app 1234 Privacy Policy — Pakistan Data Protection & Your Rights

app 1234 is an online casino and sports betting platform operating at app1234.biz, serving players in Pakistan. For the purposes of this Privacy Policy, app 1234 is the data controller — meaning we are the entity that determines why and how your personal data is processed.

We understand that Pakistani users are increasingly aware of how their data is used online, and rightly so. This policy is our commitment to you: a clear, honest explanation of every data practice on app 1234. We have avoided filling this document with vague or hedging language. If we collect something, we explain it. If we share something, we name it. If you have a right, we describe it in full.

Our data protection contact is reachable at support@app1234.biz. For any privacy-related query, this is the right address to use.

app 1234 collects personal data in the following categories:

Registration & Identity Data

• Full legal name as it appears on your CNIC or other official identity document.
• Date of birth — used to verify that you meet the minimum age requirement of 18 years.
• Mobile phone number — used for account login, two-factor authentication and important account notifications.
• Email address — used for account communications and, where you have consented, promotional messages.

Financial & Transaction Data

• Deposit and withdrawal history including amounts, timestamps, payment methods used and transaction reference numbers.
• The Easypaisa, JazzCash, NayaPay or SadaPay account number or bank account details used for transactions — retained to process payments and meet anti-money-laundering obligations.
• Bonus credits claimed, wagering activity and any promotional transactions on your app 1234 account.

Gaming & Betting Activity Data

• Games played, bet amounts, outcomes and session duration on app 1234 — used to provide responsible gaming tools and detect unusual account activity.
• Sports bets placed including selections, stakes in PKR, odds accepted and bet outcomes.

Technical & Device Data

• IP address, browser type, operating system and device type.
• Session logs including login times, pages visited on app 1234 and feature interactions.
• Cookie data as described in Section 8 of this policy.

Identity Verification Documents

• Copies of CNIC, passport or driving licence when requested for identity verification, particularly in connection with withdrawals or account security reviews.

app 1234 collects your personal data through the following channels:

• Account registration form: When you create your app 1234 account, you provide your name, date of birth, mobile number and email address directly.
• Payment transactions: When you deposit or withdraw funds via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card, our payment processing partners pass relevant transaction details to app 1234 to record the transaction against your account.
• Gameplay and betting activity: Our platform systems automatically record your game rounds, bet placements and outcomes as part of normal platform operation.
• Device and connection data: Your browser and device automatically transmit technical data such as IP address, browser version and device type when you connect to app 1234. This is standard web behaviour — it happens on every website you visit.
• Cookies and similar technologies: As described in Section 8, app 1234 uses cookies to maintain your login session, remember your preferences and analyse aggregate usage patterns.
• Identity verification submissions: When you submit documents to verify your identity, those documents and the data within them are collected and processed by app 1234's verification team.
• Support communications: When you contact our support team via email or live chat, the content of your communications and your contact details are retained as part of your account record.

Every piece of data app 1234 collects is used for a specific, documented purpose. The table below summarises the main uses:

app 1234 does not use your personal data to build profiles for sale to advertisers, to target you with advertising on other websites or apps, or for any purpose not listed in this policy.

app 1234 processes your personal data under the following legal bases:

• Contract performance: Processing necessary to provide you with the services you have signed up for on app 1234 — including account management, game access, deposits and withdrawals — is carried out on the basis that it is necessary to fulfil our contract with you as a registered player.
• Legal obligation: Some processing — particularly identity verification, transaction record-keeping and anti-money-laundering monitoring — is required by law regardless of your preferences.
• Legitimate interests: We process certain technical and security data (IP addresses, session logs, device fingerprinting) to protect app 1234 and its players from fraud, cheating and unauthorised access. This processing is in our legitimate interest and does not override your privacy rights.
• Consent: Where we send promotional communications or use non-essential cookies, we do so only with your explicit consent, which you can withdraw at any time.

app 1234 shares your personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT operators and card payment networks receive transaction data necessary to process your PKR deposits and withdrawals. These processors are contractually bound to protect your data and may not use it for their own marketing purposes.
• Game providers: Licensed game studios such as Pragmatic Play, Evolution Gaming and Ezugi receive a session token and player ID to load games and record game round results. They do not receive your full name, CNIC or payment details.
• Identity verification services: Where app 1234 uses a third-party verification service to check CNIC or passport authenticity, your document data is transmitted securely to that provider solely for the purpose of verification. Results are returned to app 1234; the provider retains no copy beyond what is required by their own legal obligations.
• Regulatory and law enforcement authorities: app 1234 will disclose personal data to relevant authorities where required to do so by applicable law — for example, in response to a legitimate legal order or investigation.
• IT infrastructure and cloud providers: Our platform is hosted on secure cloud infrastructure. The providers of that infrastructure may have access to data as part of standard hosting operations. All such providers are bound by confidentiality agreements.

Because app 1234 is built specifically for Pakistani players, all financial transactions take place in PKR. This means your payment data never needs to pass through international currency conversion systems, reducing the number of third parties that handle your financial information.

When you deposit or withdraw via Easypaisa or JazzCash, the transaction is processed entirely within Pakistan's domestic mobile money infrastructure. app 1234 records the transaction amount, timestamp and reference number. We do not store your Easypaisa or JazzCash PIN or mobile wallet password — these remain entirely within the respective payment app.

For bank IBFT transfers, app 1234 records the originating account details as required for reconciliation and anti-money-laundering compliance. This data is retained for the period required by applicable financial regulations and then securely deleted.

For Visa/Mastercard transactions, card data is handled entirely by the card payment processor under PCI DSS standards. app 1234 does not store full card numbers. We retain only the last four digits of your card and the card type for account records.

app 1234 uses cookies and similar technologies on its platform. A cookie is a small file stored in your browser that allows a website to remember information between sessions. Here is exactly what app 1234 uses and why:

• Essential session cookies: These keep you logged into your app 1234 account as you navigate between pages. Without them, you would need to log in again on every page. These cannot be disabled without breaking basic account functionality.
• Preference cookies: These remember settings you have chosen on app 1234 — such as language preference or responsible gaming limits you have set — so you do not have to reconfigure them on every visit.
• Analytics cookies: With your consent, app 1234 uses anonymised analytics data to understand how players navigate the platform — which pages are most used, where sessions tend to end and where technical issues occur. This data is aggregated and does not identify individual players.
• Security cookies: These help app 1234 detect unusual account activity, such as login attempts from new devices or locations, and are used to protect your account from unauthorised access.

app 1234 does not use third-party advertising cookies or tracking pixels that would follow you across other websites or apps after leaving our platform.

You can manage or delete cookies through your browser settings at any time. Note that disabling essential session cookies will prevent you from staying logged into your app 1234 account.

app 1234 retains your personal data for as long as is necessary for the purpose it was collected, or as required by applicable law. The following general retention periods apply:

Once the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. If you request account closure, all data beyond the legally required retention periods is deleted within 60 days of the closure being processed.

app 1234 implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These measures include:

• 256-bit TLS/SSL encryption on all data in transit between your device and app 1234's servers.
• Encrypted storage for sensitive account data including identity document copies and payment method details.
• Password hashing using industry-standard algorithms. Your password is never stored in readable form on our systems.
• Two-factor authentication (2FA) available and recommended for all app 1234 accounts to prevent unauthorised access.
• Role-based access controls ensuring that only staff who require access to specific data categories for their role can view those records.
• Regular security reviews of our infrastructure and processes to identify and address vulnerabilities before they can be exploited.

As a user of app 1234, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@app1234.biz. We will respond within 30 days — typically sooner.

app 1234 is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has registered on app 1234, please contact us immediately at support@app1234.biz. We will investigate and, if confirmed, close the account and delete all associated data promptly.

During account registration, we collect date of birth to verify that users meet the minimum age requirement. Where age verification is inconclusive, app 1234 may request additional documentation before granting full account access.

app 1234 sends promotional communications — including bonus offers, game announcements and event notifications — only to players who have explicitly opted in to receive them during registration or subsequently through their account settings. Marketing messages are sent via email and, where enabled, SMS to the mobile number on your account.

You can withdraw your marketing consent at any time by:

• Clicking the "Unsubscribe" link in any marketing email from app 1234.
• Updating your communication preferences in your account settings.
• Contacting our support team at support@app1234.biz with a request to opt out.

Note that withdrawing marketing consent does not affect transactional communications — app 1234 will still send you important account-related messages such as deposit confirmations, withdrawal notifications and security alerts regardless of your marketing preferences. These are necessary for the operation of your account and cannot be disabled.

app 1234 may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer or applicable law. When we make material changes — for example, changes to what data we collect, how we use it or who we share it with — we will notify registered players by email at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects when the current version was published. We encourage you to review this policy periodically. Continued use of app 1234 after the effective date of an updated Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any update, please contact us before the effective date to discuss your options, including account closure with data deletion where applicable.

For any privacy-related question, request or complaint, please contact app 1234's data protection team directly:

• Email: support@app1234.biz
• Subject line: Please use "Privacy Request" in the subject line of your email so it reaches the right team immediately.
• Response time: We aim to acknowledge all privacy requests within 24 hours and resolve them within 30 days. Most requests are handled within 5 working days.
• Live chat: Available 24/7 on app1234.biz for general privacy queries and guidance on exercising your rights.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate to the relevant data protection authority or consumer protection body applicable in your jurisdiction.