- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. Why We Use Your Data
- 5. Legal Basis for Processing
- 6. Sharing Your Data
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. International Transfers
- 11. Your Rights
- 12. Minors
- 13. Responsible Gaming & Data
- 14. Changes to This Policy
- 15. Contact Us
1. Who We Are
This Privacy Policy applies to the App Stake platform, accessible at appstake.bet. When this Policy says "App Stake", "we", "us", or "our", it refers to the company that operates the App Stake online casino and betting platform and all related services.
App Stake acts as the data controller for all personal information collected through the Platform. This means we are responsible for deciding how and why your data is used, and we are accountable for handling it in a lawful, fair, and transparent manner.
If you have any questions about how your data is handled, or if you would like to exercise any of your rights described in this Policy, you can reach us at any time via live chat or by emailing privacy@appstake.bet.
App Stake handles your data with the same care as your winnings.
2. Data We Collect
App Stake collects only the data that is genuinely necessary to provide a safe, compliant, and functional platform. The categories of personal data we collect are as follows:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, passport number | Account registration, KYC verification, age verification |
| Contact Data | Mobile phone number, email address, residential address | Account communication, support, verification |
| Financial Data | Payment method type, last 4 digits of card/account, transaction history in PKR | Processing deposits and withdrawals, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Games played, bets placed, session duration, navigation paths | Platform improvement, responsible gaming monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence | Resolving queries, quality assurance, compliance records |
| Responsible Gaming Data | Self-exclusion status, limits set, cool-off periods | Player protection, regulatory compliance |
App Stake does not store full card numbers or complete bank account details. Financial data is tokenised through our payment processing partners and only necessary reference information is retained on App Stake systems.
3. How We Collect Your Data
App Stake collects data through the following means:
- Direct provision. When you register an account on App Stake, you provide identity and contact data directly through the registration form. When you make a deposit or withdrawal, you provide payment method information. When you contact our support team, you provide communications data.
- Automated collection. When you browse and use the App Stake Platform, technical data is collected automatically through server logs, browser cookies, and similar tracking technologies. This includes your IP address, device characteristics, and interaction data.
- Third-party verification providers. When App Stake needs to verify your identity as part of KYC compliance, we may use third-party identity verification services that cross-reference the information you provide against official records. These providers return a verification outcome to App Stake — they do not retain your full data independently unless required for their own regulatory compliance.
- Payment processors. Transaction data is shared between App Stake and our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems, Visa/Mastercard networks) to execute deposits and withdrawals. The data exchanged is limited to what is technically necessary for the transaction.
Your gameplay data helps App Stake provide a better, safer experience.
4. Why We Use Your Data — Purposes
App Stake uses the data it holds about you for specific, documented purposes. We do not use your data for anything outside these stated purposes without first updating this Privacy Policy and notifying you.
- Account management. Creating, verifying, and maintaining your App Stake account. This is the core operational use of your identity and contact data.
- Transaction processing. Executing your deposits and withdrawals in PKR, reconciling your App Stake Wallet balance, and generating transaction records for your review.
- KYC and regulatory compliance. Verifying your age and identity before approving large withdrawals or when triggered by risk thresholds required under anti-money-laundering (AML) obligations.
- Fraud prevention and security. Detecting and investigating suspicious activity, multiple account creation, chargebacks, or patterns consistent with collusion or money laundering.
- Customer support. Responding to your queries, processing complaints, and maintaining records of interactions for quality assurance.
- Platform improvement. Analysing aggregated usage patterns to identify bugs, improve game loading times, optimise navigation for mobile users in Pakistan, and prioritise new features.
- Responsible gaming monitoring. Using gameplay and session data to identify behavioural patterns associated with problem gambling, and triggering responsible gaming interventions where appropriate.
- Marketing communications. Sending promotional offers, bonus notifications, and relevant product updates to players who have opted in to receive such communications. You can opt out at any time.
- Legal obligations. Retaining records and producing data in response to valid legal requests, court orders, or instructions from regulatory authorities where App Stake has a lawful obligation to comply.
5. Legal Basis for Processing
App Stake processes your personal data on the following legal grounds, which vary depending on the purpose:
- Contractual necessity. Processing required to fulfil our contract with you — running your account, processing bets, and executing payments. Without this processing, we cannot provide the service.
- Legal obligation. Processing required to comply with applicable laws, including KYC/AML regulations, age verification requirements, and responses to valid legal orders.
- Legitimate interests. Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests do not override your privacy rights.
- Consent. Processing for marketing communications, where you have explicitly opted in. You may withdraw this consent at any time by updating your communication preferences in account settings or by contacting support.
Where App Stake relies on legitimate interests as a legal basis, we conduct a balancing assessment to ensure those interests are proportionate and do not unfairly override your rights. You may request further information about any such assessment by contacting privacy@appstake.bet.
6. Sharing Your Data With Third Parties
App Stake does not sell your personal data to any third party, at any time, under any circumstances. We share data only in the following specific, controlled situations:
- Payment processors. Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks, and Visa/Mastercard payment infrastructure receive the minimum data necessary to execute your deposit or withdrawal transaction in PKR.
- Identity verification providers. Third-party KYC service providers receive identity data for verification purposes when you are required to complete a KYC check. These providers operate under contractual obligations that restrict their use of your data to verification only.
- Game providers. Evolution Gaming, Pragmatic Play Live, Ezugi, and other game studio providers receive a pseudonymous player session identifier to deliver game content and record bet outcomes. Full personal identity data is not shared with game providers.
- IT and cloud infrastructure providers. Our hosting, database, and content delivery providers process data as part of their service delivery, under strict data processing agreements.
- Legal and regulatory authorities. Where required by valid legal process, court order, or regulatory instruction, App Stake will disclose requested data to the relevant authority. We will notify you of any such disclosure where we are legally permitted to do so.
- Fraud prevention and AML networks. Where we have identified or strongly suspect fraudulent activity or money laundering, data may be shared with relevant industry fraud prevention bodies and law enforcement.
If you receive any communication claiming to be from App Stake requesting your login credentials or full payment details, do not respond. App Stake will never ask for your full password or complete card number via any channel.
7. Cookies & Tracking Technologies
The App Stake Platform uses cookies and similar technologies to deliver core functionality, improve performance, and analyse usage. Here is how the main categories work:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens | No — platform will not function without these |
| Functional | Remembering your language preference, last game played, table lobby filters | Yes — some features may degrade |
| Analytics | Aggregated page view counts, session duration, error tracking | Yes — opt out via cookie settings |
| Marketing | Tracking opt-in campaign performance for internal analytics | Yes — opt out via cookie settings or account preferences |
You can manage cookie preferences through your browser settings. Disabling all cookies beyond strictly necessary ones may affect the functionality of certain parts of the App Stake Platform, particularly personalisation features.
Payment data is tokenised — App Stake never stores your full JazzCash or card details.
8. Data Retention
App Stake retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The general retention schedule is as follows:
- Active account data — retained for the duration of the account relationship plus a minimum of 5 years after closure, in line with standard AML record-keeping requirements.
- Transaction records — retained for a minimum of 5 years from the date of the transaction, as required for financial compliance.
- KYC documents — retained for 5 years after account closure or 5 years after the completion of the last transaction, whichever is later.
- Support communications — retained for 3 years after the resolution of the relevant query, to support quality assurance and dispute resolution.
- Technical/server logs — retained for 12 months for security and fraud investigation purposes, after which they are anonymised or deleted.
- Marketing preferences and consent records — retained for the duration of the account relationship plus 3 years, to demonstrate compliance with consent obligations.
When data reaches the end of its retention period, App Stake securely deletes or anonymises it so that it can no longer be linked to any individual player.
9. Data Security
App Stake applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Transport Layer Security (TLS). All data transmitted between your device and App Stake servers is encrypted in transit using current TLS protocols. You can verify this by the padlock icon in your browser's address bar.
- Encryption at rest. Sensitive stored data, including identity documents and financial reference data, is encrypted at rest on App Stake's server infrastructure.
- Access controls. App Stake staff access to personal data is role-limited, need-to-know, and logged. Access rights are reviewed regularly and revoked immediately upon role change or departure.
- Payment tokenisation. Full payment credentials are never stored on App Stake systems. Card details are tokenised through our PCI-DSS compliant payment processing partners.
- Security monitoring. App Stake's infrastructure is monitored continuously for anomalous activity, including login attempts from unusual locations, which may trigger account security holds.
- Staff training. All App Stake employees with access to personal data receive regular data protection training.
Despite these measures, no digital system can be guaranteed 100% secure. In the event of a data breach that poses a risk to your rights, App Stake will notify affected players and relevant authorities as required by applicable law, without undue delay.
10. International Data Transfers
The App Stake Platform is operated from servers located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan. App Stake takes the following steps to ensure that such transfers are lawful and that your data remains protected:
- All international data transfers are covered by appropriate transfer mechanisms, such as standard contractual clauses or equivalent safeguards, where required.
- Third-party service providers who process your data internationally are required, through contractual obligations, to maintain data protection standards that are at least equivalent to those described in this Privacy Policy.
- App Stake does not transfer personal data to countries that we determine to have inadequate data protection frameworks without first implementing the protections described above.
If you would like more detail about the specific safeguards in place for any international transfer of your data, contact us at privacy@appstake.bet.
11. Your Rights Over Your Data
As an App Stake player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or email privacy@appstake.bet with sufficient information to identify your account.
Request a copy of all personal data App Stake holds about you. We will provide this within 30 days of a valid request.
Request correction of inaccurate personal data. You can update most contact details directly in your account settings.
Request deletion of your personal data where we no longer have a legal basis to retain it. Note that AML retention obligations may limit this right for certain data.
Request that we temporarily limit how we use your data — for example, while a rectification request is being reviewed.
Request a structured, machine-readable export of data you have provided to App Stake, where technically feasible.
Object to processing based on legitimate interests, including direct marketing. Marketing opt-out takes effect immediately upon request.
App Stake will respond to all rights requests within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this to 60 days with written notice. We will not charge a fee for processing a rights request unless it is clearly excessive or repetitive.
12. Minors
The App Stake Platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or retain personal data belonging to anyone under the age of 18.
Age verification is conducted at registration using the date of birth provided and, where required, through KYC document checks. If App Stake discovers that an account was opened by or for a minor, the account will be immediately closed, any deposits will be returned to the original payment method, and all data will be deleted as quickly as our legal obligations allow.
If you believe a minor has registered on App Stake, please contact our support team at privacy@appstake.bet immediately so we can investigate and take action.
13. Responsible Gaming & Your Data
App Stake takes a data-informed approach to responsible gaming. Gameplay, session, and betting data are used — in addition to supporting your enjoyment of the Platform — to identify patterns that may indicate problem gambling behaviour.
Where our systems or support team identify a pattern of concern, we may proactively reach out to you, prompt you to review your responsible gaming settings, or in serious cases apply temporary account restrictions. This use of your data is conducted under the legitimate interests basis, as it is directly in your interest and in line with our duty of care as a platform operator.
Responsible gaming tool settings — including deposit limits, loss limits, and self-exclusion status — are treated as sensitive operational data. Access to this data is strictly limited within App Stake, and it is never shared with third parties except where required for legal compliance (for example, when sharing self-exclusion data with industry self-exclusion register schemes).
For more information about the responsible gaming tools available on App Stake, visit our Responsible Gaming page.
14. Changes to This Privacy Policy
App Stake may update this Privacy Policy from time to time to reflect changes in how we operate, in applicable law, or in our data processing practices. The "Last updated" date at the top of this page indicates when the most recent revision was made.
Where a change is material — meaning it significantly affects how we handle your personal data or reduces your rights in any way — App Stake will provide advance notice via email to your registered address or through an in-platform notification before the change takes effect. For minor updates (such as clarifications of existing practices or corrections), the updated policy will be posted on this page without individual notification.
Your continued use of the App Stake Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any change, you may close your account by contacting support, and your remaining Real Funds will be returned via the standard withdrawal process.
15. Contact Us — Privacy Queries
If you have any questions about this Privacy Policy, about how App Stake handles your personal data, or if you wish to exercise any of your data rights, please get in touch through any of the following channels:
- Live Chat: Available 24/7 through the App Stake Platform — the fastest way to reach us for urgent data matters.
- Email: privacy@appstake.bet — for formal rights requests, detailed data queries, or anything you prefer in writing. We respond within 5 business days and complete all valid rights requests within 30 calendar days.
When submitting a data rights request, please include your registered App Stake username or phone number, a description of your request, and a copy of your CNIC if your request involves account identity verification. This helps us locate your account quickly and respond accurately.
Your privacy questions are taken seriously at App Stake. We will never dismiss a data rights request as inconvenient — it is your legal right and our obligation to respond fully and accurately.