dado92 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how dado92 ("dado92", "we", "us", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", "you") who register for, access, or use the dado92 website, mobile experience, casino games, sportsbook, and all associated services (collectively, the "Services").

dado92 operates as a data controller in respect of the personal data it collects directly from players. By registering an account on dado92 or otherwise using the Services, you confirm that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside dado92's Terms & Conditions, which together form the complete legal framework governing your relationship with dado92. If you do not agree with this Policy, you must not use the dado92 platform.

2 Data Controller

dado92 is the data controller responsible for the personal data collected through the platform. As data controller, dado92 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

dado92 operates under an international gaming licence and processes personal data in accordance with the data protection requirements of its licensing jurisdiction, as well as applicable anti-money laundering and know-your-customer regulations.

For all data protection enquiries, requests, or complaints, please contact dado92 at [email protected]. dado92 aims to acknowledge all data-related correspondence within five (5) business days.

3 Personal Data We Collect

dado92 collects the following categories of personal data from players, depending on the stage of their interaction with the platform:

dado92 does not intentionally collect sensitive personal data — such as racial or ethnic origin, political opinions, health data, or biometric data — unless it is strictly required for identity verification or responsible gaming purposes and you have given explicit consent.

4 How We Collect Your Data

dado92 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: When you visit the dado92 platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged into your account.
• From third-party service providers: dado92 may receive identity verification data from KYC service providers, fraud prevention data from security partners, and payment confirmation data from payment processors including JazzCash, EasyPaisa, and card networks.
• From publicly available sources: dado92 may supplement its records with data from publicly available databases where required for AML compliance, sanctions screening, or fraud prevention.

5 Purposes & Legal Basis for Processing

dado92 processes personal data only where a lawful basis exists for doing so. The following table sets out the primary purposes for which dado92 processes personal data and the corresponding legal basis for each:

Where dado92 relies on consent as a legal basis for processing — for example, for sending promotional emails about PSL betting offers or casino bonuses — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

6 Data Sharing & Disclosure

dado92 does not sell, rent, or trade your personal data. dado92 may share your personal data with third parties only in the following circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and other payment service providers receive the financial data necessary to process your PKR transactions. These providers operate under their own privacy policies and are subject to PCI-DSS compliance standards.
• Identity verification providers: dado92 uses third-party KYC and AML service providers to verify player identities and screen against sanctions lists. These providers receive identity data solely for verification purposes.
• Technology and hosting providers: dado92's platform infrastructure, cloud hosting, and software vendors may process personal data as data processors acting under dado92's instructions.
• Game content providers: Where you play games supplied by third-party game studios through the dado92 Casino platform, limited technical data (such as session ID and game result data) may be shared with those studios for game operation and fairness verification purposes.
• Regulatory and law enforcement authorities: dado92 will disclose personal data to licensing regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or regulatory obligation — without prior notice to the player where legally required.
• Professional advisers: dado92 may share personal data with its legal advisers, auditors, and insurers where necessary for the conduct of their professional services, subject to confidentiality obligations.

7 International Data Transfers

dado92 operates internationally and may transfer your personal data to countries outside your home jurisdiction, including countries that may not provide the same level of data protection as your local laws. Where such transfers occur, dado92 implements appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by relevant data protection authorities.
• Data processing agreements with all third-party processors that impose equivalent data protection obligations.
• Transfers only to third parties that have demonstrated adequate security and privacy practices.

For Pakistani players, your data may be processed on servers located outside Pakistan where dado92's infrastructure or service providers are based. By using the dado92 platform, you acknowledge and consent to these international transfers as described in this Policy.

8 Data Retention

dado92 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal data is retained for the full duration of your account with dado92 and is necessary for the ongoing operation of your account.
• Closed accounts: Following account closure, dado92 retains identity, financial, and transactional data for a minimum of five (5) years to comply with anti-money laundering regulations and licensing obligations. This data cannot be deleted on request during the mandatory retention period.
• Self-excluded players: Where a player has self-excluded from dado92, their data is retained for the duration of the self-exclusion period and for the applicable post-closure retention period, to prevent re-registration in breach of the self-exclusion.
• Marketing data: Where you have opted in to receive promotional communications, your marketing preferences are retained until you withdraw consent. Suppression records are retained indefinitely to ensure that future marketing is not sent to individuals who have opted out.
• Technical and usage data: Aggregated, anonymised usage data may be retained indefinitely for platform analytics and improvement purposes.

When personal data is no longer required and the applicable retention period has expired, dado92 securely destroys or anonymises that data in accordance with its internal data disposal procedures.

9 Cookies & Tracking Technologies

dado92 uses cookies, web beacons, pixel tags, and similar tracking technologies on the platform. These technologies serve the following purposes:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged into your dado92 account and security cookies that prevent cross-site request forgery. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred sports markets (cricket, PSL, UFC), and display options. These improve your experience but are not essential.
• Analytics cookies: Collect aggregated, anonymised data about how players use dado92, including which pages are visited most frequently and where users encounter errors. dado92 uses this data internally to improve the platform.
• Performance cookies: Monitor platform performance and load times to help dado92's technical team identify and resolve infrastructure issues.

dado92 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your dado92 account.

10 Data Security

dado92 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and dado92's servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that dado92 staff can only access personal data necessary for their specific job function.
• Multi-factor authentication requirements for all dado92 staff accessing systems that contain player data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Incident response procedures that ensure prompt detection and containment of any data security incidents.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, dado92 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11 Your Data Rights

Subject to applicable law and dado92's regulatory obligations, you have the following rights in respect of your personal data held by dado92:

To exercise any of the above rights, contact dado92 at [email protected] with a clear description of your request and your registered username. dado92 will respond within thirty (30) days. Where a request is complex or numerous, this period may be extended by up to a further sixty (60) days with prior notice.

dado92 will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable fee may be applied.

12 Minors & Age Policy

dado92 is strictly prohibited to persons under the age of 21. dado92 does not knowingly collect personal data from individuals under 21 years of age. If dado92 discovers that an account has been registered by a person under 21, it will immediately close the account, void all activity, and securely delete the associated personal data, subject only to any mandatory regulatory retention requirements.

Parents and guardians in Pakistan who believe that a minor in their household may have accessed dado92 are urged to contact dado92 support immediately at [email protected]. dado92 will prioritise such reports and act without delay.

13 Changes to This Policy

dado92 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, dado92 will notify registered players via email or through a prominent on-site notification prior to the changes taking effect. Continued use of dado92 following the effective date of any amended Policy constitutes your acceptance of the revised terms.

If you do not agree to the amended Privacy Policy, you must cease using dado92 and may request closure of your account by contacting dado92 support.

14 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or dado92's data practices, please contact the dado92 data protection team:

• Email: [email protected]
• Support Hours: 9:00 AM – 2:00 AM PKT, 7 days a week

dado92 aims to resolve all data protection queries and complaints within ten (10) business days. For complex matters, dado92 will provide regular status updates until the matter is fully resolved.

If you are not satisfied with dado92's response to a data protection complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Pakistani players may seek guidance from applicable consumer protection bodies regarding their data rights.