92park Privacy Policy

1. Data Controller Information

The data controller responsible for personal data processed through the 92park platform is 92park (hereinafter referred to as "92park", "we", "us" or "our"). 92park operates the online casino and sports betting platform available at https://92park.net, serving players primarily located in Pakistan.

For all privacy-related enquiries, data subject access requests and complaints relating to data processing, you may contact us in writing at: [email protected]. We aim to acknowledge all data-related correspondence within five (5) business days and provide a substantive response within thirty (30) calendar days.

2. Personal Data We Collect

92park collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and from third-party verification service providers in connection with our KYC obligations.

2.1 Registration and Identity Data

When you create a 92park account, we collect the following information:

• Full legal name as it appears on your CNIC (Computerised National Identity Card)
• CNIC number and a scanned copy or photograph of your CNIC document
• Date of birth (for age verification — 92park is a 21+ platform)
• Residential address including city (Karachi, Lahore, Islamabad, Faisalabad, etc.)
• Mobile phone number registered in Pakistan
• Email address
• Username and password (password stored in hashed, irreversible format only)

2.2 Financial and Transaction Data

To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank or cryptocurrency, we collect:

• Bank account details or mobile wallet identifiers as provided during payment setup
• Transaction history including deposit amounts, withdrawal requests and dates
• Payment method identifiers (e.g., JazzCash account number, bank IBAN)
• Records of bonus credits, wagering activity and account balance history

2.3 Technical and Usage Data

When you access 92park, our systems automatically record:

• IP address and approximate geographic location derived from IP
• Device type, operating system and browser version
• Session duration, pages visited and features accessed within the platform
• Game history including bets placed, games played and outcomes
• Login timestamps and authentication events

2.4 Communications Data

Records of your communications with 92park customer support, including live chat transcripts and email correspondence, are retained for quality assurance, dispute resolution and regulatory compliance purposes.

3. How We Use Your Personal Data

92park processes your personal data for the following specific purposes:

• Account creation and management: To register your 92park account, verify your identity, maintain your account in good standing and provide access to platform features following each 92park Login.
• Payment processing: To facilitate PKR deposits and withdrawals through your chosen payment method including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank or cryptocurrency.
• KYC and AML compliance: To verify your identity in accordance with Know Your Customer and Anti-Money Laundering obligations imposed by our international gaming licence conditions.
• Responsible gaming: To monitor gaming behaviour patterns, apply player-set deposit limits and session controls, and intervene proactively where indicators of problem gambling are identified.
• Fraud prevention and platform security: To detect unusual account activity, prevent unauthorised access, investigate suspected fraud and protect the integrity of the 92park platform.
• Customer support: To respond to your enquiries, investigate complaints and resolve disputes in a timely and evidenced manner.
• Marketing communications: To send you promotional offers, bonus notifications and platform updates where you have provided explicit consent to receive marketing messages. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform features, game selection, payment flow efficiency and overall user experience.
• Legal and regulatory obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities and enforce our Terms & Conditions.

4. Lawful Basis for Processing

92park relies on the following lawful bases for processing your personal data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the 92park Terms & Conditions, including account management, payment processing and game delivery.
• Legal obligation: Processing necessary to comply with KYC, AML and gaming licence regulatory requirements, including identity verification and transaction record-keeping.
• Legitimate interests: Processing for fraud prevention, platform security and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where your prior consent has been obtained and can be withdrawn at any time without detriment to your account.

5. Data Sharing and Third-Party Disclosure

92park does not sell or rent your personal data to any third party. We share personal data only where necessary, with the following categories of recipient:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and cryptocurrency processing partners, for the sole purpose of executing your requested transactions. These providers are contractually bound to process your data only for payment purposes.
• KYC and identity verification providers: Third-party identity verification services that process CNIC data to confirm your identity and age (21+) as required under our licence conditions.
• Fraud prevention and AML services: Specialist third-party services that analyse transaction patterns to detect and prevent money laundering, fraud and other financial crimes. These services operate under strict data processing agreements.
• Technology and hosting providers: Cloud infrastructure and platform technology partners who process data on our behalf under binding data processing agreements that prohibit independent use of your data.
• Regulatory and law enforcement authorities: Where required by applicable law, a valid legal order or our gaming licence obligations, 92park may disclose personal data to relevant authorities. We will notify you of such disclosure where legally permitted to do so.

6. Cookies and Tracking Technologies

92park uses cookies and similar tracking technologies to deliver, maintain and improve the platform. Cookies are small text files stored on your device that enable the platform to recognise you between sessions and remember your preferences.

6.1 Essential Cookies

These cookies are strictly necessary for the 92park platform to function. They enable authentication, maintain your logged-in session after each 92park Login, and support core security features including CSRF protection. These cookies cannot be disabled without rendering the platform non-functional.

6.2 Analytics Cookies

With your consent, 92park uses analytics cookies to understand how players interact with the platform — which pages are most visited, where users encounter difficulties, and how navigation flows can be improved. Analytics data is processed in aggregated, anonymised form and is not linked back to individual player identities.

6.3 Preference Cookies

Preference cookies store your platform settings such as language preference, display options and responsible gaming limit reminders, so that your experience is consistent across sessions.

You may manage your cookie preferences through your browser settings at any time. Please be aware that disabling non-essential cookies will not affect your ability to use 92park's core features.

7. Data Retention

92park retains personal data only for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods imposed by our legal and regulatory obligations:

• Identity and KYC records (CNIC, verification documents): Retained for a minimum of five (5) years from the date of account closure, as required under AML regulations applicable to our gaming licence.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, for AML and audit purposes.
• Account and gaming activity records: Retained for the duration of the account relationship and for three (3) years following account closure.
• Customer support communications: Retained for three (3) years from the date of the communication, for dispute resolution purposes.
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures.

8. Your Data Protection Rights

As a registered 92park player, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and a brief description of your request.

• Right of access: You may request a copy of all personal data that 92park holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held in your 92park account.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that KYC and AML records cannot be deleted during mandatory retention periods.
• Right to restriction of processing: You may request that we restrict processing of your data while a dispute about its accuracy or the lawfulness of its processing is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection to marketing, we will cease all marketing communications immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

92park will respond to all data rights requests within thirty (30) calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.

9. Security Measures

92park implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 92park servers
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details
• Bcrypt hashing for all account passwords — plaintext passwords are never stored
• SMS-based two-factor authentication for new device logins and high-value withdrawal requests
• Automated session expiry and IP-based anomaly detection
• Role-based access controls ensuring that only authorised personnel can access player data
• Regular third-party penetration testing and security audits of platform infrastructure
• Incident response procedures with mandatory breach notification protocols

In the event of a personal data breach that poses a risk to your rights and freedoms, 92park will notify affected players without undue delay and take all necessary remedial action in accordance with applicable breach notification requirements.

10. Children and Minors

92park is strictly an adults-only platform. No person under the age of 21 years is permitted to register, access or use any 92park service. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is enforced through CNIC-based KYC procedures at the withdrawal stage, and automated date-of-birth checks are applied at registration. If 92park discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all funds returned, and all associated personal data securely deleted without retention.

If you are a parent or guardian and believe that a minor may have registered on 92park using false information, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11. Updates to This Privacy Policy

92park reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or platform features. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they affect how your data is used in a way that is meaningfully different from what was previously disclosed — 92park will notify registered players by email to their registered address and via an in-platform notification at the next 92park Login. Your continued use of the platform following notification of a material change constitutes acceptance of the updated Privacy Policy.

We recommend that you review this Privacy Policy periodically. The current version is always available at https://92park.net/privacy-policy.

12. Contact and Complaints

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by 92park, please contact us at:

Email: [email protected]
Subject line: Privacy Policy Enquiry / Data Rights Request
Response time: Within 5 business days for acknowledgement; within 30 calendar days for substantive response

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or to the dispute resolution body specified under our international gaming licence. Details of the applicable supervisory authority are available upon request.