Privacy Policy
gizabet Platform — Data Protection & User Rights

gizabet is an international online gaming and sports betting platform accessible at gizabet.im. We provide casino games, live dealer tables, sports betting markets including PSL cricket and international football, slot games, and instant-win titles to English-speaking players in Pakistan and other eligible jurisdictions.

For the purposes of this Privacy Policy, gizabet is the data controller responsible for determining how your personal information is collected and used. We operate under international gaming regulations and maintain compliance with applicable data protection and anti-money laundering requirements.

All privacy-related enquiries, data access requests, and complaints should be addressed to our support team via live chat at gizabet.im or by emailing [email protected].

gizabet collects personal information in several ways: directly from you during registration and account use, automatically through platform interaction, and in certain circumstances from third-party verification partners. The categories of data we collect include:

gizabet does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless this arises incidentally through a responsible gaming self-exclusion request, in which case it is processed solely to protect your welfare.

gizabet uses your personal data for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. Our primary uses of your personal data are as follows:

• Account Management: Creating and maintaining your gizabet account, authenticating your identity at login, and managing your account preferences and session history.
• Payment Processing: Facilitating deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank; reconciling transactions; and resolving payment disputes.
• Identity & Age Verification (KYC): Confirming that you meet the minimum age requirement of 21 years, verifying the authenticity of identity documents, and satisfying our anti-money laundering obligations.
• Platform Operations: Delivering game content, processing bets, calculating and crediting winnings, applying bonuses, and maintaining accurate account balances.
• Security & Fraud Prevention: Detecting and investigating unusual account activity, preventing multi-accounting, identifying stolen payment credentials, and protecting the integrity of gizabet's gaming environment.
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour, enforcing self-exclusion and deposit limits requested by users, and proactively reaching out where welfare concerns arise.
• Customer Support: Responding to your queries, complaints, and requests via live chat and email; maintaining records of interactions for quality assurance.
• Legal & Regulatory Compliance: Meeting our obligations under applicable anti-money laundering regulations, responding to lawful requests from financial intelligence authorities, and maintaining records as required by our operating licence conditions.
• Service Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform, identify technical issues, and improve the overall gizabet experience for Pakistani users.
• Marketing Communications: Sending promotional emails and push notifications about gizabet bonuses, new game releases, and PSL cricket betting offers — but only where you have expressly opted in to receive such communications. See Section 12 for full details.

gizabet processes your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the gizabet Terms & Conditions — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable anti-money laundering regulations, age verification requirements, and regulatory reporting obligations imposed by our operating licence.
• Legitimate Interests: Processing undertaken to protect the security and integrity of the platform, prevent fraud and abuse, and improve our services — where these interests are not overridden by your rights and freedoms.
• Consent: Processing undertaken only where you have provided clear, informed, and freely given consent — specifically in the context of optional marketing communications. You may withdraw consent at any time.

Where processing is based on legitimate interests, gizabet has conducted a balancing assessment to confirm that our interests do not override your fundamental privacy rights. Details of this assessment are available on request by contacting [email protected].

gizabet does not sell, rent, or trade your personal data. We share your information only with carefully selected third-party partners where necessary and only to the extent required for the specific purpose. Categories of recipients include:

• Payment Processors: JazzCash, EasyPaisa, and partnered banking institutions (HBL, UBL, Meezan Bank) receive transactional data necessary to process your deposits and withdrawals. These parties are independent data controllers subject to their own privacy obligations under Pakistani financial regulations.
• KYC & Identity Verification Providers: Third-party verification services may receive copies of identity documents submitted during the KYC process. These providers are contractually bound to process data solely for verification purposes and may not use it for any other reason.
• Game Studio Partners: Licensed game providers (including but not limited to Pragmatic Play, Evolution Gaming, and Hacksaw Gaming) may receive session identifiers and bet data necessary to deliver game content. These providers do not receive your personally identifiable registration data.
• Fraud Prevention Services: Specialised third-party fraud detection platforms may receive technical identifiers (IP addresses, device fingerprints) to screen for suspicious activity. No personally identifiable information beyond what is strictly necessary is shared.
• Regulatory & Law Enforcement Authorities: gizabet will disclose personal data to financial intelligence units, gaming regulators, or law enforcement agencies where required by law, court order, or regulatory mandate. gizabet will notify affected users of such disclosures unless prohibited from doing so by law.
• Professional Advisors: Lawyers, auditors, and compliance consultants may access personal data on a strictly confidential, need-to-know basis in connection with legal proceedings or regulatory audits.

All third-party data processors engaged by gizabet are subject to written data processing agreements that require them to implement appropriate technical and organisational security measures and process data solely on gizabet's documented instructions.

As an internationally operated platform, gizabet may transfer your personal data to servers and service providers located outside Pakistan. Where such transfers occur, gizabet takes the following steps to ensure your data remains protected:

• Transfers to third-party processors are governed by contractual data protection clauses that impose obligations equivalent to those under internationally recognised data protection standards.
• gizabet conducts due diligence on all international data processors to confirm that adequate technical and organisational security measures are in place prior to any transfer.
• Personal data is transferred internationally only to the extent required for the purposes described in this Privacy Policy — primarily for game delivery infrastructure, fraud screening, and KYC verification.

If you have questions about the specific countries to which your data may be transferred, please contact us at [email protected].

gizabet uses cookies and similar tracking technologies to maintain session continuity, improve platform performance, and detect fraudulent activity. The cookies used on gizabet.im fall into the following categories:

• Strictly Necessary Cookies: Required for core platform functionality — including maintaining your logged-in session, remembering your language preference, and securing your connection. These cannot be disabled without breaking core features.
• Functional Cookies: Remember your gameplay preferences, lobby settings, and display options to personalise your gizabet experience across sessions.
• Analytics Cookies: Collect anonymised, aggregated data about how users navigate gizabet.im — which game categories are most visited, where users encounter errors, and overall traffic patterns. This data informs platform improvements and contains no personally identifiable information.
• Security Cookies: Help gizabet detect and prevent fraudulent activity, identify suspicious login patterns, and protect the integrity of the platform.

gizabet does not use advertising cookies, retargeting pixels, or third-party social media tracking cookies of any kind. You will not see gizabet adverts following you around the internet based on your activity on our platform.

You may manage or disable non-essential cookies through your browser settings. Instructions for the most common browsers are available from the browser provider's support pages. Please note that disabling functional cookies may affect the quality of your gizabet experience but will not prevent you from accessing the platform.

gizabet implements a layered information security programme designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and gizabet.im is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• At-Rest Encryption: Personal data stored on gizabet servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. gizabet staff are assigned role-based access permissions and are prohibited from accessing user data outside the scope of their operational responsibilities.
• Two-Factor Authentication: gizabet offers optional two-factor authentication (2FA) for all registered accounts to provide an additional layer of protection against unauthorised account access.
• Regular Security Audits: gizabet engages independent security specialists to conduct regular penetration testing and vulnerability assessments of the platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, gizabet will notify affected users and relevant regulatory authorities within 72 hours of becoming aware of the incident, in accordance with our incident response procedures.

gizabet retains your personal data for the periods set out below. After the applicable retention period, data is securely deleted or irreversibly anonymised:

• Active Account Data: Retained for the duration of your active gizabet membership. If your account is inactive for 24 consecutive months, we will contact you to confirm whether you wish to maintain the account before initiating a deletion review.
• Transaction Records: Financial transaction data — including deposit and withdrawal history — is retained for a minimum of five years following the transaction date, in compliance with anti-money laundering regulations applicable to our operating jurisdiction.
• KYC Documentation: Identity verification documents (including CNIC copies) are retained for a minimum of five years following account closure, as required by our regulatory compliance obligations.
• Support Communications: Live chat transcripts and support email records are retained for 24 months following the date of the interaction, for quality assurance and dispute resolution purposes.
• Marketing Data: Consent records and associated marketing preference data are retained for the duration of your active consent plus 12 months following withdrawal of consent, for compliance documentation purposes.
• Technical Logs: Server access logs and security event logs are retained for 90 days, after which they are deleted unless retained as part of an active security investigation.

As a gizabet user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days.

• Right of Access: You may request a copy of all personal data gizabet holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. You can also update certain account details directly through the account management section of gizabet.im.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to our legal retention obligations — we cannot delete transaction records within the mandatory five-year retention window.
• Right to Restriction: You may request that we restrict processing of your data while a correction request or objection is being resolved.
• Right to Data Portability: You may request a machine-readable copy of your personal data in a structured, commonly used format to transfer to another service provider.
• Right to Object: You may object to processing of your data based on legitimate interests at any time. gizabet will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].

gizabet deploys automated age verification checks at registration and conducts manual KYC verification for all accounts before approving withdrawals. If gizabet becomes aware that personal data has been collected from an individual under the age of 21, the account will be immediately suspended, all funds will be returned to the depositing payment method where possible, and all associated personal data will be deleted from our systems within 30 days.

Parents and guardians who believe a minor has registered on gizabet should contact our support team immediately via live chat or at [email protected]. gizabet also recommends the use of parental control software for households where minors have access to internet-connected devices.

gizabet will only send you promotional emails, SMS messages, or push notifications about bonuses, new games, PSL cricket betting offers, and other platform promotions if you have expressly opted in to receive such communications during registration or through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any gizabet marketing email.
• Updating your communication preferences in the "My Account" section of gizabet.im.
• Contacting [email protected] with the subject line "Unsubscribe from Marketing".

Opting out of marketing communications will not affect your receipt of essential transactional notifications — such as deposit confirmations, withdrawal processing updates, account security alerts, and KYC status messages. These service communications are a necessary part of operating your gizabet account and cannot be unsubscribed from individually.

gizabet reserves the right to update or amend this Privacy Policy at any time. All changes will be published on this page at gizabet.im/privacy-policy with a revised effective date. For material changes — particularly those affecting how your data is used or your rights as a data subject — gizabet will notify registered users via the email address associated with their account at least 14 days before the changes take effect.

Your continued use of gizabet after the effective date of any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised terms, you should close your account and cease using the platform before the effective date. Account closure requests can be submitted via live chat or at [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how gizabet protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the way gizabet handles your personal data, please reach out through the following channels:

If you are not satisfied with gizabet's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority or independent dispute resolution service referenced in gizabet's licensing documentation. gizabet will cooperate fully with any such regulatory investigation.