Betfa Privacy Policy — Transparent, Secure, Yours

1. Scope & Data Controller

This Privacy Policy covers the collection and use of personal data by betfa — the online gaming platform operating at betfa-jit.com. Betfa acts as the data controller for all personal information collected from registered players and platform visitors in Pakistan.

This policy applies to data collected through:

• The betfa website and mobile web platform;
• Account registration and identity verification processes;
• Deposit and withdrawal transactions;
• Live chat, email and any other communication with betfa support;
• Promotional campaigns and referral programmes.

This policy should be read alongside betfa's Terms and Conditions and Responsible Gaming page, both of which reference data practices that are governed by this policy.

2. Personal Data We Collect

Betfa collects personal data in several ways — some you provide directly when registering or playing, and some is generated automatically by your use of the platform. Here's a full breakdown:

3. Why We Use Your Data

Betfa uses your personal data for specific, legitimate purposes only. We don't collect data speculatively or hold information "just in case." Here's exactly what each category of data is used for:

• Account management: Your identity and contact details are used to create and maintain your betfa account, communicate important account updates and verify your identity when required.
• Payment processing: Transaction data is used to process PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card payments — and to investigate payment disputes.
• Game delivery: Gaming activity data is used to deliver games, calculate results, credit winnings and track bonus progress accurately.
• Responsible gaming: Betfa uses gaming activity patterns to identify players who may be showing signs of problematic behaviour and to enforce deposit limits, session time reminders and self-exclusion elections made by the player.
• Fraud prevention and security: Technical and identity data helps betfa detect and prevent fraudulent account activity, multi-accounting, unauthorised access and money laundering.
• Regulatory compliance: Betfa is required to maintain certain records for anti-money laundering (AML) and know-your-customer (KYC) compliance. This data is retained for the legally required period.
• Customer support: Communication data is used to resolve queries, handle complaints and improve betfa's support quality.
• Marketing (with consent): Where you have opted in, betfa uses your contact details to send promotional offers and platform news. You can opt out at any time.
• Platform improvement: Anonymised, aggregated technical data is used to analyse platform performance and improve the betfa user experience.

4. Legal Basis for Processing

Betfa processes your personal data on the following legal grounds, depending on the purpose:

• Contract performance: Processing your registration data, payment data and gaming data is necessary to deliver the betfa service you signed up for. Without this processing, betfa cannot provide its platform to you.
• Legal obligation: KYC verification, AML record-keeping and fraud reporting are required by applicable regulations. Betfa processes data for these purposes to comply with its legal obligations.
• Legitimate interests: Fraud detection, platform security and anonymous performance analytics are conducted on the basis of betfa's legitimate interest in operating a secure and reliable platform — balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only where you have given explicit, freely withdrawable consent.

5. Who We Share Your Data With

Betfa does not sell your personal data. We share data only where strictly necessary, with the following categories of recipients:

5.1 Payment Processors

When you make a deposit or withdrawal, betfa shares the minimum transaction data required with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer partners or card processing networks. These providers are contractually bound to process your data only for the purpose of completing the transaction.

5.2 Identity Verification Services

For KYC checks, betfa may share identity document images with a certified third-party verification service. These providers operate under strict data processing agreements and do not retain your documents beyond the verification period.

5.3 Fraud Prevention Partners

Betfa may share anonymised technical signals (IP addresses, device fingerprints) with fraud detection services to protect the platform and all of its players from fraudulent activity. Individual personal details are not passed to these services.

5.4 Regulatory & Legal Authorities

Betfa will disclose personal data to law enforcement, financial intelligence authorities or regulators where required by applicable law or a valid legal order. Betfa will only disclose what is legally required and will, where legally permitted, notify affected players.

5.5 No Third-Party Marketing

Betfa never shares your personal data with advertisers, data brokers or third-party marketers. The only marketing communications you receive from betfa are sent by betfa itself, about betfa services, and only where you have opted in.

6. Payment Data & Mobile Wallets

Given how central Easypaisa, JazzCash and other mobile wallets are to how Pakistani players use betfa, it's worth being specific about how payment data is handled.

When you initiate a deposit via Easypaisa or JazzCash, you are redirected to that provider's own secure payment interface to authorise the transaction. Betfa receives a transaction confirmation and reference number — it never receives your mobile wallet PIN, OTP or full account credentials.

For IBFT bank transfers, betfa receives your bank transfer reference and the sender account information as transmitted by your bank. Card payments are processed through a PCI DSS-compliant payment gateway. Betfa does not store full card numbers at any point — only masked card details (e.g., last four digits) are retained for reference purposes in your account transaction history.

All payment transaction records are retained for the minimum period required by applicable financial regulations, after which they are securely deleted.

7. How Long We Keep Your Data

Betfa does not hold your personal data indefinitely. Retention periods are set based on the purpose for which data was collected and any applicable legal requirements:

• Active account data: Retained for the duration of your betfa account plus five years after closure, as required for AML compliance purposes.
• Transaction records: Financial transaction history is retained for a minimum of five years from the date of the transaction.
• KYC documents: Identity verification documents are retained for five years from account closure or from the date of the last transaction, whichever is later.
• Support communications: Live chat and email support records are retained for two years from the date of the communication.
• Technical/log data: Platform access logs are retained for 12 months for security monitoring, then securely deleted.
• Marketing consent records: Records of your marketing opt-in or opt-out are retained for as long as your betfa account is active.

When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be linked to you as an individual.

8. How We Protect Your Data

Betfa takes data security seriously — not just because it is required, but because Pakistani players trust betfa with information that genuinely matters. Here's what's in place:

• 256-bit SSL encryption on all data transmitted between your device and betfa's servers — the same standard used by major Pakistani financial institutions.
• At-rest encryption for stored personal data, including identity documents and payment records.
• Role-based access controls — betfa employees can only access personal data to the extent required for their specific job function. Support agents cannot access payment credentials; finance staff cannot access support transcripts.
• Two-factor authentication for all internal administrative systems that contain player data.
• Regular security audits and penetration testing by independent third parties.
• Incident response plan — in the unlikely event of a data breach affecting Pakistani players, betfa will notify affected users promptly and take all necessary steps to contain the incident.

9. Cookies & Tracking

Betfa uses cookies — small data files stored on your device — to make the platform function correctly and to understand how players use it. Here's exactly what's in use:

Most device browsers allow you to block or delete cookies through their settings. Blocking essential cookies will prevent betfa from functioning correctly. Performance, preference and marketing cookies can be blocked without affecting your ability to use the platform.

10. Your Privacy Rights

As a betfa player in Pakistan, you have the following rights over your personal data. You can exercise any of these rights by contacting betfa support via live chat or email:

Betfa will respond to all data rights requests within 30 calendar days. In complex cases we may extend this by a further 60 days — if that's necessary, we will inform you within the initial 30 days and explain why.

11. Minors & Under-18 Protection

Betfa is strictly an adult platform — registration and use is permitted only for individuals aged 18 and above. Betfa does not knowingly collect personal data from anyone under 18 years of age.

If betfa identifies or has reason to believe that an account belongs to a person under 18, the account will be suspended immediately, any balance returned to the registered payment method and the data associated with the underage account handled in accordance with the protections applicable to minors.

If you are a parent or guardian and believe your child has created a betfa account, please contact support immediately at support@betfa-jit.com so the account can be closed and the matter resolved as quickly as possible.

12. Changes to This Privacy Policy

Betfa may update this Privacy Policy from time to time to reflect changes in how the platform operates, changes in applicable regulations or improvements in our privacy practices. When we make material changes, we will:

• Update the "Last updated" date at the top of this page;
• Display a notice on the betfa platform at your next login;
• Send a notification to your registered mobile number for significant changes that affect your rights.

We encourage you to review this Privacy Policy periodically. Continued use of betfa after a policy update takes effect constitutes acceptance of the revised policy. If you do not accept material changes, you have the right to close your betfa account before those changes take effect.

13. Contact & Data Queries

For any privacy-related questions, data rights requests or concerns about how betfa handles your personal information, please get in touch through any of the following channels:

When making a data rights request, please include your full name and the mobile number registered to your betfa account so we can locate your data quickly and respond to the correct person.