Privacy at a Glance
These cards summarise our key privacy commitments. They are not a substitute for the full Privacy Policy below — please read the complete document for your full rights and our full obligations.
We collect only the personal data that is necessary to provide, secure and improve our services. We do not collect data speculatively or sell your personal information to third-party advertisers.
All personal data held by 29pak is stored using industry-standard encryption and access controls. We apply technical and organisational measures to protect your information against unauthorised access, loss or disclosure.
You have the right to access, correct, delete or restrict the processing of your personal data. You may also request a portable copy of your data. We honour all valid data rights requests promptly.
29pak does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. Any data sharing with third parties is limited to what is necessary to operate the platform.
We use cookies and similar technologies to keep the platform functional and to understand how it is used. Our Cookie section below explains exactly what types we use and your options for managing them.
If you have any question, concern or request about your privacy or personal data, you can reach our data support team directly. We respond to all data-related enquiries in clear, plain English.
29pak ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "User") who access and use the website located at https://29pak.cam. This Privacy Policy ("Policy") describes how 29pak collects, uses, stores, shares and protects personal information obtained through your use of our platform.
This Policy applies to all personal data processed by 29pak in connection with the registration, use and management of accounts on the platform, including data collected through the website, customer support channels and any marketing communications you have opted into.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling policy, both of which are incorporated by reference and form part of your overall agreement with 29pak.
If you are a user based in Pakistan, please also read Section 14 (Pakistan Context), which addresses specific considerations relevant to Pakistani users and the local regulatory environment.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
29pak operates as the Data Controller for all personal data collected through the platform. As Data Controller, we are responsible for determining the purposes and means of processing your personal data and for ensuring that such processing complies with applicable data protection law.
For all data protection enquiries, please contact us at the email address provided in Section 16 of this Policy. We respond to data-related requests in plain English, typically within five working days of receipt.
When you register an account, use our services or communicate with us, we collect the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Registration & KYC |
| Contact Data | Email address, phone number, city of residence | Registration |
| Identity Documents | CNIC, passport, driver's licence, selfie verification | KYC verification |
| Financial Data | Transaction history, deposit/withdrawal amounts, payment method references | Account activity |
| Support Data | Messages, emails, chat transcripts, complaint details | Customer support |
| Preferences Data | Communication preferences, responsible gambling settings, game history | Platform use |
When you access the 29pak platform, we automatically collect certain technical data through cookies, server logs and similar technologies:
We may receive personal data about you from third-party sources, including:
29pak processes your personal data for the following specific purposes:
Where applicable data protection law requires a legal basis for each processing activity, 29pak relies on the following grounds:
29pak does not sell your personal data. We share personal data with third parties only in the following limited circumstances:
We engage third-party service providers who process personal data on our behalf under contractual data processing agreements. These include:
We may disclose personal data to relevant authorities, regulators or law enforcement agencies where required by law, court order or regulatory obligation. This includes AML and CTF reporting obligations.
In the event of a merger, acquisition, sale of assets or other business restructuring involving 29pak, personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any material change in data controller as required by applicable law.
29pak retains personal data for as long as is necessary for the purposes set out in this Policy, subject to any overriding legal or regulatory retention requirements. Our general retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal / AML obligation |
| KYC Documents | Duration of account + 5 years after closure | Regulatory requirement |
| Financial Transaction Records | Duration of account + 5 years after closure | Legal / AML obligation |
| Customer Support Records | 3 years from last interaction | Legitimate interest |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Consent accountability |
| Technical Logs & Session Data | Up to 12 months | Security / platform improvement |
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data deletion procedures.
29pak implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:
No method of transmission over the internet or electronic storage is 100% secure. While we apply best-practice security measures, we cannot guarantee absolute security. Users are encouraged to secure their own devices and account credentials.
29pak uses cookies and similar technologies (such as local storage and session identifiers) to operate and improve the platform. The types of cookies we use are described below:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Essential for the platform to function — including session management, login state and security tokens. | Yes — cannot be disabled |
| Functional | Remember your preferences such as language, display settings and responsible gambling limits. | Optional |
| Analytical / Performance | Aggregate data on how users navigate the platform to identify performance improvements. Data is anonymised where possible. | Optional (consent required) |
| Security | Used to detect and prevent fraudulent activity, bot access and suspicious session behaviour. | Yes — necessary for security |
You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the platform. 29pak does not use cookies to serve third-party advertising or to build cross-site advertising profiles.
Subject to applicable law, you hold the following rights in respect of your personal data held by 29pak. To exercise any of these rights, please contact us using the details in Section 16.
Request a copy of the personal data we hold about you, including information on how it is used and with whom it is shared.
Request correction of any inaccurate or incomplete personal data held about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
Request that we restrict the processing of your data in certain circumstances, for example while a correction request is being verified.
Receive your personal data in a structured, commonly used and machine-readable format for transfer to another service provider.
Object to processing based on legitimate interests, including for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
Request human review of any significant decision made about you using automated processes alone, where such a right applies under applicable law.
We will respond to all valid data rights requests within 30 days of receipt, or within any shorter period required by applicable law. We may request verification of your identity before processing a request. There is no charge for exercising your data rights except in cases of unfounded, excessive or repetitive requests.
Where we become aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account. If you believe a minor has registered on this platform, please notify us immediately using the contact details in Section 16.
29pak may transfer personal data to service providers and processors located in countries outside of your country of residence. Where such transfers occur, we apply appropriate safeguards to ensure your data remains protected to a standard consistent with this Privacy Policy.
These safeguards may include contractual clauses binding the recipient to data protection standards equivalent to those described in this Policy, or reliance on adequacy decisions or other recognised transfer mechanisms where applicable.
Pakistan does not currently have a comprehensive personal data protection law in force equivalent to the GDPR or similar frameworks. 29pak voluntarily applies internationally recognised data protection principles to all users, regardless of location, as described throughout this Policy.
29pak is not affiliated with, approved by, or subject to oversight by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial regulatory body in the context of data protection. We are also not endorsed by or affiliated with any Pakistani bank or financial institution, including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah.
If you are a Pakistani user with concerns about how your data is handled, you are encouraged to contact us directly using the details in Section 16. We will handle all enquiries in English and will apply the rights described in this Policy regardless of your country of residence.
29pak reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, our processing practices or our business operations. The "Last Updated" date at the top of this document will reflect the most recent revision.
Where changes are material, we will notify registered users by email or via an in-platform notification prior to the updated Policy taking effect. We encourage you to review this Policy periodically. Continued use of the platform after any update constitutes acceptance of the revised Privacy Policy.
If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, please contact the 29pak data support team using the details below:
Data Enquiries Email:
The above email address is displayed as plain text only and is not a clickable link. Please include "Privacy Request" or "Data Rights Request" in your subject line so your message is routed to the appropriate team. We respond to all data-related enquiries in English, typically within five working days.
For responsible gambling enquiries — including self-exclusion requests, account restriction requests or support around problem gambling — please clearly indicate the nature of your request so it can be prioritised by the appropriate team member.