sotpk Privacy Policy

For the purposes of this Privacy Policy, the data controller responsible for your personal information is sotpk, operating the online gaming platform accessible at sotpk.net. sotpk operates under a valid international gaming license, and all data processing activities are conducted in accordance with the data protection obligations imposed by that license and the applicable data protection standards recognised under it.

This Privacy Policy applies to all personal information that sotpk collects, processes, and stores in connection with your use of the sotpk platform — including the website at sotpk.net, any associated mobile web interface, and all gaming services offered through your sotpk account. By registering an account or using the sotpk platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

sotpk collects personal data from players across several categories. The specific data collected depends on the nature of your interaction with the platform — registration, KYC verification, payment processing, customer support, and general platform use each generate different categories of data.

sotpk collects personal data through the following mechanisms:

• Direct Collection: Data you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotional offer. This is the primary source of identity, contact, and financial data held by sotpk.
• Automated Technical Collection: Data collected automatically when you access the sotpk platform, including IP address, device identifiers, browser type, operating system, session duration, pages visited, and interaction patterns. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processor Data: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, SadaPay, or cryptocurrency, the relevant payment processor shares transaction confirmation data with sotpk. This includes transaction reference numbers, amounts, timestamps, and the payment method identifier (e.g., mobile wallet number or bank account last four digits).
• Third-Party Identity Verification: Where sotpk engages a third-party identity verification service to assist with KYC or fraud screening, that provider may share verification results and data flags with sotpk as part of the compliance process.
• Fraud Detection Systems: sotpk's automated fraud detection systems generate data about account activity patterns, login behaviour, and betting sequences. This data is created by the platform itself based on your activity and is used solely for security and compliance purposes.

sotpk uses your personal data only for legitimate, specified purposes. We do not use player data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which sotpk processes personal data are as follows:

1. Account Management: To create, maintain, and administer your sotpk player account — including processing logins, managing account settings, maintaining your balance, and recording your gaming history.
2. Identity and Age Verification (KYC): To verify that you are who you say you are and that you meet the minimum age requirement of 21 years as required under our international gaming license. CNIC verification is mandatory for all withdrawal-eligible accounts.
3. Payment Processing: To facilitate deposits from and withdrawals to your designated Pakistani payment methods (JazzCash, EasyPaisa, HBL, UBL, SadaPay, USDT TRC20), and to maintain accurate financial records as required under our license obligations.
4. Regulatory Compliance and AML: To fulfil our anti-money laundering (AML), counter-terrorism financing (CTF), and other regulatory obligations imposed by our international gaming license. This includes monitoring transaction patterns, conducting enhanced due diligence on large transactions, and filing reports to relevant authorities where legally required.
5. Responsible Gaming: To administer responsible gaming tools including deposit limits, loss limits, cool-off periods, and self-exclusion; to monitor for indicators of problem gambling behaviour; and to respond appropriately where such indicators are identified.
6. Customer Support: To respond to your support queries, resolve disputes, process complaints, and maintain records of communications for quality assurance and regulatory audit purposes.
7. Platform Security: To detect, investigate, and prevent fraud, unauthorised account access, multi-accounting, bonus abuse, and other security threats to the sotpk platform and its players.
8. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw marketing consent at any time via your account dashboard or by contacting support.
9. Platform Improvement: To analyse aggregate, anonymised usage data to understand how players interact with the sotpk platform, identify areas for improvement, and develop new features and products.

sotpk processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing required to fulfil the contract between you and sotpk — i.e., to operate your account and deliver the gaming services you have signed up for. Without this processing, sotpk cannot provide you with its services.
• Legal Obligation: Processing required to comply with mandatory legal and regulatory obligations, including KYC/AML compliance, age verification, regulatory reporting, and data retention requirements imposed by our international gaming license authority.
• Legitimate Interests: Processing that serves sotpk's legitimate business interests and does not override your fundamental privacy rights — including fraud prevention, platform security monitoring, and aggregate analytics for service improvement.
• Consent: Processing for which you have provided specific, informed, and freely given consent — primarily marketing communications. Where consent is the legal basis, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

sotpk does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following strictly defined circumstances:

• Payment Processors: When you make a deposit or withdrawal, we share the minimum necessary payment data with your chosen payment provider (JazzCash, EasyPaisa, HBL, UBL, SadaPay, or our cryptocurrency processing partner) to execute the transaction. These processors are bound by their own data protection obligations and may not use your data for any other purpose.
• Identity Verification Providers: Where sotpk uses a third-party KYC provider to assist with identity or age verification, we share the identity documents you submit with that provider for verification processing. The KYC provider is contractually prohibited from retaining or using your documents for any other purpose.
• Regulatory and Law Enforcement Authorities: Where we are legally required to do so under our international gaming license — including mandatory AML reporting, responses to court orders, regulatory audit requests, or law enforcement demands — sotpk will disclose the relevant personal data to the requesting authority. We will not notify you of such disclosures where the relevant authority has indicated that notification would compromise an investigation.
• Fraud Prevention Networks: sotpk may share limited data (such as device fingerprints or flagged account identifiers) with cross-operator fraud prevention databases operated under gaming industry standards to prevent multi-accounting, identity fraud, and bonus abuse across multiple platforms.
• Professional Advisors: sotpk's legal advisors, auditors, and compliance consultants may access personal data where strictly necessary to provide professional services to sotpk. All such parties are bound by professional confidentiality obligations.

The sotpk platform uses cookies and similar tracking technologies to operate core platform functions, maintain session security, and understand how players interact with the site. The following categories of cookies are used:

You may control non-essential cookies through your browser settings or through the cookie preference panel accessible on the sotpk platform. Please note that disabling functional cookies may affect your platform experience, and disabling strictly necessary or security cookies may prevent you from logging into your account.

sotpk retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as required by applicable regulatory obligations. Our standard data retention periods are as follows:

• Active Account Data: All personal data associated with your sotpk account is retained for the full duration of your account's active status plus a minimum of five (5) years following account closure. This retention period is required under our international gaming license's AML compliance obligations.
• KYC Documents (CNIC, selfies, proof of address): Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, in compliance with AML record-keeping requirements.
• Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of seven (7) years following the transaction date for regulatory audit purposes.
• Customer Support Records: Live chat transcripts and email correspondence are retained for three (3) years following the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Records of marketing consent and consent withdrawal are retained for five (5) years to demonstrate compliance with consent-based processing obligations.
• Technical Logs (IP addresses, login records): Retained for twelve (12) months for security monitoring and fraud investigation purposes, unless a specific security incident requires extended retention.

sotpk implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your device and the sotpk platform is encrypted using 256-bit SSL/TLS encryption. This applies to all connections — account login, game play, payment processing, and support communications.
• Encryption at Rest: Sensitive personal data stored on sotpk's servers — including KYC documents, payment method details, and account credentials — is encrypted at rest using industry-standard encryption protocols.
• Password Security: Player account passwords are never stored in plain text. Passwords are processed through a one-way cryptographic hashing function with individual salting, making it computationally infeasible for any party — including sotpk staff — to recover your password from stored data.
• Two-Factor Authentication (2FA): sotpk offers SMS OTP-based two-factor authentication for all player accounts. 2FA is automatically required for logins from new or unrecognised devices. We strongly recommend that all players activate 2FA through their account security settings.
• Access Controls: Access to personal data within sotpk's internal systems is restricted on a strict need-to-know basis. Staff members can only access the data categories necessary for their specific role. All internal data access is logged and regularly audited.
• Penetration Testing: sotpk's platform infrastructure undergoes regular security assessments and penetration testing by independent security specialists to identify and remediate potential vulnerabilities before they can be exploited.

As a sotpk player whose personal data is processed by sotpk, you have the following data rights. These rights may be exercised by submitting a written request to [email protected] with the subject line "Data Rights Request". sotpk will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 days.

The sotpk platform is strictly prohibited for persons under the age of 21. sotpk does not knowingly collect, process, or store any personal data from individuals under 21 years of age. Age verification through CNIC is a mandatory part of the account registration and KYC process precisely to prevent underage access.

If sotpk becomes aware — through any means — that personal data has been collected from a person under the age of 21, we will:

• Immediately suspend the relevant account pending investigation
• Permanently close the account upon confirmation of underage status
• Securely delete all personal data associated with that account, subject to any mandatory regulatory retention requirements
• Handle any funds in the account in accordance with regulatory requirements and applicable law
• Escalate the matter to relevant authorities where required

The sotpk platform may reference or interact with third-party services — including payment processors, game software providers, and identity verification services — in the course of delivering its gaming products. Each of these third-party services operates under its own privacy policy and data processing terms.

sotpk enters into data processing agreements with all third-party service providers who handle personal data on our behalf. These agreements require third-party processors to:

• Process personal data only for the specific purpose for which it was shared by sotpk
• Implement security measures at least equivalent to those maintained by sotpk
• Not sub-process the data to any further third party without sotpk's prior written authorisation
• Delete or return all personal data upon termination of the service relationship with sotpk
• Notify sotpk promptly in the event of any security incident involving sotpk player data

sotpk is not responsible for the privacy practices of third-party services that operate independently of the sotpk platform. Players who access third-party services should review those services' individual privacy policies.

sotpk's platform infrastructure and certain third-party service providers may involve the transfer and processing of personal data in jurisdictions outside Pakistan. Where personal data is transferred internationally, sotpk ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Privacy Policy.

Safeguards for international data transfers include:

• Contractual obligations imposed on receiving parties through data processing agreements that include equivalent data protection standards
• Transfer to jurisdictions that have been assessed as providing adequate data protection under the standards applicable to our gaming license
• Technical controls including encryption of data in transit and at rest regardless of the jurisdiction in which servers are located

By using the sotpk platform and registering as a player, you acknowledge and consent to the transfer of your personal data to the jurisdictions in which sotpk's infrastructure and licensed third-party service providers operate, subject to the safeguards described above.

sotpk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. All amendments will be published on this page with an updated "Last Updated" date.

Where amendments are material — meaning they significantly affect how your personal data is processed or your rights in relation to that data — sotpk will provide advance notice via email to your registered address at least seven (7) days before the changes take effect.

Non-material amendments — such as clarifications, corrections of typographical errors, or contact information updates — may take effect immediately upon publication without advance notice.

Your continued use of the sotpk platform following the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with any amendment, you should cease using the platform and contact support to discuss account closure options.

For all matters relating to this Privacy Policy, including data access requests, rectification requests, erasure requests, marketing opt-outs, and privacy complaints, please contact the sotpk privacy team using the details below:

If you are not satisfied with sotpk's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the relevant supervisory authority under our international gaming license. Details of the applicable supervisory authority are available upon request from our privacy team.

sotpk is committed to resolving all privacy concerns fairly, transparently, and in full compliance with applicable data protection standards. We take every privacy complaint seriously and will always provide a substantive, reasoned response — not a generic acknowledgement.