32 Slots Privacy Policy — How We Protect Your Data

This Privacy Policy applies to all members and visitors of the 32 Slots platform, accessible at 32slots.app. It covers the website, all gaming products (sports betting, live casino, poker, Aviator, and related features), the mobile-optimised experience, and any communication between you and 32 Slots including support interactions via email and live chat.

When you register at 32 Slots, make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, or any other accepted method, place a bet, contact our support team, or simply browse the platform, certain personal data is generated or collected. This policy explains what that data is, how it is used, and how it is protected.

We do not sell your personal data to third parties for marketing. We do not share your data beyond what is strictly necessary to operate the platform and meet our legal obligations. These are not just words — they reflect how 32 Slots actually operates as a platform built for Pakistani players who expect their information to be treated with respect.

32 Slots collects personal data across several categories depending on how you interact with the platform. Below is a complete picture of what we may hold about you as a member.

We do not collect special categories of sensitive personal data (such as health information, political views, or biometric data) except where voluntarily and explicitly provided by you in a support context — for example, where a member discloses a health-related reason for a responsible gaming request.

Data is collected through several distinct routes at 32 Slots:

• Direct input: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting support, or entering a promotion.
• Automatic collection: Technical data generated when your device accesses the 32 Slots platform — IP addresses, session logs, device identifiers — collected via server logs and analytics tools.
• Cookies and similar technologies: As described in Section 07 below, we use cookies to maintain session state, prevent fraud, and understand how members navigate the platform.
• Payment processors: When you deposit or withdraw via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card networks, those providers confirm the transaction status and certain transaction metadata to 32 Slots. We do not receive full payment credential details — those remain with the payment provider.
• Third-party verification providers: During KYC, identity documents submitted to 32 Slots may be verified using third-party identity verification services. These providers confirm document authenticity and return a verification result — they do not retain your data independently beyond their stated retention period.

32 Slots processes your personal data for the following purposes, each of which has a defined legal basis:

We do not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a clear legal basis.

32 Slots shares your personal data with third parties only in the following defined circumstances. We do not sell your data to third parties for advertising or marketing purposes under any circumstances.

• Payment providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-connected banks, Visa and Mastercard networks receive the data necessary to process your transactions. Each provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC services receive identity document images for verification during the account verification process. These providers are contractually restricted from using your data for any purpose other than verification.
• Gaming technology providers: Software providers whose games are available on the 32 Slots platform may receive session data required to operate their titles. This is limited to session identifiers and game outcome data — not your personal identity details.
• Fraud detection and security providers: We use third-party services to analyse login patterns, payment data, and betting behaviour to detect fraud and protect the integrity of 32 Slots. These services process data under contractual data protection agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or instruction from a competent regulatory authority, 32 Slots is obligated to disclose relevant member data. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of the 32 Slots platform, member data may be transferred to the successor entity. You will be notified of any such transfer in advance where it materially affects your rights under this policy.

All financial transactions at 32 Slots are denominated in PKR. When you make a deposit or withdrawal, the payment data flows between you, your chosen payment provider (Easypaisa, JazzCash, etc.), and 32 Slots. 32 Slots receives confirmation that a transaction was completed, along with the transaction amount and a masked account reference. Full account numbers or card details are processed entirely by the payment provider and are never stored on 32 Slots servers.

KYC (Know Your Customer) verification is required before your first withdrawal and may be requested at any stage where 32 Slots has a legitimate reason to verify your identity. KYC typically requires:

• A copy of your valid CNIC (Computerised National Identity Card) — front and back.
• A recent utility bill or bank statement confirming your residential address in Pakistan.
• Source-of-funds documentation where deposits exceed certain thresholds or where transaction patterns indicate a need for further review.

KYC documents are stored securely for the period required to comply with anti-money laundering obligations. They are not shared with third parties except identity verification providers engaged for the sole purpose of document authentication and regulatory authorities where legally required.

32 Slots maintains transaction records for all members for a minimum period as required under applicable financial regulations. These records are used for dispute resolution, audit purposes, and legal compliance — not for marketing or analytics.

32 Slots uses cookies and similar technologies (local storage, session storage) to deliver a functional and secure platform experience. The following categories of cookies are in use:

• Strictly necessary cookies: Required for the platform to function. These maintain your login session, remember your language preference, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance cookies: Anonymised analytics data that helps 32 Slots understand how members navigate the platform — which pages are visited most, where users encounter errors, and how long sessions typically last. This data is aggregated and cannot identify you individually.
• Fraud prevention cookies: Used to identify patterns consistent with fraudulent activity, multi-accounting, or automated access. These are necessary for the security of all 32 Slots members.
• Preference cookies: Store your display preferences such as bet history view settings and notification preferences across sessions.

32 Slots does not use third-party advertising cookies or allow ad networks to track your behaviour on the platform. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will affect your ability to log in and use core features.

32 Slots retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your membership at 32 Slots and for a period of five years following account closure, to fulfil our legal and regulatory obligations.
• Financial transaction records: Retained for a minimum of five years following each transaction, in accordance with financial record-keeping requirements.
• KYC verification documents: Retained for five years from the date of verification or the date of account closure, whichever is later.
• Support communication records: Retained for two years from the date of the last interaction, unless the matter relates to a legal dispute in which case records are retained until the dispute is fully resolved.
• Betting and gaming history: Retained for five years. Anonymised aggregated analytics data may be retained indefinitely as it cannot be linked to individual members.
• Self-exclusion records: Where a member has self-excluded, the record of exclusion is retained indefinitely to ensure that re-registration attempts during the exclusion period are identified and prevented.

After the applicable retention period expires, personal data is securely deleted or anonymised. Anonymised data — where your identity cannot be recovered from the remaining information — may be retained for statistical and platform improvement purposes without restriction.

32 Slots applies a layered security architecture to protect member data. Our security measures include:

• Encryption in transit: All data transmitted between your device and the 32 Slots platform is encrypted using TLS (Transport Layer Security). This applies to login sessions, transaction data, and all account management functions.
• Encryption at rest: Sensitive personal data stored in our databases — including identity documents and financial data — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Internal access to member personal data at 32 Slots is restricted to staff who require it for their specific job function. All internal access is logged and audited. Data access is governed by a least-privilege policy.
• Fraud monitoring: Automated and manual systems monitor for unusual account activity, suspicious login attempts, and transaction anomalies that may indicate unauthorised access.
• Regular security assessments: The 32 Slots platform and its associated infrastructure undergo periodic security assessments to identify and address vulnerabilities.

No security system is entirely impenetrable. In the event of a data breach affecting your personal data, 32 Slots will notify affected members without undue delay and take immediate steps to contain and investigate the incident.

You also have a responsibility to protect your own account security. Use a strong, unique password for your 32 Slots account, enable two-factor authentication where available, and never share your login credentials with anyone. 32 Slots will never ask for your password over email or live chat.

As a 32 Slots member, you have the following rights regarding your personal data. These rights can be exercised by contacting us at support@32slots.app:

To exercise any of the above rights, send a written request to support@32slots.app. Please include your registered email address and account reference number. 32 Slots will respond within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days with notice.

These rights are not absolute — in some cases, legal obligations, legitimate interests, or the need to detect and prevent fraud may mean we cannot fulfil a request in full. Where this is the case, we will explain why in our response.

The 32 Slots platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If personal data from a minor is brought to our attention — either through our own detection or via a report — we will immediately delete that data and close the associated account.

Parents and guardians who believe a minor has registered at 32 Slots should contact support@32slots.app immediately with the details they have available. We will investigate and act on all such reports as a priority.

32 Slots may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to how we communicate our data practices. When material changes are made, we will notify registered members by email at least seven days before the changes take effect.

Minor updates — such as clarifications of existing language, corrections of typographical errors, or improvements to readability — may take effect immediately without prior notice. The date at the top of this page always reflects when the current version was last updated.

Your continued use of the 32 Slots platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with a material change, you should stop using the platform and request account closure before the effective date. Your verified real-money balance will be returned to you upon closure.

If you have any questions about this Privacy Policy, want to exercise your data rights, want to report a suspected data breach, or have concerns about how 32 Slots has handled your personal data, please contact us using the details below:

• Email: support@32slots.app
• Live Chat: Available in your 32 Slots account dashboard — 24 hours a day, 7 days a week
• Languages supported: English and Urdu

Privacy and data rights requests sent by email are handled as a priority. Please include your registered email address and, where possible, your 32 Slots member reference number so we can locate your account quickly and respond accurately.

We aim to acknowledge all data-related requests within 24 hours and to resolve them fully within 30 days.