Section 1
Who We Are
92koko ("we", "us", "our") is an online casino and sports betting platform accessible at 92koko.app, operated under an international gaming licence and offering services including cricket betting, live dealer casino games, slot games, and instant win products to eligible players in Pakistan and other permitted jurisdictions.
For the purposes of this Privacy Policy, 92koko acts as the data controller in respect of all personal data collected from registered users, site visitors, and individuals who make contact with our customer support team. As data controller, 92koko determines the purposes and means of processing your personal data and is responsible for ensuring that all processing is carried out lawfully, fairly, and in a transparent manner.
This Privacy Policy applies to all personal data collected through the 92koko website at 92koko.app, through our customer support channels, and through any related communications you initiate with us. It does not apply to third-party websites or services that may be linked to or from the 92koko platform.
If you have any questions about how 92koko handles your personal data, or if you wish to exercise any of your data rights, please contact our Data Protection team at
[email protected].
Section 2
Data We Collect
92koko collects and processes the following categories of personal data about you, depending on how you interact with our platform:
| Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, CNIC or passport number, selfie/photo ID |
KYC verification, age verification, fraud prevention |
| Contact Data |
Email address, mobile number (e.g. a JazzCash-registered number), city of residence (e.g. Karachi, Lahore, Islamabad) |
Account communication, support, marketing (with consent) |
| Financial Data |
JazzCash account reference, EasyPaisa wallet number, HBL / UBL / Meezan Bank account details, transaction history, deposit and withdrawal amounts in PKR |
Payment processing, AML compliance, withdrawal verification |
| Technical Data |
IP address, device type, browser type and version, operating system, session timestamps, login history |
Platform security, fraud detection, service improvement |
| Usage Data |
Pages visited, games played, bets placed, bonus offers viewed, session duration, click paths |
Personalisation, responsible gaming monitoring, analytics |
| Communications Data |
Live chat transcripts, support email content, voluntary feedback submissions |
Dispute resolution, quality assurance, compliance records |
| Marketing Preferences |
Communication channel preferences, opt-in / opt-out status for promotional emails and SMS |
Delivering relevant promotions only where consent is given |
We do not collect or process special category data (such as health data, racial or ethnic origin, religious beliefs, or biometric data for identification purposes) unless you have explicitly provided such information in the context of a responsible gaming request or a support query — in which case it is processed solely for the stated purpose and deleted once that purpose is fulfilled.
Section 3
How We Collect Your Data
92koko collects personal data through the following primary channels:
- Direct registration: When you create a 92koko account, you provide us with identity, contact, and financial data directly through the registration form.
- KYC document submission: When you submit identity documents for verification (CNIC, passport, proof of address), we collect and process that identity data through our KYC verification partner.
- Deposit and withdrawal transactions: When you make a financial transaction via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or debit card, your payment provider shares transaction reference data with 92koko's payment processing system.
- Platform usage: As you navigate the 92koko website — browsing game categories, placing bets, using the live casino — our servers and analytics tools automatically log technical and usage data.
- Cookies and tracking technologies: Cookies, pixels, and similar tracking technologies collect behavioural and technical data as described in Section 6 of this Policy.
- Customer support interactions: When you contact 92koko via live chat, email, or any other support channel, the content of those communications is recorded and retained.
- Third-party sources: In limited circumstances, we may receive identity verification or fraud-screening data about you from authorised third-party compliance service providers, where this is required to meet our licensing obligations.
Section 4
Legal Basis for Processing
92koko processes your personal data only where we have a valid legal basis to do so. The primary legal bases we rely upon are as follows:
- Contractual necessity: Processing your identity, contact, and financial data is necessary to create and manage your 92koko account, process your deposits and withdrawals, settle your bets, and otherwise deliver the services you have contracted with us to provide.
- Legal obligation: As a licensed gaming operator, 92koko is subject to anti-money-laundering (AML), counter-financing-of-terrorism (CFT), and Know Your Customer (KYC) regulations. Processing identity and financial data is mandatory to comply with these obligations under our gaming licence conditions.
- Legitimate interests: We process technical and usage data to detect and prevent fraud, to maintain the security and integrity of the 92koko platform, and to improve our products and services. These interests are balanced against and do not override your fundamental privacy rights.
- Consent: Where we process your data for marketing communications — including promotional emails, SMS offers, and bonus notifications — we do so only where you have given your explicit, freely given, and revocable consent. You may withdraw this consent at any time through your account settings or by contacting support.
Where 92koko relies on legitimate interests as its legal basis, you have the right to object to that processing. Please see Section 9 for details of how to exercise your data rights.
Section 5
How We Use Your Data
92koko uses the personal data we collect for the following specific purposes:
- Account creation and management: Setting up your player account, verifying your identity and age (21+ requirement), maintaining accurate account records, and enabling you to log in securely.
- Payment processing: Authenticating and executing PKR deposits and withdrawals via your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or debit card), and maintaining transaction records for regulatory compliance.
- Service delivery: Providing access to cricket betting markets (including PSL and international matches), live casino tables, slot games, and all other 92koko products and features.
- Customer support: Responding to your queries, resolving complaints, processing responsible gaming requests such as self-exclusion or deposit limit adjustments, and maintaining records of those interactions for quality assurance and dispute resolution.
- Fraud and security: Detecting and preventing fraudulent activity, money laundering, collusion, multi-accounting, and any other conduct prohibited under the 92koko Terms and Conditions or applicable law.
- Responsible gaming compliance: Monitoring your gaming patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusions you have requested, and fulfilling our obligations under the responsible gaming conditions of our international gaming licence.
- Marketing and personalisation: Where you have given consent, sending you relevant promotional offers, bonus notifications, and personalised content based on your gaming preferences and activity. You can opt out at any time.
- Legal and regulatory compliance: Fulfilling our obligations under our gaming licence, AML/CFT regulations, data protection law, and any applicable court orders or regulatory directions.
- Analytics and improvement: Analysing aggregated and anonymised usage data to improve the 92koko platform, optimise game performance, and enhance user experience for players across Pakistan.
No Profiling for Third Parties: 92koko does not use your personal data to build profiles for sale to or use by any third-party advertisers, data brokers, or unaffiliated commercial entities.
Section 6
Cookies & Tracking Technologies
92koko uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to maintain your session security, and to gather analytical data that helps us improve the user experience. The categories of cookies we deploy are as follows:
- Strictly necessary cookies: These cookies are essential for you to navigate the 92koko website and use its features, including maintaining your login session, remembering your language preferences, and ensuring the security of your account. These cookies cannot be disabled without significantly impairing platform functionality.
- Functional cookies: These cookies remember your preferences — such as your preferred payment method or game category — so that the platform can provide a more personalised experience on return visits.
- Analytics cookies: We use privacy-respecting analytics tools to collect aggregated data on how visitors interact with the 92koko website — including pages visited, session duration, and navigation paths. This data helps us identify and resolve usability issues.
- Security and fraud prevention cookies: These cookies help 92koko detect and prevent fraudulent login attempts, bot activity, and other security threats to the platform and to your account.
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 92koko platform, including secure login. Full cookie preference management is available via the cookie consent tool displayed on your first visit to the 92koko website.
92koko does not deploy third-party advertising cookies or tracking pixels that transmit your personal data to unaffiliated advertising networks.
Section 7
Data Sharing & International Transfers
92koko does not sell your personal data to any third party. We share your data only in the following limited and controlled circumstances:
- KYC and identity verification providers: We share identity documents and personal information with our authorised KYC partner to verify your identity and age as required by our gaming licence. All such partners are bound by strict data processing agreements.
- Payment processors: Transactional data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and debit card processors to the extent necessary to execute and reconcile your deposits and withdrawals.
- Game software providers: Usage data and game session data may be shared with third-party game providers (such as Evolution, Pragmatic Play, or Ezugi) to facilitate the delivery of their games on the 92koko platform. These providers process data solely as data processors acting on 92koko's instructions.
- Fraud prevention and AML services: We may share limited personal data with fraud screening and AML compliance service providers where this is required to detect suspicious activity and meet our regulatory obligations.
- Regulatory authorities: 92koko may disclose personal data to its licensing authority, law enforcement agencies, or other competent regulatory bodies where legally required to do so — for example, in response to a valid court order or regulatory investigation.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the 92koko business, your personal data may be transferred to the acquiring entity, subject to the same protections described in this Privacy Policy.
Where personal data is transferred to service providers located outside Pakistan, 92koko ensures that appropriate contractual safeguards are in place — including standard data protection clauses — to ensure that your data receives an equivalent level of protection regardless of where it is processed.
Section 8
Data Retention
92koko retains your personal data only for as long as is necessary for the purposes for which it was collected, having regard to our legal and regulatory obligations. Our standard retention periods are as follows:
| Data Category |
Retention Period |
Reason |
| Account registration data |
Duration of account + 5 years post-closure |
AML compliance, regulatory audit requirements |
| KYC / identity documents |
5 years from account closure |
Licensing obligation, AML/CFT regulations |
| Transaction records (PKR deposits & withdrawals) |
7 years from transaction date |
Financial record-keeping, AML compliance |
| Betting and gaming history |
5 years from account closure |
Dispute resolution, responsible gaming records |
| Customer support communications |
3 years from last interaction |
Dispute resolution, quality assurance |
| Marketing consent records |
Until consent withdrawn + 2 years |
Proof of consent, regulatory compliance |
| Technical / log data |
13 months from collection |
Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
Section 9
Your Data Rights
Depending on your jurisdiction and the applicable data protection framework, you may have the following rights in respect of the personal data that 92koko holds about you:
- Right of Access: You have the right to request a copy of all personal data that 92koko holds about you. We will provide this in a structured, readable format within 30 calendar days of a verified request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain account details (such as your registered email address or mobile number), please contact customer support with supporting documentation.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that we may be unable to fulfil erasure requests in full where retention is required by our licensing or AML obligations.
- Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
- Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a machine-readable format suitable for transfer to another service provider.
- Right to Object: You have the right to object to processing based on our legitimate interests (including profiling for fraud detection and responsible gaming monitoring) where you believe your individual circumstances override those interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your preferences in your account settings or contact support.
How to Exercise Your Rights: Submit a data rights request to
[email protected] with the subject line "Data Rights Request". Please include your registered account email address and a brief description of the right you wish to exercise. We will verify your identity before processing any request.
Section 10
Children & Minors
92koko operates a strict 21+ policy. Our platform is not intended for, directed at, or accessible to persons under the age of 21. We do not knowingly collect personal data from anyone under the age of 21.
92koko employs age verification technology at registration and at the point of the first withdrawal to verify that all account holders meet the minimum age requirement. Where a 92koko account is found to have been registered by or used by a person under 21 years of age:
- The account will be immediately and permanently closed.
- All bets placed and winnings generated during the period of underage use will be voided and forfeited.
- Net deposits (excluding any bonuses or promotional credits) will be returned to the source payment method where legally required.
- All personal data associated with the underage account will be securely deleted, except where retention is required for regulatory reporting purposes.
Parents and Guardians: If you believe a minor has accessed or registered on the 92koko platform using your payment details or device, please contact us immediately at
[email protected]. We will investigate and take all necessary action promptly.
92koko also recommends that parents and guardians in Pakistan make use of parental control software and internet filtering tools to restrict access to gambling websites on shared devices and internet connections used by minors.
Section 11
Security Measures
92koko implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption: All personal and financial data transmitted between your browser and the 92koko platform is protected using TLS (Transport Layer Security) encryption. Stored data is encrypted at rest using industry-standard AES-256 encryption.
- Access controls: Access to personal data held by 92koko is strictly limited to authorised personnel who require it to perform their job functions. Access is governed by role-based permission controls and is logged for audit purposes.
- Two-factor authentication: 92koko offers two-factor authentication (2FA) for player accounts and requires it for all internal administrative systems that process personal data.
- Penetration testing and security audits: 92koko's platform and data infrastructure are subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
- Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 92koko will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected users without undue delay where required by applicable law.
- Staff training: All 92koko staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.
While 92koko takes all reasonable precautions to safeguard your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring your device and connection are adequately secured.
Section 12
Changes to This Privacy Policy
92koko reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. All changes will take effect from the date on which the revised Privacy Policy is published on this page at 92koko.app/privacy-policy.
Where a change is material — meaning it significantly affects your rights or the way we process your personal data — 92koko will provide advance notice via:
- A prominent notice on the 92koko website homepage and login page;
- An email notification to your registered 92koko account email address, where the change is sufficiently significant to warrant direct notification; and/or
- An in-platform notification displayed upon your next login to the 92koko platform.
Your continued use of the 92koko platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with the changes, you should cease using the platform and may request closure of your account and deletion of your personal data (subject to our mandatory retention obligations) by contacting support.
We recommend that you review this Privacy Policy periodically to stay informed about how 92koko protects your information. The "Last Updated" date at the top of this page always reflects the date of the most recent revision.
Section 13
Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 92koko processes your personal data, please contact our Data Protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.
- Email (plain text — not a link): [email protected]
- Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
- Response time: We aim to acknowledge all privacy enquiries within 3 business days and to provide a substantive response within 30 calendar days.
If you are not satisfied with our response to your privacy concern, or if you believe that 92koko has processed your personal data in breach of applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. Pakistani users may also seek redress through the Federal Investigation Agency (FIA) Cybercrime Wing or other competent authority as applicable.
Our Commitment: 92koko is committed to resolving all data protection concerns fairly and in good faith. We encourage you to contact us directly in the first instance so we can work together to address any issues before escalation becomes necessary.
This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the 92koko Privacy Policy. By using the 92koko platform, you confirm that you have read, understood, and agree to the collection and use of your information in accordance with this Policy.