setia888 Privacy Policy — How We Handle Your Data with Integrity and Transparency

This Privacy Policy ("Policy") describes how setia888 ("we", "us", "our") collects, uses, stores, and protects the personal information of registered players and website visitors on the setia888.games platform ("the Platform"). It applies to all personal data processed in connection with the setia888 platform — including data collected during account registration, during gameplay, during PKR deposit and withdrawal transactions, and through customer support interactions.

setia888 acts as the data controller in respect of personal data collected from Pakistan players through the Platform. As data controller, setia888 determines the purposes and means by which personal data is processed and is responsible for ensuring that processing activities are conducted lawfully, fairly, and transparently.

This Policy applies to:

• All individuals who register a setia888 player account.
• All individuals who visit the setia888.games website, whether or not they are registered players.
• All individuals who interact with setia888 through customer support channels, including live chat and email correspondence to [email protected].

This Policy should be read alongside setia888's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to data handling in specific contexts. By registering a setia888 account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

setia888 collects personal data through three primary channels: information you provide directly, information generated by your use of the Platform, and information received from third-party payment providers and identity verification services.

When you use the setia888 platform, we automatically collect technical and behavioural data, including:

• Device information: device type, operating system version, browser type and version, screen resolution, and language settings.
• Network information: IP address, mobile network provider (e.g., Jazz, Telenor, Zong), and connection type.
• Session data: login timestamps, session durations, pages visited within the Platform, and logout events.
• Gaming activity: game selections, wager amounts in PKR, win/loss outcomes, bonus activations, and jackpot participations.
• Responsible gaming interactions: deposit limit settings, cooling-off period activations, self-exclusion requests, and reality check acknowledgements.

setia888 uses the personal data described in Section 2 for the following documented purposes:

• Account Administration: Creating and maintaining your setia888 account, authenticating your identity at each login, processing password resets and 2FA verifications, and maintaining accurate account records.
• PKR Transaction Processing: Processing your PKR deposits from Easypaisa, JazzCash, NayaPay, and other supported Pakistan payment methods; processing withdrawal requests to your verified payment method; and maintaining transaction records for audit and dispute resolution purposes.
• Identity and Age Verification: Verifying that you are at least 18 years of age and that the identity information on your setia888 account matches your CNIC documentation, in compliance with responsible gaming obligations.
• Platform Delivery and Improvement: Ensuring the setia888 platform loads correctly on your device and network connection; diagnosing technical issues; and using aggregated, anonymised usage data to improve game performance, page load speeds, and feature design.
• Fraud Detection and Prevention: Analysing login patterns, transaction patterns, and device fingerprinting data to identify and prevent fraudulent account activity, money laundering, multi-accounting, and bonus abuse.
• Customer Support: Using your account information and support communication history to respond to your queries, investigate complaints, and resolve disputes fairly and efficiently.
• Responsible Gaming: Monitoring gaming activity patterns to identify potential indicators of problem gambling and, where appropriate, proactively reaching out to players displaying concerning patterns in accordance with setia888's Responsible Gaming obligations.
• Marketing Communications: With your consent, sending you information about setia888 promotions, bonuses, and new game launches via SMS to your registered Pakistan mobile number. You may withdraw consent for marketing communications at any time through your account settings or by contacting [email protected].
• Legal and Regulatory Compliance: Retaining and producing records in response to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

setia888 processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between setia888 and you — including account creation, PKR transaction processing, game delivery, and customer support — is carried out on the legal basis that it is necessary for the performance of that contract.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — including KYC identity verification, age verification, anti-money laundering record-keeping, and responding to lawful authority requests — is carried out on the legal basis of compliance with a legal obligation.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of setia888's legitimate interests in operating a secure, fair, and high-quality platform. Where setia888 relies on legitimate interests, we have assessed that our interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent obtained at the point of registration or through your account settings. You have the right to withdraw this consent at any time without prejudice to processing that occurred prior to withdrawal.

When you make a PKR deposit or withdrawal on setia888 — through Easypaisa, JazzCash, NayaPay, Raast, SadaPay, HBL, UBL, MCB Bank, Meezan Bank, Bank Alfalah, debit card, or USDT TRC20 — setia888 receives transaction confirmation data from the relevant Pakistan payment provider. This data includes the wallet identifier or bank account reference, the PKR transaction amount, and the transaction timestamp. setia888 stores this data to maintain an accurate and auditable PKR transaction history for your account.

KYC documentation — including copies of your Pakistan CNIC and proof of payment method ownership — is stored in an encrypted document management system with access restricted to setia888's compliance and verification team. CNIC documents are used solely for identity and age verification purposes and are never shared with third parties outside of legally mandated disclosures to regulatory authorities.

setia888 does not store full payment card numbers or full Pakistan bank account numbers. Where card or bank details are referenced in the transaction system, they are stored in a tokenised or partially masked format (e.g., last four digits only) sufficient to identify the payment method for withdrawal routing purposes without exposing the full financial credential.

setia888 uses cookies and similar tracking technologies on the setia888.games website and Platform to enable core functionality, improve performance, and analyse platform usage. The following categories of cookies are used:

• Essential Cookies: Required for the setia888 Platform to function. These cookies maintain your authenticated session after setia888 login, remember your language preference, and prevent session token hijacking. Essential cookies cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Used to collect anonymised data about how Pakistan players navigate the setia888 Platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance and user experience.
• Functional Cookies: Remember your Platform preferences — such as your default game category, display settings, and responsible gaming configuration — so these are preserved between sessions without requiring re-entry each time.
• Security Cookies: Used by setia888's fraud detection systems to generate device fingerprints that help identify suspicious login patterns and protect your account from unauthorised access attempts.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the setia888 Platform, but may affect the availability of certain personalisation features. Note that disabling security cookies may reduce the effectiveness of setia888's account protection systems.

setia888 shares personal data with third parties only in the following specific and documented circumstances:

• Payment Processing Partners: setia888 shares the minimum necessary transaction data with Pakistan payment providers — Easypaisa, JazzCash, NayaPay, and others — to process your PKR deposits and withdrawals. Each payment partner operates under its own privacy terms and is independently responsible for data handling within its own systems.
• Game Software Providers: setia888 shares a session token and an anonymised player identifier with game providers (such as Pragmatic Play, PG Soft, and others) to authenticate your game session. Game providers do not receive your name, CNIC, contact details, or PKR balance.
• Identity Verification Services: setia888 uses third-party KYC technology providers to assist with CNIC document verification. These providers process document images solely for verification purposes and retain them only for the period required to complete the verification process.
• Fraud and Security Vendors: setia888 uses specialist fraud detection and cybersecurity services that process limited device and behavioural data to identify account security threats. These vendors operate under strict data processing agreements with setia888.
• Regulatory and Law Enforcement Authorities: setia888 will disclose personal data to regulatory authorities, law enforcement agencies, or courts when required to do so by a lawful order or legal obligation. setia888 will, where legally permissible, notify affected players of such disclosures.
• Business Transfers: In the event of a merger, acquisition, or transfer of setia888's business operations, personal data held by setia888 may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Registered Pakistan players will be notified of any material change in data controller arising from such a transaction.

setia888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active setia888 player account is retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, to comply with financial record-keeping obligations and to respond to any post-closure disputes or regulatory inquiries.
• KYC and Identity Documents: CNIC copies and KYC verification records are retained for a minimum of five (5) years from the date of account closure, consistent with standard financial services compliance requirements. These records may be retained for longer periods if required by a specific regulatory direction or legal proceeding.
• PKR Transaction Records: All PKR deposit and withdrawal transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Customer support transcripts and email correspondence are retained for three (3) years from the date of the interaction unless the communication is relevant to an ongoing dispute, in which case it is retained until final resolution of that dispute plus two (2) years.
• Marketing Consent Records: Records of your marketing communication consent status and consent withdrawal are retained for the duration of your account relationship and for three (3) years following account closure.
• Anonymised Usage Data: Aggregated, anonymised platform usage statistics that cannot be linked to any individual player are not subject to retention limits and may be retained indefinitely for platform improvement purposes.

When personal data is no longer required for its original purpose and no legal retention obligation applies, setia888 will securely delete or irreversibly anonymise that data in accordance with our data lifecycle management procedures.

setia888 implements a layered security architecture to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and setia888 servers — including your login credentials, PKR transaction data, and personal information — is encrypted using 256-bit TLS/SSL protocols.
• Encryption at Rest: Sensitive personal data stored in setia888's databases — including CNIC document images, KYC records, and payment method references — is stored in encrypted form using industry-standard symmetric encryption.
• Access Controls: Access to systems containing personal data is restricted to setia888 staff and contractors with a documented operational need. Access is granted on the principle of least privilege and is reviewed periodically. Multi-factor authentication is mandatory for all staff accessing data systems.
• Password Security: Player passwords are never stored in plain text. setia888 stores only a cryptographically hashed representation of your password, meaning that even in the unlikely event of a data breach, your actual password cannot be recovered from our systems.
• Intrusion Detection: setia888 operates continuous network monitoring and intrusion detection systems that identify and alert on anomalous access patterns in real time.
• Penetration Testing: setia888's platform infrastructure undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.

As a setia888 player, you have the following rights in relation to your personal data. These rights are genuine and exercisable — setia888 will not create unnecessary procedural barriers to prevent you from exercising them.

• Right of Access: You have the right to request a copy of the personal data setia888 holds about you. We will provide this information in a clear, readable format within 30 days of receiving your request.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data setia888 holds about you. For most account data, you can update information directly through your setia888 account settings. For identity and KYC data, please submit a rectification request with supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing has been unlawful. Note that setia888 may be required to retain certain data for the minimum periods described in Section 8 notwithstanding a deletion request.
• Right to Restrict Processing: You have the right to request that setia888 restrict processing of your personal data in certain circumstances — for example, while a rectification request is under review or while a legitimate interests assessment is contested.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to setia888 in a structured, commonly used, and machine-readable format, where processing is based on contract or consent.
• Right to Object: You have the right to object to processing of your personal data where setia888 relies on legitimate interests as the legal basis. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Rights Related to Automated Decision-Making: Where setia888 makes automated decisions that significantly affect you — such as automated account suspension based on fraud detection — you have the right to request human review of that decision.

To exercise any of the above rights, contact setia888's Data Privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your setia888 username and registered Pakistan mobile number to allow us to identify your account. setia888 will respond to all privacy rights requests within 30 days of receipt.

setia888 is strictly an 18+ platform. Our registration process includes age verification and our KYC process requires submission of a Pakistan CNIC, which is only issued to individuals aged 15 and above and confirms date of birth. Where age verification confirms that a player is under 18, setia888 immediately closes the account, deletes all associated personal data, and returns any deposited PKR funds to the verified payment method.

If setia888 becomes aware at any point that personal data has been collected from a person under 18 — including through a fraudulently submitted CNIC or misrepresentation of age — setia888 will immediately delete that data and take appropriate account action. Parents or guardians who believe their child may have registered a setia888 account should contact setia888 support immediately at [email protected] for urgent investigation and account closure.

setia888 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable regulations, or improvements in our privacy controls. When material changes are made to this Policy — meaning changes that materially affect how we use your personal data or the rights available to you — setia888 will notify registered Pakistan players via their registered mobile number or email address at least 14 days before the amended Policy takes effect. Minor administrative or clarificatory changes may be posted on this page without direct notification, and the "Last Updated" date at the top of this page will be revised accordingly.

For all privacy-related enquiries, data rights requests, or concerns about setia888's data handling practices, please contact the setia888 Data Privacy team through the following channels:

• Email: [email protected] (Subject line: "Privacy Enquiry" or "Privacy Rights Request")
• Live Chat: Available 24/7 through your setia888 account after login — select "Privacy & Data" from the support topic menu.

setia888 is committed to responding to all privacy enquiries promptly. Standard response time for general privacy questions is 2 business days. Formal data rights requests (access, erasure, portability) will receive a substantive response within 30 calendar days.