Gold Patti Privacy Policy –
How We Handle Your Personal Data

1. About This Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected by Gold Patti ("we", "us", "the Platform") through the Gold Patti website at goldpatti.net, the Gold Patti mobile application, and all associated services including sports betting, casino games, slots, baccarat, poker, and the VIP Club loyalty programme.

Gold Patti operates as an online gaming and betting platform serving adult players in Pakistan. All data processing described in this Policy relates to Pakistani players using the platform in PKR. This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering an account on Gold Patti, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described here. We review and update this Policy regularly. The date of the most recent revision is shown at the top of this page.

2. Data We Collect

Gold Patti collects personal data in two ways: information you provide directly when using the platform, and data collected automatically through your use of our services.

2.1 Data You Provide Directly

• Identity data: Your full name, date of birth, CNIC number (where verification is required), and gender
• Contact data: Mobile phone number, email address, and postal address
• Account credentials: Your chosen username and encrypted password
• Payment data: The mobile wallet number or bank account details you register for deposits and withdrawals — see Section 5 for full details on how payment data is handled
• Verification documents: Copies of CNIC or other identification documents submitted during the account verification process
• Communications: Records of your interactions with Gold Patti support via live chat, email, or WhatsApp
• Responsible gaming data: Deposit limits, self-exclusion requests, and session limits you set through your account

2.2 Data Collected Automatically

• Device and connection data: IP address, device type and model, operating system version, browser type, and mobile network provider
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the platform
• Transaction logs: A complete record of all deposits, withdrawals, bets, game rounds, and bonus activity on your account
• Cookie and tracking data: Data collected through cookies and similar technologies as described in Section 8

3. Why We Collect Your Data

Gold Patti processes your personal data for specific, legitimate purposes. We do not collect data speculatively. Each category of data we hold is tied to a defined operational reason:

• Account creation and management: To set up and maintain your Gold Patti account, verify your identity, and ensure account security
• Payment processing: To handle deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard in PKR
• Fraud and security: To detect and prevent fraudulent activity, unauthorised account access, and money laundering — all regulated obligations for gaming platforms
• Age verification: To ensure that no person under 18 years of age is able to gamble on Gold Patti
• Customer support: To respond to your queries, resolve disputes, and process account requests efficiently
• Responsible gaming: To implement deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion tools you activate, and to monitor for signs of problematic play
• Legal compliance: To meet obligations under applicable financial regulations, anti-money laundering requirements, and gaming platform compliance frameworks
• Platform improvement: To understand how players use Gold Patti so that we can fix issues, improve navigation, and develop better features — using aggregated and anonymised data wherever possible
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive these

4. Who We Share Your Data With

Gold Patti does not sell your personal data. We share it only in the following specific circumstances and only to the extent necessary:

4.1 Payment Processors

We share necessary transaction data with the payment service providers you choose — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or Visa/Mastercard networks. We share only what each provider needs to process the specific transaction. We do not give payment processors access to your gaming history or communications.

4.2 Identity Verification Services

For large withdrawal verification or account compliance checks, we may use a third-party identity verification service to validate CNIC documents. These providers are contractually bound to use data solely for verification and to delete it once the process is complete.

4.3 Game Providers

Casino games and slot titles at Gold Patti are provided by third-party game developers. When you play a game, your session data (stake amounts, game outcomes) is processed through the provider's certified RNG system. Game providers receive only the data required to run the game — your name and contact details are not shared with game providers.

4.4 Legal and Regulatory Authorities

Gold Patti may be required to disclose personal data to law enforcement, financial intelligence authorities, or regulatory bodies where we have a legal obligation to do so. We will not notify you of such disclosures where doing so would compromise an investigation, as required by applicable law.

4.5 No Other Sharing

Beyond the categories listed above, Gold Patti does not share your personal data with any third party. We do not use advertising networks, affiliate tracking that exposes personal data, or cross-platform data sharing arrangements of any kind.

5. Payment Data – Special Handling

Payment information requires extra care and Gold Patti treats it accordingly. Here is specifically how we handle payment data for Pakistani players:

• Your Easypaisa or JazzCash mobile wallet number is stored in an encrypted format in our database. It is visible to the Finance team only when processing a withdrawal request that you have submitted.
• Bank account details provided for IBFT transfers are stored with the same encryption standard and are used only for the specific transactions you initiate.
• Card numbers for Visa/Mastercard payments are tokenised — Gold Patti does not store full card numbers. Only a secure token generated by the card payment processor is held in our system.
• Payment details provided to Gold Patti are not shared with game providers, marketing partners, or any other third party beyond the payment processor required to complete the transaction.
• Only payment methods registered in your own name may be used. If a payment originates from a third-party account, the transaction will be returned to its source and the associated account may be suspended pending review.

6. Data Storage & Security

Gold Patti stores all personal data on secured servers with physical and logical access controls. The following security measures are in place:

• Encryption at rest: Sensitive data fields — including payment details, CNIC numbers, and verification documents — are encrypted in the database using AES-256 encryption
• Encryption in transit: All data transmitted between your device and Gold Patti is protected by 256-bit SSL/TLS
• Access controls: Internal access to personal data is role-based and logged. Employees can only access data categories relevant to their specific job function
• Penetration testing: Gold Patti conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited
• Incident response: We maintain a documented security incident response procedure. In the event of a data breach that affects your personal data, we will notify you within 72 hours of becoming aware of it
• Audit logging: All access to personal data is logged with timestamps, user IDs, and the specific data accessed, enabling full audit trails for compliance and investigation purposes

While Gold Patti employs industry-standard security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your own account by using a strong, unique password and not sharing your login credentials with anyone.

7. How Long We Keep Your Data

Gold Patti retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, as required by financial regulations applicable to gaming platforms
• Transaction records: Deposit, withdrawal, bet, and game records are retained for a minimum of 5 years after the transaction date
• Identity verification documents: CNIC scans and verification documents are retained for the minimum period required by applicable regulations, typically 5 years after account closure
• Support communications: Chat logs and email correspondence are retained for 2 years from the date of the last communication in the thread
• Marketing opt-in records: Records of when you opted in to marketing communications are retained for as long as the opt-in remains active plus 3 years after opt-out, for compliance purposes
• Technical logs: Server and access logs are retained for 12 months and then deleted automatically
• Voluntary deletion requests: Where you request deletion of your personal data and no legal retention obligation prevents it, we will complete the deletion within 30 days of your request

8. Cookies & Tracking Technologies

Gold Patti uses cookies and similar technologies to operate the platform effectively, remember your preferences, and understand how the platform is used. Here is a breakdown of the types of cookies in use:

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using Gold Patti. Analytics and functional cookies can be disabled without affecting core platform functionality.

9. Your Data Rights

As a Gold Patti member, you have the following rights over your personal data. These are genuine rights, not aspirational statements — you can exercise any of them by emailing support@goldpatti.net.

To exercise any of these rights, email support@goldpatti.net with the subject line "Data Request" and a description of what you are asking for. We will acknowledge your request within 24 hours and provide a full response within 72 hours. For complex deletion or portability requests, the timeline may extend to a maximum of 30 days, during which we will keep you updated on progress.

If you are not satisfied with how Gold Patti handles your data request, you have the right to escalate the matter to the relevant data protection authority or seek independent legal advice.

10. Protection of Minors

Gold Patti is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 18. Age verification is a mandatory step in the account creation process at Gold Patti, and additional age verification documentation may be requested during account review.

If Gold Patti becomes aware that an account belongs to a minor, the account will be closed immediately and any deposited funds will be returned through the original payment method. We strongly encourage parents and guardians to use parental control software to restrict access to online gaming and betting platforms on shared or family devices.

If you believe a minor has created a Gold Patti account using false age information, please contact support@goldpatti.net immediately. We take this seriously and will investigate promptly.

11. Changes to This Privacy Policy

Gold Patti reviews this Privacy Policy at least twice a year and updates it whenever there are material changes to how we handle personal data, or when required to reflect changes in applicable regulations. The date of the most recent update is always displayed prominently at the top of this page.

When we make material changes — changes that meaningfully affect your privacy rights or how your data is used — we will notify you in advance by email and/or through an in-platform notification. We will give you at least 7 days' notice before material changes take effect, giving you the opportunity to review the updated Policy and, if you disagree with it, to close your account before the changes apply.

Continued use of Gold Patti after a revised Privacy Policy takes effect constitutes your acceptance of the updated Policy.

12. Contact Us About Privacy

If you have any questions about this Privacy Policy, how your personal data is handled, or want to exercise any of your data rights, please contact the Gold Patti privacy team through the following channels:

• Email: support@goldpatti.net (subject line: "Privacy Query" or "Data Request")
• Live Chat: Available 24/7 through the Gold Patti website and mobile app — our support team handles privacy queries in both Urdu and English
• WhatsApp (VIP members): Contact details provided to Gold tier and above members by their account manager

We aim to acknowledge all privacy-related emails within 24 hours and provide a substantive response within 72 hours. For data access and deletion requests, we provide a full response within 30 days as required by applicable data protection frameworks.