ShahSpin Privacy Policy — How We Protect Your Data

1. Introduction

ShahSpin ("we", "us", "our") operates the online gaming and sports betting platform available at shahspin.onl. This Privacy Policy sets out how ShahSpin collects, processes, stores and protects the personal information of registered players and visitors based in Pakistan and elsewhere.

We understand that privacy is important to you. Pakistan players trust us with personal and financial information when they register, deposit in PKR or place a bet — and we take that trust seriously. This policy is written in plain English so you know exactly where you stand, without needing a lawyer to decode it.

This policy should be read alongside the Terms and Conditions and Responsible Gaming pages, both of which form part of your overall agreement with ShahSpin.

2. What We Collect

ShahSpin collects personal data only when there is a clear reason to do so. The following table outlines the main categories of information we collect, how we obtain it and why it is needed.

Data We Do Not Collect

ShahSpin does not collect or store full debit/credit card numbers on our own servers — card transactions are handled directly by our licensed payment gateway partners. We also do not collect biometric data beyond what is necessary for identity verification, and we do not monitor your activity outside of the ShahSpin platform.

3. How We Use Your Data

Every piece of data ShahSpin collects is used for a specific operational or legal purpose. We do not process your personal information for any purpose beyond what is outlined below:

• Account Management: To create, maintain and secure your ShahSpin account, including verifying your identity and processing login requests.
• Payment Processing: To handle PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer and other supported methods, and to maintain an accurate transaction history.
• Identity Verification (KYC): To confirm that you are who you say you are, that you meet the minimum age of 18, and to comply with anti-money laundering obligations.
• Fraud Prevention and Security: To detect, investigate and prevent fraudulent transactions, account takeovers, multi-accounting and other prohibited activities.
• Service Delivery: To provide sports betting markets (including PSL, T20 cricket, football and esports), live casino games, slots and all other platform features.
• Responsible Gaming: To monitor betting patterns, apply deposit limits, session reminders and self-exclusion requests, and to identify players who may need support.
• Customer Support: To respond to your queries, resolve disputes and improve the quality of support interactions.
• Marketing Communications: To send promotional offers, bonus updates and platform news — only where you have opted in or not objected to receiving such communications.
• Platform Improvement: To analyse aggregated usage data and improve the user experience, performance and features of the ShahSpin platform over time.

4. Data Sharing

ShahSpin does not sell or commercially transfer your personal data to any external party. We share information only in the following strictly limited circumstances:

Payment Processors

To process PKR deposits and withdrawals, ShahSpin shares the minimum required payment information with our payment service providers, including JazzCash, Easypaisa, Raast and banking partners. These providers are contractually bound to process your data solely for the purpose of completing the transaction and are prohibited from using it for any other purpose.

Identity Verification Partners

When you submit documents for KYC verification, your identity data may be passed to a third-party verification service to confirm authenticity. These partners operate under strict data processing agreements and are not permitted to retain or use your data beyond the scope of verification.

Game and Technology Providers

Certain game studios and live casino providers whose games appear on ShahSpin may receive limited session data (such as a pseudonymous player ID and bet amounts) to operate their game logic and calculate outcomes. These providers do not receive your full personal profile.

Legal and Regulatory Disclosures

ShahSpin may disclose personal data if required to do so by applicable law, court order or lawful request from a government authority. We will only disclose the minimum information required to satisfy the legal obligation and, where permitted, we will notify you of such a request.

5. Data Retention

ShahSpin retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The general retention periods we apply are as follows:

• Active Account Data: Retained for the full duration of your account being active on the platform.
• Transaction Records: Financial transaction history in PKR is retained for a minimum of five years following the date of the transaction, in line with standard financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five years after account closure or the last transaction date, whichever is later.
• Support Correspondence: Live chat and email support records are retained for up to three years to assist in resolving any future disputes.
• Marketing Preferences: Records of your marketing opt-in or opt-out status are retained for as long as your account is active, plus a reasonable period thereafter to demonstrate compliance.
• Technical Logs: Server logs and device data are typically retained for a rolling 12-month period and then purged, unless required in connection with an active investigation.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an individual player.

6. Security Measures

Protecting your personal data is one of ShahSpin's core operational responsibilities. We implement a layered security approach that covers both the technical infrastructure and internal processes.

Technical Safeguards

• All data transmitted between your device and ShahSpin's servers is protected using TLS encryption (HTTPS).
• Personal and financial data stored in our databases is encrypted at rest using industry-standard algorithms.
• Account access is protected by password hashing — even ShahSpin staff cannot see your password in plain form.
• Critical account actions, including password resets and withdrawal requests, require additional verification steps.

Organisational Safeguards

• Access to player data within ShahSpin is restricted on a strict need-to-know basis. Staff who do not need access to personal data as part of their role do not have it.
• All team members with access to personal data are trained on data handling responsibilities and confidentiality obligations.
• Third-party service providers who process player data on our behalf are assessed for their security posture before engagement and are bound by data processing agreements.

7. Cookies & Tracking

ShahSpin uses cookies and similar tracking technologies to make the platform work properly, understand how it is being used and improve the experience for Pakistan players.

Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the platform to function — they manage your login session, remember your preferences during a visit and keep your account secure. You cannot opt out of these without breaking the platform.
• Performance & Analytics Cookies: These help us understand how players navigate the platform — which pages are visited most, where users drop off and how long sessions last. This data is aggregated and used only to improve the platform.
• Functional Cookies: These remember settings you have chosen, such as language preference or responsible gaming limits you have set, so you do not have to reconfigure them on every visit.
• Marketing Cookies: If you have opted in to promotional communications, these cookies help us understand which promotions are relevant to you — for example, whether you primarily bet on PSL cricket or prefer live casino games.

You can manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect how some features of the platform behave. Strictly necessary cookies cannot be disabled without impacting your ability to use ShahSpin.

8. Your Rights

As a ShahSpin player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or email at [email protected].

• Right of Access: You can request a copy of all personal data ShahSpin holds about you. We will respond within a reasonable period and provide the data in a clear, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or outdated, you have the right to request that we correct it. Some corrections may require re-verification of your identity.
• Right to Erasure: You may request deletion of your personal data. Where we are legally required to retain certain records (such as transaction history), we will explain which data must be retained and for how long.
• Right to Restrict Processing: In certain circumstances you can request that we limit the way we use your data while a dispute or query is being resolved.
• Right to Data Portability: You can request a copy of certain data you have provided to ShahSpin in a structured, machine-readable format.
• Right to Object: You can object to your data being used for direct marketing at any time. You can also object to processing based on legitimate interests, though in some cases we may have overriding grounds to continue.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you can withdraw that consent at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

9. Children's Privacy

ShahSpin is strictly an adults-only platform. Players must be at least 18 years of age to register and use the service. We do not knowingly collect personal data from anyone under the age of 18.

If we become aware — through identity verification, a third-party report or any other means — that a registered user is under 18, we will immediately suspend the account, void any active bets or bonuses, and return any remaining balance before permanently closing the account. Any data collected in connection with that account will be securely deleted once the account closure process is complete.

If you are a parent or guardian and believe your child has registered on ShahSpin without your knowledge, please contact support at [email protected] immediately so we can take appropriate action.

10. Policy Changes

ShahSpin may update this Privacy Policy from time to time to reflect changes in the platform, applicable law or our internal data practices. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

For material changes — those that significantly affect how your data is used or your rights as a player — ShahSpin will provide advance notice either through a notification displayed within the platform or via the email address associated with your account.

Continued use of ShahSpin after the effective date of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and contact support to request account closure.

We encourage you to review this page periodically so you are always aware of how your information is being handled. Older versions of the Privacy Policy are available on request by contacting support.

11. Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or how ShahSpin handles your personal data, please do not hesitate to get in touch. Our team is available 24/7 and treats privacy queries as a priority.

You can reach us via live chat directly within the platform or app, or by email at [email protected] — please include "Privacy Request" in the subject line along with your registered username so we can locate your account quickly.

For related policies and further information about using ShahSpin, the following pages may also be helpful: