16slot Privacy
Policy & Data Protection

This Privacy Policy ("Policy") describes how 16slot ("we", "us", "our") collects, uses, discloses, and safeguards the personal data of individuals ("you", "your", "player") who access, register with, or use the 16slot platform available at 16slot.app.

16slot operates an online casino and sports betting platform designed specifically for Pakistani players. We process personal data in connection with the provision of our gaming services, including account registration and management, transaction processing, customer support, and the delivery of promotional communications where you have consented to receive them.

This Policy applies to all personal data collected through the 16slot website, mobile site, any associated applications, and all communications between 16slot and its players including email and live chat. It should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

By registering a 16slot account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

For the purposes of applicable data protection legislation, 16slot acts as the data controller in respect of the personal data of all registered players and platform visitors. As data controller, 16slot is responsible for determining the purposes and means by which personal data is processed.

All data protection queries, requests to exercise your data subject rights, and privacy-related complaints should be directed to our Data Protection contact using the details set out in Section 16 of this Policy.

16slot collects the following categories of personal data in connection with the provision of our gaming platform:

16slot does not collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) unless voluntarily disclosed by a player in the context of a responsible gaming request or self-exclusion application, in which case such data is processed solely for the purpose of delivering the requested service.

16slot collects personal data through the following means:

• Direct interactions: Data you provide when registering your account, completing identity verification, making deposits or withdrawals, contacting our support team, or updating your account preferences.
• Automated technologies: Technical data collected automatically when you access our platform, including through cookies, server logs, and similar tracking technologies as described in Section 11.
• Third-party service providers: Data received from identity verification providers, payment processors (including JazzCash and EasyPaisa), and fraud prevention services in connection with the delivery of our platform services.
• Publicly available sources: Information that may be obtained from publicly accessible registers or databases for the purposes of fraud prevention, anti-money laundering compliance, or identity verification.

16slot processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your 16slot player account, including login authentication and profile management.
• Service delivery: Providing access to casino games, sports betting markets, live dealer products, and all other features of the 16slot platform.
• Transaction processing: Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported payment methods.
• Identity verification (KYC): Verifying your identity and age (21+) as required by our operational obligations and responsible gaming commitments.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, cheating, multi-accounting, and other prohibited conduct.
• Customer support: Responding to queries, resolving complaints, and providing technical assistance.
• Regulatory compliance: Meeting our legal and regulatory obligations including record-keeping requirements.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviours and delivering responsible gaming tools where appropriate.
• Marketing and promotions: Sending you information about bonuses, promotions, and platform updates — but only where you have expressly consented to receive such communications.
• Platform improvement: Analysing aggregate usage data to improve the performance, features, and user experience of the 16slot platform.

16slot relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the Terms and Conditions, including managing your account and processing transactions.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations and age verification requirements.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, and service improvement — where such interests are not overridden by your data protection rights.
• Consent: Processing of your data for direct marketing purposes, where you have provided clear, specific, and freely given consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

16slot does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment processors: We share financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers solely for the purpose of processing your transactions.
• Identity verification providers: We engage KYC and identity verification service providers who process your identity documents on our behalf for the purposes of age and identity verification.
• Fraud prevention services: We may share data with anti-fraud and anti-money laundering service providers where necessary to protect the integrity of our platform.
• IT and platform service providers: We share data with cloud hosting, security, and technical support providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: We may disclose personal data to regulators, law enforcement agencies, or courts where required by law or in connection with legal proceedings.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, player data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third parties with whom 16slot shares personal data are contractually required to process such data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection obligations.

16slot may transfer your personal data to countries outside Pakistan in connection with the operation of our platform, including for the purposes of cloud hosting, payment processing, and customer support infrastructure.

Where personal data is transferred internationally, 16slot takes appropriate steps to ensure that such transfers are carried out in accordance with applicable data protection standards. This includes implementing contractual safeguards such as standard data protection clauses with international data processors.

By using the 16slot platform, you acknowledge that your data may be processed in jurisdictions that may have different data protection frameworks to those applicable in Pakistan. However, 16slot ensures that all international data transfers are subject to protections that maintain the substance of the rights described in this Policy.

16slot retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active account data: Retained for the duration of your active relationship with 16slot.
• Transaction and gaming records: Retained for a minimum period of five (5) years following the closure of your account, as required for regulatory compliance purposes.
• Identity verification documents: Retained for a minimum period of five (5) years following account closure.
• Support communications: Retained for a minimum period of two (2) years following the resolution of the relevant interaction.
• Marketing preference records: Retained for the duration of your active account and for one (1) year following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data is anonymised, the resulting data set is no longer personal data and may be retained and used for analytical purposes without time limitation.

16slot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• Transport Layer Security (TLS 1.3): All data in transit between your device and 16slot's servers is encrypted using TLS 1.3 protocols.
• AES-256 Encryption: Sensitive data stored on 16slot's systems is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within 16slot is restricted on a strict need-to-know basis. All staff members with access to personal data receive data protection training.
• Two-factor authentication (2FA): 16slot supports 2FA for player account access to provide an additional layer of security beyond username and password.
• Regular security audits: 16slot's platform and data processing infrastructure undergo regular security assessments and penetration testing.
• Incident response: 16slot maintains a data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.

16slot uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you access our site. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Performance and analytics cookies: Used to collect aggregate information about how players use the platform, helping us identify areas for improvement. This data is anonymised and does not identify individual players.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby display preferences, to provide a more personalised experience.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These are only placed where you have provided consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 16slot platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

As a 16slot player, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us using the details in Section 16: