4rabet Privacy Policy

This Privacy Policy ("Policy") describes how 4rabet ("4rabet", "we", "us", or "our"), the operator of the online gaming platform accessible at https://4rabet.lol, collects, uses, stores, shares, and protects the personal information of individuals who visit, register on, or otherwise interact with the 4rabet platform ("Platform").

This Policy applies to all registered players, prospective players, and visitors to the 4rabet website, including Pakistani users accessing the Platform via mobile browser from Karachi, Lahore, Islamabad, Faisalabad, and all other locations across Pakistan. It applies regardless of the device or browser used to access the Platform.

By registering a 4rabet account, depositing funds, or continuing to use the Platform after this Policy has been made available to you, you confirm that you have read, understood, and consent to the data collection and processing practices described in this Policy. If you do not consent to any part of this Policy, you must cease using the 4rabet Platform and may request closure of your account at any time.

For the purposes of applicable data protection law, 4rabet is the data controller in respect of the personal data collected through the Platform. As the data controller, 4rabet determines the purposes and means by which your personal data is processed.

4rabet is responsible for ensuring that personal data is collected fairly, stored securely, processed lawfully, and handled in accordance with the principles set out in this Policy and all applicable international data protection standards.

All inquiries, access requests, erasure requests, and data-related complaints should be directed to 4rabet's designated data protection contact at [email protected] with the subject line "Data Protection Inquiry". 4rabet will acknowledge all such communications within 72 hours and respond substantively within 30 calendar days.

4rabet collects personal data that falls into the following categories. The specific data items collected within each category depend on the nature of your interaction with the Platform and the stage of your account lifecycle.

4rabet does not collect sensitive personal data — such as biometric data, political opinions, religious beliefs, or health information — unless this is specifically required by law or regulation in a specific context (for example, in responding to a court order or regulatory authority request).

4rabet collects personal data through several distinct channels, each of which is described below:

• Direct Collection: Data you provide actively when creating your 4rabet account, completing KYC verification, submitting a withdrawal request, engaging with customer support via live chat or email, or updating your account preferences and settings.
• Automated Technical Collection: Data collected automatically when you access the 4rabet Platform, including your IP address, device identifier, browser information, session duration, pages visited, and game interactions. This data is collected via server logs, session tracking technologies, and analytics tools.
• Payment Processing: Financial transaction data received from payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK — in connection with the processing of your deposits and withdrawal requests to your 4rabet account.
• Third-Party Verification Services: Identity verification data received from third-party KYC providers engaged by 4rabet to assist in the verification of player identity documents and source of funds declarations.
• Fraud Prevention and Risk Services: Risk assessment data received from anti-fraud and anti-money laundering screening services used by 4rabet to protect the integrity of the Platform and comply with applicable regulatory obligations.

4rabet uses the personal data described in Section 3 for the following specific purposes, each of which is described alongside the data categories it primarily involves:

• Account Creation and Management: To register your 4rabet account, authenticate your identity at login, manage your account settings, and maintain the ongoing accuracy and integrity of your account information throughout your time as a player.
• Identity Verification (KYC): To verify your age (21+ requirement), confirm your identity, prevent the creation of duplicate accounts, and comply with applicable anti-money laundering, counter-terrorism financing, and responsible gaming regulations.
• Payment Processing: To process your PKR deposits via JazzCash, EasyPaisa, and Pakistani bank transfers, and to process your withdrawal requests to your verified payment methods within the timelines set out in the Terms and Conditions.
• Game and Betting Services: To provide access to certified casino games, sports betting markets — including PSL and international cricket — live dealer tables, and all other gaming services available on the 4rabet Platform.
• Responsible Gaming: To monitor gaming patterns for indicators of problematic gambling behaviour, enforce deposit limits and self-exclusion orders, and provide proactive responsible gaming support to players who may benefit from it.
• Fraud and Security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, money laundering, collusion, and any other prohibited conduct defined in the 4rabet Terms and Conditions.
• Customer Support: To respond to your inquiries, resolve complaints, process responsible gaming requests, and provide account-related assistance via live chat and email.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent regulatory authorities. 4rabet retains certain data categories for legally mandated periods regardless of account status.
• Platform Improvement: To analyse aggregate, anonymised usage data for the purpose of improving the 4rabet Platform's performance, game selection, payment infrastructure, and user experience for Pakistani players.
• Promotional Communications: To send you information about 4rabet promotions, bonuses, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time by contacting [email protected].

4rabet processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing required to perform the contract between you and 4rabet — specifically, to operate your account, process deposits and withdrawals, and provide access to games and betting services. Without this processing, 4rabet cannot fulfil its contractual obligations to you.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering legislation, counter-terrorism financing requirements, responsible gaming regulations, and responses to lawful requests from regulatory authorities.
• Legitimate Interests: Processing carried out for 4rabet's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security monitoring, responsible gaming pattern analysis, and general platform improvement activities.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of optional promotional communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4rabet does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. Your personal data may be shared with third parties only in the following defined circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and any other payment processing partners engaged by 4rabet to facilitate PKR deposit and withdrawal transactions. These providers receive only the minimum data necessary to process the specific transaction and are contractually bound to process your data solely for that purpose.
• Identity Verification Services: Third-party KYC and identity verification providers engaged by 4rabet to assist in verifying the authenticity of player-submitted identity documents and age confirmations. These providers operate under strict data processing agreements with 4rabet.
• Fraud Prevention and AML Services: Anti-fraud, anti-money laundering, and risk assessment service providers that assist 4rabet in detecting and preventing financial crime, account takeover, and other prohibited activities on the Platform.
• Game Providers and Studios: Certified game studios and developers — such as Pragmatic Play, Evolution Gaming, and BGaming — may receive session-level technical data necessary for the operation of their games within the 4rabet Platform. These providers do not receive your personally identifiable information beyond what is technically necessary for game session management.
• Regulatory and Legal Authorities: Government agencies, law enforcement authorities, financial intelligence units, and gaming regulators where disclosure is required by applicable law, regulation, court order, or lawful regulatory request. 4rabet will notify you of such disclosures where legally permitted to do so.
• Professional Advisors: Legal advisors, auditors, and accountants bound by professional confidentiality obligations, where access to your data is required in connection with the provision of their professional services to 4rabet.

4rabet retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law or regulation. The following retention guidelines apply:

• Active Account Data: All personal data associated with an active 4rabet account is retained for the duration of the account and for a period of five (5) years following the date of permanent account closure, in order to satisfy anti-money laundering record-keeping requirements and respond to any regulatory inquiries that may arise.
• Transaction Records: PKR deposit and withdrawal transaction records, including payment method details and transaction references, are retained for a minimum of seven (7) years from the date of each transaction in compliance with applicable financial record-keeping obligations.
• KYC Documents: Identity documents — including CNIC photographs and proof of address — are retained for a minimum of five (5) years following account closure or the date on which the KYC verification was completed, whichever is later.
• Communication Records: Customer support communications, including live chat transcripts and email correspondence, are retained for three (3) years from the date of each communication.
• Technical and Log Data: Server log data, IP addresses, and technical session data are retained for a period of twelve (12) months from the date of collection, after which they are deleted or irreversibly anonymised.
• Responsible Gaming Records: Self-exclusion records and responsible gaming intervention notes are retained indefinitely to prevent the re-registration of self-excluded individuals on the 4rabet Platform.

Upon expiry of the applicable retention period, 4rabet will securely delete or irreversibly anonymise your personal data. Data that has been anonymised — such that it cannot be used to identify you — may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law and the specific circumstances of your request, you have the following rights in respect of your personal data held by 4rabet. You may exercise any of these rights by submitting a written request to [email protected]. 4rabet will respond to all data rights requests within 30 calendar days.

4rabet uses cookies and similar tracking technologies on the Platform for the purposes described below. Cookies are small text files stored on your device when you visit the Platform; they do not contain executable code or malware and cannot access other files on your device.

• Essential Cookies: Required for the basic functioning of the 4rabet Platform, including maintaining your logged-in session, remembering your account preferences, and enabling core security features such as CSRF protection. These cookies cannot be disabled without disrupting Platform functionality.
• Analytical Cookies: Used to collect aggregate, anonymised data about how Pakistani players interact with the 4rabet Platform — including which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data is used exclusively to improve Platform performance and user experience.
• Functional Cookies: Used to remember your preferences — such as your selected language, display settings, and responsible gaming limit preferences — so that these settings are preserved across sessions without requiring you to reconfigure them at each login.
• Security Cookies: Used by 4rabet's fraud detection and account security systems to detect anomalous login patterns, identify potential account takeover attempts, and verify that each session originates from your registered device.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the 4rabet Platform normally. Disabling analytical and functional cookies will not prevent access to the Platform but may result in a less personalised experience.

4rabet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your browser or mobile device and 4rabet's servers is encrypted using TLS 1.2 or higher, providing 256-bit symmetric encryption of all personal data, financial data, and session information in transit.
• Encryption at Rest: Sensitive personal data fields — including CNIC numbers, financial account details, and identity document files — are encrypted at rest using industry-standard encryption algorithms within 4rabet's secure database infrastructure.
• Access Controls: Access to personal data within 4rabet's internal systems is governed by a strict role-based access control policy. Only authorised personnel with a demonstrated business need may access player personal data, and all such access is logged and audited.
• Network Security: 4rabet's Platform infrastructure is protected by web application firewalls (WAF), intrusion detection systems (IDS), and DDoS mitigation services that monitor for and respond to malicious network activity in real time.
• Two-Factor Authentication: 4rabet offers optional SMS OTP-based two-factor authentication for all player accounts, providing an additional layer of protection against unauthorised account access.
• Regular Security Testing: 4rabet conducts periodic vulnerability assessments and penetration testing of its Platform infrastructure and application code to identify and remediate security weaknesses proactively.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. 4rabet cannot warrant the absolute security of personal data and will not be liable for breaches that result from events outside its reasonable control, provided that it has taken all commercially reasonable steps to prevent such breaches.

4rabet's Platform is strictly intended for use by adults aged 21 years and above. The 4rabet Platform is not designed for, directed at, or intended to attract children or individuals below the minimum age requirement of 21 years.

4rabet does not knowingly collect personal data from individuals under the age of 21. Where 4rabet discovers — whether through KYC verification, player self-report, third-party notification, or any other means — that personal data has been collected from an individual below the age of 21, 4rabet will immediately close the associated account, delete all associated personal data to the extent permitted by applicable law, and return any deposited funds to the originating payment source where technically feasible.

If you believe that a person under the age of 21 has registered a 4rabet account, please contact 4rabet immediately at [email protected] with the subject line "Underage Account Report". 4rabet will investigate all such reports promptly and take appropriate action.

4rabet operates an international platform and may, in the course of its normal business operations, transfer your personal data to service providers, game studios, and technology partners located outside Pakistan. Such transfers may include transfers to countries whose data protection laws differ from those applicable in Pakistan.

Where personal data is transferred internationally, 4rabet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual data protection clauses, binding corporate rules, or reliance on international data transfer frameworks applicable to the jurisdictions involved.

Specifically, personal data transferred to game providers — such as Pragmatic Play and Evolution Gaming — for the purposes of game session management is transferred under contractual data processing agreements that obligate those providers to protect player data to the same standard required by 4rabet's own data protection policies.

4rabet reserves the right to amend, update, or replace this Privacy Policy at any time, whether in response to changes in applicable law, regulatory requirements, Platform features, or data processing practices. All amendments will be published on this page with an updated "Last Updated" date in the Policy header.

Where amendments to this Policy are material — meaning they significantly change how 4rabet collects, uses, or shares your personal data — 4rabet will notify registered players by email to their registered address and by prominent notice on the Platform prior to the amendments taking effect. For non-material amendments, publication on this page with an updated date constitutes sufficient notice.

Your continued use of the 4rabet Platform following publication of any amendments to this Privacy Policy constitutes your acceptance of the amended Policy. If you do not agree with any amendments, your remedy is to cease using the Platform and request closure of your account by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 4rabet holds about you, please contact 4rabet's data protection contact through the following channels:

• Email: [email protected] — for data access requests, erasure requests, correction requests, objection notices, and general privacy inquiries. Please use the subject line "Data Protection Inquiry" to ensure your message is routed to the correct team promptly. Include your registered email address or Pakistani mobile number so that we can identify your account.
• Live Chat: 4rabet's customer support team is available 24/7 via live chat on the Platform and can assist with initial privacy inquiries and direct you to the appropriate data protection process for more complex requests.

4rabet will acknowledge all data protection communications within 72 hours and will provide a substantive response within 30 calendar days. In cases where the complexity of a request requires additional time, 4rabet will notify you of the extended timeline within the initial 30-day period and will endeavour to complete the response within a further 60 days at most.

If you are not satisfied with 4rabet's response to a data protection inquiry or complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body applicable to 4rabet's jurisdiction of operation.