dua66 Privacy Policy — How We Protect Your Personal Data

1. Introduction

Welcome to the dua66 Privacy Policy. dua66 ("the Platform", "we", "us", "our") is committed to handling the personal information of our players with care, transparency and respect. This policy outlines what data we collect when you use our sports betting and casino platform, why we collect it, how it is stored and protected, and what your rights are in relation to your own personal information.

dua66 is designed and operated specifically for players in Pakistan. All transactions on the platform are processed in Pakistani Rupees (PKR) using local payment methods including JazzCash, Easypaisa, Raast and standard bank transfer. The personal data we collect is processed in the context of providing these services to you as a player.

This Privacy Policy should be read together with the Terms and Conditions and the Responsible Gaming guidelines, both of which form part of your agreement with the platform. If you have questions about anything in this policy, you can reach us at [email protected].

2. Data We Collect

dua66 collects personal data in several ways — directly from you during registration and use of the platform, automatically through your interaction with our systems, and in some cases from third-party payment processors during transaction verification.

2.1 Information You Provide Directly

• Full name and date of birth (required for age verification and account identity)
• Email address and mobile number (used for account access and communications)
• Residential address (required for identity verification)
• National identity card number or other government-issued identity document details (where verification is requested)
• Username and password (account access credentials)
• Payment method details such as your JazzCash or Easypaisa registered mobile number, bank account details, or card information where applicable
• Any information you provide voluntarily when contacting our support team

2.2 Information Collected Automatically

• Device information including device type, operating system, and browser type
• IP address and approximate geographic location derived from it
• Session data including login times, pages visited, features used, and time spent on the platform
• Betting and gaming activity — bets placed, games played, amounts wagered, and outcomes
• Deposit and withdrawal transaction records including amounts, methods, and timestamps
• Cookie and tracking data as described in Section 7 of this policy

3. How We Use Your Data

The personal data we collect is used only for legitimate purposes directly related to operating the dua66 platform and delivering a safe, functional experience to you as a player. We do not use your data for purposes unrelated to the platform without your explicit consent.

Specific purposes for which your data is used include:

• Account creation and management — setting up and maintaining your dua66 player account, verifying your identity, and managing your account settings and preferences.
• Processing transactions — handling PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, and card payments, and maintaining accurate transaction records.
• Platform delivery — providing access to sports betting markets (including cricket and PSL), casino games, live casino tables, bingo rooms, and all other platform features.
• Responsible gaming — monitoring betting and gaming patterns to identify signs of problem gambling and, where appropriate, reaching out with responsible gaming resources or applying account-level tools such as deposit limits or cooling-off periods.
• Fraud prevention and security — detecting and preventing fraudulent activity, multiple account abuse, bonus abuse, money laundering, and other prohibited conduct.
• Customer support — responding to your queries, resolving account issues, and maintaining records of your support interactions.
• Platform improvements — analysing aggregated usage data to understand how the platform is used and identify areas for improvement.
• Communications and promotions — sending you account-related notifications and, where you have opted in, information about bonuses and offers available on the platform.

4. Legal Basis for Processing

dua66 processes your personal data on the following legal grounds depending on the specific purpose:

• Contract performance — processing necessary to register your account, operate it, and deliver the services you have signed up to use, including processing deposits and withdrawals.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving platform performance, where these interests do not override your own rights.
• Legal obligation — processing required to comply with applicable laws, including identity verification requirements and the prevention of financial crime.
• Consent — where you have opted in to receive promotional communications, your consent forms the basis for sending those messages. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

5. Data Sharing

dua66 does not sell your personal data to any third party. We do not share your information with advertisers or unrelated businesses. Your data may be shared only in the following limited circumstances, and only to the extent necessary:

• Payment processors — to process your PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, bank transfer, or card. These processors receive only the data required to complete your transaction and are bound by their own data protection obligations.
• Identity verification providers — where additional verification is required to confirm your identity before processing large withdrawals or in response to suspicious activity, we may share relevant identity data with a trusted verification service provider.
• Technology service providers — third-party providers who support the operation of the platform, such as hosting, security, and analytics services. All such providers are required to handle data strictly in accordance with our instructions and confidentiality requirements.
• Legal and regulatory authorities — where we are required by law or by a lawful request from a competent authority to disclose personal data, we will comply with that obligation. We will notify you where legally permitted to do so.
• Business transfers — in the event of a merger, acquisition, or sale of platform assets, your data may be transferred to the successor entity, who would be bound by privacy obligations consistent with this policy.

In all cases, data shared with third parties is limited to what is strictly necessary for the specific purpose, and we take reasonable steps to ensure those parties handle your data responsibly.

6. Payment Data

All financial transactions on dua66 — including deposits and withdrawals in PKR — involve the handling of payment-related personal data. We treat payment data with a higher level of care given its sensitivity.

When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer, or a debit or credit card, the relevant payment details you provide are used solely for the purpose of completing that transaction and verifying that payment methods belong to you.

• Card numbers are not stored in full on dua66 systems. Where card details are processed, this is done through PCI-compliant payment infrastructure.
• Your JazzCash or Easypaisa registered mobile number is stored as part of your payment method record for the purpose of future withdrawals and payment verification.
• Bank account details provided for Raast or bank transfer withdrawals are stored against your account for verification and transaction matching purposes.
• Transaction records including amounts, timestamps, and payment methods are retained as part of your account history.

7. Cookies and Tracking

dua66 uses cookies and similar tracking technologies on our website and mobile application. Cookies are small data files stored on your device that help the platform function correctly and allow us to understand how you use the platform.

Types of Cookies We Use

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect your account. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, display options, and previously selected payment methods to make your experience more convenient.
• Analytics cookies — collect aggregated, anonymised data about how players navigate and use the platform. This helps us identify technical issues and improve the overall user experience.
• Fraud prevention and security cookies — used to detect unusual activity, identify devices associated with suspicious behaviour, and protect the integrity of the platform.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the platform, including your ability to log in and place bets. On your first visit you may be shown a cookie notice with options to accept or manage non-essential cookies.

8. Data Retention

dua66 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal or compliance obligations.

• Active accounts — personal data associated with your account is retained for as long as your account remains active and for a reasonable period after account closure to handle any outstanding transactions, disputes, or legal matters.
• Transaction records — financial transaction records including deposits and withdrawals in PKR are retained for a minimum period as required by financial record-keeping obligations.
• Identity verification documents — copies of identity documents submitted for verification are retained for the period required by applicable compliance requirements and then securely deleted.
• Support communications — records of your interactions with our support team are retained for the duration of your account and a defined period after closure to assist with any follow-up matters.
• Inactive accounts — where an account has been inactive for an extended period, we may contact you before taking action. Data associated with dormant accounts may be reviewed and reduced in line with our internal data minimisation practices.

When data is no longer required and the retention period has passed, it is securely deleted or anonymised so it can no longer be linked back to you as an individual.

9. Security Measures

Keeping your personal data secure is a core responsibility that dua66 takes seriously. We implement a range of technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit — all data exchanged between your device and the dua66 platform is transmitted over HTTPS with TLS encryption, ensuring it cannot be intercepted in transit.
• Encryption at rest — sensitive personal data and payment-related records stored on our servers are encrypted at rest.
• Access controls — access to personal data within the dua66 organisation is restricted on a need-to-know basis. Only staff with a legitimate operational reason can access player account data, and all such access is logged.
• Monitoring and intrusion detection — our infrastructure is monitored continuously for unusual activity, and security alerts are reviewed promptly.
• Password storage — account passwords are never stored in plain text. They are hashed using industry-standard cryptographic methods.

Despite these measures, no system is completely immune to security risks. If you believe your dua66 account has been compromised, change your password immediately and contact our support team. You also play an important role in keeping your account secure by using a strong unique password and not sharing your credentials with anyone.

10. Your Rights Over Your Data

As a dua66 player, you have rights over your personal data. We are committed to making it straightforward for you to exercise these rights. To submit any of the following requests, contact our support team at [email protected] with your account username and the nature of your request.

• Right to Access — You can request a copy of the personal data we hold about you. We will provide this in a clear format within a reasonable timeframe.
• Right to Rectification — If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure — You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to any legal retention obligations we must fulfil.
• Right to Restrict Processing — In certain circumstances, you may ask us to restrict how your data is processed while a concern or dispute is being resolved.
• Right to Data Portability — You can request a copy of the data you have provided to us in a structured, commonly used format where technically feasible.
• Right to Object — You may object to processing carried out on the basis of legitimate interests, including the use of your data for direct marketing communications.
• Withdraw Consent — Where processing is based on your consent (such as promotional emails), you may withdraw that consent at any time through your account settings or by contacting support.

We will respond to all data rights requests within a reasonable period. In some cases, we may need to verify your identity before processing a request to ensure your data is not disclosed to an unauthorised party.

11. Minors and Under-18 Protection

dua66 is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process requires users to confirm their date of birth, and we reserve the right to request identity verification to confirm age at any point.

If we become aware that an account has been registered by or on behalf of a person under 18, that account will be closed immediately and any associated data will be deleted in line with our data retention obligations. Any balance associated with an underage account will be handled in accordance with our Terms and Conditions.

If you believe a minor has registered on the platform, please contact our support team immediately at [email protected] so the matter can be investigated and resolved promptly. Parental controls and content filtering tools available through your internet service provider or mobile network can provide an additional layer of protection.

12. Updates to This Privacy Policy

dua66 may update this Privacy Policy from time to time to reflect changes in how we operate, changes to the platform's features, or to address new legal or regulatory requirements. The date shown at the top of this page indicates when the current version was last updated.

When we make material changes to the policy, we will take reasonable steps to notify you. This may be through a notice displayed prominently on the platform, an in-app notification, or an email to your registered address. We encourage you to review this policy periodically so you remain informed about how your data is being handled.

Your continued use of the dua66 platform after an updated Privacy Policy is published indicates your acceptance of the revised version. If you disagree with any changes, you should stop using the platform and may request account closure by contacting support.

13. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how your personal data is being handled, please get in touch with the dua66 support team:

When contacting us about a data-related matter, please include your registered username and a clear description of your request or concern so we can handle it efficiently. We aim to acknowledge all privacy-related requests promptly and resolve them within a reasonable timeframe.

For questions about your account, bonuses, or betting activity, visit the FAQ page. For responsible gaming tools including self-exclusion and deposit limits, visit the Responsible Gaming page.