Last Updated: January 2025 256-bit SSL Encrypted No Data Sold to Third Parties

Drazplay Privacy Policy — How We Collect, Use and Protect Your Personal Data as a Pakistani Player

Your privacy matters to us. This policy explains in plain English exactly what data drazplay collects, why we collect it, who we share it with and what rights you have over your own information. No legal jargon designed to confuse — just a straight explanation of how we handle your data.

drazplay

Drazplay's Six Privacy Commitments to Pakistani Players

What we promise before you read a single clause of this policy

256-Bit SSL on Every Page

Every page on drazplay — from registration to the cashier to your betting history — is encrypted with 256-bit SSL. Your personal information, payment details and account credentials are never transmitted in plain text. The padlock in your browser confirms this protection is active at all times.

Data Stays Within Secure Infrastructure

Drazplay stores all member data on dedicated secured servers with restricted access. Only authorised personnel with a legitimate operational need can access member records. Server access is logged, monitored and audited. No employee can export member data in bulk — access is controlled at the individual record level.

We Never Sell Your Data

Drazplay does not sell, rent or trade your personal information to marketing companies, data brokers or any unrelated third parties under any circumstances. The data you share with us is used exclusively to operate your account, process transactions and comply with legal requirements. Nothing more.

You Control Your Data

Drazplay members have the right to access a copy of their personal data, request corrections to inaccurate records and request deletion where there is no legal obligation to retain the data. All data requests are handled within 30 days of submission via email to support@drazplay.ws.

Marketing Only With Your Consent

Drazplay only sends promotional communications to members who have opted in to receive them. You can unsubscribe from marketing emails and SMS notifications at any time through your account settings — opt-out requests are processed within 24 hours and do not affect your ability to use the platform.

Data Kept Only as Long as Needed

Drazplay retains your personal data only for as long as required to operate your account or meet our legal obligations. Account data is deleted or anonymised within 90 days of confirmed account closure, except where regulatory requirements mandate a longer retention period for financial transaction records.

What Data Drazplay Collects and Why

A straightforward summary before the detailed policy sections below

Data Type What We Collect Why We Collect It Legal Basis
Identity Data Full name, date of birth, CNIC/NICOP number KYCAge VerificationAML Legal obligation
Contact Data Mobile number, email address Account AccessSupportNotifications Contract performance
Financial Data JazzCash/Easypaisa account reference, bank account details, transaction history PaymentsFraud PreventionAML Legal obligation & contract
Usage Data Login times, pages visited, games played, bets placed, session duration Platform ImprovementResponsible GamingPersonalisation Legitimate interest
Device & Technical Data IP address, device type, browser type, operating system SecurityFraud DetectionTechnical Support Legitimate interest
Communication Data Support chat transcripts, email correspondence Dispute ResolutionQuality AssuranceTraining Legitimate interest
Marketing Preferences Opted-in/opted-out status for email, SMS MarketingPromotions Consent

01Who We Are and How This Policy Applies

Drazplay operates the online betting and gaming platform available at drazplay.ws. In the context of this Privacy Policy, drazplay acts as the data controller — meaning we determine the purposes and means of processing your personal data. This policy applies to all personal data collected from individuals who visit the drazplay website, register an account, place bets, play casino games, participate in promotions or interact with our customer support team.

By registering an account on drazplay you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with any part of this policy, you should not create an account or continue to use the drazplay platform.

"Personal data" in this policy means any information from which you can be identified, directly or indirectly — including your name, mobile number, email address, payment account reference, CNIC number, IP address and any combination of information that uniquely identifies you as an individual user of the drazplay platform.

This policy covers the drazplay.ws website only. If you follow a link from drazplay to an external website — such as a payment processor's own portal — that site's privacy policy applies there, not ours.

02Personal Data We Collect

Data You Provide Directly

The largest portion of data drazplay holds about you is information you provide directly when interacting with the platform. This includes:

  • Registration data: Your full legal name, date of birth, Pakistani mobile number, email address and the password you create for your account.
  • Identity verification data: A scan or photograph of your CNIC or NICOP document, provided during our KYC process before your first withdrawal is processed.
  • Payment data: The reference or account number associated with your JazzCash, Easypaisa, NayaPay or SadaPay wallet, or your bank account number for IBFT transfers. Drazplay does not store full card numbers — card transactions are tokenised through the payment processor.
  • Support communications: Any messages, emails or live chat transcripts exchanged between you and the drazplay support team.
  • Responsible gaming submissions: Details provided when setting deposit limits, requesting cooling-off periods or applying for self-exclusion.

Data Collected Automatically

When you use the drazplay platform, certain technical and usage data is collected automatically through our systems and analytics infrastructure:

  • IP address and approximate geographic location (city/region level) derived from IP
  • Device type, screen resolution, operating system and browser version
  • Pages viewed, time spent on each page and navigation path through the site
  • Games played, bets placed, stakes wagered and outcomes
  • Login and logout timestamps, session duration and frequency of visits
  • Error logs and technical diagnostics generated during platform use

Drazplay does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data or biometric data beyond the identity documents required for KYC. If you voluntarily provide such information in a support communication, it will be handled with heightened care and not used for any purpose beyond resolving your specific query.

drazplay

03How Drazplay Uses Your Personal Data

Drazplay uses your personal data only for specific, legitimate purposes. We do not use your data in ways that would not reasonably be expected given the nature of an online betting platform. The primary purposes for which we process your data are as follows:

Account Management and Service Delivery

Your name, mobile number, email and account credentials are used to create and maintain your drazplay account, authenticate your logins, process your bets and casino game sessions, and deliver the core service you signed up for. Without this data, it is not possible to provide you with a personalised, secure account on the platform.

Payment Processing and Financial Compliance

Drazplay processes your financial data to execute deposits and withdrawals via your chosen payment method, to maintain a complete and accurate transaction record and to comply with anti-money laundering (AML) obligations that apply to all licensed gaming platforms. Transaction records are maintained in a format that can be produced to regulatory authorities if required.

Identity Verification (KYC)

Identity document data collected during the KYC process is used solely to verify your identity, confirm your age and satisfy our legal obligation to prevent underage gambling and fraudulent account use. KYC documents are not used for any marketing or profiling purpose and access is strictly limited to compliance team members.

Platform Security and Fraud Prevention

Technical data including IP addresses, device identifiers and login patterns is analysed to detect suspicious activity, identify potential fraud and protect the integrity of the platform for all members. Where fraudulent activity is confirmed, the relevant data may be shared with payment processors and regulatory bodies as described in Section 4.

Responsible Gaming Monitoring

Drazplay's responsible gaming systems use your gameplay data — session duration, bet frequency, stake sizes and deposit patterns — to identify behaviour patterns that may indicate a problem with gambling. Where such patterns are identified, drazplay may contact you proactively with information about responsible gaming tools or, in serious cases, restrict account activity as required by our responsible gaming obligations.

Customer Support

Communication data from support interactions is retained to facilitate resolution of your query, maintain a record of any commitments made to you and provide training material for support staff improvement. Support communications are stored for a minimum of 24 months from the date of the interaction.

Platform Improvement and Analytics

Aggregated and anonymised usage data helps drazplay understand how the platform is used, which features perform well and where members encounter difficulties. This analysis is conducted on data that cannot identify you as an individual — we look at group trends, not individual member behaviour profiles.

04Who Drazplay Shares Your Data With

Drazplay only shares your personal data with third parties where there is a specific, legitimate reason to do so. We do not sell your data. The following categories of third parties may receive your data:

Payment Service Providers

Drazplay shares the minimum data necessary with JazzCash, Easypaisa, NayaPay, SadaPay and banking partners to process your deposits and withdrawals. These providers receive your payment account reference and transaction amount. They operate under their own privacy policies and are bound by their own regulatory frameworks as licensed financial service providers in Pakistan.

Identity Verification Providers

Your identity document data may be shared with a third-party KYC verification service to automate and expedite the identity checking process. These providers are contracted to use your data solely for identity verification on behalf of drazplay and are prohibited from using it for any other purpose.

Regulatory and Legal Authorities

Drazplay will share personal data with government authorities, gaming regulators or law enforcement agencies where required by law, where compelled by a valid court order or where we have a reasonable belief that sharing is necessary to prevent fraud, money laundering or other criminal activity. We do not share data with authorities proactively beyond our regulatory reporting obligations.

Technology and Infrastructure Partners

Drazplay uses third-party cloud infrastructure, database providers and analytics platforms to operate the platform. These providers access data only as data processors acting on drazplay's instructions and are contractually prohibited from using the data for their own purposes. All technology partners are subject to data processing agreements consistent with applicable data protection standards.

Drazplay does not share your data with any third-party marketing company, advertising network or data broker. If we ever consider doing so in the future, we will update this policy and seek explicit consent before doing so.

05Cookies and Tracking Technologies

Drazplay uses cookies and similar tracking technologies to operate the platform, remember your preferences and understand how members interact with the site. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies are not programmes and cannot carry viruses or malware.

You can control optional cookies through your browser settings. Disabling optional cookies will not prevent you from using the platform but may mean some personalisation features do not work correctly. Strictly necessary and security cookies cannot be disabled as the platform cannot function correctly without them.

drazplay

06How Drazplay Protects Your Data

Drazplay takes data security seriously. The platform is built on infrastructure designed with security as a foundational requirement, not an afterthought. The following security measures are applied across the drazplay platform at all times:

  • Transport encryption: All data transmitted between your device and drazplay servers is encrypted using TLS 1.3 with 256-bit AES encryption. The padlock icon in your browser confirms this is active.
  • Data at rest: Personal data stored on drazplay servers is encrypted at rest using industry-standard encryption. Raw database access requires multi-factor authentication.
  • Access controls: Staff access to personal data is restricted on a need-to-know basis. Support agents can view your account details but cannot export data in bulk or access payment card numbers. Administrative access is logged and audited.
  • Intrusion detection: Drazplay's infrastructure includes automated intrusion detection systems that monitor for unusual access patterns and alert the security team to potential threats in real time.
  • Regular security audits: The platform undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
  • Password protection: Account passwords are stored as hashed values using a modern one-way hashing algorithm — drazplay cannot read your password and neither can any employee.

Despite these measures, no internet-based service can guarantee complete security. If you become aware of any security concern affecting your drazplay account, contact us immediately at support@drazplay.ws or via live chat.

07How Long We Keep Your Data

Drazplay retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with our legal obligations or resolve disputes.

  • Active account data: Retained for the full duration of your account being open plus an additional period after closure as required by applicable regulations.
  • Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with anti-money laundering regulatory requirements applicable to licensed gaming platforms.
  • KYC identity documents: Retained for 5 years from account closure or from the date of last transaction, whichever is later.
  • Support communications: Retained for 24 months from the date of the last message in a given support thread.
  • Usage and analytics data: Aggregated usage data is retained indefinitely in anonymised form. Identifiable usage logs are retained for 12 months.
  • Marketing preference records: Retained for as long as your account is active so we can honour opt-out requests consistently.

When the retention period for a category of data expires, drazplay either deletes the data permanently or irreversibly anonymises it so it can no longer be associated with your identity.

08Your Rights Over Your Personal Data

As a drazplay member, you have the following rights over your personal data. To exercise any of these rights, contact us at support@drazplay.ws with the subject line "Data Rights Request" and we will respond within 30 days:

Right of Access

You have the right to request a copy of the personal data drazplay holds about you. We will provide this in a readable format within 30 days of your verified request, free of charge.

Right to Rectification

If any of the personal data drazplay holds about you is inaccurate or incomplete, you have the right to request a correction. Contact support with the details and we will update the record after verification.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to our legal obligations — transaction and KYC records must be retained for regulatory reasons even after account closure.

Right to Restrict Processing

Where you contest the accuracy of data or believe processing is unlawful, you may request that we restrict processing while the matter is resolved. During restriction, we hold your data but do not actively use it beyond minimum account maintenance.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider if you wish.

Right to Object

Where drazplay processes your data on the basis of legitimate interest — such as analytics or fraud prevention — you have the right to object. We will consider your objection and cease processing unless we have compelling legitimate grounds that override your interests.

09Children and Underage Users

Drazplay is strictly an adults-only platform. We do not knowingly collect or process personal data from individuals under the age of 18. The registration process requires users to confirm their age and includes a date of birth field. All accounts are subject to age verification before withdrawal processing, which involves checking identity documents confirming age.

If drazplay discovers that an account belongs to a person under 18, the account will be immediately closed, all deposits will be returned to the originating payment method and the data will be deleted from our systems. Parents and guardians who become aware that a minor has created a drazplay account should contact us immediately at support@drazplay.ws so we can act promptly.

10Marketing Communications

Drazplay will only send you promotional emails and SMS messages if you have explicitly opted in to receive them during registration or through your account settings. Marketing messages may include information about new promotions, deposit bonuses, tournament announcements, PSL betting specials and other platform offers.

You can withdraw your consent to receive marketing communications at any time by:

  • Updating your communication preferences in your drazplay account settings
  • Clicking the unsubscribe link in any marketing email you receive
  • Contacting support at support@drazplay.ws with the request to opt out

Opt-out requests for marketing are processed within 24 hours. Please note that even if you opt out of marketing messages, drazplay will still send you transactional communications relating to your account — such as deposit confirmation, withdrawal notification and security alerts. These are not marketing messages and cannot be disabled while your account is active.

11Changes to This Privacy Policy

Drazplay may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer or changes in applicable law. When we make material changes, we will notify registered members by email and display a prominent notice on the platform for at least 14 days before the updated policy takes effect.

Minor clarifications or updates that do not materially change how your data is used may be made without advance notice, with the "Last Updated" date at the top of this page reflecting when changes were made. We recommend reviewing this policy periodically. Continued use of drazplay after the effective date of any updated policy constitutes acceptance of the revised terms.

This Privacy Policy was last updated in January 2025.

12Contact Us and How to Make a Complaint

If you have any question about this Privacy Policy, want to exercise any of your data rights, or believe that drazplay has handled your personal data incorrectly, please contact us:

  • Email: support@drazplay.ws — use the subject line "Privacy Request" or "Privacy Complaint" so your message reaches the correct team.
  • Live Chat: Available 24 hours a day from inside your logged-in drazplay account. Agents can escalate your query to the data compliance team where needed.

Drazplay aims to acknowledge all privacy-related contacts within 48 hours and to resolve them within 30 calendar days. If you are not satisfied with how we have handled your complaint after giving us a reasonable opportunity to address it, you have the right to refer the matter to the relevant gaming regulatory body or data protection authority that has jurisdiction over the platform.

For faster resolution of privacy queries, please include your registered email address and a brief description of your concern when you contact us. This helps us locate your account and respond accurately without unnecessary back-and-forth.

Common Privacy Questions

Straight answers to what Pakistani drazplay members most frequently ask about their data

No — drazplay does not share personal data with any marketing company, advertising network or data broker, whether based in Pakistan or internationally. The only third parties that receive your data are payment processors (JazzCash, Easypaisa, etc.) for transaction processing, the KYC verification provider for identity checking, and cloud infrastructure providers that host our platform under strict data processing agreements. If you receive unsolicited marketing from a third party claiming to be associated with drazplay, please report it to us immediately.

You can close your drazplay account at any time and request deletion of your personal data. We will delete or anonymise data that we are not legally required to retain. However, financial transaction records and identity verification documents must be kept for a minimum of 5 years under anti-money laundering regulations that apply to licensed gaming platforms — this is a legal requirement we cannot override even at your request. Data that is retained for regulatory reasons is stored securely, not used for any operational purpose and deleted as soon as the retention period expires.

Drazplay is required by its gaming licence to verify the identity and age of all members before processing withdrawals. This is a standard requirement across all licensed gaming platforms globally — it prevents underage gambling, fraud and money laundering. Your CNIC data is used only for identity verification purposes, stored securely and never shared with third parties except the identity verification service processing the check on our behalf. It is not used for marketing, profiling or any purpose unrelated to compliance.

Log in to your drazplay account, go to Account Settings and find the Communication Preferences section. From there you can disable SMS marketing, email marketing or both independently. Changes take effect within 24 hours. Alternatively, contact support via live chat or email at support@drazplay.ws and ask to be opted out of marketing SMS — we will process this on your behalf within the same timeframe. Note that you will continue to receive account-related SMS such as withdrawal confirmations and login security alerts even after opting out of marketing, as these are necessary for account security.

Your Data Is Safe With Drazplay — Ready to Join?

Drazplay has been built from the ground up with Pakistani players in mind — including how we handle your personal data. Register today and experience a platform where your privacy, your money and your entertainment are all treated with equal care.

Questions about this policy? Email support@drazplay.ws — we respond within 48 hours.