Sunbet Privacy Policy – How We Protect Your Data in Pakistan

Sunbet collects only the information that is genuinely necessary to provide the platform service, comply with applicable legal obligations and protect members from fraud. We do not collect data speculatively or for purposes that have not been declared in this policy.

The following table outlines the categories of data we collect and why:

Sunbet collects personal data through several channels, all of which are directly related to your use of the platform.

Direct Collection

The majority of your data is collected directly from you when you register a Sunbet account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion. You are always aware of this data collection because you are actively providing the information.

Automated Collection

Some data is collected automatically when you use the Sunbet platform. This includes technical data such as your IP address and device information, which is recorded as part of standard platform security and fraud prevention processes. Session and usage data is also collected automatically to help us understand how the platform performs and where improvements are needed.

Third-Party Sources

In limited circumstances, Sunbet may receive data about you from third parties. This most commonly occurs during the KYC verification process when we use a verified identity service provider to confirm the authenticity of documents you have submitted. We may also receive fraud-related data from payment processors as part of transaction security checks. Any data received from third parties is handled under the same standards as data collected directly from members.

Every data processing activity at Sunbet has a defined lawful basis and a specific operational purpose. We do not process data because we might find it useful someday – we process it only when there is a clear, current reason to do so.

• To provide the Sunbet service: Processing your bets, managing your account balance, crediting winnings and processing PKR withdrawals to your registered payment method all require access to your identity and financial data.
• To verify your identity: Pakistani and international anti-money laundering regulations require Sunbet to verify the identity of members before processing withdrawals above certain thresholds. KYC documents are used exclusively for this purpose.
• To prevent fraud: Technical data including IP addresses, device fingerprints and session patterns are analysed to detect suspicious activity such as account takeover attempts, bonus abuse and coordinated fraud schemes.
• To comply with legal obligations: Sunbet is required to maintain records of financial transactions and member identities for defined retention periods under applicable financial regulations.
• To communicate with you: Your contact details are used to send account-related communications including deposit confirmations, withdrawal notifications, security alerts and responses to your support queries.
• To send marketing communications: With your explicit prior consent, Sunbet may send you promotional offers, bonus announcements and platform news. You can withdraw this consent at any time.
• To improve the platform: Aggregated and anonymised usage data helps Sunbet understand which features are working well and which need improvement. This analysis does not identify individual members.
• To support responsible gaming: Transaction and session data is monitored to identify patterns that may indicate problem gambling behaviour. This monitoring is conducted to protect members, not to exploit them.

Sunbet shares personal data only where there is a legitimate operational or legal necessity to do so. We do not share data with third parties for their own commercial purposes. The categories of recipients who may receive your data are as follows.

Payment Processors

To process your PKR deposits and withdrawals, Sunbet shares the minimum necessary payment information with our payment processing partners, which include the operators of Easypaisa, JazzCash, NayaPay, SadaPay and Pakistan's IBFT banking network, as well as Visa and Mastercard for card transactions. These processors receive only the data required to complete the specific transaction and are contractually bound to process it for no other purpose.

Identity Verification Providers

During the KYC verification process, your identity documents may be processed by a certified identity verification service provider. This provider confirms the authenticity of your CNIC and related documents. All such providers are under strict contractual data protection obligations.

Technology and Hosting Providers

The technical infrastructure that powers Sunbet is operated by cloud hosting and technology service providers. These providers process data only on Sunbet's instructions and under contractual data processing agreements that prohibit any independent use of member data.

Regulatory and Law Enforcement Authorities

Sunbet will disclose member data to regulatory bodies or law enforcement agencies where required to do so by law, valid legal order or in response to a credible investigation of serious financial crime. In such cases, Sunbet will only disclose the minimum data required to comply with the legal obligation.

Sunbet uses cookies and similar technologies on the platform to ensure it works correctly, to secure your session and to understand how members use the service. Here is what that means in practice.

Essential Cookies

These cookies are necessary for the Sunbet platform to function. They maintain your login session, remember your language preference and protect you from cross-site request forgery attacks. You cannot opt out of essential cookies; disabling them would prevent the platform from working.

Analytics Cookies

Sunbet uses anonymised analytics data to understand which pages are visited most frequently, where members encounter difficulties and how overall platform performance can be improved. This data is aggregated and does not identify individual members. You can opt out of analytics cookies through your account settings.

Preference Cookies

Preference cookies remember your settings within the Sunbet platform, such as your preferred deposit method and any display customisations you have made. These improve your experience by not requiring you to re-enter preferences on every visit.

No Advertising Cookies

Sunbet does not use advertising tracking cookies and does not allow third-party advertising networks to place cookies on our platform. Your browsing activity on Sunbet is not shared with advertising platforms for retargeting purposes.

Data security at Sunbet is treated as an operational priority, not a compliance checkbox. The following technical and organisational measures are in place to protect your personal information.

• Encryption in transit: All data transmitted between your device and the Sunbet platform is encrypted using TLS 1.3 (256-bit encryption). This applies to every page on the site, including login, account management and payment pages.
• Encryption at rest: Sensitive data stored on Sunbet's servers, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access controls: Access to member personal data within Sunbet is restricted on a strict need-to-know basis. Staff who do not have a legitimate operational reason to access specific categories of data do not have access to them.
• Two-factor authentication: All Sunbet staff access to internal systems that contain member data is protected by mandatory two-factor authentication.
• Regular security audits: Sunbet conducts regular independent security audits and penetration testing of its platform infrastructure. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
• Incident response: Sunbet maintains a documented incident response plan. In the event of a security incident, a dedicated response team activates within one hour of detection.

Sunbet retains personal data only for as long as necessary for the purposes for which it was collected, taking into account any legal obligations that require retention for specified periods.

• Active account data: Identity, contact and financial data associated with an active account is retained for the duration of the account's active status.
• Transaction records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five years after the transaction date, as required by applicable financial regulations.
• KYC documents: Identity verification documents are retained for five years after the member account is closed, in compliance with anti-money laundering record-keeping requirements.
• Communication records: Customer support correspondence is retained for two years from the date of the communication for dispute resolution purposes.
• Technical and usage data: Anonymised and aggregated technical data used for platform analytics is retained indefinitely. Identifiable technical data (such as IP address logs linked to a specific account) is retained for 12 months.
• Data after account closure: When you close your Sunbet account, active processing of your data ceases. Data required to be retained under legal obligations is archived securely with access restricted to compliance personnel only.

As a Sunbet member you have the following rights in relation to your personal data. These rights can be exercised free of charge by contacting Sunbet support at support@sunbet-bangla.com. Sunbet will respond to all rights requests within 30 days.

Sunbet is required by applicable financial regulations to verify the identity of members before processing withdrawals above defined thresholds. This process is called Know Your Customer (KYC) verification and it is standard practice across all regulated financial and gaming services.

When Sunbet requests KYC documents, the following specific protections apply to how those documents are handled. Your CNIC copy and any other identity documents submitted to Sunbet are stored in an encrypted, access-controlled document management system that is separate from the main platform database. Access to this system is restricted to a small number of compliance team members who have a direct operational need. KYC documents are used exclusively to verify that the identity you registered with matches your government-issued documentation. They are not used for any other purpose and are not shared with any third party except the certified identity verification service provider where applicable.

Once your KYC verification is complete, your account is marked as verified and you will not normally be required to submit documents again unless there is a specific change in your account circumstances, such as a change of registered payment method or a significant increase in transaction volumes that triggers a review under our anti-money laundering procedures.

Sunbet is an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If Sunbet becomes aware that a member is under 18, the account will be immediately closed, all data will be deleted as soon as legally permissible, and any funds deposited will be returned to the originating payment method after verification.

If you are a parent or guardian and believe your child may have registered a Sunbet account without your knowledge, please contact support@sunbet-bangla.com immediately. Sunbet will investigate and take appropriate action within 24 hours of the report.

Sunbet reviews this Privacy Policy at least annually and updates it whenever there is a material change to how we collect, use or protect member data. When a significant change is made, Sunbet will notify all registered members by email and by displaying a notice on the platform at least 14 days before the updated policy takes effect.

Minor changes – such as clarifications of existing practices, corrections of typographical errors or updated contact information – may be made without advance notice. The "Last Updated" date at the top of this page always reflects when the most recent revision was made.

Your continued use of Sunbet after a revised Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with material changes to the policy, you may close your account by contacting support before the effective date.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Sunbet has handled your personal information, please contact us through the following channels.

• Email: support@sunbet-bangla.com – for privacy queries, mark the subject line "Privacy Enquiry"
• Live chat: Available 24/7 through the Sunbet platform – simply start a chat and ask to speak with the data privacy team
• Formal data rights requests: Email support@sunbet-bangla.com with subject "Data Rights Request" – Sunbet will respond within 30 days

Sunbet takes all privacy concerns seriously. If you feel your concern has not been adequately addressed through our internal process, you have the right to escalate to the relevant regulatory authority in your jurisdiction.