Privacy Policy

Effective Date: 1 June 2026  |  Version 2.0

This Privacy Policy ("Policy") describes how 92koko ("92koko", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("you", "your") who access or use the 92koko online casino and sports betting platform, including all associated web pages and services. By registering a 92koko account or using any part of the platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must not use the 92koko platform.

This Policy applies to all users of 92koko, including players based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and all other cities across Pakistan. We are committed to processing your personal data lawfully, fairly, and transparently.

1. Introduction

92koko is an online casino and sports betting platform serving Pakistani users. To operate the platform effectively and comply with applicable regulatory obligations, 92koko must collect and process certain categories of personal data. This Policy sets out in plain terms what data we collect, why we collect it, who may have access to it, and how long we retain it. We have structured this Policy to be as straightforward as possible — privacy policies do not need to be unreadable to be legally sound.

References to "personal data" in this Policy mean any information that identifies or could identify a specific individual — for example, your name, CNIC number, email address, mobile number, or payment account details. References to "processing" mean any operation performed on personal data, including collection, storage, use, transfer, and deletion.

2. Data We Collect

92koko collects the following categories of personal data from users:

2.1 Registration Data

• Full name as it appears on your government-issued identification;
• Date of birth (for mandatory 18+ age verification);
• Email address and mobile phone number;
• Username and encrypted password;
• Residential address (required for KYC processing and withdrawal verification).

2.2 Identity Verification Data (KYC)

• Scanned copy or photograph of your Pakistani CNIC (Computerised National Identity Card) or passport;
• Proof of address documentation (e.g., utility bill, bank statement dated within 3 months);
• Selfie photograph for identity matching, where required.

2.3 Financial & Transaction Data

• JazzCash or Easypaisa mobile wallet account identifiers linked to your 92koko account;
• Bank account details for bank transfer deposits and withdrawals (HBL, UBL, Meezan Bank, Bank Alfalah, etc.);
• Card details where Visa, Mastercard, or UnionPay payments are used (stored only in tokenised form);
• Cryptocurrency wallet address for USDT TRC20 transactions;
• Full deposit and withdrawal transaction history, including PKR amounts, timestamps, and payment method used.

2.4 Technical & Usage Data

• IP address and approximate geolocation at time of login;
• Device type, operating system, and browser version;
• Session duration, pages visited, and features used on the platform;
• Game history, betting records, and wagering activity.

2.5 Communications Data

• Records of support requests submitted to 92koko, including email correspondence;
• Any feedback or complaint submissions made through platform channels.

3. How We Use Your Data

92koko uses your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your 92koko account, including processing your 92koko Login credentials securely.
• Identity and age verification: To confirm that you are at least 18 years of age and to verify your identity as required by KYC procedures before withdrawal processing.
• Payment processing: To execute your PKR deposits via JazzCash, Easypaisa, or bank transfer, and to process your withdrawal requests to your verified payment method.
• Platform operation: To provide access to 92koko games (slots, live casino, cricket betting, Wild Bandito, Bombing Fishing) and to personalise your gaming experience.
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct described in our Terms & Conditions.
• Regulatory compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, record-keeping obligations, and responses to lawful authority requests.
• Customer support: To respond to your queries, investigate complaints, and resolve account issues.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limits, and cooling-off periods requested by users.

4. Legal Basis for Processing

• Contractual necessity: Processing required to fulfil our obligations under your 92koko account agreement — including registration, payment processing, and game access.
• Legal obligation: Processing required to comply with KYC, AML, and other applicable regulatory requirements.
• Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (e.g., for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

5. Data Sharing

92koko does not sell personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors: JazzCash, Easypaisa, and banking partners require transaction data to execute deposits and withdrawals.
• KYC/AML service providers: Third-party identity verification services that assist 92koko in processing CNIC and document checks.
• Game content providers: PG Soft, Pragmatic Play, JILI, and other licensed game studios may receive anonymised session data for technical and fraud-monitoring purposes.
• IT and security service providers: Companies that provide cloud hosting, cybersecurity, and platform infrastructure services to 92koko under strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or legitimate request from a competent authority, 92koko may be required to disclose user data.

All third parties who receive personal data from 92koko are contractually required to handle that data securely and only for the purposes for which it was shared.

6. Payment Data

All PKR transaction records are retained for a minimum period of five years for compliance and audit purposes, regardless of whether the associated account remains active.

7. Cookies & Tracking Technologies

92koko uses cookies and similar tracking technologies on the platform to:

• Maintain your session after 92koko Login (session cookies);
• Remember your language and display preferences (preference cookies);
• Analyse platform usage and performance to improve the user experience (analytics cookies);
• Detect and prevent fraudulent access patterns (security cookies).

You may manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality, including session persistence after 92koko Login. Analytics and preference cookies may be disabled without affecting core functionality.

8. Data Retention

92koko retains personal data for as long as is necessary to fulfil the purposes set out in this Policy and to comply with applicable legal obligations. Specific retention periods include:

• Account data: Retained for the duration of the account relationship and for a minimum of five years following account closure, for legal and compliance purposes.
• KYC documents: Retained for a minimum of five years from the date of verification or account closure (whichever is later), as required by applicable AML regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the last interaction.

Data that is no longer required for any retained purpose is securely deleted or anonymised.

9. Data Security

92koko implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 92koko platform;
• Encrypted storage of passwords using modern hashing algorithms — 92koko staff cannot access your actual password;
• Access controls ensuring personal data is accessible only to staff who require it to fulfil their job functions;
• Regular security assessments and penetration testing of the 92koko platform;
• Incident response procedures for managing data breaches, including user notification where required.

Whilst 92koko takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 92koko Login credentials.

10. Your Rights

• Right of access: You may request a copy of the personal data 92koko holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal obligations (e.g., AML record-keeping requirements).
• Right to restriction: You may request that 92koko restrict processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact 92koko at [email protected] (plain text — not a link) with your registered username and a description of your request. We will respond within 30 days.

11. Children's Privacy

92koko is strictly an 18+ platform. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that personal data has been collected from a minor, we will immediately suspend the relevant account and delete the associated data. Parents or guardians who believe a minor may have registered a 92koko account should contact us at [email protected] immediately.

12. Responsible Gaming & Your Data

92koko may use your transaction history, session data, and gaming behaviour information for responsible gaming monitoring purposes. This includes identifying patterns that may indicate problem gambling and proactively offering self-exclusion or limit-setting tools. Data used for responsible gaming purposes is processed on the basis of 92koko's legitimate interests in user welfare and regulatory compliance.

If you self-exclude from 92koko, your account data is retained but access is blocked. Self-exclusion data is retained for the duration of the exclusion period and for compliance purposes thereafter. For more information, visit our Responsible Gaming page.

13. Changes to This Privacy Policy

92koko may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, or applicable legal requirements. Users will be notified of material changes via email to their registered address or via an in-platform notification. The date at the top of this Policy reflects the date of the most recent revision. Continued use of the 92koko platform following notification of changes constitutes acceptance of the updated Policy.

14. Contact Us

For any privacy-related queries, data access requests, or concerns regarding how 92koko handles your personal data, please contact our support team. Our contact email is: [email protected]

This address is displayed as plain text and is not a clickable link. Please include your 92koko registered username and a clear description of your query. We aim to respond to all privacy-related correspondence within 30 days of receipt.