Privacy Policy
92dudu — Your Data, Protected

1 Who We Are

92dudu is Pakistan's premier online casino and sports betting platform, accessible at https://92dudu.org. The platform offers cricket betting, live dealer games, slots, crash games, and a full sportsbook covering PSL, international cricket, football, kabaddi, and UFC. 92dudu serves Pakistani players with local payment integrations including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20.

For the purposes of this Privacy Policy, "92dudu", "we", "us", and "our" refer to the legal entity operating the 92dudu platform under an international gaming licence. "You", "your", and "player" refer to any individual who accesses, registers on, or uses the 92dudu platform, including visitors who browse without registering.

This Privacy Policy explains our practices regarding the collection, use, storage, and disclosure of personal data obtained through your interaction with the 92dudu platform. It applies to all data processing activities carried out by or on behalf of 92dudu, regardless of the device or method of access used.

2 Data We Collect

92dudu collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the platform, and in limited cases from third-party verification and payment service providers. The categories of data we collect are set out below.

3 How We Use Your Data

92dudu uses the personal data collected for the following documented purposes. Each purpose is mapped to a lawful basis for processing, which is detailed in Section 4.

• Account creation and management: Creating and maintaining your 92dudu player account, verifying your identity, and managing your account settings and preferences;
• Transaction processing: Processing deposits, withdrawals, and bonus credits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20;
• KYC and fraud prevention: Conducting identity and age verification to ensure compliance with our 21+ age restriction policy, and detecting, investigating, and preventing fraudulent activity, money laundering, and prohibited conduct;
• Regulatory compliance: Meeting obligations imposed by our international gaming licence, including player identification, transaction monitoring, and reporting to relevant authorities where legally required;
• Customer support: Responding to your queries, complaints, and requests via live chat and email in English and Urdu;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience for players across Pakistan — from Karachi to Lahore, Islamabad to Faisalabad;
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and, where appropriate, proactively offering responsible gaming tools or support;
• Marketing communications: Sending promotional emails, SMS notifications, and in-platform messages about bonuses, PSL cricket promotions, and new features — but only where you have given your explicit consent to receive such communications;
• Legal proceedings: Establishing, exercising, or defending legal claims if a dispute arises between you and 92dudu.

92dudu will not use your personal data for any purpose that is incompatible with those stated above without first obtaining your consent or establishing a new lawful basis for doing so.

4 Legal Basis for Processing

Under applicable data protection law, every instance of personal data processing must rest on a documented lawful basis. 92dudu relies on the following legal bases for the processing activities described in Section 3:

• Contractual necessity: Processing required to perform our contract with you — i.e., the 92dudu Terms and Conditions — including account creation, identity verification, transaction processing, and customer support;
• Legal obligation: Processing required to comply with applicable laws and our international gaming licence obligations, including KYC verification, anti-money laundering screening, and regulatory reporting;
• Legitimate interests: Processing carried out for the legitimate business interests of 92dudu that do not override your privacy rights — including fraud detection, platform security, responsible gaming monitoring, and internal analytics. We conduct a balancing test before relying on this basis;
• Consent: Processing based on your freely given, specific, and informed consent — used exclusively for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

92dudu does not sell your personal data to any third party. Data is shared with external parties only in the circumstances described below, and always subject to appropriate contractual safeguards requiring the recipient to maintain confidentiality and use the data only for the specified purpose.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processing partners receive only the transactional data necessary to execute your deposit or withdrawal;
• Identity verification providers: Third-party KYC service providers receive your identity documents and biographic data solely for the purpose of verifying your age and identity in accordance with our regulatory obligations;
• Game content providers: Slot, live dealer, and crash game providers may receive a pseudonymised player identifier and session data to enable gameplay and calculate RTP. No directly identifying personal data (such as your name or CNIC) is shared with game providers;
• Regulatory and law enforcement authorities: 92dudu will disclose personal data to competent authorities — including gaming regulators, financial intelligence units, and law enforcement agencies — where required by law or a valid court order. We will notify affected players of such disclosures where permitted by law to do so;
• Professional advisers: Lawyers, auditors, and other professional advisers who require access to data to provide services to 92dudu, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 92dudu's assets, your personal data may be transferred to the acquiring entity, provided it assumes the privacy obligations in this policy.

6 Cookies & Tracking Technologies

92dudu uses cookies and similar technologies — including local storage, session storage, and pixel tags — to operate the platform, recognise returning players, and analyse usage patterns. Cookies are small text files placed on your device when you visit the site.

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair the platform's ability to function — including preventing login. Blocking analytics cookies will not affect your access to games or account features.

7 Data Retention

92dudu retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our international gaming licence obligations. The following retention periods apply:

• Account and identity data (active accounts): Retained for the full duration of your account relationship with 92dudu;
• Account and identity data (closed accounts): Retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with regulatory requirements;
• Gaming history: Retained for a minimum of three (3) years following the last recorded gaming activity, for the purposes of dispute resolution and responsible gaming monitoring;
• Customer support communications: Retained for two (2) years following the closure of each support interaction or complaint;
• Marketing consent records: Retained for the duration of your consent plus three (3) years after withdrawal, to evidence compliance with consent requirements;
• Technical and log data: Retained for a maximum of twelve (12) months from collection, unless retained for longer as part of a security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. 92dudu conducts periodic data retention audits to ensure compliance with this schedule.

8 International Data Transfers

92dudu operates under an international gaming licence and may process or store your personal data on servers located outside Pakistan. Where personal data is transferred to a jurisdiction that does not provide a level of data protection equivalent to international standards, 92dudu will implement appropriate safeguards to protect the data in transit and at rest.

Safeguards used for international data transfers include: standard contractual clauses with data processors and sub-processors, data processing agreements with all third-party service providers, and technical security controls including end-to-end encryption for data in transit. 92dudu reviews the security posture of all data processors on an annual basis.

9 Your Privacy Rights

As a 92dudu player, you have the following rights in relation to your personal data. These rights are exercisable free of charge by contacting our support team via live chat or by emailing [email protected] with the subject line "Privacy Rights Request":

• Right of Access: You have the right to request a copy of the personal data 92dudu holds about you, along with information about how it is used and with whom it is shared;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For basic account details (email, phone number, address), you can update these directly in your account settings;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain data under our gaming licence and anti-money laundering requirements;
• Right to Restriction: You have the right to request that we restrict processing of your personal data while a correction or objection request is being assessed;
• Right to Data Portability: Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it directly to another controller where technically feasible;
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for responsible gaming monitoring purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

92dudu will respond to all privacy rights requests within 30 calendar days. Where a request is complex or we receive a high volume, we may extend this by a further 60 days, in which case we will notify you within the initial 30-day period and explain the reason for the delay.

10 Children's Privacy

The 92dudu platform is strictly restricted to individuals aged 21 years and over. We do not knowingly collect, use, or store personal data relating to any person under the age of 21. Age verification is conducted at registration and mandatorily before processing any withdrawal request.

If 92dudu becomes aware — through its own verification processes or through a report from a parent, guardian, or third party — that a person under 21 has registered an account or provided personal data, we will immediately suspend the account, delete all associated personal data, and take appropriate steps to return any deposited funds (excluding bonus funds) to the original payment source.

11 Marketing Communications

92dudu may send you promotional emails, SMS notifications, and in-platform messages about bonuses, PSL cricket betting specials, new slot releases, and seasonal promotions — but only where you have given your explicit, freely given, and informed consent to receive such communications at registration or through your account settings.

Marketing communications are always clearly identified as promotional material from 92dudu. Every marketing email includes a prominent and functional unsubscribe link. Every marketing SMS includes an opt-out instruction. You can also update your communication preferences at any time through your account settings panel.

• Withdrawing consent for marketing communications does not affect your ability to continue using the 92dudu platform;
• Even if you opt out of marketing, we will still send you essential service communications — such as account security alerts, deposit confirmations, withdrawal processing updates, and KYC requests. These are not marketing and cannot be opted out of while your account is active;
• 92dudu does not engage in unsolicited cold-calling, WhatsApp outreach, or any other unsolicited direct marketing that is not pre-approved by you.

12 Security Measures

92dudu implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and 92dudu servers;
• AES-256 encryption for sensitive personal and financial data stored in our databases;
• Role-based access control (RBAC) ensuring that only authorised personnel with a documented business need can access player data;
• Multi-factor authentication (MFA) for all staff accounts with access to production systems and player data;
• Automated intrusion detection and prevention systems (IDS/IPS) monitoring for unusual access patterns in real time;
• Regular penetration testing by independent security professionals to identify and remediate vulnerabilities;
• Comprehensive audit logging of all access to player data, with logs retained for a minimum of 12 months;
• Staff training on data protection obligations conducted at onboarding and on an annual refresh basis.

While 92dudu takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password for your 92dudu account, enable two-factor authentication, and never share your login credentials with anyone.

13 Third-Party Services & Links

The 92dudu platform integrates with third-party services — primarily payment processors, identity verification providers, and game content providers — to deliver a complete gaming experience to Pakistani players. These integrations are governed by data processing agreements, and third-party processors are permitted to use your data only for the specific service they provide.

92dudu is not responsible for the privacy practices of any third-party service providers. We recommend reviewing the privacy policies of any payment provider (such as JazzCash or EasyPaisa) or bank (HBL, UBL, Meezan Bank) that you use to transact with 92dudu. Their data practices are governed by their own privacy policies, which are independent of this document.

The 92dudu website does not contain links to external third-party websites for commercial or advertising purposes. All links within the platform lead to internal pages within the 92dudu domain.

14 Policy Updates & Revisions

92dudu reviews this Privacy Policy periodically — at minimum annually — and will update it to reflect changes in our data processing practices, applicable law, or regulatory guidance. The effective date at the top of this page will be updated each time a revision is published.

Where changes are material — meaning they meaningfully affect your privacy rights or the way we process your data — we will notify you proactively via email to your registered address and/or via an in-platform notification displayed upon your next login. For minor or clarificatory updates, posting the revised policy on this page with an updated effective date constitutes sufficient notice.

Your continued use of the 92dudu platform following the posting of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated practices. If you do not agree with any material revision, you may close your account and request deletion of your data, subject to our legal retention obligations.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or 92dudu's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly from the 92dudu platform — average response time 3–5 minutes. This is the fastest way to reach us for urgent privacy concerns;
• Email: [email protected] — responses within 24 hours for general queries, within 30 calendar days for formal privacy rights requests;
• Subject line for privacy requests: Please use "Privacy Rights Request — [Your Username]" to ensure your message is routed directly to our data protection team.

92dudu has appointed a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. The DPO can be contacted via the email address above, marked for the attention of the Data Protection Officer.

We value the trust Pakistani players — from Karachi to Lahore, Islamabad to Faisalabad and beyond — place in 92dudu. Protecting your privacy is not a compliance exercise for us; it is a foundational commitment to the integrity of the platform and the security of every player who chooses 92dudu as their betting home.