Privacy Policy — Aristocrat Gaming Platform Pakistan

1. Introduction

This Privacy Policy applies to the Aristocrat platform — the website at aristocrat.vin, the Aristocrat mobile application and all associated services. It explains how personal data is collected, used, stored and protected when you interact with any part of the platform.

Aristocrat is built specifically for players in Pakistan. We understand that privacy is a genuine concern for Pakistani users — not just a regulatory checkbox — and we take that seriously. This policy is written to be straightforward and readable, not buried in legal language that is hard to parse.

By registering an account on the Aristocrat platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything in this document, our support team is available 24/7 and will answer clearly.

2. Data We Collect

Aristocrat collects only the personal data that is genuinely necessary for operating your account and processing your transactions. We do not collect data speculatively or to build advertising profiles. The categories of data we collect are as follows:

• Identity data: full name, date of birth, gender and a copy of identity documentation (such as a CNIC or passport) when required for verification purposes.
• Contact data: email address, mobile number and, where provided, a residential address in Pakistan.
• Account data: your username, encrypted password, account preferences, communication preferences and login history.
• Financial data: deposit and withdrawal records, transaction amounts in PKR, the payment methods used (JazzCash, Easypaisa, Raast, bank transfer, card details) and the transaction reference numbers associated with each payment.
• Activity data: betting history on cricket, PSL, T20, football and esports markets; casino and slot game play history; bonus and VIP programme activity; session durations and timestamps.
• Technical data: IP address, device type, operating system, browser type, app version and general geographic location derived from your network connection.
• Communications data: records of any support conversations, emails or live chat transcripts between you and our support team.

Card numbers — if provided for card payments — are never stored in full on Aristocrat's systems. Card payment processing is handled by our payment processor, which operates under its own security standards. We store only a truncated reference for transaction tracking purposes.

3. How We Collect Your Data

Personal data is collected through the following channels:

• Registration: When you create an account, you provide your name, date of birth, email address and mobile number directly.
• Verification: If identity verification is required, you upload or submit documentation directly through the platform's secure verification flow.
• Transactions: Each deposit and withdrawal you make generates a transaction record, including the payment method, amount in PKR and timestamp.
• Platform activity: As you use the sportsbook, slot game lobby, live casino and VIP features, your activity is logged automatically as part of normal platform operation.
• Device and technical data: Collected automatically by the platform when you visit the website or use the mobile app. This includes cookies and similar tracking technologies — covered in detail below.
• Customer support: When you contact support via live chat or email, the content of that communication is recorded for quality assurance and dispute resolution purposes.

We do not purchase personal data from third-party data brokers or marketing lists. All data we hold about you comes directly from your interactions with the Aristocrat platform.

4. How We Use Your Data

Your personal data is used exclusively for the purposes set out in this policy. Aristocrat does not use your data for unrelated commercial activities and does not share it for third-party advertising. The primary purposes for which we use your data are:

• Account management: Creating, maintaining and securing your account, processing your login and enabling you to use all platform features.
• Payment processing: Facilitating PKR deposits and withdrawals via your chosen payment method — JazzCash, Easypaisa, Raast, bank transfer or card — and maintaining accurate transaction records.
• Identity and age verification: Confirming that you are aged 18 or above and that the identity information you have provided is accurate, as required for platform integrity and security.
• Fraud and security monitoring: Detecting unusual account activity, preventing unauthorised access, identifying potential fraud and protecting the integrity of the platform and its players.
• Customer support: Responding to your questions, resolving disputes and improving the quality of our support service using records of past interactions.
• Platform improvement: Analysing aggregate, anonymised activity data to understand how the platform is being used and where improvements can be made.
• Promotions and communications: Sending you information about bonuses, promotions, new games and platform updates — but only if you have opted in to receive such communications. You can opt out at any time from your account settings.
• Responsible gaming: Monitoring activity patterns to support responsible gaming tools, including flagging unusual patterns that may indicate a player who could benefit from support resources.

5. Data Purpose Summary

The table below summarises the main categories of data collected, the purpose for collecting each, and the legal basis under which it is processed.

6. Data Sharing

Aristocrat does not sell your personal data. We do not share your data with advertisers, data brokers or any commercial third party for their own purposes. Your data is shared only in the following limited and necessary circumstances:

• Payment processors: When you make a deposit or withdrawal, the relevant payment provider — for example JazzCash, Easypaisa or your bank — receives the transaction data needed to complete the payment. Each provider operates under its own privacy standards.
• Identity verification services: If third-party verification tools are used to confirm your identity or age, your documentation may be processed by that service provider solely for that purpose and under strict data handling agreements.
• Platform technology providers: Certain back-end platform services — such as cloud hosting, security infrastructure or customer support tooling — may be operated by third-party providers. These providers process data only on Aristocrat's instructions and are bound by data processing agreements.
• Legal and regulatory requirements: If Aristocrat receives a valid legal request from a relevant authority, we may be required to disclose specific data. We will only do so to the extent required by that obligation and will not share more data than is strictly necessary.
• Business transfers: In the event of a merger, acquisition or sale of all or part of the platform, your data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

In all cases where data is shared with a third party, Aristocrat takes reasonable steps to ensure that the receiving party maintains appropriate security and handles the data only for the stated purpose.

7. Payment Data and PKR Transactions

Given that all Aristocrat transactions are in PKR and are processed through Pakistan-native payment methods, it is worth explaining specifically how payment data is handled.

When you deposit using JazzCash or Easypaisa, the mobile wallet transaction is initiated through your own registered wallet. Aristocrat receives a confirmation reference and the amount — we do not receive or store your mobile wallet PIN or password at any point.

When you use Raast or bank transfer, the transaction is processed through the banking network. Aristocrat receives a payment reference and amount confirmation. Your full bank account number is not stored in a form that can be retrieved by platform staff.

When you use a debit or credit card, card processing is handled by our payment gateway partner. Aristocrat stores only the last four digits of your card number and the card type for reference purposes. Full card numbers are never stored on our systems.

All payment records are retained for the period required to maintain accurate financial records and support any disputes or chargebacks that may arise. These records are not accessible to general platform staff and are handled only by authorised finance and compliance personnel.

8. Cookies and Tracking Technologies

The Aristocrat website and mobile app use cookies and similar technologies to make the platform work properly, keep you securely logged in between sessions, and understand how the platform is being used so we can improve it.

The types of cookies used on the platform are:

• Essential cookies: Required for the platform to function. These handle session management, login state and security tokens. They cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences — such as your preferred language, odds format and notification settings — so you do not have to re-enter them each visit.
• Analytics cookies: Collect anonymised, aggregate data about how players use the platform — which pages are visited most, where users encounter friction, and how features are being used. This data is used internally for platform improvement only.
• Security cookies: Help detect and prevent fraud, bot activity and unauthorised access attempts by flagging unusual patterns.

Aristocrat does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the platform. When you use the Aristocrat mobile app, similar device-level identifiers may be used for session management and security, consistent with the cookie policy above.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the platform normally.

9. Data Retention

Aristocrat keeps your personal data only for as long as it is needed for the purposes for which it was collected, or as required to meet legal and financial record-keeping obligations. The general retention periods are as follows:

• Active account data: Retained for the full duration your account is active on the platform.
• Closed account data: After an account is closed, basic identity and transaction records are retained for a minimum of five years to meet financial record-keeping requirements. After this period, data is securely deleted or anonymised.
• Verification documents: Retained for the duration of your account and for the minimum period required after account closure. Copies are deleted securely once no longer required.
• Support communications: Chat and email records are retained for up to three years from the date of the interaction, then deleted.
• Technical and log data: IP logs and device data are retained for up to 12 months from the date of collection, then purged.
• Marketing consent records: If you opt in to marketing, your consent record is kept for as long as you remain opted in, plus a short period after any opt-out to confirm the change was processed.

When data reaches the end of its retention period, it is deleted or anonymised in a way that means it can no longer be linked back to you as an individual.

10. Security Measures

Protecting your data is something we invest in seriously. The security measures in place on the Aristocrat platform include:

• Encryption in transit: All data transmitted between your device and the Aristocrat platform is encrypted using TLS (HTTPS). This applies to the website and the mobile app.
• Encryption at rest: Sensitive data stored in our databases — including personal details and financial records — is encrypted at rest.
• Password hashing: Account passwords are never stored in plain text. They are stored as hashed values using modern cryptographic hashing, so even internal staff cannot retrieve your password.
• Access controls: Access to personal data within the organisation is restricted on a need-to-know basis. General customer service staff do not have access to full financial data or verification documents.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. This adds a second layer of protection against unauthorised login.
• Monitoring and alerts: Automated systems monitor for unusual login activity, suspicious transactions and potential security incidents. Alerts are reviewed by our security team.

No security system is entirely infallible, and Aristocrat cannot guarantee absolute security. In the event of a data breach that affects your personal data, we will notify affected users as quickly as practicable, consistent with our obligations.

11. Your Data Rights

You have the following rights over the personal data that Aristocrat holds about you. To exercise any of these rights, contact our support team via live chat or email — we will respond as quickly as possible and always within a reasonable timeframe.

Exercising any of the above rights will not negatively affect your account status or the service you receive from Aristocrat, unless the request inherently requires account closure — for example, a request for full data deletion.

12. Minors and Under-18 Protection

The Aristocrat platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the registration process, and additional verification checks may be carried out at any time.

If we discover that personal data has been collected from a person under the age of 18, that account will be closed immediately, all data associated with it will be deleted, and any deposited funds will be returned via the original payment method where possible.

If you believe a minor has registered on the platform, please contact our support team immediately so we can investigate and take action promptly. Protecting minors from exposure to gambling content is something we take seriously.

Parents and guardians in Pakistan who are concerned about a young person accessing gaming or betting platforms are encouraged to use device-level parental controls and to keep account credentials private. Visit our Responsible Gaming page for more guidance.

13. Changes to This Policy

Aristocrat may update this Privacy Policy from time to time. Changes may reflect updates to platform features, changes in how data is processed, or broader best practice developments in data privacy.

When material changes are made to this policy, registered players will be notified via the email address on their account, or via an in-platform notification, before the changes come into effect. The updated policy will always be available at aristocrat.vin/privacy-policy with the revision date clearly shown at the top.

Continued use of the platform after an updated policy has taken effect means you accept the revised terms. If you do not agree with any changes, you should stop using the platform and request account closure by contacting our support team.

We recommend reviewing this page periodically so you are always aware of how your data is being handled.

14. Contact and Privacy Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your data has been handled, please get in touch with our support team. We are available around the clock and will treat all privacy-related queries with priority.

• Live Chat: Available within the platform and the Aristocrat app — the quickest way to reach us.
• Email: [email protected] — we aim to respond to all privacy queries within 48 hours.

For general questions about your account, deposits, withdrawals or bonuses, the FAQ page covers most common topics and may give you an immediate answer without needing to contact support.