1. About This Policy
This Privacy Policy applies to all services operated by DarazPlay at darazplay.bio, including the online casino, sports betting, live dealer games, poker room, slot games, and all related account management features. It governs how DarazPlay collects, processes, stores, and shares the personal data of anyone who visits, registers with, or otherwise uses the platform.
By creating a DarazPlay account or using any DarazPlay service, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described within it. This policy is incorporated by reference into the DarazPlay Terms and Conditions and should be read alongside them.
DarazPlay acts as the data controller for the personal information you provide. This means DarazPlay determines the purposes and means by which your data is processed. Where third-party service providers process your data on DarazPlay's behalf, they do so only under binding data processing agreements that require them to protect your information to at least the same standard as DarazPlay itself.
Plain language summary: DarazPlay is responsible for your data. We collect only what we need, use it only for legitimate purposes, and never sell it to advertisers or data brokers. This policy tells you exactly what happens to your information from the moment you register at darazplay.bio.
2. Data We Collect
DarazPlay collects personal data in three ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party verification and payment providers. Below is a breakdown of each category.
| Category |
Data Types |
How Collected |
| Registration Data |
Full name, date of birth, mobile number, email address, CNIC number (where required for verification) |
Provided by you at account registration |
| Identity Verification |
Copy of CNIC / passport, proof of address, selfie or photo verification |
Provided by you when DarazPlay requests KYC verification |
| Payment Data |
Payment method type, account or phone number used for deposit/withdrawal, transaction reference numbers |
Provided by you and received from payment processors |
| Gaming Activity |
Bets placed, games played, session duration, win/loss records, bonus usage |
Generated automatically when you use DarazPlay |
| Technical Data |
IP address, device type, browser type, operating system, screen resolution |
Collected automatically via server logs and cookies |
| Communications |
Records of live chat sessions, emails, and support interactions |
Created when you contact DarazPlay support |
DarazPlay does not collect sensitive personal data such as biometric data, genetic information, racial or ethnic origin, political opinions, or religious beliefs as part of normal platform operation.
3. How We Use Your Data
DarazPlay uses your personal data for the following purposes, each of which is necessary to deliver a safe, fair, and functional gaming experience for Pakistani players.
- Account Management: Creating and maintaining your DarazPlay account, processing logins, and ensuring only you can access your account.
- Identity Verification: Confirming that you are who you say you are and that you meet the eligibility requirements set out in the DarazPlay Terms and Conditions, including the minimum age of 18.
- Transaction Processing: Handling deposits, withdrawals, bonus credits, and all other financial transactions in Pakistani Rupees through your chosen payment method.
- Customer Support: Responding to your queries, resolving disputes, investigating complaints, and providing technical assistance.
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, enforcing self-exclusion and deposit limit requests, and meeting DarazPlay's obligations under its Responsible Gaming Policy.
- Legal & Compliance: Meeting anti-money laundering (AML) obligations, fraud prevention, and any reporting requirements applicable to DarazPlay's operations.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve the DarazPlay platform, fix bugs, optimise game performance, and develop new features that Pakistani players will find useful.
- Marketing (with consent): Sending you information about DarazPlay promotions, bonuses, and new game releases where you have explicitly opted in to receive such communications.
4. Legal Basis for Processing
DarazPlay processes your personal data on one or more of the following legal grounds, depending on the specific purpose:
- Contractual Necessity: Processing that is essential to fulfil the contract between you and DarazPlay – i.e., operating your account, processing bets, and handling payments.
- Legal Obligation: Processing required for DarazPlay to comply with applicable law, including identity verification, anti-money laundering checks, and fraud prevention.
- Legitimate Interests: Processing for purposes such as platform security, fraud detection, responsible gaming monitoring, and aggregated analytics – where these interests do not override your privacy rights.
- Consent: Processing for marketing communications, optional analytics cookies, and any other purpose where DarazPlay has specifically asked for and obtained your consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Data Sharing
DarazPlay does not sell your personal data to third parties. However, to operate the platform effectively, DarazPlay shares limited personal data with the following categories of third-party organisations, strictly under binding data processing agreements:
- Payment Service Providers: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer processors, and card networks (Visa, Mastercard) receive only the payment information needed to process your transaction. DarazPlay does not retain your full payment credentials.
- Game Software Studios: Providers such as Pragmatic Play, NetEnt, and other DarazPlay game partners may receive anonymised session identifiers to deliver game content and calculate outcomes. They do not receive your name, CNIC, or payment details.
- Identity Verification Services: Where KYC verification is required, DarazPlay may use accredited identity verification providers to cross-check the documents you submit. These providers process your data under strict confidentiality obligations.
- Customer Support Technology: DarazPlay's live chat and email ticketing systems are operated by third-party software providers. These providers store support interaction records on DarazPlay's behalf and cannot use those records for their own purposes.
- Legal & Regulatory Authorities: DarazPlay may be required to disclose your personal data to law enforcement or regulatory bodies in response to a lawful request, court order, or legal obligation. DarazPlay will challenge requests that it believes are unlawful or disproportionate.
Important: DarazPlay will never share your personal data with unaffiliated marketing companies, data brokers, or organisations whose purpose is to contact you with third-party advertising. If you receive unsolicited marketing that purports to come from DarazPlay but was not sent from an official @darazplay.bio address, please report it to support@darazplay.bio immediately.
6. International Data Transfers
Some of DarazPlay's technology partners and game studio providers operate infrastructure outside Pakistan. Where your personal data is transferred to servers located outside your country, DarazPlay ensures that appropriate safeguards are in place to protect your information to an equivalent standard.
These safeguards include contractual clauses that require receiving parties to handle DarazPlay member data in accordance with standards comparable to those applied by DarazPlay itself. DarazPlay does not transfer personal data to jurisdictions that are known to have inadequate data protection standards without these additional protections in place.
7. Data Retention
DarazPlay retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods reflect legal obligations and operational needs:
- Account & Transaction Records: Retained for a minimum of five years after account closure to meet anti-money laundering and financial record-keeping obligations.
- Identity Verification Documents: Retained for the duration of your account plus five years, or longer where required by a specific legal obligation.
- Gaming Activity Logs: Retained for five years to support dispute resolution, responsible gaming reviews, and regulatory compliance.
- Support Communications: Retained for three years to allow DarazPlay to provide context for any reopened queries or complaints.
- Marketing Preferences: Retained until you withdraw consent or close your account, plus a brief administrative period to ensure all marketing is stopped.
- Technical Logs (IP, device, browser): Retained for up to twelve months for security and fraud prevention purposes, then anonymised or deleted.
When data is no longer required for any legitimate purpose, DarazPlay securely deletes or anonymises it. Anonymised data – which cannot be used to identify any individual – may be retained for longer periods to support aggregated analytics.
8. Cookies & Tracking Technologies
DarazPlay uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage, and – where you have consented – deliver relevant promotional content. A cookie is a small text file stored in your browser when you visit darazplay.bio.
Essential Cookies
Required for DarazPlay to function. These cookies manage your login session, maintain your PKR balance display, and protect the platform against cross-site request forgery. They cannot be disabled without breaking core functionality.
Analytics Cookies
Used to understand how players use darazplay.bio – which pages are visited, how long sessions last, and where players encounter problems. Data is aggregated and anonymised. These cookies require your consent.
Preference Cookies
Remember your display preferences, language settings, and last-used payment method to improve your experience when you return to DarazPlay. These require your consent.
Marketing Cookies
Enable DarazPlay to measure the effectiveness of promotional campaigns and – where you have consented – show you relevant DarazPlay offers. These are only active if you have opted in to marketing communications.
You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using DarazPlay's core services. Note that disabling all cookies may affect session management and login functionality.
9. Security Measures
DarazPlay applies a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These include:
- 256-bit SSL/TLS encryption on all pages and data transmissions across darazplay.bio.
- Two-factor authentication (2FA) available on all DarazPlay accounts and required for certain high-value withdrawal requests.
- Access controls that limit which DarazPlay staff members can view your personal data, based on their role and the minimum information necessary to perform their function.
- Regular security audits of DarazPlay's platform infrastructure, payment integrations, and data handling processes.
- Fraud monitoring systems that identify unusual account activity, login attempts from unfamiliar devices, and suspicious transaction patterns in real time.
- Encrypted data storage for all sensitive personal data held in DarazPlay's systems.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights or freedoms, DarazPlay will notify affected users and relevant authorities within the timeframes required by applicable law.
Your role in security: DarazPlay's security systems cannot protect your account if you share your password or login details with another person. Never share your DarazPlay credentials, and contact support immediately at support@darazplay.bio if you suspect unauthorised access to your account.
10. Your Privacy Rights
As a DarazPlay member, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact DarazPlay support at support@darazplay.bio with the subject line "Data Rights Request".
Right of Access
Request a copy of all personal data DarazPlay holds about you. DarazPlay will respond within 30 days of a valid request, providing a structured summary of your data in a commonly used format.
Right to Rectification
If any personal data DarazPlay holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections – such as name changes – may require supporting documentation.
Right to Erasure
In certain circumstances you may request deletion of your personal data. This right does not apply where DarazPlay is required to retain data to meet legal or regulatory obligations – for example, transaction records under AML law.
Right to Restrict Processing
You may request that DarazPlay restricts certain uses of your data – for example, during an investigation into the accuracy of information we hold about you – while still maintaining your account.
Right to Data Portability
Where processing is based on your consent or a contract, you may request your personal data in a structured, machine-readable format so it can be transferred to another service provider.
Right to Object
You may object to DarazPlay processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your rights override DarazPlay's interests.
DarazPlay will acknowledge all valid data rights requests within five business days and complete the requested action within 30 calendar days. Where a request is complex or there are multiple requests, DarazPlay may extend this by a further 30 days with notice to you.
11. Children's Privacy
DarazPlay services are strictly for adults aged 18 and above. DarazPlay does not knowingly collect personal data from anyone under 18 years of age. If DarazPlay discovers or is notified that an account has been created by a person under 18, that account will be closed immediately, all data associated with it will be deleted (except where retention is required for legal reasons), and any deposits returned to the originating payment method.
If you believe a minor may have created a DarazPlay account, please notify DarazPlay support at support@darazplay.bio immediately. DarazPlay takes this issue seriously and will investigate and act promptly on all such reports. Parents and guardians are encouraged to use parental controls and to discuss responsible online behaviour with young people in their household.
12. Marketing Communications
DarazPlay will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them. At no point will DarazPlay send you marketing communications as a condition of account registration or service access.
You may opt out of DarazPlay marketing communications at any time through one of the following methods:
- Using the unsubscribe link included in every DarazPlay marketing email.
- Updating your communication preferences in the "Notifications" section of your DarazPlay account settings.
- Contacting DarazPlay support at support@darazplay.bio and requesting removal from the marketing list.
After you opt out, DarazPlay will stop sending marketing messages within five business days. Please note that opting out of marketing does not affect transactional communications – DarazPlay will still send you account-related messages such as deposit confirmations, withdrawal notifications, and security alerts, as these are necessary to manage your account.
13. Policy Updates
DarazPlay may update this Privacy Policy from time to time to reflect changes in applicable law, DarazPlay's data practices, or the services offered on the platform. The date of the most recent update is shown at the top of this page.
Where updates are material – meaning they significantly affect how DarazPlay collects or uses your personal data or the rights available to you – DarazPlay will provide advance notice via an in-account notification or email to your registered address. Minor updates that do not affect your rights may be made without specific prior notice.
Your continued use of DarazPlay following the publication of an updated Privacy Policy constitutes your acceptance of the updated version. If you do not accept material changes to this policy, you may close your account as described in the DarazPlay Terms and Conditions.
This Privacy Policy was last updated on 1 January 2025. DarazPlay recommends bookmarking this page and reviewing it whenever you receive a notification of an update.
14. Contact DarazPlay About Privacy
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact DarazPlay through the following channels:
- Email: support@darazplay.bio – please use the subject line "Privacy Policy Query" or "Data Rights Request" so your message is routed to the correct team.
- Live Chat: Available 24/7 at darazplay.bio – ask for the privacy or data protection team and a member of DarazPlay's support staff will assist you.
DarazPlay will acknowledge your query within two business days and provide a substantive response within 30 calendar days. For urgent security concerns such as suspected unauthorised account access, DarazPlay's support team is available immediately via live chat.
