92co Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 92co ("92co," "we," "us," "our") collects, processes, stores, and protects the personal information of users ("Player," "you," "your") who register for and use the 92co online gaming and sports betting platform at 92co.app.

By creating a 92co account and using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not consent to this Policy, you must not register or use 92co.

92co processes personal data because it is necessary to provide contractual services (account operation and gaming), because it is required by law (KYC and anti-money-laundering obligations), and because 92co has a legitimate interest in maintaining a secure, fair, and compliant gaming environment.

2. Personal Data We Collect

92co collects personal data through your direct interactions with the platform, through automated technical means, and through third-party verification service providers. The categories of data collected are as follows:

92co does not knowingly collect special category data (such as health, biometric, or racial origin data) except where a player voluntarily discloses health-related context in the responsible gaming self-exclusion process.

3. How We Use Your Personal Data

92co uses the personal data it collects for the following purposes:

• Account creation and management: To register your 92co account, verify your identity, maintain your account, and enable login access.
• Provision of gaming services: To process bets, settle wagers, calculate winnings, manage your PKR balance, and provide access to all 92co platform features.
• Payment processing: To process deposits via JazzCash, Easypaisa, bank transfer, and other supported methods, and to process withdrawal requests to your verified payment method.
• KYC and regulatory compliance: To verify your identity, confirm your age (18+), comply with anti-money-laundering obligations, and meet all applicable regulatory requirements for operating an online gaming platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. Technical data including IP addresses is used for this purpose.
• Customer support: To respond to your support queries, investigate complaints, resolve disputes, and communicate important account-related information.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to facilitate deposit limits, loss limits, self-exclusion, and other responsible gaming tools where requested.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and user experience for Pakistani players.
• Marketing communications: To send you promotional offers and updates where you have consented to receive such communications. You may withdraw this consent at any time via account settings.

4. Legal Basis for Processing

92co processes your personal data under one or more of the following legal bases:

• Contract performance: Processing necessary to create and manage your account and provide the services you have registered to use.
• Legal obligation: Processing required to comply with KYC, anti-money-laundering, and other applicable regulatory requirements.
• Legitimate interests: Processing for fraud detection, security monitoring, platform integrity, and responsible gaming compliance — where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications, where you have expressly opted in. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing

92co does not sell or rent your personal data to any third party. Personal data is shared only in the following limited circumstances:

• Payment processing partners: Financial data is shared with payment service providers (including JazzCash, Easypaisa, and banking partners) strictly as necessary to process your deposits and withdrawals.
• Identity verification providers: KYC documents may be processed by third-party identity verification service providers engaged by 92co to verify the authenticity of submitted documents.
• Game content providers: Your gaming session data is shared with the game studios whose titles you play (e.g., Evolution Gaming for live casino games, slot providers for slot titles) as necessary for game operation and dispute resolution.
• Regulatory authorities: 92co may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts in response to lawful requests, court orders, or legal proceedings.
• Fraud prevention networks: Where fraud or multi-accounting is identified, 92co may share relevant account data with industry fraud prevention services.

All third parties engaged by 92co are required to handle your personal data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond those authorised by 92co.

6. KYC Document Handling

Identity documents submitted during KYC verification — including scanned copies of your CNIC, passport, proof of address, and payment method evidence — are processed with heightened security controls given their sensitive nature.

• KYC documents are stored in an access-controlled, encrypted data environment. Only authorised compliance personnel with a legitimate review need may access submitted documents.
• Documents are not used for any purpose other than identity verification and regulatory compliance.
• 92co does not share KYC documents with third parties except identity verification service providers engaged for this specific purpose and regulatory authorities where required by law.
• KYC documents are retained for the period required by applicable anti-money-laundering regulations, which typically extends beyond account closure.

7. Cookies and Tracking Technologies

92co uses cookies and similar tracking technologies to enable platform functionality, maintain session security, detect fraud, and analyse platform usage. The categories of cookies used are:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your 92co account. Disabling essential cookies will prevent the platform from functioning correctly.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and multi-account behaviour. These cookies process technical data including IP addresses and device fingerprints.
• Analytics cookies: Used to collect anonymised data about how players interact with the platform — which pages are visited, how long sessions last, and where technical errors occur. This data is used to improve platform performance. Analytics data is aggregated and does not identify individual players.
• Preference cookies: Store your platform preferences — such as language and display settings — between sessions.

You may manage non-essential cookie settings from your browser preferences. Note that disabling security cookies may affect 92co's ability to protect your account from fraudulent access.

8. Data Retention

92co retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Account data is retained for the full duration of the account relationship.
• Closed accounts: Following account closure, core account and transaction data is retained for a minimum of five years to meet anti-money-laundering regulatory obligations. This retention period may be extended where an account is subject to an ongoing investigation or legal proceeding.
• KYC documents: Retained for the period required by applicable regulations, typically five years from the date of account closure or the date of the last transaction, whichever is later.
• Marketing data: Retained until you withdraw consent for marketing communications. Following withdrawal, your data is removed from active marketing lists promptly.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the communication to support dispute resolution.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Data Security

92co implements technical and organisational security measures appropriate to the risk profile of the personal data we process. Key measures include:

• SSL/TLS encryption for all data transmitted between players' devices and 92co servers.
• One-way cryptographic hashing for all stored account passwords — 92co cannot recover or view plaintext passwords.
• Access control policies restricting internal access to personal data on a need-to-know basis.
• Monitoring systems that detect and alert on unusual access patterns, login anomalies, and potential data breach indicators.
• Regular security reviews of platform infrastructure and third-party service providers.

Despite these measures, no internet-connected system is completely immune to security risks. Players are responsible for maintaining the security of their own account credentials and devices. 92co recommends enabling two-factor authentication on your 92co account and using a unique password not shared with other services.

10. Your Data Rights

Subject to applicable data protection law and regulatory retention obligations, you have the following rights with respect to your personal data held by 92co:

• Right of access: You may request a copy of the personal data 92co holds about you.
• Right to rectification: You may request that 92co correct any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to overriding legal retention obligations (such as anti-money-laundering requirements).
• Right to restriction: You may request that 92co restrict the processing of your data in certain circumstances — for example, while an accuracy dispute is investigated.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time via account settings or by contacting support.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of the above rights, contact 92co support via live chat or email at [email protected]. Requests will be processed within 30 days. 92co may require identity verification before processing data rights requests.

11. Children and Minors

92co's services are strictly restricted to individuals aged 18 years and over. 92co does not knowingly collect personal data from persons under 18 years of age. If 92co becomes aware that personal data from a minor has been collected, that data will be deleted and the associated account will be closed immediately.

If you believe a minor has created a 92co account, please contact support immediately at [email protected]. 92co takes underage gambling extremely seriously and enforces its age policy through KYC verification.

12. International Data Transfers

92co operates a global technology infrastructure. Your personal data may be processed by servers or service providers located outside of Pakistan. Where data is transferred internationally, 92co takes reasonable steps to ensure that appropriate safeguards are in place to protect your data in transit and at the destination, consistent with applicable data protection standards.

By registering a 92co account, you acknowledge that your data may be transferred to and processed in countries outside Pakistan. Where such transfers are made to third-party service providers (such as game content providers or identity verification services), those providers are contractually required to maintain data protection standards consistent with this Policy.

13. Changes to This Privacy Policy

92co reserves the right to update this Privacy Policy at any time. Where changes are made, the revised Policy will be published on this page with an updated effective date. Where material changes are made that significantly affect your rights, 92co will provide notice via your registered email address where practicable.

Continued use of 92co following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. Players who do not accept the revised Policy should close their account and cease using the platform.

14. Contact & Data Queries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 92co, please contact the support team through the following channels:

• Live Chat: Available 24/7 from within the 92co platform — the fastest channel for privacy queries.
• Email: [email protected] — for formal written data rights requests or privacy complaints. Responses within 30 days.

92co will make reasonable efforts to resolve any privacy concern raised directly. Where you remain dissatisfied following 92co's response, you may have the right to refer your complaint to a relevant supervisory authority in your jurisdiction.