Stakes Privacy Policy – Your Data, Protected

1. Introduction

Stakes is a sports betting platform built for users in Pakistan. We are committed to handling your personal data responsibly and transparently. This Privacy Policy sets out who we are, what personal information we collect when you use the Stakes platform, the reasons we process it, how long we keep it, and the rights you have over your own data.

When we refer to "Stakes," "we," "us," or "our," we mean the entity operating the stakes.vin platform. When we refer to "you" or "user," we mean any individual who visits, registers on, or otherwise interacts with the Stakes platform.

This policy is reviewed and updated periodically. The date at the top of this page always reflects the most recent version. If you have any questions after reading, you are welcome to contact us at any time — our support team is available 24 hours a day.

2. Data We Collect

The following table summarises the categories of personal data we collect and why each category is needed:

We do not collect sensitive categories of data such as health information, religious beliefs, political opinions, or biometric data unless specifically required for identity verification purposes and with your explicit consent.

3. How We Collect Data

Stakes collects your personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — as you navigate the platform, technical and usage data is collected through cookies, server logs, and analytics tools. This happens whether you are logged in or browsing as a visitor.
• From third parties — identity verification providers, payment processors (such as JazzCash, Easypaisa, and Raast), and fraud detection services may share information with us as part of completing their services.
• Through the Stakes app — the mobile app may collect device identifiers, location data (if you grant permission), and app usage patterns to improve performance and personalisation.

4. How We Use Your Data

Your data is used for specific, legitimate purposes. We do not use it beyond what is described here without informing you first. The primary purposes are:

• Account management: Creating, maintaining, and securing your account on the Stakes platform.
• Identity verification: Confirming that you are who you say you are, and that you meet the age requirement of 18 years or above.
• Processing transactions: Handling deposits and withdrawals in PKR through your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer, or card.
• Fraud prevention and security: Detecting suspicious activity, protecting accounts from unauthorised access, and investigating potential rule violations.
• Responsible gaming: Monitoring betting patterns to identify users who may benefit from responsible gaming tools, and applying limits or restrictions where necessary.
• Customer support: Responding to your queries, resolving complaints, and communicating important account information.
• Platform improvement: Analysing usage data to fix bugs, improve features, and make the platform more useful for Pakistani users who bet on cricket, PSL, T20, football, and Esports.
• Legal compliance: Meeting obligations under applicable laws, responding to lawful requests from authorities, and enforcing our Terms and Conditions.

We rely on different legal bases for processing depending on the purpose — contract performance, legitimate interests, legal obligation, or your consent. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data

Stakes does not sell your personal data to anyone. We share data only in the limited circumstances described below, and only with parties who are contractually required to protect it to the same standard we apply ourselves.

• Payment processors: JazzCash, Easypaisa, Raast, and bank or card networks receive the minimum financial data necessary to complete your transactions.
• Identity verification providers: Third-party KYC and document verification services receive identity documents for the sole purpose of confirming your identity.
• Fraud and security partners: We share technical and behavioural data with fraud detection services to protect all users on the platform.
• Legal and regulatory authorities: We may disclose data to competent authorities where required by a court order, legal process, or lawful request. We do not disclose more than is legally required.
• Technology infrastructure providers: Cloud hosting, analytics, and platform infrastructure providers may process data on our behalf under strict data processing agreements.

In all cases where data is shared with third parties, we take reasonable steps to ensure those parties maintain appropriate security standards and use the data only for the purpose for which it was shared.

6. Payments & PKR Transactions

All financial transactions on Stakes are processed in Pakistani Rupees (PKR). When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, a bank account, or a card, your payment details are transmitted securely to the relevant payment provider. Stakes does not store complete card numbers or full mobile wallet credentials on its own servers.

Payment data is handled by PCI-DSS compliant or equivalent payment processors who are contractually bound to keep your financial information secure. Your payment account must be registered in your own name — this is a requirement for both fraud prevention and to ensure withdrawals can be processed back to the correct account.

7. Cookies & Tracking

Stakes uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences, and understand how users interact with different features. The main types of cookies we use are:

• Essential cookies: Required for the platform to function — these handle session management, login state, and security. You cannot opt out of essential cookies without losing access to platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred sport (cricket, football, Esports), and display options.
• Analytics cookies: Help us understand how pages are used, which features are popular, and where users experience problems. This data is aggregated and does not identify you personally.
• Security cookies: Used to detect unusual login behaviour, bot activity, and potential fraud attempts.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core betting and account features of Stakes, though some preference-based personalisation may be affected.

8. Data Security

Protecting your data is something we take seriously at every level of the platform. Stakes uses a combination of technical and organisational measures to prevent unauthorised access, accidental loss, or disclosure of your personal information.

• All data in transit between your device and the Stakes platform is encrypted using TLS (Transport Layer Security).
• Passwords are stored as salted hashes — your actual password is never stored in plain text.
• Access to personal data within Stakes is limited to staff who genuinely need it to do their jobs, and is governed by internal access controls.
• We conduct regular security reviews and monitor systems for unusual activity around the clock.
• In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected users as quickly as possible and take immediate remedial action.

While we do everything we reasonably can to keep your data secure, no system is completely immune to risk. You also play a role in keeping your account safe — use a strong, unique password, enable any available two-factor authentication, and never share your login credentials with anyone.

9. Data Retention

We retain your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The general retention approach is:

• Active account data: Retained for the duration of your account and for a defined period after closure to handle any outstanding queries, disputes, or legal obligations.
• Transaction records: Financial transaction records are retained for a minimum of five years to comply with standard financial record-keeping requirements.
• Identity verification documents: Retained for the period required to satisfy our verification obligations, then securely deleted.
• Support communications: Records of customer support interactions are kept for up to three years to handle follow-up queries and quality assurance.
• Technical and usage data: Aggregated analytics data may be kept indefinitely in anonymised form. Identifiable session data is deleted on a rolling basis.

When data is no longer required and no legal obligation compels retention, it is securely deleted or anonymised so that it can no longer be linked back to you as an individual.

10. Your Rights

As a user of the Stakes platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 13.

• Right of access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe and at no charge for standard requests.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. For basic account details, you can update many fields directly within your account settings.
• Right to erasure: You can ask us to delete your personal data where it is no longer needed for its original purpose, where you withdraw consent, or where you object to its processing. This right is subject to legal retention obligations — we cannot delete data we are legally required to keep.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data while a dispute or query is being resolved.
• Right to data portability: Where technically feasible, you can request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time. This does not affect any processing carried out before the withdrawal.
• Right to object: You can object to processing carried out on the basis of legitimate interests. We will stop unless we have compelling grounds to continue.

We aim to respond to all data rights requests within 30 days. Complex or high-volume requests may take longer, in which case we will keep you informed of progress.

11. Minors

The Stakes platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe that a minor has registered an account or provided personal data to Stakes, please contact us immediately. Upon confirmation, we will close the account and delete all associated data without delay.

Parents and guardians are encouraged to use device-level parental controls and to discuss responsible internet use with young people in their care. Stakes supports all efforts to keep the platform away from underage users.

12. Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in how we operate the platform, changes in applicable laws, or improvements in our data practices. When material changes are made, we will notify registered users by email or through an in-platform notification before the new version takes effect.

The most current version of this policy is always available at stakes.vin/privacy-policy, with the "Last Updated" date shown at the top. We recommend reviewing this page periodically so you are always aware of how your data is being handled. Continued use of the Stakes platform after an update constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please get in touch with our support team. We are available 24 hours a day, every day of the week.

For formal data rights requests — such as access, deletion, or portability — please include your registered email address and a clear description of your request in your message. This helps us process your request as quickly as possible.

For full details of how your account is managed and what rules govern your use of the platform, please also review our Terms and Conditions and Responsible Gaming pages.