718sp Privacy Policy —
Your Data. Protected.

1.1 This Privacy Policy is published by the operator of the 718sp platform ("718sp", "we", "us", "our"), an internationally licensed online gaming and sports betting operator serving Pakistani players through the platform accessible at 718sp.bio.

1.2 718sp is committed to protecting the privacy and personal data of all individuals who interact with our platform — including registered Players, account applicants, and visitors to the 718sp website. This Policy explains what data we collect, why we collect it, how we use it, and the rights you have in relation to it.

1.3 As a licensed gaming operator, 718sp is subject to data protection obligations imposed by its licensing jurisdiction as a condition of holding its international gaming licence. These obligations set a floor for data handling standards that 718sp is required to meet and maintain.

1.4 If you have any questions about this Policy or how 718sp handles your personal data, you may contact our Data Protection team using the contact information provided in Section 13 of this document. Players in Pakistan may also write to our support team via live chat or the email address provided in our Contact & Support section.

2.1 718sp collects personal data through several channels — directly from you during the registration and verification process, automatically as you use the platform, and in certain cases from third-party verification providers. The categories of personal data we collect are set out in the table below:

2.2 718sp does not collect or process special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) except where strictly required by its responsible gaming obligations — for example, where a Player discloses a gambling dependency in the context of requesting self-exclusion or support.

2.3 Where you choose not to provide personal data that 718sp is required to collect for legal or regulatory reasons, 718sp may be unable to open or maintain your Account or process withdrawal requests.

3.1 718sp processes personal data for the following purposes, which are each underpinned by a specific legal basis (described in Section 4):

• Account Management: Creating and administering your 718sp Account, including authentication, security, and account settings management;
• Identity Verification (KYC): Verifying that you are who you say you are, confirming your age (21+), and meeting anti-money laundering obligations imposed by our gaming licence;
• Payment Processing: Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, and Pakistani bank transfers; reconciling transaction records; detecting fraudulent payment activity;
• Service Delivery: Enabling you to access casino games, sports betting markets, live dealer tables, and other 718sp products;
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account compromise, collusion, and prohibited conduct;
• Responsible Gaming: Identifying signs of problem gaming behaviour through activity data analysis; applying and monitoring deposit limits, session controls, and self-exclusion requests;
• Regulatory Compliance: Meeting the reporting, record-keeping, and audit obligations imposed by 718sp's international gaming licence and applicable AML/CFT regulations;
• Customer Support: Responding to enquiries, complaints, and disputes submitted by Players;
• Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience;
• Communications: Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts) and, where consent has been given, marketing communications about promotions and new products.

3.2 718sp does not use your personal data for automated decision-making that produces legally significant or similarly significant effects on you, except where required for fraud detection or responsible gaming intervention — in which case you have the right to request human review of the decision.

4.1 718sp processes personal data on the following legal bases, depending on the purpose of processing:

• Contract Performance: Processing necessary to provide the services you have registered to receive — including account management, payment processing, and service delivery — is carried out on the basis that it is necessary for the performance of 718sp's contract with you;
• Legal Obligation: KYC verification, AML record-keeping, and regulatory reporting are carried out on the basis that 718sp is required to do so by its international gaming licence and applicable law;
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and platform improvement are carried out on the basis of 718sp's legitimate interest in operating a secure and compliant gaming platform, balanced against your privacy rights;
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit, informed consent, which you may withdraw at any time.

5.1 718sp does not sell, rent, or trade your personal data to third parties. Data sharing is limited to the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, and banking partners receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable payment industry data security standards;
• Identity Verification Providers: Third-party KYC and AML screening services receive identity documents and personal data necessary to complete verification checks required by 718sp's licensing obligations;
• Game Providers: Certified third-party game studios and live casino operators whose games are available on the 718sp platform may receive session data necessary to deliver game functionality. Game providers are contractually required to process this data only for the purpose of providing the game service;
• Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on 718sp's behalf under contractual data processing agreements with appropriate security obligations;
• Regulatory Authorities: 718sp's gaming licence regulator, and where legally required, law enforcement agencies or financial intelligence units, may receive Player data in the context of regulatory audits, investigations, or legally mandated reports;
• Professional Advisors: Legal counsel, auditors, and compliance consultants may have access to Player data on a strictly need-to-know basis in connection with legal proceedings or regulatory matters.

5.2 All third parties with whom 718sp shares personal data are required to maintain the confidentiality of that data and to process it only for the purposes for which it was shared. 718sp does not permit third parties to use Player data for their own marketing purposes.

6.1 718sp implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• Encryption in Transit: All data transmitted between your device and the 718sp platform is encrypted using 256-bit TLS/SSL, the same standard used by international banking institutions;
• Encryption at Rest: Sensitive personal data stored in 718sp's databases — including identity documents and financial data — is encrypted at rest using industry-standard algorithms;
• Access Controls: Internal access to systems containing personal data is restricted by role-based access controls, multi-factor authentication requirements, and audit logging. Personnel access is granted on a strict need-to-know basis;
• Fraud Detection Systems: Automated systems monitor platform activity continuously for patterns indicative of account compromise, unauthorised access, or fraudulent behaviour;
• Penetration Testing: 718sp's security infrastructure is subject to regular penetration testing by qualified external security professionals to identify and remediate vulnerabilities;
• Incident Response: 718sp maintains a documented data breach response procedure. In the event of a breach affecting your personal data, 718sp will notify affected Players and relevant regulatory authorities within the timeframes required by its obligations.

6.2 While 718sp takes all reasonable and proportionate steps to secure your personal data, no system is completely immune to security incidents. Players are also responsible for maintaining the security of their own Account credentials and for enabling two-factor authentication (2FA), which is strongly recommended.

7.1 718sp retains personal data only for as long as is necessary for the purposes described in this Policy and for the fulfilment of applicable legal and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations imposed by 718sp's gaming licence;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AML and tax record-keeping regulations;
• Gaming Activity Logs: Retained for a period of five (5) years for regulatory audit purposes and dispute resolution;
• Support Communications: Retained for three (3) years from the date of the last communication, to enable effective complaint management and dispute resolution;
• Technical and Device Data (Logs): Retained for 12 months, after which it is anonymised or deleted;
• Marketing Consent Records: Retained for three (3) years from the date consent was recorded, as evidence of consent;
• Responsible Gaming Records (self-exclusion, limits): Retained for the duration of the active restriction plus five (5) years, to prevent circumvention and support regulatory audit.

7.2 On expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

8.1 The 718sp platform uses cookies and similar tracking technologies to operate the platform, maintain your session, and (where you have consented) analyse usage for improvement purposes. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without impairing the core functionality of the platform;
• Functional Cookies: Store your preferences such as language settings and game lobby display preferences. Disabling these cookies may affect your experience but will not prevent you from using the platform;
• Analytical Cookies: Used with your consent to collect anonymised data about how Pakistani players navigate and use the 718sp platform, enabling us to improve usability and performance. These cookies do not identify you personally;
• Marketing Cookies: Used only with your explicit consent to track interaction with 718sp promotional content. 718sp does not serve third-party advertising cookies that track you across other websites.

8.2 You may manage your cookie preferences at any time through your browser settings or through the cookie preferences panel accessible from the 718sp platform footer. Note that disabling strictly necessary cookies will affect the functionality of your Account.

8.3 718sp does not use browser fingerprinting for tracking purposes beyond what is strictly necessary for fraud detection and security authentication.

9.1 Players whose personal data is processed by 718sp have the following rights, exercisable by contacting our Data Protection team using the details in Section 13:

9.2 718sp will respond to valid rights requests within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extension and the reason for it. Certain rights may be limited where 718sp is required by law to retain or process your data (for example, for AML record-keeping), in which case we will explain the limitation clearly.

9.3 There is no fee for exercising your data rights. Where a request is manifestly unfounded or excessive (particularly where repetitive), 718sp reserves the right to charge a reasonable administrative fee or decline the request, with written explanation.

10.1 718sp implements age verification procedures during the registration process and as part of its KYC obligations to prevent minors from accessing the platform. These measures include documentary verification of date of birth against a government-issued identity document.

10.2 If you are a parent or guardian and believe your child has provided personal data to 718sp, please contact us immediately using the contact details in Section 13. We will investigate and take appropriate action within 72 hours of receiving such a notification.

11.1 As an internationally licensed gaming operator, 718sp may process and store personal data in jurisdictions outside Pakistan — including in the licensing jurisdiction and in locations where 718sp's technology infrastructure providers operate data centres.

11.2 Where personal data is transferred outside of Pakistan, 718sp takes steps to ensure that appropriate safeguards are in place to protect the data to a standard consistent with its regulatory obligations. These safeguards may include:

• Contractual clauses with receiving parties that impose data protection obligations equivalent to those 718sp is subject to;
• Transfer to jurisdictions that provide an adequate level of data protection as recognised by 718sp's licensing authority;
• Binding corporate rules or equivalent intra-group data transfer mechanisms.

11.3 You may request information about the safeguards applicable to a specific international data transfer by contacting our Data Protection team using the details in Section 13.

12.1 718sp may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The effective date of the current version is displayed at the top of this document and in the table of contents sidebar.

12.2 Where updates to this Policy are material — that is, where they affect your rights or the way in which 718sp uses your personal data in a significant way — 718sp will notify registered Players by email to their registered address and/or by prominent in-platform notice, at least 14 days before the changes take effect.

12.3 Non-material updates (such as typographical corrections, clarifications, or structural changes that do not affect the substance of the Policy) may be made without prior individual notification but will always be reflected in the version published on the platform.

12.4 Continued use of the 718sp platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the updated Policy, you may close your Account in accordance with the Account closure provisions in the 718sp Terms & Conditions.

13.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 718sp, please contact us through any of the following channels:

• Live Chat: Available 24/7 through the 718sp platform — the fastest route for urgent data protection queries;
• Support Ticket: Submitted through the 718sp Account support section — responses within 24 hours, 7 days a week;
• Email: [email protected] — for formal data rights requests and written correspondence relating to this Policy.

13.2 When submitting a data rights request, please clearly state the nature of your request (access, correction, deletion, etc.), include your registered email address, and be prepared to verify your identity as described in Section 9.

13.3 718sp is committed to resolving privacy concerns directly with Players in the first instance. Where a concern cannot be resolved through our internal process, Players may escalate the matter to the data protection supervisory authority in 718sp's licensing jurisdiction.