Timislot Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy is issued by Timislot, the operator of the online gaming platform available at timislot.biz ("Timislot", "we", "us", "our"). Timislot is the data controller responsible for the personal information collected from players who register and use the platform. As data controller, Timislot determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly and transparently.

Timislot's platform serves players across Pakistan — including Lahore, Karachi, Islamabad, Rawalpindi, Peshawar, Multan, Faisalabad, Quetta and other cities — and is designed specifically for Pakistani users. All PKR transactions processed through the platform involve Pakistani payment infrastructure including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer and Pakistani-issued Visa and Mastercard cards.

If you have any questions about this Privacy Policy or how Timislot handles your personal data, you can contact the data protection team at any time at support@timislot.biz. We aim to respond to all privacy-related queries within five business days.

Timislot collects personal data from Pakistani players in the following categories. We collect only what is necessary for the specific purpose described and do not retain data beyond the period required for that purpose.

Data You Provide Directly

Most of the personal data Timislot holds is information you provide yourself — at registration, when completing KYC verification, when contacting support, or when updating your account settings. You are in control of what you submit, but certain information (such as your full name, mobile number and payment method details) is required to operate your account.

Data Collected Automatically

When you access the Timislot platform, certain technical data is collected automatically by our servers. This includes your IP address, the type of device and browser you are using, the pages you visit on the platform and the time and duration of your sessions. This information is used for security monitoring, fraud prevention and to improve the platform experience for Pakistani users — not for profiling or targeted advertising.

Timislot uses the personal data we collect from Pakistani players for the following specific purposes. We do not use your data for any purpose that has not been disclosed in this policy.

• Account creation and management: Setting up your Timislot account, maintaining your account settings, and managing your PKR balance and transaction history.
• Identity verification (KYC): Verifying your identity, age and payment method ownership as required by our anti-money laundering and responsible gaming obligations.
• Payment processing: Facilitating PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payment methods.
• Platform security and fraud prevention: Monitoring account activity for signs of unauthorised access, bonus abuse, multi-accounting or other fraudulent conduct.
• Responsible gaming compliance: Using behavioural data — session duration, deposit patterns, game activity — to identify potential problem gambling indicators and apply responsible gaming interventions where appropriate.
• VIP Club administration: Calculating loyalty points, determining your VIP tier, and processing weekly PKR cashback payments accurately.
• Customer support: Investigating and resolving any queries, complaints or disputes you raise with the Timislot support team.
• Marketing communications (with consent only): Sending you promotional offers, tournament announcements and platform updates via email or SMS — only if you have opted in to receive these communications.
• Legal compliance: Fulfilling obligations under applicable law including anti-money laundering regulations, financial crime reporting requirements and any lawful requests from regulatory or law enforcement authorities.

Timislot processes your personal data on the following legal grounds, which are standard across responsible data-handling organisations worldwide:

Contractual Necessity

Processing your identity, contact and payment information is necessary to perform the contract between you and Timislot — i.e. to operate your account, process your PKR deposits and withdrawals, and deliver the gaming services you have registered to use. Without this processing, we cannot provide the service.

Legal Obligation

Certain processing activities — particularly identity verification, age checks and financial transaction monitoring — are required by the anti-money laundering and responsible gaming obligations that govern Timislot's operations. These cannot be waived or opted out of.

Legitimate Interests

Timislot processes technical and behavioural data on the basis of our legitimate interests in operating a secure, fraud-resistant platform and maintaining fair gaming conditions for all Pakistani players. These interests do not override your fundamental privacy rights.

Consent

Marketing communications — promotional emails, SMS offers, tournament announcements — are sent only on the basis of your explicit consent, provided at registration or via your account settings. Withdrawal of consent is straightforward and does not affect your ability to use the platform.

Timislot does not sell your personal data to third parties. We share data only where it is strictly necessary to operate the platform, comply with legal obligations or protect the integrity of the service. All third parties with whom Timislot shares personal data are contractually bound to maintain confidentiality and to process the data only for the specific purpose for which it was shared.

Categories of Third Parties

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT networks and card scheme processors receive the payment details necessary to complete your PKR transactions. These organisations have their own privacy policies governing data they hold.
• Identity verification providers: Third-party KYC and AML compliance services may receive your identity documents and personal details to carry out the required verification checks. These services operate under strict data handling contracts.
• Game software providers: Licensed game providers whose titles appear in the Timislot catalogue receive anonymised session data necessary to deliver game functionality. They do not receive personally identifiable information except where required for specific game functionality.
• Fraud prevention services: Risk management and fraud detection tools may receive technical data including IP addresses and device fingerprints to identify and prevent fraudulent account activity.
• Regulatory and law enforcement authorities: Timislot will disclose personal data to competent authorities where required by law or in response to lawful requests. This includes disclosures in connection with financial crime investigations.

Because Timislot operates exclusively in Pakistani rupees and processes payments through Pakistani mobile wallets and bank accounts, payment data handling requires particular attention. Your Easypaisa or JazzCash account number, your bank IBAN or your card number are used solely to process your requested deposits and withdrawals. Timislot does not store full card numbers or mobile wallet PINs on our servers.

All payment transactions are processed over encrypted connections. Timislot maintains detailed transaction records as required by financial compliance obligations, but access to these records is strictly limited to authorised staff operating under confidentiality requirements. Transaction records are retained for the period required by applicable law and then securely deleted.

Timislot's anti-money laundering programme requires us to monitor deposit patterns and withdrawal requests for suspicious activity. This monitoring is conducted systematically and does not involve manual review of individual player transactions except where automated flags indicate a potential compliance concern. Flagged transactions may result in a request for additional documentation before processing proceeds.

Timislot retains personal data only for as long as it is necessary for the purposes described in this policy. Retention periods vary by data category and are set to comply with applicable legal requirements as well as Timislot's legitimate operational needs.

• Account data (name, contact, identity): Retained for the lifetime of your account and for a minimum of five years after account closure, as required by AML regulations.
• Payment transaction records: Retained for a minimum of seven years after the transaction date, in accordance with financial record-keeping requirements.
• Game history and session logs: Retained for up to three years, used for dispute resolution and responsible gaming monitoring.
• Support communications: Retained for up to three years from the date of the last communication in a thread.
• Technical logs (IP, device): Retained for up to 12 months, used for security and fraud analysis.
• Marketing preferences: Retained until you update them or withdraw consent.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to your identity. Anonymised or aggregated data — for example, statistical data about platform usage patterns — may be retained indefinitely.

Timislot uses cookies and similar technologies on the timislot.biz platform to maintain your session, remember your preferences and monitor platform performance. We do not use third-party advertising cookies or tracking pixels that connect your Timislot activity to external advertising networks.

Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function — session authentication, CSRF protection, payment process continuity. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Anonymous data about page load times, error rates and navigation paths — used to improve platform speed and stability. No personally identifiable information is associated with these cookies.
• Preference cookies: Remember your language settings, responsible gaming limit configurations and display preferences between sessions.
• Security cookies: Used to detect unusual login patterns, multiple simultaneous sessions or potential account sharing activity.

Most modern browsers allow you to manage cookie preferences, including blocking or deleting cookies. Blocking strictly necessary cookies will affect your ability to log in and use the platform. Timislot's cookies do not track your activity across other websites and are not used for cross-site advertising purposes.

As a Pakistani user of the Timislot platform, you have the following rights regarding the personal data we hold about you. These rights can be exercised at any time by contacting support@timislot.biz. Timislot will respond within 30 calendar days of receiving a valid request.

Timislot is an 18+ platform and does not knowingly collect personal data from individuals under the age of 18. The registration process includes age verification checks, and accounts confirmed to belong to underage individuals are closed immediately. If you believe that a person under 18 has registered a Timislot account using falsified information, please report this to support@timislot.biz immediately so the account can be investigated and closed.

Parents and guardians in Pakistan who are concerned about their children accessing online gaming platforms are encouraged to use parental control tools available on Android and iOS devices, and to have open conversations about responsible internet use and the risks associated with online gambling. Timislot's Responsible Gaming page includes additional resources on this topic.

Timislot implements a multi-layered security programme to protect the personal data of all Pakistani players on the platform. The measures described below are in place at all times and are reviewed and updated regularly as the threat landscape evolves.

• Encryption in transit: All data transmitted between your device and Timislot's servers is encrypted using 256-bit TLS. This applies to every connection — login, game sessions, payment processing and support chat.
• Encryption at rest: Sensitive personal data — including identity documents and payment details — is stored in encrypted form on Timislot's servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Staff access to personal data is limited on a strict need-to-know basis. System administrators with elevated access are subject to enhanced vetting and their activity is logged and audited.
• Intrusion detection: Automated monitoring systems are in place to detect unusual access patterns, potential intrusion attempts and anomalous data access that may indicate a security incident.
• Incident response: Timislot maintains a documented incident response procedure. In the event of a data breach affecting Pakistani players' personal data, affected individuals will be notified promptly with details of what data was involved, what action has been taken and what steps they should take.

While Timislot takes all reasonable steps to protect your data, no online system is completely immune from security risks. You play an important role in protecting your own account by using a strong, unique password, not sharing your login credentials and reporting any suspicious account activity to support immediately.

Timislot may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the platform. When material changes are made, Timislot will notify registered players via email and display a notice on the platform. The "last updated" date at the top of this page will be revised to reflect the date of the most recent update.

Your continued use of the Timislot platform following notification of a policy update constitutes your acknowledgement of the revised policy. If you disagree with the changes made, you may exercise your right to request account closure and data deletion by contacting support.

For any questions, concerns or requests related to this Privacy Policy or to how Timislot handles your personal data, please contact our data protection team through the following channel:

When contacting us about a data rights request, please include your registered email address, a clear description of your request and your preferred contact method so we can respond efficiently. Timislot may need to verify your identity before processing certain requests — this is to protect your data from being disclosed or modified at the request of an unauthorised third party.