slot16 Privacy Policy — How We Handle Your Personal Data

This Policy applies to all personal data collected and processed by slot16 in connection with your use of the Platform, including the casino, sportsbook, live dealer tables, bonus systems, customer support channels, and all payment processing operations. It applies regardless of the device or network — including mobile devices on Jazz, Telenor, Ufone, and Zong networks in Pakistan — used to access the Platform.

This Policy does not apply to third-party websites, applications, or services linked from or integrated into the slot16 Platform unless specifically stated. slot16 is not responsible for the privacy practices of third-party game providers, payment processors acting as independent data controllers, or any other external services.

slot16 is the data controller in respect of all personal data collected directly through the Platform. As data controller, slot16 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection law as mandated by its licensing jurisdiction.

In circumstances where slot16 engages third-party service providers — including licensed payment processors such as JazzCash, EasyPaisa, HBL, or UBL — those providers may independently act as data controllers or data processors in relation to the specific services they provide. Their processing activities are governed by their own privacy policies and applicable financial regulation.

slot16 collects the following categories of personal data:

slot16 does not collect sensitive personal data such as biometric data, health information, political opinions, or religious beliefs. Where government-issued ID documents (CNIC) are submitted for KYC purposes, copies are stored in encrypted form and used solely for identity and age verification.

slot16 collects personal data through the following means:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal forms, live chat interactions, and email correspondence with support.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, including IP addresses, browser fingerprint, session timestamps, and game activity logs.
• Payment providers: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast when processing your deposits and withdrawals.
• Third-party verification services: Identity and document verification results from KYC service providers used to confirm the authenticity of submitted identification documents.
• Cookies and similar technologies: Session and persistent cookies, local storage, and similar client-side technologies as described in Section 8 of this Policy.

slot16 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the slot16 Terms & Conditions, including account management, payment processing, and withdrawal authorisation.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) law, know-your-customer (KYC) requirements, licensing conditions, and fraud prevention regulations imposed by slot16's licensing authority.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, product improvement, and dispute resolution — where our legitimate interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications and optional personalisation features, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing already carried out.

slot16 uses the personal data collected for the following purposes:

• Creating and managing your slot16 player account, including credential management and account recovery.
• Processing deposits and withdrawals in PKR via your chosen payment channels.
• Verifying your identity and age (21+) in compliance with KYC requirements before authorising withdrawals.
• Detecting and preventing fraud, money laundering, account takeover, bonus abuse, and other prohibited activities as defined in the Terms & Conditions.
• Monitoring gameplay patterns to identify indicators of problem gambling behaviour and to apply responsible gaming interventions where appropriate.
• Providing customer support across live chat and email channels, including maintaining records of past interactions for quality assurance and dispute resolution.
• Sending transactional notifications related to your account — including deposit confirmations, withdrawal updates, and security alerts — via SMS or email.
• Sending promotional communications about bonuses, PSL cricket betting markets, new slot titles, and platform features, subject to your marketing consent preferences.
• Improving the Platform through analysis of aggregated and anonymised usage data.

slot16 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 processors strictly to the extent necessary to process your transactions.
• KYC verification providers: Identity documents submitted during the KYC process may be processed by licensed third-party verification services acting as data processors under contractual data processing agreements with slot16.
• Game software providers: Technical interaction data (session tokens, game round results) is shared with licensed game providers to operate the games on the Platform. These providers do not receive your identity or financial data.
• Fraud prevention & security services: Technical data including IP addresses and device fingerprints may be shared with fraud detection service providers for the purpose of protecting the Platform and its users.
• Legal and regulatory authorities: slot16 will disclose personal data to licensing authorities, law enforcement agencies, or courts when legally compelled to do so, or where disclosure is necessary to prevent serious harm.
• Corporate transactions: In the event of a merger, acquisition, or sale of the Platform, personal data may be transferred to the acquiring entity under confidentiality obligations consistent with this Policy.

slot16 uses cookies and similar client-side technologies to operate the Platform, maintain your login session, and collect usage data for security and performance purposes. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in to your slot16 account during an active session. Disabling these cookies will prevent Platform access.
• Security cookies: Used to detect suspicious access patterns, device changes, and potential session hijacking attempts. These cookies are non-optional components of the security infrastructure.
• Analytics cookies: Used to collect anonymised data about how players navigate the Platform — which game categories are visited, where sessions end, and which pages generate support queries. This data is used to improve the platform experience.
• Preference cookies: Used to remember your selected language, display preferences, and responsible gaming settings between sessions.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect Platform functionality. Clearing cookies will require you to re-authenticate on your next slot16 login.

slot16 implements a layered security architecture to protect personal and financial data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• 256-bit TLS encryption on all data in transit between the user's device and slot16 servers.
• AES-256 encryption for personal and financial data stored at rest on slot16 infrastructure.
• Bcrypt password hashing — plaintext passwords are never stored.
• Two-factor authentication (2FA) available to all players and mandatory for withdrawal requests above certain thresholds.
• Automated intrusion detection, rate limiting, and brute-force protection on all authentication endpoints including the slot16 login page.
• Regular third-party security penetration testing and vulnerability assessment of the Platform infrastructure.
• Role-based access controls ensuring that internal staff access to personal data is restricted to those with a legitimate operational need.

In the event of a data breach that poses a risk to your rights, slot16 will notify affected users and relevant authorities in accordance with the notification requirements of its licensing jurisdiction.

slot16 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, in line with AML record-keeping requirements.
• Transaction records: All deposit and withdrawal records, including PKR amounts, payment channel identifiers, and timestamps, are retained for a minimum of five years from the date of transaction.
• KYC documents: Copies of CNIC and other identity documents are retained for the duration required by the licensing authority's KYC and AML guidelines.
• Support communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction.
• Technical and usage data: IP address logs, session records, and device data are retained for 12 months from the date of collection unless extended retention is required for an active security investigation.
• Marketing consent records: Records of your marketing preferences and consent decisions are retained for the duration of your account to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by users are processed in accordance with Section 11 of this Policy, subject to overriding legal retention requirements.

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by slot16:

To exercise any of the above rights, please contact slot16 via live chat or by emailing [email protected] with a description of your request and sufficient identification to confirm your identity. slot16 will respond within 30 calendar days of receiving a valid, verifiable request.

The slot16 Platform is strictly restricted to individuals aged 21 years and over. slot16 does not knowingly collect personal data from any person under the age of 21. If it comes to our attention that personal data has been collected from a person under the minimum age, that account will be immediately suspended, all associated personal data will be deleted, and any deposited funds will be returned to the original payment method in accordance with our underage gambling policy.

Parents and guardians in Pakistan are encouraged to implement device-level parental control software to restrict access to online gambling platforms on shared devices. If you have reason to believe that a minor has registered on slot16 using your contact details or device, please contact support via live chat immediately.

slot16 operates internationally and your personal data may be transferred to and processed in countries other than Pakistan. Where such transfers occur, slot16 implements appropriate safeguards to ensure that the transferred data receives an equivalent level of protection as it would in its country of origin.

Transfers to third-party service providers — including KYC verification services and game software providers — are conducted under contractual data processing agreements that impose data protection obligations consistent with applicable international standards. Payment processing transfers to JazzCash, EasyPaisa, and local Pakistani bank channels are conducted within Pakistan's domestic financial infrastructure wherever possible.

With your consent, slot16 may send you promotional communications via SMS to your registered Pakistani mobile number, or via email, covering topics such as welcome bonuses, deposit match offers, PSL cricket betting specials, new slot game launches, and VIP programme updates.

You may withdraw your marketing consent at any time by updating your notification preferences in Account Settings, by replying STOP to any SMS communication from slot16, or by contacting support via live chat. Withdrawal of marketing consent takes effect within 48 hours and does not affect transactional communications related to your account activity.

slot16 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform functionality, data processing activities, or business operations. Material changes will be notified to registered users via email or via a prominent banner on the Platform at least 7 days before the changes take effect, except where immediate amendment is required by law.

Continued use of the slot16 Platform following notification of changes constitutes acceptance of the revised Privacy Policy. If you do not agree with a material change, you may close your account before the effective date of the amendment. The effective date of this Policy is displayed at the top of this page and in the Table of Contents sidebar.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a complaint about how slot16 has processed your personal data, please contact us via:

• Live chat: Available 24/7 via the chat widget on the Platform — fastest channel for urgent privacy queries.
• Email: [email protected] — responses within 4 hours during business hours.

slot16 aims to resolve all privacy complaints within 14 business days of receipt. If you are dissatisfied with slot16's response, you have the right to escalate your complaint to the relevant data protection supervisory authority in slot16's licensing jurisdiction. Details of the relevant authority will be provided in slot16's response to your complaint if escalation is appropriate.