Privacy Policy – 92coco Pakistan

1 Who We Are

This Privacy Policy applies to the 92coco online gaming platform, accessible at 92coco.onl ("the Platform", "92coco", "we", "us"). 92coco operates as an online casino, sports betting and gaming platform serving players in Pakistan.

When we refer to "personal data" in this policy, we mean any information that can identify you as an individual — either directly, such as your name and CNIC number, or indirectly, such as your device ID or IP address when combined with other data we hold.

By registering an account with 92coco or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein. If you do not agree with this policy, you should not use the platform.

2 Data We Collect

92coco collects personal data from you in two main ways: information you provide directly when registering and using the platform, and information collected automatically as a result of your interaction with our services.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, phone number and residential address. This information is required to create and maintain your account.
• Identity verification documents: A copy of your CNIC or other government-issued identity document, and in some cases a proof of address such as a utility bill or bank statement. These are required to complete account verification before withdrawals are processed.
• Payment information: Details of the payment methods you use to deposit and withdraw, such as your JazzCash or Easypaisa mobile number, bank account details, or card information. Note: full card numbers are never stored on our servers — see Section 6 for details.
• Support communications: When you contact 92coco support via chat, email or any other channel, we retain records of those communications to help resolve your query and improve our service.
• Preferences and settings: Responsible gaming limits, notification preferences and any other account configuration you set within the platform.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser version and screen resolution. This data is used for fraud prevention, platform security and compatibility purposes.
• Usage data: Pages visited, games played, bets placed, session duration and navigation patterns within the platform. This data helps us understand how the platform is used and where improvements can be made.
• Transaction data: A complete record of all deposits, withdrawals, bets, game rounds and bonus transactions on your account. This is retained for account management, dispute resolution and audit purposes.
• Cookies and similar technologies: See Section 7 for full details of how cookies are used on the platform.

3 How We Use Your Data

92coco uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose beyond what is described in this policy without obtaining your explicit consent first.

92coco does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. Any account restriction or suspension arising from automated fraud detection is reviewed by a member of our team before final action is taken.

4 Legal Basis for Processing

92coco processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil your account agreement with us — including registration, payments, game provision and support.
• Legal obligation: Processing required to comply with applicable laws, such as anti-money laundering checks and age verification.
• Legitimate interests: Processing for fraud prevention, platform security and general analytics where these interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have explicitly opted in. You can withdraw consent at any time.

5 Data Sharing & Third Parties

92coco does not sell your personal data. We may share your information with carefully selected third parties only where it is necessary to operate the platform or comply with legal obligations. All third-party processors are contractually bound to handle your data securely and only for the specific purpose for which it was shared.

Categories of third parties we may share data with include:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners and card networks — solely to process your deposits and withdrawals in PKR.
• Identity verification providers: Services that help us confirm your identity and age during account verification. These providers receive only the minimum data needed to carry out the check.
• Game content providers: Third-party casino game studios and sports data feed providers that power the games and markets on our platform. These providers may process game round data to determine outcomes and calculate payouts.
• Platform infrastructure providers: Cloud hosting, content delivery and server management services that keep the platform running. These providers process data only as instructed by 92coco and have no independent right to use your data.
• Fraud detection and security services: Specialist providers that assist with identifying suspicious activity, bot detection and account security monitoring.
• Legal and regulatory authorities: Where required by applicable law or in response to a valid legal request, we may disclose account or transaction data to relevant authorities. We will notify you of any such disclosure where we are legally permitted to do so.

92coco will never share your personal data with unrelated third parties for their own marketing, advertising or commercial purposes.

6 Payment Data & Financial Information

All financial transactions on 92coco are processed in Pakistani Rupees (PKR) via your chosen payment method — whether that is JazzCash, Easypaisa, Raast, direct bank transfer, debit or credit card, or another supported mobile wallet.

92coco takes the security of financial data very seriously. The following measures are in place specifically for payment information:

• Full card numbers are never stored on 92coco servers. Card payments are handled by a PCI-DSS compliant payment processor, and only a masked card reference is retained on our systems for account management purposes.
• Mobile wallet numbers (JazzCash, Easypaisa) are stored in encrypted form and are only used to process transactions you initiate.
• Bank account details provided for withdrawal purposes are stored securely and are only ever used to send funds to your verified account.
• All payment data is transmitted over encrypted TLS connections. No payment information is ever transmitted in plain text.

Withdrawal requests are only processed to payment methods that have been verified as belonging to the registered account holder. This protects you against unauthorised withdrawals and ensures funds always reach the correct destination.

7 Cookies & Tracking Technologies

92coco uses cookies and similar technologies on the platform. A cookie is a small text file stored on your device that helps the platform function correctly and allows us to recognise returning users. We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help prevent cross-site request forgery attacks. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as your preferred language, display settings and notification configuration. These are not strictly essential but significantly improve your experience.
• Analytics cookies: Help us understand how players navigate the platform — which pages are most visited, where players encounter issues, and how we can improve the overall experience. Data collected through analytics cookies is aggregated and not linked to your personal identity.
• Fraud prevention cookies: Used by our security systems to detect suspicious activity, unusual login patterns and potential account compromise. These are essential for the security of your account and the platform.

92coco does not use third-party advertising or tracking cookies. We do not share cookie data with ad networks or social media platforms.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core features of the platform. Most browsers allow you to block or delete cookies through their privacy or security settings.

8 Data Retention

92coco retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods we apply are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five years after account closure. This is required for anti-money laundering compliance and dispute resolution purposes.
• Transaction and betting history: Retained for a minimum of five years from the date of each transaction. This data may be required to resolve disputes, respond to regulatory inquiries or conduct audits.
• Support communications: Retained for three years from the date of the most recent communication in a given support thread, unless the matter relates to an ongoing dispute in which case records are kept until resolution.
• Marketing preference data: Retained for as long as you hold an active account. If you opt out of marketing, your opt-out preference is retained to ensure we do not accidentally contact you again.
• Analytics and usage data: Aggregated analytics data that cannot identify you individually is retained indefinitely. Session-level data linked to your account is retained for 12 months.

When retention periods expire, data is securely deleted or anonymised in a way that makes it impossible to re-identify the individual. We do not retain data beyond what is reasonably necessary.

9 Data Security

92coco implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. Our security measures include:

• TLS encryption on all data transmissions between your device and our servers.
• Encrypted storage of sensitive data fields including passwords (which are hashed and never stored in plain text), payment references and identity document copies.
• Access controls: Personal data is only accessible to members of the 92coco team who genuinely need it to perform their role. Access is logged and regularly reviewed.
• Intrusion detection and real-time monitoring systems that alert our security team to unusual access patterns.
• Regular security reviews of our platform infrastructure, code and data handling processes.
• Two-factor authentication options for player accounts, which we strongly recommend all players enable.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — use a strong, unique password, enable two-factor authentication, and never share your login details with anyone.

10 Your Rights Over Your Data

As a user of the 92coco platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team using the details in Section 14.

• Right of access: You can request a copy of the personal data we hold about you. We will provide this within a reasonable timeframe, typically within 30 days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. For certain data such as your registered name, we may require supporting documentation before making changes.
• Right to erasure: You can request deletion of your personal data. Please note that some data must be retained for legal and compliance reasons even after account closure, as described in Section 8. We will clearly explain what can and cannot be deleted in response to your request.
• Right to restrict processing: You can ask us to temporarily stop processing your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to object: You can object to processing based on legitimate interests, and you can withdraw consent for marketing communications at any time.
• Right to data portability: You can request your personal data in a structured, commonly used format so that you can transfer it elsewhere if you wish.

We will respond to all data rights requests as promptly as possible. We may need to verify your identity before processing certain requests to protect against unauthorised data access.

11 Marketing Communications

If you have opted in to receive marketing communications from 92coco, we may contact you by email or platform notification to let you know about promotions, bonuses, new games, PSL-related betting offers and other platform updates that we think may be of interest to you.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you.
• Updating your notification preferences within your 92coco account settings.
• Contacting 92coco support and requesting removal from all marketing communications.

Opting out of marketing will not affect essential service communications. We will still send you account notifications such as deposit confirmations, withdrawal status updates, verification requests and important security alerts — these are operational messages, not marketing, and cannot be disabled without closing your account.

12 Children & Underage Users

92coco is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account, deposit funds or place any bets on the platform.

Age verification is part of our standard account and withdrawal verification process. If we discover that we have inadvertently collected personal data from a player who is under 18, we will close the account immediately, void any activity on that account, return any real-money deposits where possible, and delete the personal data in accordance with our legal obligations.

If you are a parent or guardian and believe your child may have registered an account on 92coco, please contact us immediately at the email address in Section 14 so that we can investigate and take appropriate action.

13 Changes to This Privacy Policy

92coco may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page and notify registered players via the platform or by email where appropriate.

We encourage you to review this Privacy Policy periodically. Your continued use of the 92coco platform after any changes to this policy constitutes your acceptance of the updated version. If you do not agree with the updated policy, you should stop using the platform and contact support to close your account.

Minor updates — such as clarifications to existing provisions or corrections to typographical errors — will take effect upon publication without separate notification.

14 Contact Us & Data Requests

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how 92coco has handled your personal information, please reach out to our support team:

You can also find answers to common privacy-related questions on our FAQ page, or review the Terms and Conditions for the full player agreement.