4rabet Privacy Policy

1. Data Controller

4rabet ("we", "us", "our") acts as the data controller in respect of the personal information collected from users of the 4rabet platform. As data controller, 4rabet determines the purposes and means of processing your personal data, subject to the requirements of our operating licence and applicable international data protection frameworks.

For all data protection enquiries, requests to exercise your rights, or complaints relating to how 4rabet handles your personal data, please contact our Data Protection team through the channels listed in Section 13 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a 4rabet account, we collect the information you provide during the registration process. For Pakistani players this typically includes: full legal name, date of birth, email address or Pakistani mobile number (03XX format), username, and country of residence. This information is mandatory for account creation.

2.2 Identity Verification (KYC) Data

To comply with our licensing and anti-money laundering (AML) obligations, 4rabet may request identity verification documents. These may include: a copy of your Pakistani CNIC (Computerised National Identity Card), passport, proof of address (e.g., a recent utility bill or bank statement from Karachi, Lahore, Islamabad, Rawalpindi, or elsewhere in Pakistan), and in some cases a selfie with your ID document. This data is processed and stored under strict security controls.

2.3 Financial Data

We collect transaction-related data to process deposits and withdrawals. For mobile wallet transactions (JazzCash, Easypaisa), we record your registered mobile number and transaction reference. For bank transfers, we record account name, bank name (e.g., HBL, Meezan Bank, Bank Alfalah, UBL), and the last four digits of relevant account numbers. For USDT TRC20 transactions, we record your wallet address and transaction hash. We do not store full payment card numbers or CVV codes.

2.4 Usage and Behavioural Data

4rabet automatically collects data about how you use the platform, including: betting history and casino game history; session duration and login timestamps; pages visited and navigation patterns; bet amounts, odds accepted, and game outcomes; device type, operating system, and browser details; IP address and approximate geolocation data.

2.5 Communications Data

If you contact 4rabet support via live chat or email, we retain records of those communications for quality assurance, training, and dispute resolution purposes. This includes chat logs, email threads, and any attachments you submit.

2.6 Marketing Preference Data

Where you have opted in to marketing communications, we record your preferences and the channels through which you have agreed to receive communications (e.g., email, SMS). You may update your preferences at any time through your account settings.

3. How We Use Your Personal Data

4rabet will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or being required to do so by law.

4. Legal Basis for Processing

4rabet processes personal data on the following legal bases depending on the processing activity:

• Contractual necessity: Processing required to create and maintain your account, facilitate transactions, and deliver betting and gaming services under our user agreement.
• Legal obligation: Processing required to comply with AML regulations, KYC obligations, and reporting requirements under our operating licence.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, non-essential cookies, and any other processing for which we have obtained your explicit opt-in consent. You may withdraw consent at any time.

5. Data Sharing with Third Parties

4rabet does not sell or rent your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, and other payment service providers receive the minimum data required to process your transactions. They act as independent data controllers for their own processing.
• KYC and AML service providers: We engage specialist third-party identity verification providers to assist with document verification. These providers are contractually bound to process data only on our instructions.
• Game and platform technology providers: Casino game providers and platform technology vendors may receive technical data (e.g., session tokens, game IDs) necessary to deliver their services. They are not provided with your full personal profile.
• Regulatory and legal authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities when required to do so by law, court order, or our licensing obligations.
• Group companies: Personal data may be shared within the 4rabet corporate group for operational, support, and compliance purposes, subject to equivalent data protection obligations.

All third-party data processors engaged by 4rabet are subject to data processing agreements that require them to maintain appropriate security standards and process data solely as instructed.

6. International Data Transfers

4rabet operates internationally and your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. When such transfers occur, 4rabet implements appropriate safeguards — such as standard contractual clauses or equivalent mechanisms — to ensure your data remains protected to a standard consistent with this Policy.

Pakistani players should be aware that data processed for platform operations may be handled on servers located outside Pakistan. By using 4rabet and accepting this Policy, you consent to these international transfers subject to the safeguards described herein.

7. Data Retention

4rabet retains personal data for as long as necessary to fulfil the purposes outlined in this Policy and to comply with applicable legal and regulatory retention requirements. Key retention periods are as follows:

• Active account data: Retained for the lifetime of your account and for a minimum of five (5) years after account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Retained for the period required under applicable AML regulations — typically five (5) years from the end of the business relationship.
• Communications data: Support chat logs and email records retained for up to three (3) years for dispute resolution and quality assurance purposes.
• Marketing data: Retained until you withdraw consent or request deletion, subject to any legal minimum retention periods.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

8. Security Measures

4rabet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• SSL/TLS encryption on all data in transit between your device and our servers.
• Encryption at rest for sensitive stored data including KYC documents and financial records.
• Access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits of our platform and infrastructure.
• Two-factor authentication available to all account holders to protect login credentials.
• Continuous monitoring for suspicious access patterns and potential data breaches.

Despite these measures, no data transmission over the internet or electronic storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights, 4rabet will notify affected users in accordance with applicable regulatory requirements.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the 4rabet platform. They serve various functions including maintaining your login session, remembering your preferences, and enabling us to analyse platform usage.

9.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during a betting session. These cannot be disabled without affecting your ability to use 4rabet.
• Functional cookies: Remember your preferences such as language settings, preferred view, and recently played games.
• Analytics cookies: Collect aggregated data about how users navigate the platform — which pages are most visited, average session duration, and where users encounter errors. This data is used in anonymised form to improve the platform.
• Marketing cookies: Where you have consented, marketing cookies help us deliver relevant promotional content about 4rabet features including PSL cricket betting and new game releases. You may opt out of these at any time.

9.3 Managing Cookies

You can manage cookie preferences through your browser settings, which allow you to block or delete cookies. Note that disabling essential cookies will affect your ability to use 4rabet normally. For non-essential cookies, you may adjust your preferences in the cookie settings panel available on the platform.

10. Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by 4rabet:

• Right of access: You may request a copy of the personal data 4rabet holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account information directly in your account settings.
• Right to erasure: You may request deletion of your personal data where we no longer have a legitimate basis to retain it. Note that data subject to legal retention obligations (e.g., AML records) cannot be deleted before the applicable period expires.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on your consent or contract, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing at any time. Marketing opt-outs take effect promptly upon request.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact 4rabet support via live chat or at the email address listed in Section 13. We will respond within a reasonable period and, in any case, within any timeframe required by applicable law. We may need to verify your identity before processing a data rights request.

11. Minors and Age Restriction

4rabet is strictly intended for users aged 18 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 18. If 4rabet becomes aware that a user who is under 18 has registered an account or provided personal data, that account will be suspended immediately, any transactions will be voided, and the data will be deleted in accordance with our policies.

If you believe that a minor has created a 4rabet account, please notify us immediately via live chat or our support email so that we can take appropriate action. Parents and guardians in Pakistan are encouraged to use parental control tools to restrict minor access to gambling websites.

12. Changes to This Privacy Policy

4rabet may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or in-platform notification.

We encourage you to review this Policy periodically. Your continued use of 4rabet following publication of a revised Policy constitutes your acceptance of the changes. If you do not agree with any changes, you should cease use of the platform and close your account.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how 4rabet handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 from your 4rabet account dashboard — the fastest way to reach us.
• Support Email: [email protected] (plain text address — not a clickable link; please copy manually).

For formal data rights requests, please include "Data Rights Request" in your message subject line along with your registered email address or Pakistani mobile number so we can locate your account efficiently. 4rabet aims to acknowledge all privacy-related enquiries within 48 hours.