Privacy Policy – AllSlot Pakistan Data Protection Notice

AllSlot, operating at allslot.bio ("AllSlot," "we," "us"), is the data controller for all personal information processed in connection with your AllSlot account. As data controller, AllSlot determines the purposes for which your personal data is collected and the means by which it is processed.

This Privacy Policy applies to all AllSlot services including the website at allslot.bio, the AllSlot mobile experience, and all games and features accessible through your AllSlot account — including the live casino, Andar Bahar, Card Games, Roulette, Ludo Games, and Live Cricket Score sections.

By creating an AllSlot account and using the platform, you confirm that you have read and understood this Privacy Policy. Use of AllSlot constitutes acceptance of the data practices described here. If you do not agree, please do not register or continue using AllSlot.

AllSlot collects personal data in two broad categories: information you provide directly when you register and use the platform, and information that is generated automatically during your use of AllSlot.

Information You Provide

Information Generated Automatically

• Transaction data: All deposits, withdrawals, bonus credits, and in-game bet history on your AllSlot account, including amount, time, method, and outcome.
• Technical data: IP address, device type, operating system, browser type, and session timestamps from your AllSlot sessions.
• Usage data: Pages visited, games played, features used, and navigation patterns within the AllSlot platform.
• Cookie data: As described in Section 7 of this policy.

AllSlot collects personal data through the following means:

• Direct input: Information you type into AllSlot's registration form, deposit/withdrawal forms, KYC verification screens, or support chat windows.
• Automated systems: AllSlot's platform logs technical and usage data automatically when you access the website or play games. This happens without any action on your part beyond accessing the platform.
• Payment providers: When you make a deposit or withdrawal, AllSlot receives confirmation data from the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, a bank, or a card processor). AllSlot does not store full card numbers — these are held by the payment processor under their own security standards.
• Identity verification services: Where AllSlot uses a third-party KYC verification service to check the authenticity of identity documents you submit, that service provides AllSlot with a verification result. The document data is processed by the verification service under their own privacy policy.

AllSlot processes your personal data only for the following defined purposes. For each purpose, the legal basis for processing is noted.

Account Management (Contract Performance)

AllSlot uses your identity and contact data to create and maintain your account, to authenticate your login sessions, to send you account-related notifications such as deposit confirmations and withdrawal processing updates, and to respond to your support requests. This processing is necessary to provide the AllSlot service you signed up for.

Payment Processing (Contract Performance)

AllSlot uses your financial data to process PKR deposits to your AllSlot wallet and to process withdrawals back to your payment method. Transaction records are maintained for accounting accuracy and to resolve any payment disputes. AllSlot does not use your payment data for any purpose other than processing transactions you have initiated.

Identity Verification and Anti-Fraud (Legal Obligation)

AllSlot is obligated to verify the identity and age of players and to monitor for money laundering and fraudulent activity. AllSlot uses your identity documents, transaction data, IP data, and device data to fulfil these obligations. This processing is required by law and AllSlot has no discretion to opt out of it.

Responsible Gaming (Legal Obligation / Legitimate Interest)

AllSlot uses your gaming activity data — session duration, bet frequency, deposit patterns, and loss patterns — to monitor for signs of harmful play. Where the data suggests a player may be experiencing gambling-related harm, AllSlot's responsible gaming team may reach out proactively. This processing is in the player's genuine interest and is part of AllSlot's responsible gaming commitment.

Platform Improvement (Legitimate Interest)

AllSlot uses aggregated, anonymised usage data to understand how players navigate and use the platform — which games are popular, where technical issues occur, and which features are most used. This data does not identify individual players and is used only to improve the AllSlot experience for everyone.

Marketing Communications (Consent)

Where you have opted in to marketing communications during registration or in your account settings, AllSlot uses your contact data to send you information about promotions, new games, and bonuses. AllSlot does not send marketing communications to players who have not opted in. You can withdraw consent for marketing communications at any time from your AllSlot account settings or by contacting support.

AllSlot shares personal data with third parties only where necessary and only for the specific purposes described below. AllSlot does not sell personal data to any third party.

Payment Processors

To process your PKR deposits and withdrawals, AllSlot shares the minimum necessary data with Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking infrastructure, and card payment processors. Each of these processors handles your financial data under their own privacy policies and applicable Pakistani financial regulation. AllSlot chooses payment partners that operate under appropriate security standards.

Identity Verification Providers

For KYC verification, AllSlot may use a third-party service to verify CNIC documents and perform liveness checks. These providers receive only the data necessary to complete the verification — the identity document image and a selfie. Verification results are passed back to AllSlot. The verification provider does not retain your data for their own commercial purposes.

Game and Technology Providers

AllSlot's live casino and certain game sections are powered by licensed third-party providers who operate the game software and live dealer studios. Where you play a live dealer game on AllSlot, the provider's system logs the game data necessary to determine the result. These providers are certified and licensed and are bound to handle player data only for game operation purposes.

Regulatory and Law Enforcement

AllSlot may disclose personal data to regulatory bodies or law enforcement authorities where required to do so by law, by a court order, or to investigate suspected criminal activity including fraud and money laundering. AllSlot will challenge any data disclosure request that it believes to be disproportionate or without legal basis.

Because AllSlot operates exclusively in Pakistan and processes all transactions in PKR through Pakistani payment methods, it is worth addressing payment data handling specifically for the context Pakistani players are most familiar with.

Easypaisa and JazzCash

When you deposit or withdraw using Easypaisa or JazzCash, AllSlot receives a transaction confirmation from the relevant provider. This confirmation includes the transaction reference number, the amount, the timestamp, and a masked version of your wallet number (showing only partial digits). AllSlot does not receive or store your full Easypaisa or JazzCash PIN at any point. The PIN entry happens on the provider's own secure system.

Bank Transfers (IBFT)

For IBFT transactions, AllSlot receives your bank account IBAN number to process the withdrawal. This is stored against your AllSlot account record for withdrawal processing purposes. AllSlot does not have access to your full bank account details or your internet banking credentials.

Card Payments

Where you use a Visa or Mastercard for deposits, card data is entered and processed by the card payment processor directly. AllSlot receives a transaction token and the last four digits of the card for reference. Full card numbers are never transmitted to or stored by AllSlot.

AllSlot uses cookies and similar technologies on the allslot.bio website. A cookie is a small text file stored on your device when you visit a website. AllSlot uses the following categories of cookies:

Essential Cookies

These cookies are necessary for AllSlot to function. They keep you logged into your account across pages, maintain your session security, and enable core platform features. Without them, AllSlot cannot operate correctly. These cookies cannot be disabled.

Functional Cookies

These cookies remember your preferences — for example, your selected game lobby view, your preferred language, or your last-used payment method displayed at deposit. They improve your AllSlot experience but are not essential.

Analytics Cookies

AllSlot uses privacy-respecting analytics cookies to understand aggregate usage patterns on the platform — which pages are visited, which games are opened, and where technical errors occur. This data is processed in aggregated, anonymised form and is used only to improve the AllSlot platform. No individual player is identified from analytics data.

AllSlot does not use advertising cookies or tracking pixels that send your data to third-party advertising networks.

AllSlot keeps personal data for as long as necessary for the purpose it was collected, subject to any longer retention periods required by law. The following general retention periods apply:

• Active account data (identity, contact, payment references): Retained for the lifetime of your AllSlot account and for a minimum of five years after account closure, to comply with anti-money-laundering record-keeping obligations.
• Transaction records (all PKR deposits, withdrawals, and bet history): Retained for seven years from the date of each transaction, as required for financial compliance purposes.
• KYC verification documents: Retained for five years after your account is closed or after the last transaction, whichever is later.
• Support communications: Retained for three years from the date of the communication, to allow accurate response to any complaint or dispute that arises after the conversation.
• Technical and usage logs: Retained for 13 months on a rolling basis. Older logs are deleted automatically.
• Marketing opt-in records: Retained for the duration of your account plus two years after you withdraw consent, to demonstrate compliance with marketing opt-in requirements.

When the retention period for a category of data expires, AllSlot deletes or anonymises it. Anonymised data (where all identifying information has been removed) may be retained indefinitely for statistical analysis.

As an AllSlot player, you have the following rights over your personal data. To exercise any of these rights, contact AllSlot support with the subject line "Data Rights Request." AllSlot will respond within 30 days.

AllSlot implements a range of technical and organisational security measures to protect your personal data. These include:

• SSL/TLS encryption on all data transmitted between your device and the AllSlot platform. The padlock in your browser confirms this encryption is active.
• Encrypted storage for sensitive data at rest, including identity documents and financial reference data.
• Access controls within AllSlot's systems that restrict personal data access to staff members who have a specific operational need to access it. Not all AllSlot employees have access to player personal data.
• Audit logs that record every internal access to personal data records, allowing AllSlot to detect and investigate any unauthorised access.
• Regular security reviews of AllSlot's infrastructure, including testing for vulnerabilities.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your personal data in a material way, AllSlot will notify affected players as quickly as possible.

AllSlot is strictly an 18+ platform. AllSlot does not knowingly collect personal data from anyone under the age of 18. Age is verified during registration and, where any doubt exists, through the KYC verification process.

If AllSlot discovers that an account has been registered by a minor — or that personal data from a minor has been collected in error — the account will be closed immediately, the data will be deleted, and any deposited funds will be returned to the payment method used, less any amounts that AllSlot is required to retain by law for anti-fraud purposes.

If you believe that a minor has registered an AllSlot account, please contact AllSlot support immediately with the relevant account details. AllSlot will investigate and take appropriate action promptly.

AllSlot may update this Privacy Policy from time to time to reflect changes in data practices, legal requirements, or the AllSlot platform itself. When material changes are made, AllSlot will:

• Update the "Last updated" date at the top of this page.
• Notify registered AllSlot players via the mobile number or email address on their account, giving at least 14 days' notice before the changes take effect.
• Display a notice on the AllSlot platform for the same period.

Minor changes that do not materially affect your rights — such as clarifying language or correcting typographical errors — may be made without notice but will always be reflected in the updated document on this page.

AllSlot recommends reviewing this Privacy Policy periodically. Continued use of AllSlot after the effective date of a revised policy constitutes acceptance of the changes. If you do not accept the revised policy, you should close your AllSlot account before the changes take effect.

For any question, request, or concern relating to this Privacy Policy or AllSlot's handling of your personal data, please contact AllSlot through the following channels:

• Live chat: Available within your AllSlot account, 24/7, in English and Urdu. For data rights requests, state "Data Rights Request" at the start of the conversation so it is handled by the appropriate team member.
• Email: support@allslot.bio. For formal data rights requests, use the subject line "Data Rights Request." AllSlot will acknowledge receipt within 24 hours and provide a substantive response within 30 days.

If AllSlot is unable to resolve a privacy concern to your satisfaction, you have the right to escalate the matter to the relevant data protection authority. AllSlot will provide the appropriate escalation contact in its response to any formal privacy complaint.