Privacy Policy – How sbhet Handles Your Data

1. Introduction

This Privacy Policy applies to all players who register, log in or otherwise use the sbhet platform at sbhet.app and through the sbhet Android app. sbhet is an online gaming and entertainment platform built for players in Pakistan, and this policy has been written with Pakistani players in mind.

When you create an account on sbhet, make a deposit in PKR, play Slot Games, Fish Games or Live Casino titles, or contact the sbhet support team, you share certain information with us. This policy tells you what that information is, why we need it, what we do with it and how long we keep it. It also tells you what you can ask us to do with your data and how to make those requests.

By registering an account on sbhet, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your data as described here. This Privacy Policy should be read alongside the sbhet Terms and Conditions, which govern the overall use of the platform.

sbhet may update this policy from time to time. The date at the top of this page will reflect any changes. If changes are material, registered players will be notified through the platform or app. Continued use of sbhet after an update constitutes acceptance of the revised policy.

2. Data We Collect

sbhet collects different categories of personal data depending on how you interact with the platform. The main categories are outlined below.

2.1 Account Registration Data

When you create a sbhet account, we collect the information you provide during registration. This typically includes your full name, date of birth, email address, mobile number, and the payment method details you register for deposits and withdrawals. This data is required to create and maintain your account.

2.2 Identity Verification Data

Before your first withdrawal can be processed, sbhet requires identity verification. This involves the submission of a valid government-issued identity document — typically your CNIC (Computerised National Identity Card) or passport. We may also collect a selfie or other confirmation image as part of the verification process. This data is used solely to verify that you are who you say you are and that you meet the 18+ age requirement.

2.3 Transaction Data

sbhet records all financial transactions associated with your account, including deposits, withdrawals, game wagers, bonus activations and balance adjustments. This includes the PKR amounts involved, the payment method used (JazzCash, Easypaisa, Raast, bank transfer, card or mobile wallet), and the timestamps of each transaction.

2.4 Gameplay Data

We record data about your in-platform activity — which games you played, session durations, bet sizes, game outcomes and win/loss records. This data is used to operate the platform, resolve disputes, detect unusual patterns that may indicate fraudulent activity, and improve the overall game offering for Pakistani players.

2.5 Technical & Device Data

When you access sbhet, our systems automatically collect certain technical information including your IP address, device type, operating system, browser version (or app version), preferred language setting, and general geographic location derived from your IP. This data helps us optimise platform performance and detect security risks.

3. How We Collect Your Data

sbhet collects data through the following means:

• Directly from you: When you fill in the registration form, submit identity documents, make deposits or withdrawals, use the cashier, update your account settings, or contact sbhet support.
• Automatically through platform use: When you browse sbhet.app or use the sbhet app, our systems automatically log technical data such as your IP address, device information and session activity through cookies and similar technologies.
• From payment processors: When you complete a PKR deposit or withdrawal via JazzCash, Easypaisa, Raast, bank transfer or card, the relevant payment provider shares transaction confirmation data with sbhet to confirm the transaction and update your account balance.
• From identity verification services: If sbhet uses a third-party identity verification provider to assist in CNIC or document checks, that provider may share the outcome of the check with us. sbhet does not receive raw identity document sc ans from such providers — only a pass/fail verification result and the name and date of birth confirmed.
• From game providers: Third-party game studios that supply the Slot Games, Fish Games and Live Casino titles on sbhet share session and outcome data with sbhet in order to settle game results and maintain accurate account balances.

4. How We Use Your Data

sbhet uses the personal data it collects for specific, defined purposes only. We do not process your data in ways that go beyond what is described in this policy. The primary purposes for which we use your data are:

sbhet does not use your personal data to build advertising profiles or share it with external marketing companies. When we send you promotional messages about sbhet offers — such as Cricket season bonuses or PSL promotions — these are sent by sbhet directly using your registered email or mobile number. You may opt out of promotional communications at any time through your account settings or by contacting support.

5. Sharing Your Data

sbhet does not sell, rent or trade your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Payment Processors

To process your PKR deposits and withdrawals, sbhet must share relevant transaction data with the payment provider you have selected — whether that is JazzCash, Easypaisa, Raast, a bank, or a card network. The data shared is limited to what is required to complete the specific transaction. Each payment provider operates under its own privacy terms.

5.2 Game Providers

Third-party game studios that power the sbhet game library receive session identifiers and wager data in order to deliver game results and return outcomes to the platform. Game providers do not receive your full identity or payment details — only the anonymised session data required to run game rounds.

5.3 Identity Verification Services

Where sbhet uses a third-party service to assist with document verification, the minimum necessary data is shared with that provider to complete the check. sbhet selects verification partners that operate under appropriate data protection standards.

5.4 Legal and Regulatory Requirements

sbhet may be required to disclose player data to law enforcement agencies, financial intelligence units, or other authorities where required to do so by applicable law, a court order, or in response to a lawful investigation. sbhet will disclose only what is legally required and will not volunteer additional information beyond the scope of the request.

6. Payment Data & PKR Transactions

All financial transactions on sbhet are denominated in Pakistani Rupees (PKR). When you deposit or withdraw funds using JazzCash, Easypaisa, Raast, bank transfer, debit or credit card, or another supported mobile wallet, a record of that transaction is stored in your sbhet account history. This record includes the amount, payment method, date and time, and transaction status.

sbhet does not store full card numbers or mobile wallet PINs on its own systems. Where card payments are processed, card data is handled by the payment gateway provider, which applies its own security standards for card data handling. sbhet receives only a tokenised reference and transaction confirmation from card processors — not your raw card details.

Transaction records are retained as part of your account history for as long as your account remains active and for a defined period after account closure, as described in Section 8 of this policy. These records may be referenced in the event of a dispute, a withdrawal query, or a request from a financial authority.

7. Cookies & Tracking Technologies

sbhet uses cookies and similar technologies on sbhet.app to make the platform work correctly and to understand how players use the site. Cookies are small data files stored on your device when you visit a website. The sbhet app uses equivalent local storage mechanisms for the same purposes.

7.1 Essential Cookies

These cookies are required for the platform to function. They maintain your login session so you do not have to log in again every time you navigate between pages, store your language and display preferences, and support security features. Essential cookies cannot be disabled without breaking core platform functionality.

7.2 Analytics Cookies

sbhet uses anonymised analytics data to understand how players interact with the platform — which game categories are most visited, where players encounter difficulties, and how navigation flows are used. This data is aggregated and does not identify individual players. It is used solely to improve the sbhet platform experience for Pakistan players.

7.3 Managing Cookies

You can control cookie storage through your browser settings. Blocking essential cookies will affect platform functionality. Blocking analytics cookies will not affect your ability to play games or manage your account. The sbhet app uses its own local storage which can be cleared by uninstalling the app from your device.

8. Data Retention

sbhet retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods we apply are as follows:

• Active account data: Retained for the full duration that your account remains open on the sbhet platform.
• Transaction and financial records: Retained for a minimum of five years after the date of each transaction, in line with standard financial record-keeping practice.
• Identity verification documents: Retained for the duration of account activity and for up to five years following account closure.
• Support communications: Retained for up to three years from the date of the interaction.
• Self-exclusion records: Retained for the duration of the exclusion and for a reasonable period beyond its end date, to prevent re-registration during an active exclusion.

After the applicable retention period has elapsed, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised and aggregated data — which cannot identify any individual player — may be retained indefinitely for platform analytics and improvement purposes.

9. Security Measures

sbhet applies a range of technical and operational security measures to protect the personal data it holds. These measures are designed to guard against unauthorised access, accidental loss, alteration or disclosure of player data.

• Encryption of data in transit using TLS (Transport Layer Security) on all communications between your device and sbhet servers.
• Encryption of sensitive data at rest, including identity documents and payment references.
• Access controls that restrict internal access to personal data to only those staff members who require it for their specific role.
• Regular internal reviews of data handling practices and access logs.
• Tokenisation of card payment data so that raw card numbers are never stored on sbhet systems.

While sbhet takes these measures seriously, no online platform can guarantee absolute security against all threats. Players also play a role in keeping their accounts secure. Use a strong, unique password for your sbhet account, do not share your login credentials with anyone, and contact sbhet support immediately if you suspect your account has been accessed without your permission.

10. Your Rights Over Your Data

As a sbhet account holder, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact the sbhet support team through the platform or app.

• Right to access: You may request a copy of the personal data sbhet holds about you. We will provide this within a reasonable timeframe following identity verification of the requesting player.
• Right to correction: If any personal data sbhet holds about you is inaccurate or out of date, you have the right to request that it be corrected. You can update basic account information such as your email address and mobile number directly through your account settings.
• Right to deletion: You may request deletion of your personal data. Note that sbhet is required to retain certain records — including transaction history and identity verification data — for defined periods as described in Section 8. Deletion requests will be fulfilled to the extent possible within these legal retention obligations.
• Right to restrict processing: In certain circumstances you may ask sbhet to limit how it uses your data while a query or dispute is being resolved.
• Right to withdraw consent: Where sbhet processes your data on the basis of consent — such as for promotional communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawing consent for promotional messages does not affect your ability to use the sbhet platform.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time. Opt-out options are available in your account notification settings.

All data rights requests are handled by the sbhet support team. Please contact support at [email protected] with the subject line "Data Request" and a description of what you are requesting. sbhet will respond within a reasonable timeframe and may need to verify your identity before fulfilling the request.

11. Minors & Under-18 Policy

sbhet is strictly an adult platform. Registration is open only to individuals who are 18 years of age or older at the time of account creation. sbhet does not knowingly collect personal data from anyone under the age of 18.

Age is verified as part of the identity verification process required before the first withdrawal. Where sbhet identifies or has reasonable grounds to believe that an account holder was under 18 at the time of registration, the account will be closed immediately, any balance will be frozen pending review, and the personal data associated with that account will be handled in accordance with applicable child protection standards.

If you are a parent or guardian and believe a minor has created a sbhet account using your details or their own information, please contact sbhet support immediately so the account can be reviewed and closed promptly.

12. Updates to This Policy

sbhet may update this Privacy Policy periodically to reflect changes in how the platform operates, changes in the services or payment methods available to Pakistan players, or changes in applicable data protection standards. The date at the top of this page always reflects the date of the most recent revision.

When material changes are made to this policy — changes that meaningfully affect how your data is collected or used — sbhet will notify registered players through a platform notification or app alert prior to the changes taking effect. Minor clarifications or wording updates that do not change the substance of the policy may be made without individual notification.

If you have any questions about this Privacy Policy, about the data sbhet holds about you, or about how to exercise your data rights, please contact the sbhet support team. We are happy to explain any part of this policy in plain terms.