, and the matter may be reported to relevant authorities. Any winnings generated through an account found to have been operated by a minor are non-withdrawable and will be forfeited.

Parents and guardians are advised to implement appropriate parental controls on shared devices to prevent minors from accessing online gaming platforms.

92koko reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via email or in-platform notification before the changes take effect, where practicable. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Your continued use of the 92koko Platform following any amendment to this Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you should close your account before the revised Policy takes effect.

For all privacy-related enquiries, data access requests, consent withdrawal, or data deletion requests, please contact the 92koko data team:

Email: [email protected] (plain text — not a clickable link)
Subject line: Privacy Request – [Your registered email or mobile number]
Response time: 92koko aims to acknowledge all data enquiries within 3 business days and to provide a substantive response within 30 days of identity verification.

92koko does not have a designated Data Protection Officer at this time. All privacy enquiries are handled by the 92koko compliance team through the above contact address.