ShahSpin Privacy Policy — How We Protect Your Data

Introduction

ShahSpin ("we", "us", "our") operates the online gaming platform at shahspin.win and the ShahSpin mobile app available for Android and iOS devices. This Privacy Policy describes how ShahSpin collects, uses, stores and protects the personal information of registered players and visitors from Pakistan and other regions where the platform is accessible.

By creating an account on ShahSpin or by continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with how your data is handled as described here, please do not use the platform.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming guidelines, both of which form part of your overall agreement with ShahSpin.

Data We Collect

ShahSpin collects personal information in several different ways depending on how you interact with the platform. The categories of data we may collect include:

Registration Data

When you create a ShahSpin account we collect your full name, email address, date of birth and a password. This information is required to create and manage your account, verify your eligibility to use the platform and communicate with you about your account activity.

Identity Verification Data (KYC)

To comply with our Know Your Customer process and to process withdrawals, we may ask you to provide a copy of a government-issued identity document such as your CNIC, passport or driving licence, along with proof of your payment method. This data is used solely for identity verification and fraud prevention purposes.

Financial Data

When you make a deposit or request a withdrawal, we collect transaction details including the payment method used, transaction amounts in PKR and timestamps. Payments processed via JazzCash, Easypaisa, Raast or Bank Transfer are handled through secured third-party payment gateways. ShahSpin does not store full card numbers or mobile wallet PINs on its own servers.

Usage and Gameplay Data

We collect information about how you use the ShahSpin platform, including games played, bets placed, betting history, session durations, device type, browser type, IP address and general location data. This data helps us improve the platform, personalise your experience and identify unusual activity that may indicate security issues or responsible gaming concerns.

Communications Data

If you contact ShahSpin support via live chat or email, we retain records of those communications. This helps us resolve queries, maintain service quality and refer back to previous interactions if needed.

Data Category	Examples	Purpose
Registration	Name, email, date of birth	Account creation & management
Identity (KYC)	CNIC, passport copy	Verification & fraud prevention
Financial	Transaction amounts, payment method	Deposits, withdrawals & security
Usage	Games played, bets, session time	Platform improvement & personalisation
Technical	IP address, device type, browser	Security monitoring & troubleshooting
Communications	Support chat logs, emails	Customer service & dispute resolution

How We Use Your Data

ShahSpin uses the personal information we collect for the following purposes:

• Account management — creating and maintaining your ShahSpin account, processing logins and managing account settings
• Payment processing — handling PKR deposits and withdrawals via your chosen payment method, including JazzCash, Easypaisa, Raast and bank transfers
• Identity verification — confirming your identity before processing withdrawals and as part of routine security checks
• Fraud prevention and security — detecting and investigating suspicious activity, protecting accounts from unauthorised access and maintaining platform integrity
• Personalisation — tailoring game recommendations, promotional offers and platform content to your preferences and activity history
• Communications — sending you account notifications, bonus updates, deposit confirmations and responses to support queries
• Responsible gaming — monitoring gameplay patterns to identify signs of problem gambling and to support players who use our self-management tools
• Legal and compliance obligations — retaining records as required and responding to lawful requests from authorised bodies
• Platform improvement — analysing usage data in aggregate to improve the platform, fix technical issues and develop new features

Sharing Your Data

ShahSpin does not sell your personal data. We may share your information with third parties only in the following limited circumstances:

Payment Providers

To process your PKR deposits and withdrawals, we share necessary transaction data with our payment processing partners, including the operators of JazzCash, Easypaisa, Raast and supported banking partners. These providers have their own privacy and security standards that govern how they handle the data passed to them during a transaction.

Game Software Providers

ShahSpin's game library is powered by third-party game studios and live casino providers. Certain gameplay data such as session identifiers and bet history may be shared with these providers to facilitate game functionality. These providers do not receive your personal registration or payment details.

Security and Fraud Prevention Services

We may share technical data such as IP addresses and device identifiers with third-party fraud detection services to protect the platform and its players from fraudulent activity, account takeover attempts and bonus abuse.

Legal Requirements

ShahSpin may disclose your personal data if required to do so by applicable law or in response to a valid legal request from a competent authority. In such cases we will disclose only the minimum information required to satisfy the legal obligation.

Data Retention

ShahSpin retains your personal data for as long as your account is active and for a reasonable period thereafter in order to comply with legal, financial and operational obligations. Specifically:

• Account registration data is retained for the lifetime of your account and for a period following account closure
• KYC and identity verification documents are retained in line with the periods required for financial record-keeping
• Transaction records in PKR are retained as required for financial audit and legal compliance purposes
• Support communications are retained for a period sufficient to resolve disputes and maintain service quality records
• Technical and usage logs are retained for a shorter period and used primarily for security monitoring and platform diagnostics

When personal data is no longer required, ShahSpin takes reasonable steps to securely delete or anonymise it so that it can no longer be used to identify you.

Cookies

ShahSpin uses cookies — small text files stored on your device — to make the platform work correctly and to improve your experience. The main types of cookies we use are:

Essential Cookies

These cookies are necessary for the platform to function. They keep you logged in during a session, maintain your game progress and enable core security features. You cannot opt out of essential cookies without preventing the platform from working properly.

Performance and Analytics Cookies

These cookies collect anonymised information about how visitors use the platform — which pages are visited most, how long sessions last and where users encounter errors. This data helps us improve the platform for all players. These cookies do not identify you personally.

Preference Cookies

Preference cookies remember your settings and choices, such as your preferred language, game categories and notification preferences, so you do not have to reconfigure them each time you visit.

Marketing Cookies

If you have consented to marketing cookies, these may be used to show you relevant promotions and offers within the ShahSpin platform based on your activity and interests. You can withdraw consent for marketing cookies at any time through your account settings.

Security Measures

Protecting your personal data is a priority for ShahSpin. The platform implements the following security measures:

• SSL/TLS encryption — all data transmitted between your device and ShahSpin's servers is encrypted
• Secure server infrastructure — account and transaction data is stored on servers with restricted access controls
• Password hashing — your account password is stored in a hashed format and cannot be retrieved in plain text even by ShahSpin staff
• Fraud monitoring — automated systems monitor account activity for patterns associated with unauthorised access or fraudulent behaviour
• Staff access controls — access to player data is limited to staff members with a legitimate operational need

While ShahSpin takes reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account safe by using a strong, unique password and not sharing your login credentials with anyone.

Your Rights

As a ShahSpin player you have the following rights in relation to your personal data:

• Right to access — you can request a copy of the personal data ShahSpin holds about you
• Right to correction — you can ask us to correct inaccurate or incomplete personal data
• Right to deletion — you can request that we delete your personal data where there is no longer a lawful basis for us to hold it, subject to legal retention obligations
• Right to object — you can object to certain types of data processing, including processing for direct marketing purposes
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
• Right to data portability — you can request a copy of certain data in a structured, machine-readable format

To exercise any of these rights, please contact ShahSpin support via live chat on the platform. We will respond to verified requests within a reasonable timeframe. We may need to verify your identity before processing a data request to ensure we do not disclose information to an unauthorised party.

Minors

ShahSpin is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Registration requires confirmation that you are 18 or older, and age verification checks may be carried out as part of the KYC process.

If ShahSpin becomes aware that personal data has been collected from a person under 18, that account will be closed immediately and any associated personal data will be deleted in accordance with our data retention practices. If you believe a minor has registered on ShahSpin, please contact support immediately.

Policy Changes

ShahSpin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features or legal obligations. When significant changes are made, we will notify registered players via their registered email address or through a notification on the platform. The "Last updated" date at the top of this page will reflect when the most recent revision was made.

Your continued use of ShahSpin after an updated Privacy Policy has been published constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting support.