apkba Privacy Policy

1. Introduction

1.1 apkba operates apkba.org, an online casino and sports betting platform offering live dealer games, slot titles, cricket and PSL betting, and a VIP loyalty program primarily to players located in Pakistan. In providing these services, apkba necessarily collects, processes, and stores certain personal data belonging to its registered players and website visitors.

1.2 apkba is committed to handling personal data responsibly, transparently, and in accordance with the data protection standards required by its international gaming licence and applicable data protection principles. We do not sell, rent, or commercially trade your personal data with third parties for their own marketing purposes. Full stop.

1.3 This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together form the complete regulatory framework governing your relationship with apkba.

1.4 If you have questions about any aspect of this Policy, or wish to exercise any of your data rights, you may contact our Data Protection team at [email protected] at any time.

2. Data Controller

2.1 For the purposes of this Policy, the data controller — meaning the entity that determines the purposes and means of processing your personal data — is apkba, the operator of apkba.org, operating under an international online gaming licence.

2.2 Where apkba engages third-party service providers (such as payment processors, KYC verification agencies, or game studios) to process personal data on its behalf, those providers act as data processors under apkba's instruction and are bound by data processing agreements that restrict the use of your data to the specific purposes for which it was shared.

2.3 Contact Details. All data-related enquiries, access requests, and complaints should be directed to: [email protected]. Please include "Data Privacy Request" in your subject line so that our compliance team can prioritise your message appropriately.

3. Personal Data We Collect

apkba collects personal data in two broad categories: data you provide to us directly, and data generated automatically through your use of the platform. The table below summarises the categories of personal data we hold:

3.1 Sensitive Data. apkba does not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by responsible gaming obligations — for example, where a player voluntarily discloses a gambling addiction in the context of requesting self-exclusion. Such disclosures are treated with the highest level of confidentiality and are used solely for the purpose of administering the responsible gaming measure requested.

3.2 Mandatory vs Optional Data. Certain data fields are mandatory for account registration and KYC verification (full name, CNIC, date of birth, contact details). Failure to provide mandatory data will prevent us from opening or maintaining your account. Other data fields — such as city of residence — are requested to improve your experience but are not mandatory for account operation.

4. How We Collect Your Data

apkba collects personal data through the following channels:

• Registration Form. When you create an apkba account, you provide your name, email address, mobile number, date of birth, and city. This data is collected at the point of submission.
• KYC Verification. When you submit identity documents (CNIC front and back, selfie photograph) to complete identity verification, this data is processed by our licensed KYC service provider before being stored in your account record.
• Deposits and Withdrawals. When you add a payment method or initiate a transaction, the relevant payment account details and transaction metadata are recorded to your financial history.
• Platform Usage. As you browse and play on apkba.org, our servers automatically log technical and usage data including your IP address, device fingerprint, session timestamps, and game activity.
• Cookies and Tracking Technologies. apkba uses first-party and approved third-party cookies for session management, fraud prevention, and platform analytics. Full details are set out in Section 9 of this Policy.
• Customer Support Interactions. When you contact us via live chat or email, the content of that conversation is recorded and linked to your account record for quality assurance and dispute resolution purposes.
• Responsible Gaming Tools. When you configure deposit limits, request a cooling-off period, or apply for self-exclusion, the details of that request are logged as part of your responsible gaming profile.

5. Purpose & Legal Basis for Processing

apkba processes your personal data only where a valid legal basis exists. The primary purposes for which we process your data, and the corresponding legal basis for each, are as follows:

5.1 Legitimate Interests. Where we rely on legitimate interests as our legal basis, we have carried out a balancing assessment to confirm that our interests do not override your privacy rights. You have the right to object to processing based on legitimate interests — see Section 10 for details on how to do this.

5.2 Withdrawal of Consent. Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Personal Data

6.1 apkba does not sell or rent your personal data to third parties. We share personal data with third parties only in the following circumstances:

• Payment Processors. JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard processors, and USDT gateway providers receive the minimum payment data necessary to process your transactions. These providers operate under their own privacy policies and applicable Pakistani financial regulations.
• KYC and Identity Verification Providers. Our licensed KYC service provider processes your CNIC and selfie data solely for the purpose of identity and age verification. They are contractually prohibited from using your data for any other purpose.
• Game Studios. Game content providers (whose games are accessible via the apkba platform) receive a pseudonymous player identifier and game session data necessary to operate the game and resolve game-related disputes. They do not receive your name, CNIC, or payment details.
• Fraud and Security Services. Approved fraud detection and cybersecurity providers may receive technical and transaction data for the purpose of identifying and preventing fraudulent activity on the platform.
• Regulatory and Law Enforcement Authorities. apkba will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, by order of a court, or by the requirements of apkba's gaming licence.
• Corporate Transactions. In the event of a merger, acquisition, or sale of the apkba business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material change to the privacy terms that apply to your data.

6.2 All third-party data processors engaged by apkba are required to sign data processing agreements that bind them to: process data only on apkba's documented instructions; implement appropriate technical and organisational security measures; and promptly notify apkba of any data breach affecting your personal information.

7. Data Retention

7.1 apkba retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations imposed by apkba's gaming licence.

7.2 The following minimum retention periods apply:

• Identity and KYC Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping obligations.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Data: Retained for three (3) years from the date of last activity, unless a longer period is required for dispute resolution or regulatory audit.
• Communications and Support Data: Retained for two (2) years from the date of the last communication, or longer if the communication relates to an open dispute.
• Responsible Gaming Records: Self-exclusion and cooling-off records are retained indefinitely to prevent circumvention by re-registration.
• Marketing Consent Records: Retained for as long as you remain subscribed plus two (2) years thereafter, to demonstrate consent in the event of a complaint.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and fraud modelling.

8. Security of Your Personal Data

8.1 Technical Measures. apkba's security infrastructure includes: TLS encryption for all data transmitted between your device and our servers; AES-256 encryption for sensitive data fields stored at rest (including CNIC numbers and payment account details); multi-factor authentication options for player accounts; and real-time intrusion detection and anomaly monitoring systems.

8.2 Organisational Measures. Access to personal data within apkba is restricted on a strict need-to-know basis. Staff who handle personal data are subject to confidentiality obligations and receive regular data protection training. Access logs are maintained and reviewed periodically.

8.3 Payment Security. apkba does not store full card numbers on its own servers. Payment card data is tokenised and processed exclusively by PCI DSS-compliant payment processors. JazzCash and EasyPaisa transactions are processed through the official APIs of those platforms without apkba storing raw account credentials.

8.4 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, apkba will notify affected players without undue delay and will take all reasonably necessary steps to contain and remediate the breach.

8.5 Your Responsibility. You are responsible for maintaining the confidentiality of your apkba account password. apkba will never ask for your password via email, live chat, or phone. If you suspect your account credentials have been compromised, contact us immediately at [email protected].

9. Cookies & Tracking Technologies

9.1 apkba uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform, prevent fraud, and analyse usage patterns. The table below describes the categories of cookies we use:

9.2 By continuing to use apkba.org after dismissing the cookie notice, you consent to our use of non-essential cookies in accordance with this Policy. You may update your cookie preferences at any time via the cookie settings link in the website footer. Withdrawing consent for non-essential cookies will not affect your ability to access your account or play games.

9.3 apkba does not use advertising network cookies or cross-site tracking cookies that profile your behaviour across third-party websites.

10. Your Privacy Rights

As a data subject, you hold the following rights in relation to your personal data held by apkba. To exercise any of these rights, contact us at [email protected] with the subject line "Data Privacy Request" and we will respond within thirty (30) days:

11. Minors & Age Restriction Policy

11.1 During registration, all players are required to confirm that they are 21 years of age or older. This declaration is followed by mandatory CNIC verification, which includes date-of-birth confirmation against the national identity document.

11.2 If apkba discovers that an account has been registered by an individual under the age of 21, the account will be immediately suspended, all funds will be returned to the depositing payment method, and all personal data associated with the account will be securely deleted from active systems within thirty (30) days, subject only to any legal obligation to retain records of the underage registration event itself for compliance purposes.

11.3 If you believe that a minor has registered an account on apkba.org, please notify us immediately at [email protected]. We will investigate and act on all such reports as a matter of priority.

12. International Data Transfers

12.1 apkba operates under an international gaming licence and may engage service providers — including game studios, fraud detection services, and cloud infrastructure providers — that are located outside Pakistan. In providing services to Pakistani players, your personal data may therefore be transferred to and processed in countries other than Pakistan.

12.2 Where personal data is transferred internationally, apkba ensures that appropriate safeguards are in place, which may include: contractual clauses that require the receiving party to protect your data to standards equivalent to those applied by apkba; or engagement of processors certified under recognised international data protection frameworks.

12.3 You may request further information about the specific safeguards applied to any international transfer of your data by contacting [email protected].

13. Marketing Communications & Opt-Out

13.1 With your express consent at registration, apkba may send you promotional emails and platform notifications regarding new bonuses, PSL-season betting markets, slot promotions, Loyalty Program tier upgrades, and other apkba offers.

13.2 You may opt out of marketing communications at any time by: (a) clicking the "Unsubscribe" link in any marketing email; (b) updating your notification preferences in your account settings; or (c) contacting [email protected] with an opt-out request. Opt-outs are processed within five (5) business days.

13.3 Please note that opting out of marketing communications does not opt you out of operational and transactional messages — such as deposit confirmations, withdrawal notifications, KYC status updates, and responsible gaming alerts — which are sent as a necessary part of operating your account and cannot be disabled.

13.4 apkba does not share your contact details with third-party marketers. Promotional communications will only ever come from apkba directly, via the email address or push notification system you registered with.

14. Changes to This Privacy Policy

14.1 apkba reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The revised Policy will be published on this page with an updated effective date.

14.2 Where changes are material — for example, introducing a new category of data processing or a new category of third-party sharing — apkba will notify registered players by email or platform notification at least seven (7) days before the changes take effect.

14.3 Your continued use of apkba.org following the publication of a revised Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and may close your account in accordance with the Terms & Conditions.

15. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data apkba holds about you, please use the following contact channel:

This Privacy Policy was last reviewed and updated on 1 January 2026. We encourage you to review this page periodically to stay informed of how apkba protects your personal data.