apk2room Privacy Policy

apk2room ("we", "us", "our") operates the online gaming platform accessible at apk2room.org. We are the data controller responsible for the personal information you provide when you register, deposit funds, place bets, or otherwise interact with our platform.

This Privacy Policy explains how apk2room collects, processes, stores, shares, and protects your personal data in connection with the services we offer, including sports betting, cricket markets, live casino, slot games, and wheel games. It applies to all Pakistani players and any other users who access the apk2room platform regardless of their location.

By creating an account on apk2room or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform immediately.

apk2room collects the following categories of personal data from players. We only collect information that is necessary for a defined purpose — we do not collect data speculatively or beyond what is operationally required.

We do not collect sensitive personal data such as biometric information, religious affiliation, or political opinions. If any such data is inadvertently submitted by a player, it will be deleted without processing.

apk2room collects personal data through the following channels and mechanisms:

• Direct registration: When you create an account on apk2room, you actively provide identity and contact data through the registration form.
• KYC verification: When we request identity verification documents (CNIC, passport), you upload these directly to our secure KYC portal.
• Financial transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency, relevant financial data is exchanged between apk2room and the payment provider.
• Automated technical collection: Our servers automatically log IP addresses, device identifiers, and session data each time you access the platform. This happens passively as part of standard platform operation.
• Cookie and tracking technologies: apk2room uses first-party cookies and similar technologies to maintain your login session, remember preferences, and analyse how players interact with our platform. See Section 7 for full cookie details.
• Customer support interactions: Any time you contact our support team via live chat or email, the content of that interaction is recorded and linked to your player account for quality and compliance purposes.
• Third-party game providers: Where you play games supplied by licensed third-party studios available on apk2room, those providers may share anonymised gameplay analytics with us for platform improvement purposes.

apk2room processes your personal data for the following specific and legitimate purposes:

1. Account creation and management: To register your player account, verify your identity, manage your profile, and provide you with access to all platform services including cricket betting, sports betting, slot games, and the apk2room Casino.
2. Transaction processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, and banking partners, and to maintain an accurate record of your financial activity on the platform.
3. KYC and AML compliance: To fulfil our obligations under applicable anti-money laundering regulations by verifying player identities and monitoring transactions for suspicious activity.
4. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
5. Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance in relation to your apk2room account.
6. Platform improvement: To analyse usage patterns and player behaviour in aggregate so that we can improve the gaming experience, fix technical issues, and develop new features on the platform.
7. Regulatory reporting: To comply with reporting obligations to our international licensing authority and, where required by law, to share information with competent regulatory or law enforcement bodies.
8. Marketing communications: Where you have provided explicit consent, to send you promotional offers, bonus alerts, PSL season specials, and platform news via email or SMS. You may withdraw this consent at any time.

apk2room relies on the following legal bases to process your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract with you — i.e., to operate your player account, process bets, and handle deposits and withdrawals. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable KYC, AML, and regulatory reporting obligations under our international gaming licence and any applicable local legislation.
• Legitimate interests: Processing carried out in furtherance of apk2room's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: Where we process data for optional purposes — such as sending marketing communications — we will always obtain your explicit, informed consent beforehand. You may withdraw that consent at any point without affecting the lawfulness of processing carried out prior to withdrawal.

apk2room does not sell your personal data. We share it only with the following categories of trusted parties, strictly for the purposes outlined in this policy, and always subject to contractual data protection obligations:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the financial data necessary to process your deposit and withdrawal requests. Each payment partner operates under its own privacy policy and is independently responsible for data it receives.
• KYC verification providers: Authorised third-party identity verification services receive your submitted KYC documents (CNIC, passport) to conduct identity checks on our behalf. These providers are contractually bound to handle your documents securely and only for verification purposes.
• Licensed game studios: Third-party game providers whose titles are available on apk2room may receive a session token and anonymised player identifier to deliver the game experience. They do not receive your full name, CNIC, or financial details.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or the rules of our international gaming licence, apk2room will disclose player data to competent authorities. We will notify affected players where legally permitted to do so.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity vendors who support the technical operation of the apk2room platform process data on our behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and compliance consultants who require access to specific player data to provide professional services to apk2room, subject to professional confidentiality obligations.

In all cases, apk2room applies the principle of data minimisation — we share only the specific data elements that each recipient requires to fulfil their function, and no more.

apk2room uses cookies and similar tracking technologies to operate the platform effectively, maintain security, and understand how players use our services. A cookie is a small text file stored on your device by your browser when you visit a website.

Essential and security cookies are strictly necessary and cannot be disabled without disrupting your access to the platform. Functional and analytics cookies can be managed through your browser settings. apk2room does not use third-party advertising cookies or cross-site tracking pixels.

apk2room retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligations that require a longer retention period.

• Active account data: Retained for the full duration of your registered account and for a period of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations and our international gaming licence conditions.
• KYC documents: Retained for five (5) years from the date of submission or account closure, whichever is later, subject to regulatory requirements.
• Support correspondence: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Technical logs (IP, session): Retained for twelve (12) months from the date of generation, after which they are automatically purged from our systems.
• Marketing consent records: Retained for the duration of the consent plus three (3) years, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. If you request early deletion of your data, we will assess whether any legal obligation prevents us from fulfilling the request and will notify you of the outcome within thirty (30) days.

As a player on apk2room, you hold the following rights in respect of your personal data. We are committed to facilitating the exercise of these rights without unnecessary delay:

• Right of access: You may request a copy of all personal data apk2room holds about you. We will provide this within thirty (30) days of receiving a valid request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Most account information can be updated directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that apk2room delete your personal data. This right is subject to limitations where retention is required for legal or regulatory compliance purposes.
• Right to restrict processing: You may request that apk2room pause the processing of your personal data in certain circumstances, such as while you contest its accuracy or the legitimacy of our processing.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing based on our legitimate interests or carried out for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting our support team or updating your account notification preferences.

To exercise any of the above rights, please contact our support team via live chat on the platform or at the email address listed in Section 13. We may need to verify your identity before processing your request to protect against unauthorised data access.

apk2room is strictly an adult gaming platform. Access to all services is limited to individuals who are at least 21 years of age. We do not knowingly collect personal data from individuals under the age of 21, and we do not direct any marketing or promotional content towards minors.

If apk2room discovers that personal data has been submitted by or on behalf of an individual under 21 years of age, we will immediately suspend the associated account, delete all collected data, and reverse any associated financial transactions where technically possible.

If you are a parent or guardian and believe that your child has accessed or registered on apk2room, please contact our support team immediately so that we can take prompt remedial action.

apk2room implements a multi-layered approach to data security, combining technical controls, organisational procedures, and staff training to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

Our key technical security measures include:

• AES-256 encryption for all personal and financial data stored in our databases
• TLS 1.2 or higher for all data transmitted between your device and our servers
• Multi-factor authentication (MFA) available for player accounts and mandatory for all apk2room administrative access
• Continuous intrusion detection and real-time security monitoring of our infrastructure
• Regular independent penetration testing and vulnerability assessments conducted by certified security professionals
• Isolated, segregated database environments ensuring player data is separated from operational systems

Despite these measures, no digital platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, apk2room will notify affected players without undue delay and will take all necessary steps to contain and remediate the incident.

You also play an important role in securing your account. We strongly recommend that you use a unique, strong password for your apk2room account, enable any available MFA options, and never share your login credentials with any third party.

apk2room reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are significant, we will notify registered players via the email address on their account or through a prominent notice on the platform prior to the changes taking effect. For minor or editorial amendments, the updated policy will simply be published on this page without individual notification.

Your continued use of the apk2room platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a change, you should discontinue using the platform and may request account closure.

We encourage all players to periodically review this page to stay informed about how apk2room protects and manages their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way apk2room handles your personal data, our dedicated support and compliance team is available to assist you around the clock.

• Email: [email protected]
• Live Chat: Available directly on the apk2room platform — look for the chat icon on any page
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and provide a substantive response within 30 calendar days

When contacting us about a data rights request, please include your registered username and a brief description of your request so that we can locate your records and respond efficiently. We may request proof of identity before processing sensitive data requests to protect player accounts from unauthorised access.