betpto Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how betpto ("betpto," "we," "us," "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you," "your") who access or use the betpto website at betpto.com and associated services (collectively, the "Services").

betpto is committed to handling your personal data responsibly and in accordance with applicable data protection principles. This Policy is intended to be transparent and plain in its explanation of our data practices so that Pakistani players and all other users of the betpto platform understand exactly what information we hold about them and why.

By registering an account with betpto or continuing to use the Services, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Services.

This Policy should be read alongside betpto's Terms and Conditions and Responsible Gaming Policy. Defined terms used in this Policy have the same meaning as in betpto's Terms and Conditions unless otherwise defined here.

2. Data Controller

betpto is the data controller in respect of the personal data collected through the betpto platform. As data controller, betpto determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests, or complaints, you may contact betpto at: [email protected]

3. Personal Data We Collect

betpto collects the following categories of personal data:

3.1 Identity Data

• Full legal name as it appears on your identity document
• Date of birth
• CNIC number or other government-issued identity document reference (for Pakistani players)
• Copies of identity documents submitted for KYC verification

3.2 Contact Data

• Email address
• Mobile phone number (where provided)
• Residential address

3.3 Financial Data

• JazzCash and Easypaisa account references associated with your deposits and withdrawals
• Bank account details where bank transfer is used as a payment method
• Payment card details (processed via PCI-DSS-compliant payment processors – betpto does not store full card numbers)
• Transaction history including deposit amounts, withdrawal amounts, and dates

3.4 Technical Data

• IP address at the time of registration and each login
• Device type, operating system, and browser information
• Session duration and activity logs
• Geolocation data derived from your IP address

3.5 Gaming Data

• Betting history, wager amounts, game results, and casino session data
• Responsible gaming settings including deposit limits, loss limits, and self-exclusion records
• Bonus and promotion redemption records

3.6 Communications Data

• Contents of messages sent to betpto's support team via live chat or email
• Records of customer service interactions for quality and compliance purposes

4. How We Collect Your Data

betpto collects personal data through the following means:

• Direct registration: Information you provide when creating your betpto account.
• KYC submission: Identity and address documents you upload to complete verification.
• Deposits and withdrawals: Payment information associated with cashier transactions.
• Platform usage: Technical data collected automatically as you use the betpto website.
• Support interactions: Information you provide when contacting betpto's customer service team.
• Third-party verification providers: Results of identity and address verification checks conducted by betpto's KYC partners.

5. Legal Basis for Processing

betpto processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the Services under betpto's Terms and Conditions, including account management, bet settlement, and withdrawal processing.
• Legal obligation: Processing necessary to comply with betpto's obligations under its gaming licence, including KYC, anti-money-laundering checks, and record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics where betpto's legitimate interests are not overridden by your rights.
• Consent: Processing for marketing communications where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in your betpto account settings.

6. How We Use Your Data

betpto uses your personal data for the following purposes:

• To create, verify, and manage your betpto account.
• To process deposits, settle bets, and facilitate withdrawals in PKR.
• To comply with KYC, AML, and gaming licence obligations.
• To detect and prevent fraud, money laundering, and account abuse.
• To enforce betpto's Terms and Conditions, including detection of prohibited conduct.
• To provide responsible gaming tools and monitor for indicators of problem gambling.
• To respond to customer support enquiries and resolve disputes.
• To analyse platform usage and improve betpto's products and services.
• To send transactional communications relating to your account (e.g., withdrawal confirmations, security alerts).
• To send marketing communications where you have provided consent and have not subsequently opted out.

7. Disclosure to Third Parties

betpto shares your personal data with third parties only in the following circumstances:

7.1 Service Providers

betpto engages third-party service providers to perform functions on its behalf, including KYC and identity verification providers, payment processors (including JazzCash and Easypaisa integration partners), cloud hosting and data storage providers, game content providers, and customer support platform operators. All service providers are bound by contractual obligations to process your data only on betpto's instructions and in accordance with applicable data protection requirements.

7.2 Regulatory and Legal Disclosure

betpto may disclose personal data to regulatory authorities, law enforcement agencies, or licensing bodies where required by law, court order, or the terms of betpto's gaming licence. betpto will disclose the minimum personal data necessary to satisfy the relevant legal or regulatory obligation.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of betpto's business, personal data held by betpto may be transferred to the successor entity as part of the transaction. betpto will notify affected players of any such transfer in advance where required by applicable law.

8. International Data Transfers

betpto's servers and those of some of its third-party service providers may be located outside Pakistan. When your personal data is transferred internationally, betpto ensures that appropriate safeguards are in place, including contractual data protection clauses that impose obligations on the receiving party equivalent to the protections described in this Policy. By using the Services, you consent to such transfers.

9. Data Retention

betpto retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum periods:

• Account and identity data: minimum 5 years from account closure to satisfy gaming licence and AML record-keeping obligations.
• Transaction and betting records: minimum 5 years from the date of the transaction.
• Support communications: minimum 2 years from the date of the interaction.
• Technical and session logs: up to 12 months from collection.

After applicable retention periods, betpto will securely delete or irreversibly anonymise personal data. Data required to defend or pursue legal claims may be retained beyond standard retention periods until the claim is resolved.

10. Cookies and Tracking Technologies

betpto uses the following categories of cookies on the betpto platform:

• Essential cookies: Required for the betpto website to function, including session management, login authentication, and security tokens. These cannot be disabled without preventing core platform functionality.
• Analytics cookies: Used to understand how players use the betpto platform in aggregate, helping us improve page performance and navigation. Data is anonymised before analysis.
• Preference cookies: Store your language and display settings to personalise your betpto experience on return visits.

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to betpto or using core platform features.

11. Your Data Rights

Subject to applicable law and the conditions of betpto's gaming licence, you have the following rights in relation to your personal data held by betpto:

• Right of access: You may request a copy of the personal data betpto holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where betpto no longer has a lawful basis for holding it, subject to legal retention requirements.
• Right to restriction: You may request that betpto restricts processing of your data in certain circumstances.
• Right to data portability: Where technically feasible, you may request your personal data in a structured, commonly used format.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to other processing based on legitimate interests where your particular circumstances warrant it.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact betpto at [email protected]. betpto will respond to all data rights requests within 30 calendar days. Where a request is complex or numerous, betpto may extend this period by a further 30 days with prior notice.

12. Security Measures

betpto implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption on all connections between your browser and betpto's servers.
• AES-256 encryption of personal data stored in betpto's databases.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Two-factor authentication required for betpto staff accessing production systems.
• Regular penetration testing and security audits of the betpto platform.
• Incident response procedures for detecting and responding to potential data breaches.

Despite these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in risk to your rights and freedoms, betpto will notify you and the relevant regulatory authority as required by applicable law without undue delay.

13. Children's Privacy

betpto's Services are strictly intended for adults aged 18 and above. betpto does not knowingly collect personal data from individuals under 18 years of age. If betpto discovers that personal data has been collected from a minor, the account will be suspended immediately and the data deleted. If you believe that a minor has registered an account on betpto, please contact support immediately at [email protected].

14. Changes to This Privacy Policy

betpto reserves the right to update this Privacy Policy at any time. Where changes are material, betpto will notify registered players by email to the address associated with their account at least 14 days before the revised Policy takes effect. The "Last Updated" date at the top of this Policy will be revised to reflect the date of any update. Continued use of the Services following the effective date constitutes acceptance of the revised Policy.

15. Contact Us

For all privacy-related enquiries, data rights requests, or complaints, please contact betpto's data protection team:

• Email: [email protected]
• Live Chat: Available 24/7 from within your logged-in betpto account dashboard

betpto aims to acknowledge all privacy-related enquiries within 2 business days and resolve them within 30 calendar days.