1. Introduction
Welcome. This Privacy Policy explains how apk2room ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal information of players who register and use the apk2room platform at apk2room.app. It also explains your rights in relation to that data and how to contact us if you have questions or concerns.
apk2room is designed and operated for users in Pakistan. We understand that privacy matters — particularly when it comes to financial and personal account data. This policy has been written in plain, direct English rather than dense legal language because we believe every Pakistani player deserves to understand exactly how their information is being handled. If anything in this policy is unclear, please contact us before providing your data.
By creating an account on apk2room or using any of our services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not use apk2room.
Important: This Privacy Policy should be read alongside our Terms and Conditions. Together, these two documents govern your relationship with apk2room.
apk2room — protecting Pakistani players' data with full transparency
2. Data We Collect
apk2room collects only the personal data that is genuinely necessary to operate your account, process transactions, comply with legal obligations, and provide you with a safe and fair gaming experience. We do not collect data gratuitously. Below is a clear breakdown of the categories of personal data we hold:
2.1 Registration Data
When you create an apk2room account, we collect the information you provide during registration. This typically includes: your full legal name, date of birth, mobile number, and the password you set for your account. This information is required to create and identify your account, verify that you meet the minimum age requirement of 18, and communicate with you.
2.2 Identity Verification Data (KYC)
To comply with anti-money laundering obligations and to verify player identity, apk2room may request copies of identity documents. In Pakistan this typically means a copy of your CNIC (Computerised National Identity Card). We may also request proof of ownership of the payment method you use. This data is handled with strict security controls and used exclusively for identity verification purposes.
2.3 Financial and Transaction Data
When you deposit or withdraw funds, apk2room processes transaction data including: payment method details (mobile wallet number, bank account reference, or card details as applicable), transaction amounts in PKR, transaction timestamps, and transaction reference numbers. Full card numbers are never stored by apk2room — card payments are handled by PCI-DSS compliant third-party payment processors.
2.4 Gaming and Activity Data
apk2room records data about your gaming activity on the Platform. This includes: games played, bets placed and outcomes, session durations, account balance history, bonus activity, and any responsible gaming tools you have activated. This data is used to operate your account correctly, detect problem gambling patterns, and comply with our responsible gaming obligations.
2.5 Device and Technical Data
When you access apk2room, we automatically collect certain technical information from your device. This includes: your IP address, device type and operating system, browser type and version, mobile network operator, and approximate geographic location derived from your IP address. This data is used for security purposes, fraud detection, and to optimise the Platform's performance for your device and network.
2.6 Communications Data
If you contact our support team via live chat, WhatsApp, or email, we retain records of those communications. This helps us resolve disputes, improve our service, and maintain an audit trail of account-related interactions. You should avoid sharing passwords or sensitive financial credentials in communications — our team will never ask for your password.
apk2room does not collect or store sensitive personal data such as religious beliefs, political views, or biometric data unless this is specifically required for identity verification under applicable law.
3. How We Collect Your Data
Your personal data reaches apk2room through three main routes:
- Directly from you: Information you actively provide during registration, identity verification, deposits and withdrawals, and when you contact our support team.
- Automatically through your use of the Platform: Technical and activity data collected when you browse the website, log in to your account, play games, or place bets. This collection uses cookies, server logs, and session tracking technologies.
- From third-party service providers: Payment processors provide transaction confirmation and fraud signals. Identity verification services may confirm the validity of document data you submit. We do not purchase data lists or obtain personal data from data brokers.
4. Why We Use Your Data
apk2room processes your personal data for the following purposes. For each purpose, we rely on one of the following legal bases: fulfilment of the contract between you and apk2room; compliance with legal obligations; legitimate interests (where those interests do not override your privacy rights); or, where required, your explicit consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Create and manage your account | Registration data, device data | Contract fulfilment |
| Process deposits and withdrawals in PKR | Financial/transaction data | Contract fulfilment |
| Verify your identity (KYC / age verification) | KYC documents, registration data | Legal obligation |
| Prevent fraud and money laundering | Transaction data, device data, IP | Legal obligation + Legitimate interest |
| Provide responsible gaming tools and monitoring | Gaming/activity data | Legal obligation + Legitimate interest |
| Provide customer support | Communications data, account data | Contract fulfilment |
| Personalise your gaming experience | Activity data, device data | Legitimate interest |
| Send promotional communications (with consent) | Contact details, activity data | Consent |
| Improve Platform performance and security | Device data, session data | Legitimate interest |
| Comply with legal and regulatory requirements | All categories as required | Legal obligation |
apk2room — your data, always in safe hands
6. Data Storage & Security
apk2room takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:
- 256-bit SSL/TLS encryption on all data transmitted between your device and apk2room's servers — the same standard used by major banks
- Encrypted storage of sensitive data at rest, including identity documents and financial information
- PCI-DSS compliant handling of card payment data through our payment processor partners — full card numbers are never stored by apk2room directly
- Access controls — your personal data is accessible only to apk2room staff and systems with a legitimate operational need, governed by role-based access permissions
- Regular security audits and penetration testing to identify and address vulnerabilities before they can be exploited
- Two-factor authentication available for all player accounts and enforced for staff access to systems containing personal data
- Anomaly detection systems that flag unusual account activity, including login attempts from new locations or devices
Despite these measures, no internet transmission or electronic storage system can be guaranteed to be 100% secure. If you suspect your account has been compromised, change your password immediately and contact our support team to lock the account.
7. Data Retention
apk2room retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / dispute resolution |
| KYC / identity documents | Duration of account + 5 years after closure | Anti-money laundering legal requirement |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Gaming activity / bet history | Duration of account + 3 years after closure | Responsible gaming / dispute resolution |
| Customer support communications | 3 years from last contact | Dispute resolution / service quality |
| Device and technical logs | 12 months | Security and fraud detection |
| Marketing consent records | Until consent withdrawn + 3 years | Proof of consent |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised and aggregated statistical data (for example, overall platform usage statistics that contain no personally identifiable information) may be retained indefinitely for business analysis purposes.
apk2room — fair play and data privacy go hand in hand
8. Cookies & Tracking Technologies
apk2room uses cookies and similar tracking technologies to make the Platform work correctly, keep you logged in, and understand how players use the site so we can improve it. Here is a clear breakdown of the types of cookies we use:
You can control optional cookies through your browser settings. Please note that disabling essential cookies may prevent apk2room from functioning correctly — you may not be able to log in or maintain a session without them. Most modern mobile browsers allow you to manage cookie preferences in the Settings menu.
apk2room does not use third-party advertising cookies or cross-site tracking technologies that follow you around the web after you leave the Platform. Our cookie use is limited to what is necessary to operate and improve apk2room itself.
9. Your Privacy Rights
As an apk2room user, you have the following rights in relation to your personal data. These rights can be exercised by contacting us at support@apk2room.app. We aim to respond to all data rights requests within 30 days.
Right to Access
Request a copy of all personal data apk2room holds about you. We will provide this in a clear, readable format.
Right to Rectification
Request correction of any inaccurate personal data. If your name, mobile number, or other details have changed, contact support to update them.
Right to Erasure
Request deletion of your personal data in certain circumstances — for example, when we no longer have a legal basis to hold it. Note that some data must be retained for legal reasons even after account closure.
Right to Restrict Processing
Request that we limit how we use your data while a dispute or investigation is ongoing, rather than deleting it outright.
Right to Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service provider where technically feasible.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time. You can unsubscribe from promotional SMS or email messages via the link in any communication or by contacting support.
To exercise any of these rights, contact our support team at support@apk2room.app with the subject line "Privacy Rights Request" and describe what you would like us to do. We may need to verify your identity before processing the request to ensure we do not disclose personal data to the wrong person. This is for your protection.
10. Children's Privacy
apk2room is strictly for adults aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18. If you are under 18, you must not use apk2room or provide any personal information to us.
If apk2room discovers or has reason to believe that a registered account belongs to a person under 18, the account will be immediately suspended, all pending transactions will be reviewed, and any funds held will be subject to investigation before any action is taken. We may request identity documentation to confirm age at any point during the account lifecycle.
If you are a parent or guardian and believe your child has created an account on apk2room, please contact us immediately at support@apk2room.app. We will investigate and take appropriate action promptly.
11. Changes to This Policy
apk2room may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via the mobile number or contact details associated with their account, and the updated policy will be published on this page with a revised effective date.
The effective date displayed at the top of this page always shows when the current version came into force. Continued use of apk2room after the effective date of any changes constitutes acceptance of the updated policy. We encourage you to revisit this page periodically. If you have concerns about any changes, contact our support team before the changes take effect.
12. Contact Us About Privacy
If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy concern, please get in touch with the apk2room team. We take all privacy queries seriously and aim to respond within two business days for general enquiries and within 30 days for formal data rights requests.
- Email: support@apk2room.app (subject: Privacy Policy Query)
- Live Chat: Available 24/7 directly on the apk2room Platform
- Languages: English and Urdu support available
For data rights requests (access, deletion, correction), please include your registered mobile number and a brief description of your request. We will verify your identity before processing to protect your account security.