apkspin Privacy Policy

1 Who We Are

apkspin is an online casino and sports betting platform operated under international gaming standards, serving users across Pakistan — including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. Our platform offers over 1,200 casino games, live dealer tables, video slots, and cricket betting markets, all transacted in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, apkspin acts as the data controller — meaning we determine why and how your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are contractually bound to handle your data only as instructed by apkspin.

2 Data We Collect

apkspin collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and in certain cases from third-party identity verification and payment providers. The categories of data we collect are described below.

2.1 Registration & Identity Data

When you create an apkspin account, we collect the information necessary to establish your identity and verify your eligibility to use the platform. This includes:

• Full legal name as it appears on your CNIC or passport;
• Date of birth (used to confirm you are 21 years of age or older);
• Email address and mobile phone number;
• Residential address, including city and province within Pakistan;
• CNIC number or passport number for identity verification purposes;
• Username and encrypted account password.

2.2 Financial & Transaction Data

To process deposits and withdrawals in PKR and to meet our AML obligations, apkspin collects:

• JazzCash or EasyPaisa wallet numbers linked to your account;
• Bank account details where bank transfer methods (HBL, UBL, Meezan Bank) are used;
• Partial card details (last four digits and expiry date) where Visa or Mastercard payments are processed — full card numbers are never stored by apkspin;
• Transaction history, including deposit amounts, withdrawal requests, and bonus redemptions.

2.3 Usage & Technical Data

We automatically collect certain technical data when you use the apkspin platform:

2.4 Communications Data

When you contact apkspin support, respond to surveys, or interact with promotional communications, we retain records of those exchanges. This includes live chat transcripts, email correspondence, and any documents or screenshots you submit to our team.

3 How We Use Your Data

apkspin uses personal data for the following purposes. In each case, we rely on a specific legal basis as described in Clause 4.

• Account creation and management: To register your apkspin account, verify your identity, and manage your profile and preferences;
• Transaction processing: To handle deposits and withdrawals in PKR via JazzCash, EasyPaisa, and partner banks, and to maintain accurate financial records;
• Age verification and KYC: To confirm that all registered users are 21 years of age or older, and to meet Know Your Customer requirements;
• Anti-Money Laundering (AML): To monitor account activity for patterns consistent with money laundering, fraud, or other financial crime, and to report suspicious activity where required by law;
• Platform security: To detect and prevent unauthorised account access, fraudulent activity, and abuse of our bonus system;
• Customer support: To respond to your enquiries, resolve disputes, and process responsible gaming requests such as self-exclusion;
• Platform improvement: To analyse how users interact with apkspin, identify technical issues, and enhance the overall user experience;
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games — but only where you have provided explicit consent to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

apkspin processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing is required to fulfil our obligations to you as a registered apkspin account holder — including account management, transaction processing, and customer support;
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML legislation, age verification requirements, and financial record-keeping obligations;
• Legitimate interests: Processing is necessary for apkspin's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your privacy rights;
• Consent: Where processing is based on your consent — for example, for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, contact [email protected] or update your communication preferences in your account settings.

5 Sharing Your Data

apkspin does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

5.1 Payment Processors

To process your PKR transactions, we share relevant financial data with payment partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard network processors. These partners are independently regulated financial institutions operating under their own data protection obligations.

5.2 Identity Verification Providers

apkspin uses third-party KYC and AML screening services to verify your identity and check your details against sanctions and politically exposed persons (PEP) databases. These providers process only the minimum data necessary to complete the verification check.

5.3 Game Software Providers

The casino games and sports betting products available on apkspin are powered by licensed third-party software providers. These providers may receive anonymised session data for the purposes of RNG certification, game performance auditing, and dispute resolution. They do not receive your identity or payment data.

5.4 Law Enforcement & Regulatory Authorities

apkspin may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or regulatory direction. We will notify you of such disclosures where we are legally permitted to do so.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of apkspin's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

6 International Data Transfers

apkspin's primary servers and data storage infrastructure are located in jurisdictions that maintain internationally recognised data protection standards. Where your personal data is transferred outside of Pakistan, apkspin ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring data processors to adhere to equivalent data protection standards;
• Transfer only to jurisdictions or entities that provide an adequate level of data protection as recognised by international standards;
• Encryption of data in transit and at rest to minimise the risk associated with cross-border transfers.

If you have questions about the specific safeguards applicable to a particular transfer of your data, please contact us at [email protected].

7 Data Retention

apkspin retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable laws and regulations. Our general retention schedule is as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with AML record-keeping requirements;
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by financial regulations;
• Game session logs: Retained for 36 months to support dispute resolution and RNG audit processes;
• Support communications: Retained for 24 months from the date of the last interaction, unless the subject matter requires longer retention for legal or compliance reasons;
• Marketing consent records: Retained for the period during which consent is active, plus 12 months after withdrawal of consent for evidence purposes.

When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

8 Cookies & Tracking Technologies

apkspin uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. Cookies are small text files stored on your device when you visit the apkspin website.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the apkspin platform and may prevent you from accessing certain features, including your account login. apkspin does not use cookies to track your activity on third-party websites unrelated to our platform.

9 Your Privacy Rights

As an apkspin user, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days.

• Right of Access: You have the right to request a copy of all personal data we hold about you, free of charge;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data, subject to our legal retention obligations and any ongoing regulatory requirements;
• Right to Restriction: You have the right to request that we restrict the processing of your data in certain circumstances, for example where you contest the accuracy of the data;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller;
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. Where processing is for direct marketing purposes, your objection will be honoured unconditionally;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

10 Security Measures

apkspin takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption across all data in transit between your device and apkspin servers;
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records;
• Two-factor authentication (2FA) available to all account holders for an additional layer of login security;
• Role-based access controls ensuring that apkspin staff can only access personal data relevant to their specific job function;
• Regular penetration testing and security audits conducted by independent third-party security specialists;
• 24/7 automated intrusion detection systems monitoring for anomalous activity across our platform infrastructure.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, apkspin will notify affected users without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11 Third-Party Services

The apkspin platform may contain links to or integrations with third-party services, including payment gateways and game software providers. This Privacy Policy applies solely to data processed by apkspin. When you interact with a third-party service — for example, completing a JazzCash or EasyPaisa payment — that service's own privacy policy governs the handling of your data during that interaction.

apkspin is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of apkspin.

Where apkspin engages third-party data processors, we enter into data processing agreements that require those processors to maintain security standards consistent with our own and to process your data only as instructed by apkspin.

12 Changes to This Policy & Contact

12.1 Policy Updates

apkspin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or business operations. Where a material change is made, we will notify registered users via the email address associated with their account or by displaying a prominent notice on the platform. The effective date at the top of this page will be updated accordingly.

Your continued use of the apkspin platform following notification of any update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the updated policy, you should close your account by contacting [email protected].

12.2 How to Contact Us

For all privacy-related enquiries, data access requests, erasure requests, or complaints, please contact the apkspin support team. Our team is available 24 hours a day, 7 days a week:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 9:00 AM – 11:00 PM PST, with 24/7 emergency coverage