ShahSpin Privacy Policy – How We Protect Your Data in Pakistan

ShahSpin ("we," "us," "the Platform") is committed to protecting the personal information of every player who registers and uses shahspin.ws. As an online betting and gaming platform built specifically for Pakistani users, ShahSpin understands that the privacy of your personal and financial data is not just a regulatory obligation — it's a matter of basic trust between us and you.

This Privacy Policy explains in plain language what personal data ShahSpin collects when you use the platform, why we collect it, how we store and protect it, who we may share it with, and what rights you have over your own information. We have written this document to be as clear and straightforward as possible. If any part of it is unclear, please reach out to us directly — our contact details are at the end of this page.

ShahSpin processes personal data solely in connection with its operation as an online betting and gaming service. We are not in the business of data monetisation. Your information is used to run your account, process PKR transactions, communicate with you about your account, and meet our legal and compliance obligations. Nothing more.

ShahSpin collects personal data through several channels: the registration form, account management actions, payment transactions, platform usage and communications with our support team. Below is a breakdown of the categories of data we collect.

2.1 Registration & Identity Data

When you create a ShahSpin account, we collect your full name, date of birth, mobile phone number, email address and a chosen username. For identity verification purposes — required before your first withdrawal is processed — we may also request a copy of your CNIC (Computerised National Identity Card) or passport. This data is used to confirm that you are who you say you are and that you meet ShahSpin's minimum age requirement of 18.

2.2 Financial & Transaction Data

ShahSpin records all deposits, withdrawals, bets and bonus transactions associated with your account. For payment processing, we collect the minimum information required by your chosen payment provider — for Easypaisa and JazzCash, this is your registered mobile number; for bank IBFT, it is your account number; for Visa/Mastercard, it is your card's partial number (last four digits and expiry). Full card credentials are processed directly by our PCI-DSS compliant payment partners and are not stored on ShahSpin's servers.

2.3 Technical & Usage Data

When you access shahspin.ws, ShahSpin automatically collects certain technical data including your IP address, browser type and version, device type and operating system, pages visited, session duration and betting activity patterns. This data is used for platform security, fraud detection and improving the user experience. It is not used to build marketing profiles for third parties.

2.4 Communications Data

If you contact ShahSpin's support team by email or live chat, we retain records of those communications for as long as necessary to resolve the issue and for compliance purposes. Support communications may include personal information you choose to share when describing your query.

ShahSpin uses the personal data we collect for the following specific purposes:

• Account operation: To create, manage and maintain your ShahSpin account, process logins, and enable you to place bets and play games.
• PKR payment processing: To process deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or Visa/Mastercard in Pakistani Rupees.
• Identity verification: To confirm your age and identity as required before processing withdrawals and in response to regulatory compliance obligations.
• Fraud prevention and security: To monitor account activity for suspicious patterns, detect unauthorised access attempts, and protect the integrity of ShahSpin's platform and player funds.
• Responsible gaming monitoring: To identify usage patterns that may indicate problematic gambling behaviour and, where appropriate, proactively reach out to players or apply account restrictions.
• Customer support: To respond to your queries, resolve complaints and manage your account on request.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates by email or SMS — but only where you have not opted out of marketing. You can unsubscribe at any time.
• Platform improvement: To analyse usage data and improve the ShahSpin betting and gaming experience for Pakistani players.
• Legal and regulatory compliance: To meet applicable anti-money laundering (AML), know-your-customer (KYC) and other regulatory obligations under ShahSpin's operating licence.

ShahSpin does not use your personal data for automated decision-making that produces significant legal or similarly significant effects on you, except where required by our fraud detection systems and where human review is available on request.

ShahSpin processes your personal data on the following legal bases, depending on the specific purpose:

• Contract performance: Most data processing by ShahSpin is necessary to fulfil the contract between ShahSpin and you as an account holder — operating your account, processing deposits and withdrawals, and providing the betting and gaming services you have registered to use.
• Legal obligation: Some processing — particularly identity verification, AML checks and transaction record-keeping — is required by law or by the conditions of ShahSpin's operating licence. We cannot operate as a regulated platform without meeting these obligations.
• Legitimate interests: ShahSpin processes technical and usage data to maintain platform security, detect fraud and improve the service. These are legitimate interests that do not override your fundamental privacy rights.
• Consent: Marketing communications are sent on the basis of your consent, given when you register your ShahSpin account. You can withdraw this consent at any time with immediate effect.

ShahSpin does not sell your personal data to any third party under any circumstances. We share personal data only in the following limited situations:

• Payment providers: ShahSpin shares the minimum data necessary with Easypaisa, JazzCash, NayaPay, SadaPay, bank payment processors and Visa/Mastercard networks to process your PKR transactions. These providers operate under their own privacy frameworks and are bound by applicable financial data regulations.
• Identity verification services: ShahSpin may use a certified third-party identity verification provider to process CNIC or passport data during the KYC process. These providers are contractually bound to use your data only for the verification purpose.
• Fraud prevention and security services: ShahSpin may share technical data (such as IP addresses and device identifiers) with fraud detection services that help protect the platform and its players.
• Regulatory authorities: ShahSpin may be legally required to disclose certain data — including transaction records and identity information — to regulatory bodies, law enforcement agencies or sporting integrity organisations in connection with investigations or compliance checks. ShahSpin cooperates fully with lawful data requests of this kind.
• Professional advisers: ShahSpin's legal, financial and technical advisers may have limited access to relevant data in the context of their professional engagement with ShahSpin, under strict confidentiality obligations.