Privacy Policy — opsapk

This Privacy Policy ("Policy") is issued by opsapk ("opsapk", "we", "us", "our") and applies to all personal data collected, processed and stored in connection with your use of the opsapk online casino and sports betting platform accessible at opsapk.cam and any associated applications or subdomains (collectively, the "Platform").

opsapk recognises that privacy is a fundamental right and is committed to processing personal data lawfully, fairly and transparently, in accordance with applicable data protection legislation and our licensing obligations. This Policy sets out in clear terms what data we collect, why we collect it, how we use it, with whom we share it, and what rights you hold in respect of your personal data.

By creating an account on opsapk or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must not provide your personal data to opsapk and must not create or maintain an account on the Platform.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or online identifier.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction or erasure.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, opsapk.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "KYC Data" means identity verification documents and supporting materials submitted as part of the Know Your Customer process, including government-issued identification, proof of address and payment method documentation.
• "User" / "you" means any registered account holder or visitor to the Platform.
• "Third Country" means a country or territory not subject to the data protection legal framework applicable to opsapk's licensing jurisdiction.

opsapk acts as the Data Controller in respect of Personal Data collected through the Platform. opsapk operates under international jurisdiction and is responsible for determining how and why your personal data is processed. Where opsapk engages third-party Data Processors — such as payment gateway operators, KYC verification providers or analytics services — such parties process data solely on opsapk's documented instructions and are bound by appropriate data processing agreements.

For all data-related enquiries, including the exercise of your rights under Section 10, please contact our support team at the details provided in Section 16.

opsapk collects Personal Data across several categories. The specific data collected depends on your level of engagement with the Platform:

opsapk does not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric data or health data) except where explicitly required by applicable regulatory obligations and with your express consent where required by law.

opsapk collects Personal Data through the following means:

• Direct Submission: Data you actively provide when registering an account, completing KYC forms, contacting support, submitting a complaint or completing a survey.
• Automated Technical Collection: Data collected automatically as you interact with the Platform, including IP addresses, session logs, clickstream data, device fingerprints and cookie-related identifiers.
• Third-Party Sources: Data received from identity verification providers, fraud prevention databases, payment processors and, where applicable, publicly available sources for compliance screening purposes.
• Transaction Data: Records generated automatically when you make deposits, place bets, request withdrawals or participate in promotions on the Platform.

opsapk processes your Personal Data for clearly defined purposes, each supported by an appropriate legal basis:

• Account Registration & Management — To create, maintain and administer your opsapk account. Legal basis: contractual necessity.
• Identity & Age Verification (KYC) — To verify that you meet eligibility requirements and to fulfil anti-money laundering (AML) obligations. Legal basis: legal obligation and legitimate interest.
• Transaction Processing — To process deposits (via familiar payment references such as Easypaisa, JazzCash, Raast and bank transfers) and withdrawals, apply bonus credits and maintain accurate financial records. Legal basis: contractual necessity.
• Fraud Prevention & Security — To detect, investigate and prevent fraudulent activity, account abuse and prohibited conduct. Legal basis: legitimate interest and legal obligation.
• Responsible Gambling Compliance — To monitor player behaviour for indicators of problem gambling and to apply player-protection tools where appropriate. Legal basis: legal obligation and legitimate interest.
• Customer Support — To respond to enquiries, resolve disputes and manage complaints. Legal basis: contractual necessity and legitimate interest.
• Platform Improvement — To analyse usage patterns, improve features and optimise the experience for players across Pakistan. Legal basis: legitimate interest.
• Marketing Communications — To send promotional offers, bonus notifications and platform updates by email or in-platform messaging, where you have opted in. Legal basis: consent (withdrawable at any time).
• Regulatory Compliance & Reporting — To fulfil obligations to the applicable licensing authority and to respond to lawful requests from regulatory or law enforcement bodies. Legal basis: legal obligation.

opsapk does not sell, rent or trade your Personal Data. We may share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Licensed Service Providers: Third-party processors engaged to provide IT infrastructure, payment processing, KYC/AML screening, fraud detection, customer support tools and analytics services. All such processors are bound by data processing agreements that require equivalent data protection standards.
• Game & Sportsbook Technology Providers: Where necessary to deliver specific game or betting functionality, limited technical data may be shared with our technology partners under confidentiality agreements.
• Regulatory & Law Enforcement Authorities: Where opsapk is legally required or permitted to disclose Personal Data in response to a lawful order, court direction, regulatory investigation or law enforcement request.
• Licensing Authority: Personal Data may be shared with the applicable licensing authority as required by our licence conditions and regulatory reporting obligations.
• Corporate Transactions: In the event of a merger, acquisition, restructuring or sale of assets involving opsapk, Personal Data may be transferred to a successor entity, subject to continued compliance with this Policy.

As an internationally operating platform, opsapk may transfer Personal Data to, and process it in, countries outside your country of residence. Where such transfers are made to countries that do not have an equivalent level of data protection under applicable law, opsapk implements appropriate safeguards to ensure your data remains protected. These safeguards may include:

• Standard contractual clauses approved by the applicable data protection authority.
• Binding corporate rules for intra-group transfers.
• Data processing agreements incorporating equivalent privacy and security obligations.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside your country of residence as described in this section, subject to the safeguards outlined above.

opsapk retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with opsapk.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, or longer where required by applicable AML legislation or licensing obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with anti-money laundering record-keeping requirements.
• Customer Support Communications: Retained for a period of up to three (3) years following the resolution of the relevant support interaction, or longer where the communication relates to a pending dispute or regulatory matter.
• Marketing Preferences: Retained until you withdraw consent or close your account.
• Technical & Log Data: Typically retained for up to twelve (12) months unless required for longer by fraud prevention or security investigations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that renders it irrecoverable.

Subject to applicable law and opsapk's legal obligations, you hold the following rights in respect of your Personal Data. To exercise any right, please contact our support team using the details in Section 16. We will aim to respond within 30 calendar days:

opsapk uses cookies, web beacons, pixel tags and similar technologies to operate, secure and improve the Platform experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled as they enable core functionality including session management, account security and cashier operation.
• Functional Cookies: Remember your preferences and settings, such as display currency (PKR), language (English) and responsible-gambling tool configurations.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform — pages visited, features used, error rates — to help us improve performance.
• Security Cookies: Help detect fraudulent activity, prevent unauthorised access and protect against account-takeover attempts.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core platform functionality but may affect your experience with personalised features. Note that blocking strictly necessary cookies may impair the Platform's ability to function correctly.

opsapk employs a range of technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform.
• Encrypted storage of sensitive data at rest, including identity documents and financial records.
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis.
• Two-factor authentication (2FA) options for player accounts to prevent unauthorised access.
• Regular security assessments, penetration testing and vulnerability management.
• Staff training on data protection obligations and secure data handling procedures.

Notwithstanding the above, no data transmission over the internet or electronic storage system is entirely risk-free. opsapk cannot guarantee absolute security, and users are encouraged to use strong, unique passwords and enable 2FA on their accounts. Please notify support immediately if you suspect any unauthorised access to your account.

opsapk's Platform is strictly intended for adults aged 18 or over, or the higher minimum age required by the applicable licensing jurisdiction. opsapk does not knowingly collect, solicit or process Personal Data from persons under the applicable minimum age.

If opsapk discovers or reasonably suspects that Personal Data has been collected from a minor, the associated Account will be suspended immediately, any Personal Data held will be deleted as promptly as practicable, and any associated funds will be handled in accordance with our Terms and applicable law.

opsapk is an English-language online platform that has been designed with Pakistani users in mind. We understand that many of our users are based in cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, and we are committed to handling their data with the same standards applied to all users globally.

Pakistan does not currently have a comprehensive standalone data protection law equivalent to those in force in the European Union or other jurisdictions. opsapk processes the Personal Data of Pakistani users in accordance with the data protection framework applicable to its licensing jurisdiction and the privacy principles set out in this Policy.

opsapk does not share Personal Data with the Government of Pakistan, PTA, State Bank of Pakistan, or any Pakistani provincial authority, except where required to do so under a lawful and binding legal obligation. References to familiar Pakistani payment methods — including Easypaisa, JazzCash, Raast and Pakistani banks — are provided for player context only and do not imply that those providers have access to your opsapk account data beyond what is necessary to process a specific transaction you initiate.

opsapk may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory requirements or Platform functionality. The date of the most recent revision is indicated at the top of this page.

Where changes are material — that is, where they significantly affect your rights or our data processing practices — opsapk will provide advance notice via email to your registered address or through a prominent notice on the Platform, not less than seven (7) days before the revised Policy takes effect, except where a shorter period is required by law.

Your continued use of the Platform after the effective date of any revision to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request Account closure in accordance with our Terms and Conditions.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, including the exercise of any rights described in Section 10, please contact the opsapk data team through our support channel:

For information about responsible gambling tools and player-protection measures, please visit our Responsible Gambling page. For the full terms governing your account, see our Terms & Conditions.