solotspk Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") is issued by solotspk ("we", "us", "our") and applies to all personal data collected from individuals who access, browse, register on, or otherwise interact with the solotspk platform at solotspk.net, including all associated subdomains, mobile-optimised interfaces, and features accessible through the platform (collectively, the "Platform").

solotspk operates under internationally recognised gaming regulations and is committed to processing personal data lawfully, fairly, and transparently. This Policy is designed to align with globally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, adapted where necessary to reflect the operational context of the solotspk platform as it serves players across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and beyond.

By creating a solotspk Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy in full. If you have any questions regarding the processing of your personal data, the 24/7 live chat support team is available on every page of the Platform.

For the purposes of this Privacy Policy, solotspk is the data controller in respect of all personal data collected through the Platform. As data controller, solotspk determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is conducted lawfully and in accordance with this Policy.

Where solotspk engages third-party service providers to process data on our behalf — such as KYC verification providers, payment processors, or fraud prevention services — those providers act as data processors, processing data solely on solotspk's documented instructions and subject to binding contractual data protection obligations.

solotspk collects personal data across several categories, depending on how you interact with the Platform. The categories of data we collect are set out in the table below:

3.1 Sensitive Data

solotspk does not intentionally collect special category (sensitive) personal data as defined under GDPR frameworks — such as data concerning health, ethnicity, religious beliefs, or biometric identity — except where this is strictly required by our gaming licence's responsible gaming obligations (for example, where a player discloses a gambling addiction in the context of requesting self-exclusion). Such data is handled with heightened security measures and access restrictions.

solotspk processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are set out below:

• Contractual necessity: Processing required to perform the contract between solotspk and the player — including account management, payment processing, game provisioning, and withdrawal handling. Without this processing, solotspk cannot deliver the services you have registered for.
• Legal obligation: Processing required to comply with solotspk's obligations under its international gaming licence — including KYC identity verification, AML (anti-money laundering) monitoring, responsible gaming interventions, and regulatory reporting to applicable gaming authorities.
• Legitimate interests: Processing conducted for solotspk's legitimate operational interests, including fraud detection, platform security, abuse prevention, and analytics to improve service quality — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed consent — principally in the context of marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

The personal data collected by solotspk is used for the following defined purposes, each of which is supported by a valid legal basis as described in Section 4:

• Account creation and management: Creating and maintaining your solotspk Account, authenticating logins, and managing account settings and preferences.
• Identity verification (KYC): Verifying your identity and age in compliance with our gaming licence obligations, to ensure the Platform is used only by eligible adults aged 21 and above.
• Payment processing: Processing deposits, withdrawals, and refunds via accepted payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, debit card, and cryptocurrency.
• Game and betting service delivery: Providing access to casino games, live dealer tables, slot titles, cricket betting markets, PSL wagering, and all other Platform features.
• Fraud prevention and AML compliance: Monitoring account and transaction activity for indicators of fraud, match-fixing, bonus abuse, money laundering, or other prohibited conduct in accordance with our international licence obligations.
• Responsible gaming monitoring: Analysing gameplay behavioural patterns to identify signs of problem gambling and, where appropriate, initiating responsible gaming interventions — including deposit limit prompts, cool-off period offers, or mandatory self-exclusion.
• Customer support: Responding to your enquiries, complaints, and support requests via live chat and email.
• Platform improvement and analytics: Using aggregated and pseudonymised behavioural data to improve game selection, platform design, and user experience — without identifying individual players in this context.
• Marketing communications (with consent): Sending promotional emails, bonus notifications, and platform updates to players who have opted in to marketing communications. You may withdraw consent at any time via your account settings or by contacting support.
• Legal and regulatory compliance: Retaining records as required by our gaming licence, responding to lawful regulatory or law enforcement requests, and defending or pursuing legal claims where necessary.

solotspk uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the Platform. They enable us to recognise your device across sessions, maintain your login state, and analyse Platform usage patterns.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cookies cannot be disabled without preventing Platform access.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations to provide a personalised experience.
• Analytics cookies: Collect pseudonymised data about how players interact with the Platform — including pages visited, time spent, and features used — to enable platform performance analysis and improvement.
• Marketing cookies: Used only where you have explicitly consented to marketing communications. These cookies help solotspk measure the effectiveness of promotional campaigns served through the Platform.

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the Platform. For all other cookie categories, you may opt out at any time. Please note that opting out of analytics cookies does not affect the delivery of core Platform services.

solotspk shares personal data with third parties only in the following strictly defined circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors receive financial data necessary to execute deposit and withdrawal transactions. These providers operate under their own regulatory frameworks and are independently licensed financial service providers.
• KYC and identity verification providers: Third-party identity verification services may process your identity documentation on behalf of solotspk to fulfil our gaming licence KYC obligations. All such providers are contractually bound to GDPR-aligned data processing standards.
• Fraud prevention services: Transaction monitoring and fraud detection providers may receive technical and behavioural data to support AML and fraud prevention functions required under our gaming licence.
• Game software providers: Game studios whose titles are accessible on the Platform may receive anonymised session data necessary for game functionality, RNG certification, and RTP reporting. No directly identifiable player data is shared with game studios for marketing purposes.
• Regulatory and law enforcement authorities: solotspk may disclose personal data to applicable gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required to do so by law or by the terms of our gaming licence. solotspk will notify affected players of such disclosures where legally permitted to do so.
• Legal advisers: In the context of legal proceedings, dispute resolution, or regulatory investigations, solotspk's legal counsel may have access to relevant personal data under strict professional confidentiality obligations.

solotspk does not share personal data with data brokers, advertising technology companies, or any third party for purposes unrelated to the delivery or regulation of the solotspk platform services.

solotspk operates under an international gaming licence and, as a consequence, personal data may be processed by solotspk's infrastructure or by authorised third-party processors in jurisdictions outside Pakistan. Where such international transfers occur, solotspk ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under internationally recognised data protection frameworks.

Safeguards applied to international data transfers by solotspk include:

• Binding contractual data processing agreements with all third-party processors, incorporating standard contractual clauses aligned with GDPR requirements.
• Transfer of data only to jurisdictions that provide an adequate level of data protection as assessed by solotspk's compliance function.
• Application of encryption and access control measures to all data in transit across international network boundaries.

If you wish to obtain further information about the specific safeguards applied to any international data transfer affecting your personal data, please contact our support team via live chat.

solotspk retains personal data for defined periods based on the purpose for which it was collected and the regulatory obligations applicable to our gaming licence. The general retention framework applied by solotspk is set out below:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytical purposes, as it no longer constitutes personal data.

As a player on the solotspk platform, you hold the following rights in respect of your personal data. These rights are exercisable by contacting the solotspk support team via live chat or email, subject to identity verification and the limitations noted below:

solotspk implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security controls in place include:

• Transport Layer Security (TLS 1.2+): All data in transit between your device and solotspk infrastructure is encrypted using TLS 1.2 or higher, ensuring that login credentials, payment data, and KYC document uploads cannot be intercepted in transit.
• AES-256 encryption at rest: Personal data stored on solotspk's database infrastructure is encrypted at rest using AES-256, the industry-standard symmetric encryption protocol used by regulated financial institutions globally.
• Role-based access controls: Access to personal data within solotspk's internal systems is restricted on a strict need-to-know basis. Staff members can only access the categories of data required for their specific operational function.
• Multi-factor authentication for internal systems: All solotspk staff who access internal systems containing player data are required to authenticate using multi-factor authentication (MFA).
• Penetration testing and vulnerability assessments: solotspk's platform infrastructure is subject to regular independent penetration testing and vulnerability assessments to identify and remediate security weaknesses before they can be exploited.
• Incident response procedures: solotspk maintains documented data breach incident response procedures. In the event of a data breach affecting your personal data, solotspk will notify affected players and, where required, applicable regulatory authorities, within the timeframes stipulated under our gaming licence obligations.

You can further protect your own account data by using a strong, unique password for your solotspk Account and by enabling any two-step verification options available in your account settings. You should never share your login credentials with any third party.

The solotspk platform is strictly for adults aged 21 and above. solotspk does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration process and is further enforced through KYC documentation requirements prior to the processing of first withdrawal requests.

If solotspk becomes aware that personal data has been collected from an individual under the age of 21 — whether through self-disclosure, third-party report, or internal audit — the relevant account will be immediately suspended, all associated balances will be held pending investigation, and the personal data will be securely deleted to the fullest extent permitted by our regulatory obligations.

solotspk will only send you promotional emails, bonus notifications, and platform update communications where you have explicitly opted in to receive marketing at the point of registration or via your account settings. Marketing communications from solotspk may include information about deposit bonuses, free bet offers, PSL cricket betting promotions, new game launches, and platform feature updates.

You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in your solotspk Account settings.
• Clicking the unsubscribe link included in every marketing email sent by solotspk.
• Contacting the 24/7 live chat support team and requesting immediate opt-out.

Withdrawal of marketing consent does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, KYC request emails, and account security alerts — which are sent as part of the contractual service and cannot be opted out of while your account remains active.

solotspk does not engage in SMS marketing or third-party advertising retargeting campaigns using personal data collected from the Platform.

solotspk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable regulatory requirements, or the evolution of the solotspk platform. The effective date at the top of this Policy will be updated whenever a material change is made.

Where a material change to this Policy affects your rights or the manner in which your personal data is processed, solotspk will endeavour to notify registered players in advance via email or on-platform notification before the revised Policy takes effect. Continued use of the Platform following notification of any such amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to remain informed about how solotspk protects your personal data. Archived versions of previous Privacy Policy editions are available upon request from our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by solotspk, please contact us through any of the following channels:

• 24/7 Live Chat: Available on every page of the solotspk platform — the fastest way to raise a data protection query or submit a data subject request.
• Support Email (plain text — not a link): [email protected]

solotspk will acknowledge all data subject requests within 5 business days and will endeavour to resolve them fully within 30 calendar days of receipt, subject to the complexity of the request and any identity verification requirements.

If you are not satisfied with solotspk's response to a privacy complaint, you have the right to escalate your complaint to the relevant gaming regulatory authority under whose licence solotspk operates. Details of the applicable supervisory authority are available from the solotspk support team on request.