Privacy Policy – fafa191 Pakistan Data Protection & User Privacy

fafa191 is an online sports betting and casino platform operating at fafa191.ws, serving players in Pakistan. The platform is the data controller for all personal data collected from registered users and website visitors.

fafa191 is committed to protecting the privacy of its users. This policy has been written to be as clear and straightforward as possible — we want Pakistani users to genuinely understand how their data is handled, not to bury important information in impenetrable legal language. If anything in this policy is unclear, please email support@fafa191.ws and we will explain it directly.

fafa191 collects personal data in the following categories. We collect only what is necessary for legitimate operational purposes — we don't collect data speculatively or "just in case".

fafa191 does not collect sensitive personal categories of data such as religious beliefs, health information, biometric identifiers (beyond what is legally required for identity verification in specific circumstances) or political views.

fafa191 uses personal data for the following purposes and no others:

• Account management: Creating, maintaining and securing your fafa191 account. This includes password resets, session management and two-factor authentication where applicable.
• Processing transactions: Handling deposits, withdrawals and any financial transactions associated with your fafa191 account. Your payment details are used solely to process and reconcile transactions.
• Identity verification: Conducting Know Your Customer (KYC) checks as required for compliance and fraud prevention. ID documents are reviewed by authorised staff only and are not stored longer than required.
• Providing betting and gaming services: Processing bet requests, settling bets, running casino games and recording game outcomes for your account history.
• Customer support: Responding to your queries, resolving disputes and investigating complaints. Support conversations are logged for quality and audit purposes.
• Fraud and security: Detecting and preventing unauthorised access, account takeover, money laundering and other fraudulent activity. IP addresses and device data are used for this purpose.
• Responsible gaming: Monitoring account behaviour for signs of problem gambling, communicating with users about responsible gaming tools and enforcing self-exclusion requests.
• Legal compliance: Meeting regulatory and legal obligations, responding to lawful requests from competent authorities and maintaining records as required by applicable law.
• Marketing communications (opt-in only): Sending you information about promotions, bonuses, new games and platform updates — only where you have explicitly opted in to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to identify how fafa191 can be improved. This analysis does not identify individual users.

fafa191 processes personal data on the following legal grounds depending on the purpose:

• Contractual necessity: Processing your registration data, payment details and betting history is necessary to fulfil our contract with you as a registered user of fafa191. Without this data, the service cannot be provided.
• Legal obligation: Identity verification, anti-money-laundering checks and transaction record-keeping are required by applicable law and regulatory obligations. fafa191 must conduct these checks regardless of individual user preferences.
• Legitimate interests: Security monitoring, fraud prevention, platform maintenance, responsible gaming monitoring and customer support are conducted under fafa191's legitimate interests — providing a safe and functional platform. These interests are always balanced against users' privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit consent. You can withdraw consent at any time without affecting any other aspect of your account.

fafa191 shares personal data with third parties only where strictly necessary and only with parties who are contractually bound to protect that data appropriately. The categories of third parties with whom data may be shared are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors and card payment gateways (Visa/Mastercard networks) receive the transaction data necessary to process your deposits and withdrawals. These parties operate under their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC and identity verification services may process your CNIC or passport details to verify your identity. These providers are bound by strict data processing agreements with fafa191.
• Game software providers: Casino and card game providers may receive anonymised session and game data to facilitate game delivery and audit outcomes. No personally identifiable data beyond a session token is shared for this purpose.
• IT and security providers: Cloud hosting, cybersecurity and platform infrastructure providers may process technical data (IP addresses, server logs) in the course of providing their services to fafa191. These parties act as data processors under fafa191's instructions.
• Regulatory and law enforcement authorities: fafa191 will share data with competent authorities where required to comply with a lawful request, court order or regulatory obligation. fafa191 will notify you of such a disclosure where legally permitted to do so.

Because fafa191 handles real money in Pakistani Rupees, identity verification is a legal and operational requirement — not something we can make optional. When you request your first withdrawal from fafa191, you will be asked to complete a Know Your Customer (KYC) verification by providing a copy of your CNIC or passport and confirming the payment method linked to your account.

KYC documents are reviewed by a small number of authorised fafa191 staff. Once verification is complete, documents are stored securely and access to them is tightly restricted. fafa191 does not display CNIC or passport numbers in account dashboards or customer support interfaces — only a verification status flag is visible.

Payment details — including Easypaisa and JazzCash wallet numbers — are stored in encrypted form. Full card numbers are never stored; only the last four digits are retained for reference. All payment data is handled in compliance with PCI-DSS standards where applicable.

fafa191 uses cookies — small text files stored in your browser — to make the platform work properly and to improve your experience. We do not use advertising tracking cookies or build profiles for sale to third parties.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use fafa191 normally. Disabling analytics cookies has no impact on your account or betting functionality.

fafa191 retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer periods required by law. The following retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years after account closure. This is to meet financial regulatory requirements.
• Transaction records: Retained for a minimum of five years after the transaction date in compliance with financial crime prevention obligations.
• KYC documents: Retained for five years after the date of verification or account closure, whichever is later.
• Support communications: Retained for three years after the final communication in each support thread. Records related to formal complaints may be retained longer if the matter is unresolved.
• Technical logs: IP address logs and session logs are retained for 12 months. Aggregated, anonymised analytics data is retained indefinitely.
• Marketing data: Removed within 30 days of you withdrawing marketing consent.

When data reaches the end of its retention period, fafa191 deletes or anonymises it securely. Data cannot always be deleted immediately upon request if it is subject to a legal retention obligation — in such cases we will restrict its use to compliance purposes only while the legal retention period runs.

fafa191 respects your rights over your personal data. You can exercise any of the following rights at any time by contacting support@fafa191.ws:

fafa191 is strictly for users aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process precisely to prevent underage access.

If fafa191 discovers or is notified that an account is held by a person under 18, the account will be closed immediately, all data associated with the account will be deleted (to the extent permitted by legal retention obligations) and any remaining balance will be returned via the original deposit method after verification of the payment recipient's identity.

If you believe a minor has registered a fafa191 account, please contact us immediately at support@fafa191.ws. We take this issue very seriously and will act quickly upon any credible report.

fafa191 takes data security seriously and maintains the following technical and organisational measures to protect user data:

• SSL/TLS encryption on all data transmitted between user devices and fafa191 servers
• Encrypted storage of sensitive data fields including passwords (bcrypt hashing), payment identifiers and ID document images
• Access controls ensuring only authorised fafa191 personnel can access user account data, with role-based restrictions and audit logging of all access events
• Regular security reviews and penetration testing of the fafa191 platform
• Incident response procedures to detect, contain and communicate any data security incidents within required timeframes
• Secure password policies enforced for all fafa191 staff accounts with access to user data

Despite these measures, no internet-based platform can guarantee absolute security against all possible threats. fafa191 cannot be held liable for data breaches resulting from circumstances outside its reasonable control, including attacks by state-level adversaries or zero-day exploits that have not been publicly disclosed.

If you discover or suspect a security vulnerability in fafa191, please report it responsibly to support@fafa191.ws. We take all security reports seriously and will investigate promptly.

fafa191 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements in how we explain things. The "Last Updated" date at the top of this page will always show when the most recent revision was made.

For material changes — those that significantly affect your privacy rights or how your data is used — fafa191 will notify registered users by email and will display a prominent notice on the platform for a minimum of 14 days before the changes take effect. For minor or clarificatory changes, the policy may be updated without advance individual notification.

Continued use of fafa191 after a policy update constitutes acceptance of the revised policy. If you do not agree with the updated terms, you should contact support@fafa191.ws to request account closure before the changes take effect.

For any privacy-related question, data rights request or privacy concern, please contact fafa191 directly. We aim to provide clear, prompt responses — not automated replies that don't actually address your question.