Note: This Privacy Policy forms part of your agreement with Coinback and should be read alongside the Terms and Conditions. By registering an account you confirm that you have read and understood how we handle your personal information.
Coinback is an online gaming and sports betting platform operated at coinback.bet. The platform is built specifically for Pakistani players and handles all transactions in Pakistani Rupees (PKR). When this Privacy Policy refers to "Coinback", "we", "us" or "our", it refers to the operator of the coinback.bet platform.
For the purposes of data protection, Coinback acts as the data controller in respect of the personal information you provide when registering and using the platform. This means we are responsible for determining how and why your personal data is processed, and we are accountable for keeping it secure.
If you have any questions about this Privacy Policy or about how your personal data is handled, you can contact our privacy team directly at support@coinback.bet. We will respond to all genuine privacy enquiries within five business days.
Coinback collects personal information through several channels: directly from you when you register or use the platform, automatically through your device and browser when you access the site, and from third-party verification services when we carry out identity checks.
The categories of personal data we collect include the following:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, selfie or photo ID | Registration and KYC verification |
| Contact Data | Mobile number, email address | Registration |
| Financial Data | Easypaisa / JazzCash account number, bank IBAN, partial card details | First deposit and withdrawal requests |
| Transaction Data | Deposit and withdrawal history, bet history, winnings, bonuses claimed | Ongoing platform use |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Automatically on platform access |
| Behavioural Data | Games played, time spent, pages visited, features used | Automatically during active sessions |
| Communications Data | Support chat transcripts, emails sent to us, survey responses | When you contact Coinback |
Every piece of personal data that Coinback collects is collected for a specific, legitimate reason. We do not collect data speculatively or hold information that has no practical purpose in the running of the platform. The primary legal bases on which we process your data are as follows:
- Contractual necessity: Processing needed to deliver the services you have signed up for – running your account, processing deposits and withdrawals, settling bets, and providing customer support.
- Legal obligation: Processing required by applicable law, including anti-money laundering (AML) checks, know-your-customer (KYC) identity verification, and financial record-keeping requirements.
- Legitimate interests: Processing that serves Coinback's genuine operational interests where these are not overridden by your rights – including fraud detection, platform security monitoring, improving game performance, and analysing user experience data.
- Consent: Processing that you have specifically agreed to, primarily in relation to marketing communications. You may withdraw this consent at any time.
If you would like to know the specific legal basis on which any particular processing activity is carried out, contact support@coinback.bet and we will explain it clearly.
Coinback uses the personal data it collects for the following specific purposes:
- Account management: Creating and maintaining your Coinback account, processing login requests, and managing your preferences and settings.
- Payment processing: Verifying your payment methods, processing PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and Visa/Mastercard, and maintaining accurate transaction records.
- Identity verification: Conducting KYC checks as required by our compliance obligations, including verifying your age (18+) and confirming your identity before processing significant withdrawals.
- Fraud prevention and security: Monitoring account activity for signs of fraud, collusion, multi-accounting, money laundering, or other prohibited conduct as defined in our Terms and Conditions.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with different games and features so that we can improve the platform experience.
- Responsible gaming: Using your transaction and session data to identify patterns that may indicate problematic gaming behaviour, and to administer self-exclusion or deposit limit requests you have made.
- Customer support: Using your account and transaction history to efficiently resolve queries and complaints raised through our support channels.
- Marketing communications: Sending promotional information about new games, bonuses, and offers – but only where you have consented to receive such communications, and only via the channels you have agreed to.
Coinback does not sell your personal data to any third party. Full stop. We do, however, share limited personal information with specific trusted third parties where this is necessary to provide the platform's services or to meet our legal obligations. Those third parties are:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the financial data necessary to process your transactions. These processors operate under their own privacy obligations and are subject to contractual data protection agreements with Coinback.
- Identity verification providers: Third-party KYC services that verify CNIC documents and conduct age verification checks. These providers process identity data under strict data processing agreements and are not permitted to use your data for any purpose beyond the verification service they are providing to Coinback.
- Game providers: Third-party game studios and live casino providers whose games are integrated into the Coinback platform may receive anonymised session data to deliver their games. They do not receive your identity or financial data.
- Legal and regulatory authorities: Pakistani regulatory authorities, law enforcement agencies, and courts where we are legally required to disclose information – for example in connection with an anti-money laundering investigation or a court order.
- Technology service providers: Cloud hosting, security monitoring, and analytics services that support the operation of the Coinback platform. All such providers are bound by contractual obligations to protect your data and process it only on our instructions.
Coinback takes the security of financial data particularly seriously given that the platform handles real PKR transactions via some of Pakistan's most widely used payment methods. Here is exactly how payment data is protected:
- All data transmitted between your device and Coinback's servers is encrypted using 256-bit SSL (TLS 1.3) encryption. This applies to every page of the platform, not just payment screens.
- Full payment card numbers and CVV codes are never stored by Coinback. Card payments are processed via PCI-DSS Level 1 certified payment processors. We receive only a tokenised reference that cannot be used to make new transactions without your authorisation.
- Easypaisa and JazzCash wallet numbers associated with your account are stored in encrypted form. Access to this data within Coinback is restricted to authorised payment processing staff and is subject to audit logging.
- Withdrawals are only processed to payment methods that have been previously verified as belonging to you. This prevents any third party from redirecting your winnings to a different account, even if they were to gain access to your Coinback login.
- Coinback's internal systems are subject to regular security testing. Anomalous access patterns trigger automated alerts and are reviewed by our security team.
Despite these measures, no digital system is completely immune to security risks. In the unlikely event of a data breach that affects your personal or financial information, Coinback will notify affected players within 72 hours of becoming aware of the breach and will provide clear guidance on protective steps to take.
Coinback uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. A cookie is a small text file placed on your device when you visit a website. The cookies Coinback uses fall into the following categories:
You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging in and using the platform. Coinback does not use cookies for advertising targeting or third-party profiling.
Coinback retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are determined primarily by legal obligations – particularly AML and KYC regulations which typically require financial transaction records to be kept for a minimum of five years after account closure.
The general retention schedule Coinback follows is:
- Account and identity data: Retained for the duration of your account plus 5 years after closure to meet regulatory requirements.
- Transaction and betting records: Retained for 5 years from the date of each transaction.
- Customer support communications: Retained for 2 years from the date of the interaction, or longer where a complaint is ongoing.
- Technical and session logs: Retained for 12 months for security monitoring purposes, then deleted.
- Marketing consent records: Retained for as long as your consent is active plus 2 years following withdrawal of consent.
When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be attributed to any individual. If you request deletion of your data before the end of the applicable retention period, we will explain which data must be retained for legal reasons and delete everything that can lawfully be removed.
As a Coinback player, you have a number of rights in relation to the personal data we hold about you. These are genuine rights that you can exercise at any time by contacting support@coinback.bet. Here is what each one means in practice:
You can request a copy of all personal data Coinback holds about you. We will provide this in a readable format within 30 days of your request.
If any data we hold about you is inaccurate or incomplete, you can ask us to correct it. We will act on correction requests within 5 business days.
You can ask us to delete your personal data. We will honour this request except where retention is required by law (for example AML record-keeping requirements).
You can object to processing based on legitimate interests, including profiling for personalised game recommendations or responsible gaming monitoring.
Where processing is disputed, you can ask us to pause processing while the dispute is resolved without deleting your data.
You can request your personal data in a structured, machine-readable format to transfer to another service where this is technically feasible.
To exercise any of these rights, email support@coinback.bet with the subject line "Data Rights Request". We do not charge any fee for handling data rights requests. We may ask you to verify your identity before processing the request to ensure we release data only to the account holder.
Coinback does not knowingly collect personal data from individuals under the age of 18. The platform is designed exclusively for adult players and registration includes an age declaration that all users must confirm before creating an account.
If we become aware that an account has been registered by or on behalf of a person under the age of 18, we will immediately close that account, forfeit all associated funds in accordance with our Terms and Conditions, and delete the personal data associated with the account from our systems within 30 days.
If you believe that a minor has registered on Coinback, please notify us immediately at support@coinback.bet. We take such reports seriously and will investigate and act promptly.
Coinback's primary server infrastructure is located in the region to serve Pakistani players. Some of the third-party service providers we use – particularly game studios and certain security monitoring tools – may process data on servers located outside Pakistan.
Where personal data is transferred outside of Pakistan, Coinback ensures that appropriate safeguards are in place including:
- Contractual data processing agreements that impose obligations equivalent to those we adhere to within Pakistan.
- Transfer only to jurisdictions or providers that maintain data protection standards compatible with Pakistani player rights.
- Minimisation of data transferred internationally – only the data strictly necessary for the third party to perform its service is shared.
If you would like details about the specific safeguards in place for any international data transfer affecting your personal data, please contact us at support@coinback.bet.
Coinback may update this Privacy Policy from time to time to reflect changes in the platform's features, changes in applicable law, or improvements to how we communicate about our data practices. The "Last Updated" date at the top of this page reflects when the most recent changes were made.
When material changes are made – changes that affect your rights or how your data is used in a meaningful way – we will notify registered players via email or via an on-platform notification before the changes take effect.
Minor updates such as formatting changes, corrections to typos, or clarifications that do not alter the substance of the policy may be made without prior notice. We recommend bookmarking this page and reviewing it periodically if data privacy is important to you.
If you have any question about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how Coinback has handled your personal information, here is how to reach us:
- Email: support@coinback.bet (subject: "Privacy Enquiry" or "Data Rights Request")
- Live Chat: Available within the Coinback platform once you are logged in to your account
- FAQ: Visit /faq for answers to common questions about accounts and privacy
We will acknowledge all privacy-related enquiries within 2 business days and aim to provide a substantive response within 10 business days. For formal data rights requests, we are required to respond within 30 days of receiving a verified request.
If you are not satisfied with how Coinback has handled a privacy complaint, you have the right to raise the matter with the relevant data protection authority in Pakistan.