Privacy Policy – derm17 Pakistan Gaming Platform

derm17 ("we", "us", "our") operates the online gaming and sports betting platform at derm17.com, serving players across Pakistan. This Privacy Policy describes how we collect, use, store and protect the personal information you provide when you register an account, make a deposit, place a bet or otherwise interact with our platform.

This policy applies to all users of the derm17 platform, including registered account holders and visitors who browse without registering. It should be read alongside our Terms and Conditions, which govern your use of the platform more broadly.

By creating a derm17 account or continuing to use the platform after this policy has been updated, you confirm that you have read and understood how we handle your personal data. If you have questions or concerns about any part of this policy, please contact us through the details in Section 13.

derm17 collects personal data from you directly — through the registration process, account management pages and customer support interactions — as well as automatically through your use of the platform. The categories of data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health information. We do not collect biometric data other than what is strictly required for identity verification where applicable.

derm17 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the original reason it was collected without first obtaining your consent.

• Account management: Creating and maintaining your derm17 account, verifying your identity, managing login access and updating your account details.
• Payment processing: Processing deposits and withdrawals in PKR through JazzCash, Easypaisa, Raast, bank transfer and other supported payment methods. Verifying that payment accounts are registered in your own name.
• Platform operation: Running casino games, settling sports bets (including PSL and T20 cricket markets), processing bonus credits and enforcing wagering requirements.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse and unauthorised account access. Monitoring for patterns consistent with prohibited conduct as described in our Terms and Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gaming behaviour and applying any deposit limits, session reminders or self-exclusion settings you have activated on your account.
• Customer support: Responding to your queries, resolving account issues and maintaining records of support interactions for quality and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use the platform and improve our games, features and user experience.
• Marketing communications: Sending you promotional offers, bonus alerts and platform updates where you have consented to receive them. You may opt out at any time — see Section 11.
• Legal and compliance obligations: Fulfilling any obligations required under applicable anti-money laundering rules, age verification requirements or responses to lawful requests from authorities.

derm17 does not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose:

• Payment service providers: JazzCash, Easypaisa, Raast and banking partners receive the transaction data required to process your deposits and withdrawals. They operate under their own privacy policies and are responsible for data they collect independently through their platforms.
• Identity verification partners: Third-party services used to verify your name, age and CNIC details as part of our account verification process. These partners are bound by strict data processing agreements and may not use your data for any other purpose.
• Fraud prevention services: Specialist providers that help us detect and prevent fraudulent transactions, bonus abuse and account compromise. Data shared is limited to what is necessary for fraud screening.
• Game software providers: Casino game providers receive limited technical data (session identifiers, bet amounts) necessary to run their games on the derm17 platform. They do not receive your full identity or contact details.
• Legal authorities: Where required by a lawful authority request, court order or applicable regulation, derm17 may disclose personal data. We will notify you of such disclosure where we are legally permitted to do so.

When you make a deposit or request a withdrawal at derm17, you provide payment details such as your JazzCash mobile number, Easypaisa account reference or bank account details. This information is used exclusively to process the transaction and to verify that the payment account belongs to you — a requirement under our anti-fraud and anti-money laundering procedures.

derm17 does not store full bank card numbers or complete mobile wallet credentials on our servers. Payment data is transmitted directly to the relevant payment processor using encrypted connections. We retain only a reference identifier and the last few digits of an account number for transaction record-keeping purposes.

derm17 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device by your browser when you visit a website. They allow the platform to remember your session, preferences and certain behavioural data to improve your experience.

The types of cookies derm17 uses are:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference and enable core features like deposits and game loading. You cannot disable essential cookies without affecting platform functionality.
• Analytics cookies: Help us understand how players navigate the platform — which pages are visited most, how long sessions last and where players encounter difficulties. This data is collected in aggregated form and does not identify you individually.
• Preference cookies: Remember choices you have made, such as your preferred payment method display or notification settings, so you do not have to reconfigure them on each visit.
• Marketing cookies: Used to show you relevant promotional content within the platform based on your gaming activity and preferences. These are only active if you have consented to marketing communications.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies will affect your ability to use core platform features including login and gameplay. For most browsers, cookie settings are found under Privacy or Security settings.

derm17 retains your personal data for as long as your account remains active and for a defined period after account closure. Retention periods vary by data type based on the purpose for which it was collected and any applicable record-keeping obligations:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five years after closure, to support anti-money laundering compliance and to respond to any disputes or legal claims arising from your account activity.
• Transaction records: All deposit and withdrawal records in PKR are retained for a minimum of five years to support financial record-keeping and compliance obligations.
• Gaming activity logs: Bet history, game results and session data are retained for three years after the relevant gaming activity, and may be retained longer if connected to an active dispute or investigation.
• Customer support records: Communications and support ticket histories are retained for two years after the last interaction.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained indefinitely to demonstrate compliance with your preferences.

When data is no longer required for the purpose it was collected and no legal retention obligation applies, derm17 securely deletes or anonymises it so that it can no longer be linked to you.

derm17 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration or destruction:

• Encryption in transit: All data transferred between your device and derm17 servers is protected using TLS (Transport Layer Security) encryption. You can verify this by the padlock icon in your browser's address bar when on derm17.com.
• Access controls: Internal access to personal data is restricted to staff who require it to perform their job functions. Access is logged and reviewed regularly.
• Password security: Account passwords are stored using industry-standard hashing. derm17 staff cannot view your password — if you forget it, a reset process is required.
• Fraud monitoring: Automated systems continuously monitor account activity for patterns consistent with unauthorised access, fraud or abuse. Suspicious activity triggers alerts for manual review.
• Regular security reviews: derm17 conducts periodic reviews of its data security practices and updates them in response to emerging threats and industry best practices.

While derm17 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also have a role to play — please use a strong, unique password for your derm17 account and never share your login credentials with anyone.

derm17 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the registration and account verification process. If derm17 identifies that an account has been created by a person under 18, the account will be closed immediately, all funds will be returned and any associated gaming activity will be voided.

Parents and guardians are responsible for ensuring that minors do not access derm17 or similar adult gaming platforms on shared devices. We recommend using device-level parental controls and content filtering software on any device accessible to children.

If you believe a minor has registered a derm17 account, please contact our support team immediately so we can investigate and take appropriate action.

As a derm17 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 13. We will respond within a reasonable timeframe and at no cost to you.

With your consent, derm17 may send you promotional communications including bonus offers, PSL cricket betting specials, new game announcements and platform updates. These communications may be sent via SMS to your registered mobile number or email to your registered email address.

You can withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your derm17 account settings.
• Contacting our support team via live chat and requesting removal from marketing communications.
• Using the unsubscribe link included in any marketing email we send you.

Withdrawal of marketing consent does not affect your ability to use the platform or receive essential account communications such as deposit confirmations, withdrawal notifications and security alerts. These operational communications are sent regardless of your marketing preferences as they are necessary for account management.

derm17 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable requirements. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes that significantly affect how we process your personal data, we will notify registered players via the contact details on their account before the changes take effect.

We encourage you to review this policy periodically so you stay informed about how your data is being handled. Your continued use of derm17 after a policy update constitutes your acceptance of the revised terms.

If you have any questions, concerns or requests related to this Privacy Policy or the way derm17 handles your personal data, please get in touch with us. Our support team is available 24 hours a day, seven days a week.

• Live Chat: Available on all pages when you are logged in to your derm17 account — the fastest way to reach us.
• Email: [email protected] — we aim to respond to privacy-related queries within 48 hours.
• FAQ: Common questions about accounts and data are addressed on our FAQ page.