sotspk Privacy
Policy

sotspk ("sotspk", "we", "us", "our") is committed to protecting the privacy and personal data of all users of its Platform at https://sotspk.cam (the "Platform"). This Privacy Policy ("Policy") describes how we collect, process, store, share and protect personal data relating to you ("User", "you", "your") when you access or use the Platform.

This Policy is incorporated into and should be read alongside our Terms & Conditions. By registering on or using the Platform, you acknowledge that you have read, understood and accepted this Privacy Policy. If you do not agree to the terms of this Policy, please do not use the Platform.

sotspk is an English-language online gaming information and review platform primarily targeting users in Pakistan. While we are aware that Pakistani users may interact with our Platform from cities including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar, this Policy applies uniformly to all users regardless of geographic location.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

3.1 Identity. sotspk, operating through the domain https://sotspk.cam, acts as the Data Controller in respect of personal data collected and processed through the Platform. The contact details for data-related enquiries are provided in Section 15 of this Policy.

3.2 No Government Affiliation. sotspk is not affiliated with, endorsed by or acting on behalf of the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, any provincial government authority, Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or any other Pakistani institution. References to these entities within the Platform are for educational and contextual purposes only.

We collect personal data through the following means:

4.1 Data You Provide Directly. When you register, complete KYC, contact support or interact with Platform features, you may provide:

• Full legal name, date of birth and gender;
• Email address and telephone number;
• Residential address (including city and country);
• Username and account password (stored in encrypted form);
• Copies of identity documents (CNIC, passport) and proof of address for KYC purposes;
• Selfie or liveness check images submitted during identity verification;
• Payment method details (bank account identifiers, digital wallet references) — noting that full payment card numbers are handled by the payment processor, not stored by sotspk directly;
• Support correspondence and feedback submitted to our team.

4.2 Data Generated Through Platform Use. When you access and use the Platform, we may automatically collect:

• IP address and approximate geographic location derived from IP;
• Browser type, version and operating system;
• Device type, screen resolution and device identifiers;
• Pages visited, features used, time spent and clickstream data;
• Session duration and login timestamps;
• Betting and gaming activity logs (if applicable);
• Deposit, withdrawal and transaction records.

4.3 Data From Third Parties. We may receive personal data from third-party sources, including:

• KYC and identity verification service providers who verify your submitted documents;
• Fraud detection and AML screening services;
• Payment processors confirming transaction status;
• Analytics providers supplying aggregated or pseudonymised usage data.

We process your personal data for the purposes and on the legal bases set out in the table below. Where we rely on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 Third-Party Service Providers. We may share your personal data with trusted third-party Data Processors who assist us in operating the Platform and delivering our services. These include, without limitation:

• Identity verification and KYC service providers;
• Payment processing partners and financial intermediaries;
• Fraud detection, risk management and AML screening tools;
• Cloud hosting and infrastructure providers;
• Customer support software platforms;
• Analytics and performance monitoring services.

All third-party Data Processors are required to process your personal data only in accordance with our instructions and applicable data protection law, and to maintain appropriate technical and organisational security measures.

6.2 Legal Disclosure. We may disclose your personal data to law enforcement agencies, regulatory authorities, courts or other public bodies where we are legally obliged or permitted to do so, including in connection with the prevention, detection or prosecution of financial crime, fraud or other illegal activity.

6.3 Business Transfers. In the event of a merger, acquisition, restructuring or sale of all or part of our business assets, your personal data may be transferred as part of that transaction. You will be notified via the email address registered to your Account of any such change and of any choices you may have.

6.4 No Sale of Data. We do not sell, rent or trade your personal data to third parties for their own marketing or commercial purposes.

7.1 Cross-Border Processing. sotspk operates internationally and your personal data may be transferred to, stored in or processed in countries outside Pakistan. Such countries may have data protection laws that differ from those in your country of residence.

7.2 Safeguards. Where personal data is transferred outside the jurisdiction in which it was collected, we ensure that appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules or other recognised transfer mechanisms, to protect your personal data in accordance with the principles set out in this Policy.

7.3 Pakistan Users. Users in Pakistan should be aware that data submitted to sotspk may be processed on servers located outside Pakistan. By using the Platform, you consent to such international transfers to the extent permitted by applicable Pakistani law.

8.1 Retention Periods. We retain personal data for as long as is necessary to fulfil the purposes described in Section 5, or as required by applicable law. Specifically:

• Account Data: Retained for the duration of your active Account plus a post-closure retention period as required by applicable AML, gaming and tax regulations (typically five to seven years following account closure, depending on jurisdiction).
• KYC Documents: Retained for the period required by applicable AML law following the end of the business relationship.
• Transaction Records: Retained in accordance with financial record-keeping obligations under applicable law.
• Support Correspondence: Retained for a reasonable period to facilitate ongoing support and dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for an appropriate period thereafter to demonstrate compliance.

8.2 Disposal. Upon expiry of applicable retention periods, personal data is securely deleted, anonymised or pseudonymised in accordance with our data disposal procedures.

9.1 Technical Measures. We implement industry-standard technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data stored at rest, including passwords (using one-way hashing) and KYC documents;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security assessments and vulnerability testing of Platform systems;
• Incident response procedures for identifying, containing and responding to data breaches.

9.2 Your Responsibility. You are responsible for keeping your account login credentials confidential. We will never ask you for your password via email, live chat or any other communication channel. If you believe your account has been compromised, contact support immediately.

9.3 KYC Document Security. Identity documents submitted for KYC must only be uploaded through the official Platform verification portal. Never send documents via unencrypted email, messaging applications or social media platforms.

9.4 Limitations. No method of electronic transmission or storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you as required by applicable law.

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device across pages and sessions. We also use similar technologies such as web beacons, pixel tags and local storage objects.

10.2 Categories of Cookies We Use.

10.3 Managing Cookies. You can control and delete cookies through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect certain features and personalisation. To opt out of analytics tracking, consult your browser's privacy settings or the documentation provided by the relevant analytics provider.

Subject to applicable data protection law in your jurisdiction, you may hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at the details in Section 15. We will respond within the timeframe required by applicable law (typically 30 days for GDPR-equivalent requests).

12.1 Age Restriction. The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

12.2 Discovery of Underage Data. If we become aware that personal data has been collected from a person below the applicable minimum age, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has submitted personal data to sotspk, please notify us immediately at the contact details in Section 15.

12.3 Parental Controls. We recommend that parents and guardians in households where minors may have access to internet-connected devices implement appropriate parental control software to restrict access to adult-oriented platforms including sotspk.

13.1 External Links. The Platform may contain references to or links to third-party websites or services. This Privacy Policy applies only to sotspk and its Platform. We are not responsible for the privacy practices, data handling or content of third-party websites. We encourage you to review the privacy policies of any third-party service you access.

13.2 Payment Processors. Payment transactions initiated through the Platform are processed by third-party payment processors. The collection and processing of payment data by those processors is governed by their own privacy policies and terms of service. sotspk does not store full payment card numbers or bank account credentials.

13.3 KYC Providers. Identity verification is conducted through third-party KYC service providers. Documents submitted for verification are shared with these providers solely for the purpose of completing your identity check and are subject to those providers' contractual obligations to us.

14.1 Right to Update. sotspk reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or operational requirements. The "Last Updated" date at the top of this Policy will be revised accordingly.

14.2 Notification. For material changes that significantly affect how we process your personal data, we will provide notice through your registered email address or through a prominent notice on the Platform prior to the change taking effect, giving you a reasonable opportunity to review and respond.

14.3 Continued Use. Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material change, you may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection team using the details below. All requests should be submitted in English for efficient handling.