shaspin Privacy Policy

shaspin is an internationally licensed online gaming platform operating at shaspin.net. We provide cricket betting, live casino games, slots, bingo, fishing games, and related services to registered players across Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, shaspin acts as the data controller — meaning we determine the purposes and means by which personal data is processed in connection with your use of the platform. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by contractual obligations consistent with our data protection commitments.

This Privacy Policy applies to all data collected through the shaspin website, any mobile-optimised interface, and any communications between shaspin and its players via live chat, email, or other channels.

shaspin collects personal data in three primary ways: information you provide directly, information generated by your use of the platform, and information received from third-party verification or payment providers. The categories of data we collect include:

Identity & Contact Data

• Full legal name as shown on your CNIC (Computerised National Identity Card)
• Date of birth
• Pakistani mobile number (used for OTP verification and account security)
• Email address
• City and province of residence
• CNIC number and scanned document images (collected during KYC verification)

Financial Data

• JazzCash or EasyPaisa account identifiers linked to your deposits and withdrawals
• Bank account details where HBL, UBL, Meezan Bank, Raast, or 1LINK transfers are used
• Deposit amounts, withdrawal requests, transaction history, and account balance records
• Source of funds declarations where required by our licence obligations

Platform Usage Data

• Login timestamps, session durations, and device information
• IP address and approximate geographic location derived from IP
• Betting history, game play records, and wagering patterns
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated)
• Live chat and email correspondence with shaspin support

Technical Data

• Browser type, operating system, and device model
• Cookie identifiers and session tokens
• Referral source (e.g., how you arrived at shaspin.net)

shaspin uses the personal data it collects strictly for the purposes listed below. We do not use your data for any purpose incompatible with the reason it was originally collected without first obtaining your consent or establishing a new lawful basis.

Purpose	Data Categories Used
Account registration and identity verification	Identity data, CNIC document, date of birth
Processing deposits and withdrawals	Financial data, identity data
Anti-money laundering (AML) monitoring	Financial data, transaction history, identity data
Fraud prevention and account security	IP address, device data, login records
Responsible gaming monitoring and intervention	Betting history, session data, communication records
Personalised gaming experience and platform recommendations	Game play records, session data
Customer support and complaint resolution	Identity data, correspondence records
Licence compliance reporting	Identity data, financial data, transaction history
Platform analytics and performance improvement	Technical data, usage data (anonymised where possible)
Promotional communications (where consent given)	Contact data, game preferences

Where shaspin sends you promotional communications, you may opt out at any time by contacting support via live chat or by following the unsubscribe instructions included in the communication.

shaspin processes your personal data only where a lawful basis exists for doing so. The primary legal bases on which shaspin relies are:

• Contractual Necessity: Processing required to create and maintain your account, process transactions, and deliver the services described in the shaspin Terms & Conditions, which you accepted at registration.
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, and reporting duties imposed by shaspin's international gaming licence authority.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where shaspin's legitimate interests in operating a safe and compliant platform are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

shaspin does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the minimum data required to process your deposit or withdrawal transaction. These providers are subject to their own privacy policies and regulatory obligations.
• KYC & Identity Verification Providers: Third-party services engaged to verify the authenticity of CNIC documents and confirm player identity in compliance with our licence requirements.
• AML Screening Providers: Automated screening services used to check player details against sanctions lists, Politically Exposed Persons (PEP) databases, and adverse media sources.
• Game Content Providers: Where third-party game studios supply slots, live casino tables, or fishing games on the shaspin platform, aggregated and pseudonymised session data may be shared for RNG audit and game performance purposes.
• Licensing Authority: shaspin's international gaming licence authority may require access to player data and transaction records as part of compliance audits or investigations.
• Law Enforcement & Regulatory Bodies: Where legally required, shaspin will disclose player data to relevant authorities in response to lawful orders or requests.

As shaspin operates under an international gaming licence, some of your personal data may be stored or processed on servers located outside Pakistan. Where such transfers occur, shaspin ensures that appropriate safeguards are in place, including:

• Contractual clauses binding the recipient to data protection standards equivalent to those applicable under shaspin's licence
• Use of data centres certified to recognised international security standards (e.g., ISO 27001)
• Transfer only to jurisdictions or processors that maintain adequate data protection frameworks

Where you would like further information about the specific safeguards in place for any international transfer of your data, please contact shaspin support.

shaspin retains personal data only for as long as necessary for the purpose for which it was collected, or as required by legal or regulatory obligations. The general retention periods applied by shaspin are as follows:

• Active Account Data: Retained for the duration of your account being open plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under our international gaming licence.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Support Correspondence: Retained for three (3) years following resolution of the relevant query or complaint.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period thereafter to evidence the prior consent.
• Technical Logs & Analytics Data: Typically retained for up to twelve (12) months in identifiable form, after which data is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with shaspin's internal data disposal procedures.

shaspin uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate and improve the platform. The types of cookies used by shaspin are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, last viewed game categories, and responsible gaming tool configurations.
• Analytics Cookies: Used by shaspin's internal analytics system to understand how players navigate the platform, which features are most used, and where technical issues occur. Data collected via analytics cookies is aggregated and does not identify you individually.
• Fraud Prevention Cookies: Used to detect suspicious login patterns, automated access attempts, and account takeover activity.

shaspin does not use third-party advertising or retargeting cookies. You will not see shaspin advertisements follow you around the web as a result of cookies set by shaspin.net.

You may manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your shaspin account.

As a shaspin player, you have the following rights in relation to the personal data we hold about you:

• Right of Access: You may request a copy of the personal data shaspin holds about you. We will provide this in a structured, commonly used format within 30 calendar days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For CNIC-related data, updated documentation may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. Please note that this right is subject to overriding legal obligations — shaspin cannot delete data that must be retained under AML record-keeping requirements or licence obligations.
• Right to Restriction of Processing: In certain circumstances, you may request that shaspin restricts the processing of your data while a dispute is resolved or a rectification request is pending.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that we provide your data in a machine-readable format or transfer it to another controller where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including processing for analytics and responsible gaming monitoring. shaspin will consider your objection and cease processing unless compelling legitimate grounds override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, contact shaspin support via 24/7 live chat or email us at [email protected]. We may need to verify your identity before processing a data rights request.

The shaspin platform is strictly intended for individuals aged 21 and above. shaspin does not knowingly collect personal data from anyone under the age of 21.

Age verification is enforced at the account registration stage through CNIC document validation. If shaspin identifies or is notified that a user under the age of 21 has registered an account, the following steps will be taken immediately:

• The account will be permanently closed
• All personal data associated with the account will be deleted, except where retention is required by AML obligations
• Any funds deposited will be returned to the originating payment source after deduction of any bonus amounts
• Any winnings accumulated will be forfeited in their entirety

shaspin implements a multi-layered security framework to protect your personal and financial data. Key security measures in place include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and shaspin's servers is encrypted using TLS 1.3, the current industry gold standard for transport layer security.
• AES-256 Encryption at Rest: Sensitive data including identity documents and financial records is stored in encrypted form on shaspin's servers.
• Two-Factor Authentication (2FA): Players are encouraged and, in some cases, required to enable 2FA via OTP to their registered Pakistani mobile number as an additional layer of account security.
• Intrusion Detection Systems: shaspin's infrastructure is monitored 24/7 by automated intrusion detection systems that flag and respond to anomalous access patterns in real time.
• Regular Security Audits: The platform undergoes periodic third-party penetration testing and security audits as a condition of maintaining its international gaming licence.
• Staff Access Controls: Access to player personal data by shaspin staff is granted on a strict need-to-know basis and is logged for audit purposes.

Despite these measures, no online system can guarantee absolute security. In the event of a data breach affecting your personal data, shaspin will notify affected players and relevant authorities in accordance with its licence obligations and applicable data protection law.

shaspin reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — affecting how your data is collected, used, or shared — we will provide advance notice via a platform notification or email to your registered address before the changes take effect.

The effective date of the current version of this Privacy Policy is shown at the top of this page and within the "Last Updated" reference in the policy footer. Continued use of the shaspin platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed about how shaspin protects your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way shaspin handles your personal data, please reach out through the following channels:

• Live Chat: Available 24/7 directly within the shaspin platform. This is the fastest route to a response for most privacy-related queries.
• Email: [email protected] — for formal written privacy requests, data subject access requests, or complaints requiring a documented response trail.

shaspin aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days. For complex requests requiring additional verification or legal review, we will keep you informed of progress throughout the process.

If you are not satisfied with shaspin's response to a privacy complaint, you may escalate the matter to the dispute resolution body designated by shaspin's international gaming licensing authority, as described in our Terms & Conditions.