Privacy Policy

1. Introduction

o786 ("Platform", "we", "us", "our") is committed to protecting the personal data of every individual who accesses or uses the o786 website, mobile platform, betting services, live casino, promotions and all related features (collectively, the "Services"). This Privacy Policy ("Policy") describes in clear terms the data we collect, the lawful bases on which we process it, the purposes for which it is used, how long we retain it, and the rights available to you as a data subject.

This Policy applies to all users of the o786 platform, including visitors who browse without registering, registered account holders, and any individual who contacts our support team. It should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and the Platform.

Where this Policy refers to data protection law or regulation, it does so in general terms applicable to the jurisdiction in which o786 holds its operating licence. This Policy does not constitute legal advice and does not override any obligations you may have under Pakistani law or any other applicable domestic legislation.

2. Definitions

• "Controller" means o786, the entity that determines the purposes and means of processing your personal data.
• "Data Subject" means any identified or identifiable natural person whose personal data is processed by the Controller — in this context, you as a user of the Platform.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment information, device identifiers and IP addresses.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion or destruction.
• "Processor" means a third party that processes personal data on behalf of the Controller under a written data processing agreement.
• "Sensitive Data" means personal data that by its nature carries a higher risk of harm if disclosed — for example, financial account details, identity document numbers, or health-related information submitted in connection with responsible gambling self-exclusion requests.
• "Third Parties" means entities other than the Controller and the Data Subject, including payment processors, KYC verification providers, analytics services, customer support platforms and fraud detection providers.
• "User" / "you" means any individual accessing or using the o786 Services.

3. Data We Collect

o786 collects personal data across several categories depending on how you interact with the platform. The table below summarises the primary categories and examples of data within each:

We do not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data. Where health-related information is incidentally shared — for example, in the context of a responsible gambling self-exclusion request citing a gambling-related mental health concern — it is handled with the highest level of confidentiality and processed only for the purpose of delivering the requested responsible gambling support.

4. How Data Is Collected

4 .1 Directly from You

The majority of personal data we hold is provided directly by you in the course of your relationship with o786. This includes data entered at registration, information submitted during KYC verification, payment details entered in the cashier, and any correspondence you initiate with our support team by email or live chat.

4.2 Automatically

When you access the o786 platform — whether on desktop or mobile — certain technical and usage data is collected automatically through cookies, web beacons, server logs and similar technologies. This includes your IP address, browser type, referring URL, pages visited, session duration and device identifiers. This data is collected to maintain platform security, detect fraud, and improve the user experience.

4.3 From Third Parties

We may receive personal data about you from third-party sources including identity verification and KYC providers, fraud prevention agencies, payment processors, and analytics partners. Data received from third parties is handled in accordance with this Policy and is used only for the purposes described in Section 6.

5. Legal Basis for Processing

o786 processes personal data only where a lawful basis exists for doing so. The primary legal bases we rely on are:

• Contractual necessity: Processing required to perform our contractual obligations to you — including operating your account, settling bets, processing deposits and withdrawals, and delivering customer support.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, identity verification requirements under the operator's licence conditions, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for the legitimate interests of o786, including fraud prevention, platform security, responsible gambling monitoring, service improvement and internal analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, for certain marketing communications or the use of non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Purposes of Processing

Your personal data is used for the following specific purposes:

1. Account creation and management: To register your account, verify your identity, maintain your account settings and preferences, and communicate account-related updates.
2. Service delivery: To process bets across cricket, PSL, T20 internationals, football, UFC and other sports markets; to operate live casino, slot and table game sessions; and to manage your cashier including deposits and withdrawals in PKR and other available currencies.
3. KYC and age verification: To verify that you meet the minimum age requirement of 18+ (or the higher minimum required by the operator/licence jurisdiction) and to satisfy applicable identity verification requirements.
4. Payment processing: To facilitate secure transactions via available payment methods referenced in the cashier. Payment method names familiar in Pakistan — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear as cashier references; none of these names imply endorsement of gambling by those providers.
5. Fraud prevention and security: To detect, investigate and prevent fraudulent transactions, bonus abuse, money laundering, account takeover, and other prohibited activities outlined in our Terms & Conditions.
6. Responsible gambling: To monitor betting patterns that may indicate problem gambling behaviour, to enforce any limits or exclusions you have set, and to provide proactive responsible gambling interventions where appropriate.
7. Customer support: To respond to enquiries, resolve disputes, process complaints and maintain records of communications for quality and training purposes.
8. Legal compliance: To fulfil reporting, record-keeping and disclosure obligations under applicable law and the terms of the operator's licence.
9. Platform improvement: To analyse usage patterns, conduct A/B testing, and develop new features that improve the experience for players across Pakistan and other served markets.
10. Marketing communications: To send promotional offers, bonus notifications and platform updates where you have given consent or where a legitimate interest applies. You may opt out of marketing communications at any time via your account settings or by contacting support.

7. Data Sharing

7.1 Third-Party Processors

o786 engages carefully selected third-party processors to assist in delivering the Services. These may include KYC and identity verification providers, payment processing gateways, fraud detection and anti-money-laundering platforms, customer support software providers, cloud hosting and infrastructure services, and analytics platforms. All processors are bound by written data processing agreements and are permitted to use your data only for the specific purposes for which they have been engaged.

7.2 Regulatory and Law Enforcement Disclosure

o786 may disclose personal data to regulatory authorities, licensing bodies, law enforcement agencies or courts where required to do so by applicable law, by the conditions of the operator's licence, or by a valid legal order. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of the o786 business, personal data held about users may be transferred to the acquiring or successor entity as part of that transaction. Users will be notified of any such transfer and any material change to how their data is processed.

7.4 No Sale of Personal Data

o786 does not sell, rent or trade your personal data to any third party for their own independent marketing or commercial purposes. Data shared with processors is always subject to contractual restrictions that prohibit any secondary commercial use.

8. Data Retention

o786 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by applicable law or the operator's licence conditions.

• Account data is retained for the duration of your registered account and for a minimum period following closure as required by applicable AML, KYC and licensing regulations — typically five to seven years, subject to the specific legal requirements of the jurisdiction governing the operator's licence.
• Transactional data (bet records, payment history, cashier logs) is retained for the same minimum post-closure period to satisfy regulatory record-keeping requirements.
• Responsible gambling records — including self-exclusion history and limit settings — are retained to ensure compliance with exclusion commitments and to prevent re-registration during any active exclusion period.
• Support communications are retained for up to three years from the date of the last interaction, or longer if the communication relates to an unresolved dispute or ongoing investigation.
• Technical and usage data collected via logs and analytics is generally retained for 12 to 24 months in identifiable form, after which it may be aggregated and anonymised for statistical purposes.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

9. Data Security

o786 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. Security measures in place include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Monitoring systems designed to detect and respond to anomalous access patterns or potential data breaches;
• Staff training on data protection and information security obligations.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying us promptly if you suspect any unauthorised access to your account.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device by a website. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical data to site operators. o786 uses both first-party cookies (set directly by us) and third-party cookies (set by our analytics and support tool providers).

10.2 Types of Cookies We Use

• Essential cookies: Strictly necessary for the platform to function — for example, maintaining your logged-in session, remembering your currency preference (PKR or other), and enabling security features. These cannot be disabled without impairing core functionality.
• Analytics cookies: Used to understand how users interact with the platform — which pages are visited most, where users drop off, and how features are used. This data is aggregated and does not identify you personally.
• Functional cookies: Enable enhanced functionality such as remembering your preferred sports market, language settings and responsible gambling alert preferences.
• Marketing cookies: Used where you have consented to receive personalised promotional content. These track your engagement with promotional offers and help us tailor bonus messaging to your betting activity profile.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings or via the cookie preference centre on the platform. Disabling certain cookies may affect the functionality or performance of some platform features.

11. International Data Transfers

o786 is an internationally operated platform. Your personal data may be transferred to and processed in countries outside your country of residence, including countries where data protection laws may differ from those in your home jurisdiction. Where such transfers occur, o786 takes steps to ensure that appropriate safeguards are in place — including contractual clauses, adequacy decisions, or other recognised transfer mechanisms — to protect your data to a standard consistent with this Policy.

Players based in Pakistan should be aware that their data may be processed on servers located in countries other than Pakistan. By using the Services, you acknowledge and consent to this cross-border processing as described in this Policy.

12. Your Rights

Subject to applicable data protection law and the conditions of the operator's licence, you may have the following rights in relation to your personal data:

• Right of access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. For account data, you can update many details directly through your account settings.
• Right to erasure: The right to request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal and regulatory retention obligations.
• Right to restriction: The right to request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful but you prefer restriction over erasure.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, the right to receive your data in a structured, commonly used format and to transmit it to another controller.
• Right to object: The right to object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

13. Minors

The o786 platform is strictly for adults aged 18 or older — or the higher minimum age required by the operator's licence jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age. If we become aware that personal data has been submitted by an underage individual, we will take immediate steps to close the relevant account and delete the associated personal data.

If you are a parent or guardian and believe that a minor has registered on the platform or submitted personal data without your knowledge, please contact us immediately at [email protected] (plain text only — not a clickable link) so that we can investigate and act promptly.

14. Policy Changes

o786 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform features, data processing practices, or regulatory requirements. Where material changes are made, we will notify registered users by email or through a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Your continued use of the o786 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may close your account in accordance with our Terms & Conditions.

15. Contact Us

If you have any questions, concerns or complaints regarding this Privacy Policy or the way in which o786 handles your personal data, please reach out to our dedicated support team. We are available around the clock and can assist in English and Urdu.

For questions about responsible gambling tools and self-exclusion, visit our Responsible Gambling page. For the full contractual terms governing your account, please review our Terms & Conditions.