apkox Privacy Policy

apkox is Pakistan's leading online casino and sportsbook platform, serving players from Karachi, Lahore, Islamabad, Faisalabad, and across the country. We take the privacy and security of our players' personal data extremely seriously. This Privacy Policy sets out in clear, plain English exactly how we handle the personal information you entrust to us when you register an account, make deposits and withdrawals, play casino games, place sports bets, or contact our support team.

This policy applies to all personal data collected by apkox through the apkox.org website, any mobile-optimised version of the platform, and all associated account management, support, and communication channels. It applies equally to registered players and to individuals who browse the platform without having yet completed registration.

apkox is committed to handling personal data in accordance with internationally recognised data protection standards, including the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These principles underpin every data processing activity carried out by the apkox platform.

For the purposes of this Privacy Policy, the data controller responsible for the personal data of apkox players is the apkox platform operator, operating the apkox.org website. As data controller, apkox determines the purposes and means by which your personal data is processed, and is responsible for ensuring that all processing activities are conducted in compliance with applicable data protection standards.

All data protection enquiries, subject access requests, and privacy-related complaints should be directed to the apkox data protection contact using the details provided in Section 14 of this policy. apkox will respond to all data protection enquiries within 30 calendar days of receipt.

apkox collects personal data from players across several categories, depending on how you interact with the platform. The following table provides a comprehensive overview of the categories of personal data we collect, together with the specific data points within each category and the context in which they are collected:

apkox does not collect sensitive personal data beyond what is strictly necessary for age and identity verification (CNIC documentation), fraud prevention, and anti-money laundering compliance. We do not collect biometric data, religious or political beliefs, or health information. Where a player voluntarily discloses health information in the context of a responsible gaming request or self-exclusion application, that information is treated with the highest level of confidentiality and is used solely for the purpose of administering the relevant responsible gaming measure.

apkox uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed below without first obtaining your explicit consent or notifying you of the additional purpose via a policy update:

• Account Registration and Management: To create and maintain your apkox player account, verify your identity, manage your PKR wallet, and provide access to all platform products including casino games and sportsbook markets.
• Age and Identity Verification (KYC): To confirm that you are at least 21 years of age and that your identity matches the details provided at registration, in compliance with gaming standards requirements. CNIC documentation is used solely for this verification purpose.
• Payment Processing: To process your deposits via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and other supported methods, and to process withdrawal requests to your verified payment method.
• Fraud Prevention and Anti-Money Laundering: To monitor account activity for patterns indicative of fraud, money laundering, multiple account abuse, or other prohibited conduct as defined in the apkox Terms and Conditions. Technical and gaming activity data are used for this purpose.
• Responsible Gaming: To monitor your gaming activity for indicators of potential problem gambling behaviour and to administer the responsible gaming tools you activate in your account settings, including deposit limits, session time reminders, and self-exclusion measures.
• Customer Support: To respond to your support requests, complaints, and account-related enquiries via in-platform live chat, email, and other support channels. Communication data is retained to maintain a full and accurate support history for your account.
• Platform Improvement and Analytics: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and user experience of the apkox platform. This analytics data does not identify individual players.
• Promotional Communications: To send you information about apkox bonuses, promotions, and new platform features via SMS and email, where you have opted in to receive marketing communications. You can opt out at any time via your account notification settings.
• Legal and Compliance Obligations: To fulfil apkox's obligations under applicable gaming standards, anti-money laundering regulations, and any lawful requests from regulatory or law enforcement authorities.

apkox processes your personal data on the basis of the following legal grounds, depending on the specific processing activity involved:

• Contractual Necessity: The processing of your identity data, contact data, financial data, and gaming activity data is necessary for the performance of the contract between you and apkox — specifically, to operate your account, provide access to platform products, and process your financial transactions.
• Legal Obligation: The processing of KYC documentation, financial transaction records, and certain gaming activity data is required to comply with apkox's obligations under applicable anti-money laundering standards, gaming compliance requirements, and age verification obligations.
• Legitimate Interests: The processing of technical data for fraud prevention, security monitoring, and platform integrity purposes is conducted on the basis of apkox's legitimate interest in protecting the platform, its players, and the integrity of gaming outcomes from fraudulent or unlawful conduct.
• Consent: The processing of your data for the purpose of sending promotional communications is conducted on the basis of your consent, which you provide by opting in to marketing communications during registration or subsequently via account settings. You may withdraw this consent at any time without affecting any other aspect of your account.

apkox does not sell, rent, or trade your personal data to any third party. We share your personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose:

• Payment Processors: Financial data necessary to process your deposits and withdrawals is shared with the relevant payment service provider — including JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank — solely for the purpose of completing the transaction you have initiated.
• KYC and Identity Verification Providers: Identity documents and verification data may be processed by apkox's contracted identity verification service provider solely for the purpose of completing your KYC verification. These providers are bound by strict data processing agreements.
• Game Studio Providers: Where you play live dealer or RNG casino games supplied by third-party studios (such as Evolution Gaming or Pragmatic Play), the minimum game session data necessary for the studio to deliver the game and record the outcome may be processed by the studio under its own data handling procedures.
• Fraud Prevention and Security Services: Technical and account activity data may be shared with contracted fraud prevention and cybersecurity service providers for the purpose of detecting and preventing fraudulent activity, money laundering, and unauthorised access.
• Regulatory and Law Enforcement Authorities: apkox will disclose personal data to regulatory bodies, gaming compliance authorities, or law enforcement agencies where required to do so by a lawful order, court order, or applicable regulatory obligation. apkox will notify you of such a disclosure where it is legally permitted to do so.

apkox uses cookies and similar tracking technologies on the apkox.org platform. Cookies are small text files placed on your device when you access the platform. They allow the platform to recognise your device across sessions, maintain your logged-in state, and collect analytics data to improve platform performance.

apkox uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your session state, manage your authenticated login, and support core security functions including CSRF protection and session timeout management. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your account preferences — including your preferred language settings, notification preferences, and responsible gaming tool configurations — so that your personalised settings are maintained across sessions.
• Analytics Cookies: apkox uses first-party analytics cookies to collect aggregated, anonymised data about how players interact with the platform — including which pages are most visited, typical navigation paths, and session duration. This data is used exclusively to improve platform design and performance.
• Security and Fraud Prevention Cookies: These cookies are used to detect and prevent fraudulent activity, including the identification of suspicious login patterns, multiple account creation attempts, and automated bot activity on the platform.

You can manage your cookie preferences at any time via the cookie settings accessible from your account settings panel. Note that disabling functional or analytics cookies may affect your platform experience but will not prevent you from accessing core account functions.

apkox retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply to each category of personal data held by apkox:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with apkox's data deletion procedures. Where anonymisation is applied, the resulting anonymised data no longer constitutes personal data and may be retained indefinitely for statistical or analytical purposes.

As an apkox player, you have the following rights with respect to the personal data we hold about you. You can exercise any of these rights by contacting the apkox data team using the contact details provided in Section 14 of this policy:

• Right of Access: You have the right to request a copy of all personal data apkox holds about you, together with information about the purposes for which it is processed, the categories of data held, and any third parties with whom it has been shared. We will provide this data export within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data apkox holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Requests for rectification of KYC identity data may require submission of supporting documentation.
• Right to Erasure: You have the right to request the deletion of personal data apkox holds about you where it is no longer necessary for the purposes for which it was collected. This right is subject to apkox's legal retention obligations — data subject to AML or gaming compliance retention requirements cannot be deleted before the applicable retention period has expired.
• Right to Restriction: You have the right to request that apkox restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing pending verification of whether apkox's legitimate grounds override your interests.
• Right to Data Portability: You have the right to request that apkox provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object to Marketing: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You can exercise this right via the notification settings in your apkox account or by contacting support. Opting out of marketing communications does not affect your ability to use any other platform service.
• Right to Withdraw Consent: Where apkox processes your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

The apkox platform is strictly restricted to individuals aged 21 years or older. apkox does not knowingly collect personal data from any individual under the age of 21. If you are under 21, you must not register an account, access the apkox platform, or provide any personal data to apkox under any circumstances.

Where apkox discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all associated personal data will be deleted as promptly as legally possible, and any deposited funds will be returned to the original payment method.

apkox operates internationally and some of the third-party service providers we engage — including game studio providers, identity verification services, and fraud prevention partners — may process personal data in jurisdictions outside Pakistan. Where such international data transfers occur, apkox ensures that appropriate safeguards are in place to protect your personal data to the same standard as applies within Pakistan.

Safeguards for international data transfers include contractual data processing agreements with all third-party recipients that require them to apply data protection standards equivalent to those described in this Privacy Policy, and the use of encryption for all data transmitted internationally. apkox does not transfer personal data to any jurisdiction that does not provide adequate protections for the categories of data transferred.

apkox implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the apkox platform.
• AES-256 encryption for all personal data stored in apkox databases, including CNIC copies, financial records, and account credentials.
• Role-based access controls that restrict access to personal data to authorised personnel only, based on their specific operational requirements.
• Comprehensive audit logging of all internal access to personal data, with regular review of access logs by the apkox security team.
• Regular third-party penetration testing and security audits of the apkox platform infrastructure.
• Two-factor SMS authentication available to all players for additional account security.
• Automated anomaly detection systems that flag unusual login patterns, IP address changes, and suspicious account activity for security review.

In the event of a personal data breach that poses a risk to your rights and freedoms, apkox will notify affected players without undue delay and will take all necessary steps to contain the breach, assess its impact, and prevent recurrence.

apkox reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform operations. Where amendments are material — meaning they significantly affect the way we collect, use, or share your personal data — we will notify registered players via the email address associated with their account and/or via an in-platform notification prior to the changes taking effect.

The effective date displayed at the top of this policy and in the table of contents sidebar reflects the date of the most recent revision. We recommend reviewing this policy periodically to stay informed about how apkox protects your personal data. Your continued use of the apkox platform following the effective date of any revised policy constitutes your acceptance of the revised terms.

For all data protection enquiries, subject access requests, rectification requests, erasure requests, or privacy-related complaints, please contact the apkox data protection team using the following contact details:

If you submit a data rights request or privacy complaint to apkox and are not satisfied with our response, or if you believe that apkox has failed to handle your personal data in accordance with this Privacy Policy, you have the right to escalate your complaint to the applicable data protection supervisory authority or to the dispute resolution body under the gaming standards framework governing the apkox platform's operation.

apkox takes all privacy complaints seriously and commits to investigating every complaint thoroughly and responding with a full written explanation of our findings and any remedial actions taken.