1. Introduction
This Privacy Policy (the "Policy") sets out how 500pak (the "Operator", "we", "us" or "our") collects, uses, stores, shares and protects personal data relating to users ("you" or "User") of the 500pak platform, accessible at https://500pak.cam and any associated applications (collectively, the "Platform").
500pak is an English-language online betting and live casino information platform built for Pakistani players, covering sports betting, PSL and ICC cricket odds, live casino, slots and responsible gambling guidance. In operating the Platform, we necessarily collect and process certain personal data. We take that responsibility seriously and this Policy is designed to be clear, specific and honest about our data practices.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.
Note for Pakistani users: Pakistan's data protection legislative framework continues to develop. The Personal Data Protection Bill and related instruments may apply to you. 500pak does not claim compliance with any specific Pakistani regulatory standard and this Policy does not constitute legal advice. If you have concerns about data protection rights in Pakistan, you should seek independent legal guidance.
2. Definitions
In this Policy, the following terms have the meanings set out below:
2.1 "Personal Data" means any information that identifies or can reasonably be used to identify a living natural person, directly or indirectly — including name, national identity number, email address, IP address, device identifier and financial account details.
2.2 "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
2.3 "Data Controller" means the entity that determines the purposes and means of Processing. For the purposes of this Policy, the Data Controller is 500pak.
2.4 "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller, subject to instructions and appropriate data processing agreements.
2.5 "KYC" means Know Your Customer — the identity and age verification process conducted before certain account functions are enabled.
2.6 "Cookies" means small text files placed on your device by the Platform to enable certain functionality, remember preferences, analyse usage and support security.
2.7 "Account" means the registered user account you hold on the Platform.
3. Data Controller
3.1 The Data Controller responsible for Personal Data collected through the Platform is 500pak, operating under the domain https://500pak.cam.
3.2 For all data-related enquiries, requests or complaints, you may contact us at the address set out in Section 17 (Contact Us) of this Policy. All correspondence is handled in English. Urdu-language assistance is available on request.
3.3 Where we engage third-party Data Processors — for example, payment processing providers or identity verification services — those processors act under our instruction and are bound by appropriate data processing agreements. We do not authorise any Data Processor to use your Personal Data for their own independent commercial purposes.
4. Personal Data We Collect
We collect the following categories of Personal Data, depending on how you interact with the Platform:
| Category |
Examples |
When Collected |
| Identity Data |
Full name, date of birth, CNIC / passport number, photograph |
Account registration and KYC verification |
| Contact Data |
Email address, phone number, city of residence (e.g. Karachi, Lahore, Islamabad) |
Account registration, support requests |
| Financial Data |
Payment method details, transaction history, deposit and withdrawal records in PKR |
Deposits, withdrawals, payment processing |
| Technical Data |
IP address, device type, browser type, operating system, session tokens |
Automatically on Platform access |
| Usage Data |
Pages visited, bets placed, games played, session duration, click patterns |
Automatically during Platform use |
| Communications Data |
Support chat logs, email correspondence, feedback submissions |
When you contact us |
| Responsible Gambling Data |
Self-exclusion records, deposit limit settings, session time limit preferences |
When you use responsible gambling tools |
Payment method references: When processing deposits or withdrawals, payment method data may relate to mobile wallets or bank accounts familiar to Pakistani users (such as those associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah). These names are referenced here for contextual clarity only. None of these providers are affiliated with 500pak and none of them endorse gambling operations.
5. How We Collect Personal Data
5.1 Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, set responsible gambling limits or otherwise provide information through the Platform.
5.2 Automatically: When you access the Platform, we automatically collect Technical Data and Usage Data via server logs, cookies, session tracking and similar technologies. This occurs regardless of whether you are logged in.
5.3 From third parties: We may receive identity verification data from KYC service providers, fraud detection data from security partners, and payment confirmation data from payment processors. We may also receive information from third parties where you have consented to that third party sharing your data with us.
5.4 We do not knowingly collect Personal Data from individuals under the minimum eligible age. If we become aware that a minor has provided us with Personal Data, we will take immediate steps to delete that data and close the associated Account. See Section 14 for further details.
6. Legal Basis for Processing
We Process your Personal Data only where we have a valid legal basis for doing so. The applicable legal bases are:
6.1 Contractual necessity: Processing is necessary to perform our contract with you — for example, to operate your Account, process bets, handle deposits and withdrawals, and verify your identity.
6.2 Legal obligation: Processing is required to comply with applicable legal or regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements and responsible gambling regulations.
6.3 Legitimate interests: Processing is necessary for our legitimate business interests — including fraud prevention, Platform security, improving the user experience and customer service — provided those interests are not overridden by your fundamental privacy rights.
6.4 Consent: Where we rely on your consent as a legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time by contacting us or using the unsubscribe mechanism in any marketing message.
7. How We Use Your Personal Data
We use the Personal Data we collect for the following purposes:
- Account management: Creating, maintaining and securing your Account on the Platform.
- Identity verification: Conducting KYC checks to confirm your identity, age and eligibility to use the Platform.
- Transaction processing: Processing deposits and withdrawals in PKR, verifying payment method ownership and maintaining financial records.
- Fraud and security: Detecting, investigating and preventing fraudulent activity, money laundering, account abuse and other security threats.
- Responsible gambling compliance: Recording self-exclusion orders, monitoring for problem gambling indicators and applying deposit, loss and time limits as set by you or required under responsible gambling obligations.
- Customer support: Responding to your enquiries, resolving disputes and improving support quality.
- Platform improvement: Analysing usage patterns to improve Platform performance, user experience and content relevance.
- Legal compliance: Meeting regulatory, anti-money laundering and other legal obligations applicable to the Operator.
- Communications: Sending transactional notifications (e.g. deposit confirmations, withdrawal updates) and, where you have consented, marketing communications about promotions and new features.
Marketing opt-out: If you no longer wish to receive marketing communications from 500pak, you may opt out at any time by contacting
[email protected] (plain text — not a clickable link) or by using the unsubscribe link in any marketing email. Opting out of marketing does not affect transactional or account-related communications.
8. Data Sharing & Disclosure
8.1 We do not sell your Personal Data. 500pak does not sell, rent or trade your Personal Data to any third party for commercial purposes under any circumstances.
8.2 Service providers (Data Processors): We share Personal Data with carefully selected third-party service providers who Process data on our behalf and strictly under our instructions. These include KYC and identity verification providers, payment processors, fraud detection services, IT infrastructure and hosting providers, and customer support platforms. All such processors are bound by appropriate data processing agreements.
8.3 Legal and regulatory requirements: We may disclose Personal Data to law enforcement agencies, courts, regulators or other government authorities where we are legally required or permitted to do so — for example, in response to a valid legal order, court subpoena or regulatory investigation.
8.4 Business transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the Operator's business, Personal Data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects your rights under this Policy.
8.5 Responsible gambling disclosures: Where required by applicable responsible gambling regulations, we may share self-exclusion data with affiliated operators or industry self-exclusion schemes to help enforce your exclusion across multiple platforms.
8.6 We do not share your Personal Data with payment providers (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) beyond what is strictly necessary to process the specific transaction you have initiated. No data is shared with these providers for marketing or profiling purposes.
9. Cookies & Tracking Technologies
9.1 The Platform uses cookies and similar technologies (collectively, "Cookies") to enable essential functionality, remember your preferences, maintain session security, analyse Platform usage and support fraud prevention.
9.2 Essential cookies are required for the Platform to function. They enable login sessions, security tokens and basic navigation. These cannot be disabled without significantly impairing Platform functionality.
9.3 Analytical cookies collect aggregated, anonymised data about how Users interact with the Platform — which pages are most visited, how long sessions last, and where users encounter errors. This data helps us improve the Platform experience over time.
9.4 Preference cookies remember settings you have selected — such as odds format preferences or responsible gambling limit configurations — so you do not need to re-enter them on each visit.
9.5 You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will impair core Platform functionality, including Account login and transaction processing.
9.6 We do not use cookies for cross-site tracking or to build advertising profiles on behalf of third parties.
10. Data Retention
10.1 We retain Personal Data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention requirements.
10.2 Active account data is retained for the duration of your Account relationship with 500pak.
10.3 Financial and transaction records are retained for a minimum of five (5) years following the relevant transaction, as required by anti-money laundering and financial record-keeping obligations. Depending on the applicable jurisdiction, this period may be extended.
10.4 KYC and identity verification documents are retained for a minimum of five (5) years after Account closure, or longer where required by applicable law.
10.5 Self-exclusion records are retained for the duration of the self-exclusion period plus a reasonable period thereafter to prevent re-registration in breach of the exclusion order.
10.6 Support communications are retained for a period of three (3) years from the date of the most recent communication in a particular thread, unless a longer period is required for legal or compliance purposes.
10.7 Upon expiry of the applicable retention period, Personal Data is deleted or anonymised in a manner that prevents re-identification.
11. Data Security
11.1 We implement and maintain appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, alteration, disclosure or destruction. These measures include, but are not limited to: encrypted data transmission (TLS/HTTPS), access control and authentication requirements for internal systems, and regular security assessments.
11.2 Where we engage third-party Data Processors, we require them to implement security measures at least equivalent to those we maintain internally.
11.3 Notwithstanding the measures above, no internet transmission or electronic storage system is entirely secure. We cannot absolutely guarantee the security of data transmitted to or from the Platform. Users are encouraged to use strong, unique passwords, enable two-factor authentication where available, and notify us immediately of any suspected unauthorised account access.
11.4 In the event of a Personal Data breach that is likely to result in a risk to your rights, we will notify affected users and, where required, relevant supervisory authorities, in accordance with applicable data protection obligations and within legally required timeframes.
Security reminder: 500pak will never ask you for your password via email, live chat or phone. If you receive such a request purporting to be from 500pak, treat it as fraudulent and report it to
[email protected] (plain text — not a clickable link).
12. International Data Transfers
12.1 The Platform is accessible globally, and Personal Data you provide may be transferred to, stored in or processed in countries outside Pakistan, including countries in which the Operator's hosting infrastructure, KYC providers or payment processors are located.
12.2 Where Personal Data is transferred internationally, we take steps to ensure that appropriate safeguards are in place — including contractual protections with receiving parties — to provide a level of protection substantially equivalent to the protections described in this Policy.
12.3 By using the Platform and providing your Personal Data, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan. If you have concerns about international data transfers, please contact us using the details in Section 17.
13. Your Rights as a Data Subject
Subject to applicable law, you have the following rights in relation to your Personal Data. To exercise any of these rights, contact us using the details in Section 17. We will respond within a reasonable timeframe and, where legally required, within a specified statutory deadline.
13.1 Right of access: You have the right to request confirmation of whether we hold Personal Data about you and, if so, a copy of that data, together with information about how it is used.
13.2 Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you.
13.3 Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for Processing applies. Please note that we may be required to retain certain data to comply with legal obligations (e.g. AML record-keeping requirements), even following an erasure request.
13.4 Right to restrict processing: You may request that we restrict Processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
13.5 Right to data portability: Where applicable, you may request that we provide your Personal Data in a structured, commonly used and machine-readable format, or that we transfer it directly to another controller where technically feasible.
13.6 Right to object: You may object to Processing of your Personal Data where we rely on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your rights.
13.7 Right to withdraw consent: Where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before the withdrawal.
How to exercise your rights: Submit your request by email to
[email protected] (plain text — not a clickable link). Please include your registered email address and a description of your request. We may ask you to verify your identity before processing the request.
14. Children & Minors
14.1 The Platform is strictly intended for adults. No individual under the age of 18 — or the higher minimum age required by the operator or the applicable licence jurisdiction, whichever is greater — is permitted to register an Account or use the Platform in any capacity.
14.2 We do not knowingly collect Personal Data from minors. If we become aware that we have inadvertently collected Personal Data from a person below the minimum eligible age, we will promptly delete that data, close the associated Account and take any other steps required to address the breach, including returning any deposited funds.
14.3 If you believe that a minor has registered an Account on the Platform, please contact us immediately at
[email protected] (plain text — not a clickable link). Parental controls and platform-level gambling-blocking software are available from various providers and may assist in preventing underage access.
🔞 18+ Only: The Platform is strictly for adults. Providing false information about your age during registration constitutes a breach of our Terms & Conditions and may constitute fraud under applicable law.
15. Third-Party Links
15.1 The Platform may contain references to third-party services, including payment providers, by name for contextual purposes. This Policy does not apply to any third-party platforms, websites or services. We are not responsible for the privacy practices of third parties and we encourage you to review the privacy policies of any service you use independently of the 500pak Platform.
15.2 Links to third-party services accessible from the Platform are provided for convenience only. Their inclusion does not constitute endorsement of those services or their data practices by 500pak.
16. Changes to This Privacy Policy
16.1 We reserve the right to update or amend this Policy at any time to reflect changes in our data practices, legal obligations or business operations. The effective date at the top of this Policy will be updated accordingly.
16.2 Where an amendment is material — that is, where it significantly changes how we Process your Personal Data or affects your rights — we will notify you via email to your registered address or by a prominent notice on the Platform prior to the change taking effect.
16.3 Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with any changes, you should cease using the Platform and may request Account closure in accordance with our
Terms & Conditions.
17. Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way in which 500pak handles your Personal Data, please contact our support team. We are committed to addressing your concerns promptly and transparently.
17.2 Support is conducted in English. Urdu-language assistance is available on request for players across all cities in Pakistan, including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
17.3 For general platform queries that are not data-related, you may also use the live chat feature available within the Platform. Live chat response times are generally faster than email for urgent matters.
This Privacy Policy is effective from 1 January 2026. If you accessed this page after this date, the version displayed is the current operative version. Prior versions are available upon written request to the support email above.