betpto Privacy Policy

1. Introduction

betpto operates Pakistan's premier online casino and sports betting platform at betpto.org. In the course of providing our services — including cricket betting, PSL markets, live casino tables, slot games, and account management — betpto necessarily collects and processes personal data relating to our players and platform visitors.

betpto takes its data protection obligations seriously. This Policy has been prepared to give every betpto player a clear, honest, and complete picture of exactly how their personal information is handled. We believe that transparency about data practices is fundamental to the trust our Pakistani player community places in the betpto platform.

This Policy applies to all personal data collected through the betpto website at betpto.org, the betpto mobile platform, betpto customer support communications, and any other interaction you have with betpto as an organisation. It should be read alongside betpto's Terms and Conditions and Responsible Gaming Policy, both of which are available on this site.

2. Data Controller

For the purposes of applicable data protection legislation, betpto acts as the data controller in respect of the personal data of players and visitors to the betpto platform. As data controller, betpto determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable legal obligations.

If you have any questions about this Policy or betpto's data processing practices, or if you wish to exercise any of your data rights described in Section 11, please contact betpto's data protection team using the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

3.1 Registration Data

When you create a betpto account, we collect the following personal data which you provide directly:

• Full legal name as it appears on your government-issued identity document
• Date of birth (required to verify you are aged 21 or above)
• Residential address in Pakistan, including city (e.g. Karachi, Lahore, Islamabad, Faisalabad)
• Valid email address for account communications
• Mobile phone number for account security and verification purposes
• Username and encrypted password (betpto never stores passwords in plain text)

3.2 Identity Verification (KYC) Data

To comply with our regulatory obligations and to verify that you are aged 21 or above, betpto may request and collect copies of the following documents:

• National Identity Card (CNIC)
• Passport or driving licence
• Proof of residential address (utility bill, bank statement dated within 90 days)
• Proof of payment method ownership (e.g. screenshot of JazzCash or EasyPaisa account in your name)

3.3 Financial and Transaction Data

betpto collects and retains records of all financial transactions conducted through your betpto account, including:

• Deposit amounts, dates, and payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard)
• Withdrawal requests, amounts, and processing status
• Betting and gaming transaction history, including stakes, winnings, and game types
• Bonus credits and wagering activity records

betpto does not store full card numbers. Payment card data is handled directly by our PCI-DSS compliant payment processing partners and is not retained on betpto's own servers.

3.4 Technical and Usage Data

When you access betpto.org, our systems automatically collect certain technical data, including:

3.5 Communications Data

betpto retains records of communications between you and betpto's customer support team, including live chat transcripts, support ticket correspondence, and email exchanges. These records are retained to ensure continuity of support, resolve disputes, and maintain audit trails as required by our regulatory obligations.

3.6 Responsible Gaming Data

Where you use betpto's responsible gaming tools — including deposit limits, loss limits, cooling-off periods, or self-exclusion — betpto records your instructions and the dates they were applied. This data is used to enforce your restrictions and is treated with the highest level of confidentiality within betpto's systems.

4. How betpto Uses Your Personal Data

betpto uses the personal data it collects for the following purposes:

• Account Creation and Management: To register your betpto account, verify your identity, and maintain your account in good standing.
• Service Delivery: To allow you to place bets, play casino and slot games, make deposits and withdrawals, and access all betpto platform features.
• Age and Identity Verification: To confirm that you are aged 21 or above and that the personal details you have provided are accurate, as required under betpto's regulatory obligations.
• Payment Processing: To process your PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard, and to maintain accurate financial records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the betpto platform.
• Regulatory Compliance: To fulfil betpto's obligations under applicable gaming regulations, anti-money laundering requirements, and other legal obligations, including maintaining records as required by betpto's regulatory oversight body.
• Responsible Gaming: To monitor betting patterns, enforce player-set limits and self-exclusion instructions, and identify players who may be at risk of developing gambling-related harm.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through betpto's support channels.
• Platform Improvement: To analyse usage patterns and player feedback in order to improve the betpto platform's performance, usability, and game offering.
• Marketing Communications: To send you promotional communications about betpto bonuses, new games, and special offers — but only where you have given betpto your consent to receive such communications, or where betpto has a legitimate interest in doing so. You may opt out of marketing communications at any time.

5. Legal Basis for Processing

betpto processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and betpto — i.e., to operate your betpto account, process your bets and payments, and deliver the services you have signed up for.
• Legal Obligation: Processing required to comply with betpto's legal and regulatory obligations, including KYC verification, anti-money laundering checks, and record-keeping requirements under betpto's gaming regulatory framework.
• Legitimate Interests: Processing conducted for betpto's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and general platform improvement — provided those interests are not overridden by your own privacy interests.
• Consent: Where betpto relies on your consent as the legal basis for processing — most notably for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies & Tracking Technologies

betpto uses cookies and similar tracking technologies on the betpto platform to deliver a functional, personalised, and secure user experience. Cookies are small data files placed on your device when you visit betpto.org.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the betpto platform to function. These include session authentication cookies that keep you logged into your betpto account. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: Used to remember your betpto preferences, such as your preferred language, display settings, and responsible gaming notification choices.
• Analytics Cookies: Used to collect anonymised data about how players navigate and use the betpto platform. This data helps betpto identify areas for improvement and optimise the overall player experience.
• Security Cookies: Used to support betpto's fraud detection systems and to identify unusual or suspicious login activity, including detection of new or unrecognised devices accessing your betpto account.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the betpto platform. betpto does not use third-party advertising or behavioural tracking cookies that profile you for sale to external advertisers.

7. Sharing Your Personal Data

betpto does not sell your personal data. betpto may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing partners receive the minimum personal and financial data necessary to process your PKR deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services used to validate your CNIC or other identity documents as part of betpto's regulatory compliance obligations.
• Regulatory and Law Enforcement Authorities: betpto may disclose personal data to gaming regulatory authorities, financial intelligence units, or law enforcement agencies where required or permitted by applicable law, including in connection with anti-money laundering investigations.
• Fraud Prevention Services: Specialist fraud detection and prevention service providers who help betpto identify and prevent fraudulent activity, multi-accounting, and other prohibited conduct on the platform.
• Technology and Hosting Providers: Cloud infrastructure, platform hosting, and technology service providers who process data on betpto's behalf under strict contractual data processing obligations.
• Game Software Providers: Where required for the technical operation of specific casino or slot games, limited technical data may be shared with betpto's licensed game software suppliers.

8. International Data Transfers

betpto operates under an international gaming regulatory framework and, as such, some of the personal data betpto collects may be transferred to, stored in, or processed in jurisdictions outside Pakistan. Where such transfers occur, betpto takes appropriate steps to ensure that your personal data receives a level of protection consistent with applicable data protection standards.

These steps may include: entering into standard contractual data transfer clauses with the receiving party; relying on adequacy determinations where applicable; or implementing other lawful transfer mechanisms recognised under betpto's applicable regulatory framework. If you have questions about international transfers of your personal data, you may contact betpto's data protection team as set out in Section 15.

9. Data Retention

betpto retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your betpto account and for a minimum of five (5) years following account closure, as required under anti-money laundering regulatory obligations.
• Transaction Records: Betting, deposit, and withdrawal records are retained for a minimum of five (5) years following the date of the transaction.
• Customer Support Records: Support communications are retained for three (3) years following the close of the relevant support interaction.
• Technical and Log Data: Server logs and technical data are retained for periods ranging from six (6) months to twenty-four (24) months depending on the data type, as set out in the table in Section 3.4.
• Responsible Gaming Records: Self-exclusion and limit-setting records are retained indefinitely to prevent re-registration during an active exclusion period, and for a minimum of five (5) years following the expiry of any self-exclusion.

Once the applicable retention period expires, betpto will securely delete or permanently anonymise your personal data so that it can no longer be associated with you as an individual.

10. Security Measures

betpto implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption across all betpto platform connections, ensuring all data in transit between your device and betpto's servers is encrypted.
• Encrypted storage of all passwords using industry-standard hashing algorithms. betpto never stores passwords in plain text.
• Role-based access controls ensuring that only authorised betpto personnel with a legitimate business need may access player personal data.
• Regular security audits and penetration testing of the betpto platform infrastructure.
• Two-factor authentication options for betpto player accounts to add an additional layer of login security.
• Monitoring systems that detect and alert on unusual access patterns, including login attempts from unrecognised devices or IP addresses.

While betpto takes these measures seriously and maintains them as an ongoing priority, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, betpto will notify you without undue delay in accordance with applicable legal requirements.

12. Children & Minors

The betpto platform is strictly intended for adults aged 21 and above. betpto does not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification is a mandatory step in the betpto registration process, and betpto reserves the right to request documentary proof of age at any time.

If betpto discovers that personal data has been collected from a player who is under 21 years of age, betpto will close the relevant account immediately, void all associated bets and balances, and delete all personal data associated with the underage account as promptly as practicable. If you are a parent or guardian and believe that a minor has registered a betpto account using false information, please contact betpto support immediately so that betpto can take appropriate action.

13. Third-Party Links

The betpto platform may from time to time contain references or links to third-party websites, including affiliate partner sites and game software provider sites. This Privacy Policy applies solely to the betpto platform at betpto.org and does not extend to any third-party websites or services. betpto is not responsible for the privacy practices, data collection activities, or content of any third-party website. betpto strongly recommends that you review the privacy policy of any third-party website you visit.

14. Amendments to This Policy

betpto reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal or regulatory requirements, or the betpto platform's features and services. When betpto makes material changes to this Policy, we will post the updated version on betpto.org with a revised "Last Updated" date at the top of the Policy.

Where changes are significant, betpto will take reasonable steps to notify registered players, which may include sending a notification to your registered betpto email address. Your continued use of the betpto platform following the posting of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. betpto recommends that you review this Policy periodically to stay informed of how your personal data is handled.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or betpto's handling of your personal data, please contact betpto's data protection team. Our support team is available 24 hours a day, 7 days a week through the betpto platform's live chat function.

For written data protection enquiries, including requests to exercise your data rights under Section 11, please use the following contact email address (displayed as plain text only — not a clickable link):

When contacting betpto about a data protection matter, please include your registered betpto username, a clear description of your query or request, and any relevant reference numbers from previous correspondence. This will help betpto's data protection team locate your records and respond to you as efficiently as possible.