Privacy Policy – How Badpro Handles Your Personal Data in Pakistan

Scope of This Policy

This policy covers data collected through the Badpro website, any Badpro mobile application, and all communications between you and the Badpro support team. It does not cover third-party websites that may be linked from Badpro – those platforms have their own privacy policies.

Data We Do NOT Collect

• Full payment card numbers – these are processed by your bank or payment provider, not stored by Badpro.
• Biometric data of any kind.
• Social media credentials or access tokens.
• Location data beyond the IP address used to establish your connection.

Account Operations

Your name, contact details, and login credentials are needed to create and maintain your Badpro account. Without these, we cannot authenticate your sessions, process your bets, or credit your PKR winnings to the correct account.

Financial Transaction Processing

Payment data is collected to process your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card deposits and withdrawals. Badpro needs your registered payment method details to route funds correctly and to verify that deposits and withdrawals are going to the same account holder.

Identity Verification and Anti-Money Laundering

Badpro is legally required to verify the identity of players who withdraw above certain thresholds or whose account activity raises standard AML flags. CNIC data and transaction history are held for this purpose. This is not unique to Badpro – any legitimate financial service operating in or serving Pakistan maintains similar obligations.

Fraud Prevention and Account Security

Device data, IP addresses, and login patterns help Badpro identify unusual access. If someone tries to log into your account from a new device in a different city, this data allows us to flag it and alert you. It's the system that protects your PKR balance from unauthorised access.

Promotions and Customer Communications

If you have opted in to marketing communications, Badpro uses your contact details to inform you about new promotions, reload bonuses, and tournaments. You can opt out at any time from your account settings or by replying STOP to any SMS from Badpro.

Platform Improvement

Aggregated, anonymised usage data helps the Badpro team understand which features are popular, where players encounter issues, and what improvements to prioritise. Individual players cannot be identified from this data.

Contract Performance

The majority of data processing at Badpro is necessary to fulfil the contract you enter into when you register an account. Without processing your identity and payment data, Badpro cannot provide the betting services you signed up for.

Consent-Based Processing

Marketing communications and non-essential cookies are processed only with your explicit consent, given during registration or updated in your account settings. You can withdraw this consent at any time without affecting your access to the core platform features.

Payment Processors

When you make a deposit or withdrawal, relevant transaction details are shared with the payment provider you use – Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or Visa/Mastercard. These providers process the transaction on their own infrastructure under their own security and privacy standards. Badpro does not store your full card number or mobile wallet PIN.

Regulatory and Law Enforcement Authorities

Badpro will disclose personal data to Pakistani regulatory or law enforcement authorities when legally compelled to do so – for example, in connection with a formal investigation into fraud, money laundering, or other criminal activity. We will not share data beyond what the lawful order specifies.

Service Providers

Badpro uses third-party service providers for specific functions including server hosting, platform analytics, and fraud detection. These providers are bound by data processing agreements and are prohibited from using your data for any purpose beyond the specific service they provide to Badpro.

No Cross-Platform Marketing Sharing

Your data will never be shared with other betting platforms, advertisers, data brokers, or marketing agencies for the purpose of targeting you with offers from other businesses.

Active Accounts

While your Badpro account is active, all data associated with it is retained and maintained. This allows us to provide a consistent, personalised experience and to fulfil any ongoing legal obligations.

After Account Closure

When you close your Badpro account, most personal data is retained for a minimum of five years from the date of closure. This retention period is driven by AML regulatory requirements that apply to all platforms handling financial transactions. After the mandatory period, personal data is securely deleted or irreversibly anonymised.

Marketing Data

If you opt out of marketing communications, your contact details are removed from active marketing lists immediately. However, a suppression record (confirming you opted out) is retained indefinitely to ensure you are not accidentally re-added to marketing lists in the future.

Support Records

Chat logs and email correspondence with Badpro support are retained for a minimum of two years. This allows us to reference past interactions when resolving repeat issues or disputes.

Encryption in Transit

All data transmitted between your device and Badpro's servers is encrypted using TLS 1.3 – the same standard used by major Pakistani banks and fintech platforms. This means data captured in transit cannot be read by anyone intercepting the connection.

Encryption at Rest

Personal and financial data stored on Badpro's servers is encrypted using AES-256 encryption. Database access is restricted to authorised personnel only, and all access is logged and audited.

Access Controls

Badpro staff access to player data follows a strict need-to-know principle. Customer support agents see only the information required to answer your query. Full financial records and identity documents are accessible only to compliance and fraud investigation teams, under logged conditions.

Incident Response

In the unlikely event of a data breach affecting your personal information, Badpro will notify affected players as quickly as possible and take immediate steps to contain and remediate the incident. Badpro will also notify relevant authorities as required by applicable regulations.

Your Responsibility

Account security is a shared responsibility. Keep your Badpro password unique and confidential. Badpro will never ask for your password through any channel – if you receive any such request, treat it as a phishing attempt and report it to support@badpro.app immediately.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Disabling essential cookies will affect your ability to use Badpro normally. Most browsers (Chrome, Firefox, Safari, and the mobile browsers commonly used in Pakistan) provide cookie management in their privacy or security settings menus.

Age Verification Process

During registration, players are required to confirm they are 18 or older. Badpro reserves the right to request CNIC or other age-proof documents at any time. Players whose age cannot be verified will have account access suspended until verification is completed.

Parental Controls

If you believe a minor in your household has registered on Badpro, contact support@badpro.app immediately with relevant details. We take all such reports seriously and will investigate promptly.

Notification of Updates

When Badpro makes significant changes to this Privacy Policy, registered players will be notified via in-account notification and, where available, via SMS or email. The revised policy will show a new "Effective" date at the top. We encourage you to review this page periodically.

Continued Use as Acceptance

Using Badpro after an updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you disagree with material changes to how your data is handled, you have the right to close your account before the effective date and request data deletion where permitted by our retention obligations.