Privacy Policy – dream17 Online Gaming Pakistan

1Who We Are and How to Contact Us

dream17 is an online gaming platform operating at dream17.onl, offering Casino games, Slots, Live Casino, Bingo, Sports Betting and a VIP rewards programme to players in Pakistan. All platform services are denominated in Pakistani Rupees (PKR).

We are the data controller responsible for the personal information you provide when registering and using dream17. If you have any questions about this Privacy Policy, how we process your data, or wish to exercise any of your rights, you can reach our dedicated support team at any time through the live chat function on the platform or by writing to us at the contact email address displayed in the footer of this page.

Our support team operates 24/7 and handles all privacy-related queries in Pakistan English. We aim to respond to formal written privacy requests within five working days.

2What Data We Collect

We collect only the personal data that is genuinely necessary to operate the dream17 platform safely and fairly. The categories of data we collect are as follows:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, CNIC number	Yes – for account verification
Contact Data	Email address, mobile number, city/province	Yes – for account communication
Financial Data	PKR transaction records, wallet IDs (JazzCash, Easypaisa), bank details used for Raast or bank transfer	Yes – for deposits and withdrawals
Verification Documents	CNIC scan, proof of address, payment method proof	Yes – for KYC compliance
Gaming Activity Data	Game history, bet amounts, session duration, VIP tier activity	Yes – for platform operation
Technical Data	IP address, device type, browser, operating system, time zone	Collected automatically
Behavioural Data	Pages visited, features used, session patterns	Collected via cookies
Communications Data	Support chat logs, email correspondence	When you contact us

We do not collect sensitive categories of data such as racial or ethnic origin, religious beliefs, health information or political opinions. We do not collect data about minors – any account found to belong to a person under 18 will be closed immediately.

3How We Collect Your Data

dream17 collects your personal data through the following channels:

• Direct submission – when you register an account, complete a verification request, make a deposit or withdrawal, contact support, or opt in to a promotional offer.
• Automated collection – when you browse and interact with the dream17 platform, our systems automatically record technical and behavioural data such as your IP address, device information, session length and navigation patterns. This is standard for all online platforms.
• Payment providers – when you deposit or withdraw via JazzCash, Easypaisa, Raast or bank transfer, the payment provider shares the transaction reference and confirmation status with us. We do not receive or store your full wallet PIN, banking password or card CVV at any point.
• Identity verification services – where we use a third-party KYC provider to confirm your identity against official records, that provider may share a verification result and summary data with us.

4Why We Use Your Data

dream17 uses your personal data for specific, clearly defined purposes. We do not use data for purposes beyond what is described here without obtaining your explicit consent first.

• Account management – to create, maintain and secure your dream17 account, including login authentication and password recovery.
• Identity verification – to confirm that you are who you say you are, that you meet the 18+ age requirement, and that you are entitled to use the platform.
• Payment processing – to process your PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, debit card or mobile wallets, and to maintain accurate transaction records.
• Fraud prevention and security – to detect and prevent unauthorised access, fraudulent transactions, bonus abuse, duplicate accounts and any other activity that breaches our Terms and Conditions.
• Customer support – to respond to your queries, complaints and requests accurately and efficiently using your account history and communication records.
• Platform improvement – to analyse how players use dream17 so we can improve game selection, site performance, navigation and the overall user experience.
• Responsible Gaming – to monitor gaming patterns and, where necessary, apply the responsible gaming limits or interventions you have requested, including deposit limits, session reminders and self-exclusion.
• Promotions and communications – to inform you about bonuses, VIP rewards, new game launches and relevant platform updates, where you have opted in to receive such communications.
• Legal and regulatory compliance – to comply with applicable laws, respond to lawful requests from authorities, and maintain records required by financial regulations.

5Legal Basis for Processing

dream17 processes your personal data on the following legal bases depending on the purpose:

• Contract performance – processing your registration data, payment data and gaming activity is necessary to deliver the platform services you have signed up for.
• Legitimate interests – fraud detection, security monitoring, platform analytics and responsible gaming oversight are carried out as legitimate interests of the platform and its players.
• Legal obligation – identity verification, age checks and financial record-keeping are required to comply with applicable laws and regulations.
• Consent – where we send you marketing communications or use non-essential cookies, we rely on your explicit consent, which you can withdraw at any time via your account settings.

6How Long We Keep Your Data

dream17 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. The general retention periods we apply are as follows:

• Account and identity data – retained for the duration of your account and for a period of five years after account closure, in line with standard financial record-keeping requirements.
• Transaction and financial data – PKR deposit and withdrawal records are retained for five years from the date of each transaction.
• Gaming activity data – game history, bet records and session data are retained for two years from the date of activity, and for up to five years where the data is relevant to an active dispute or investigation.
• Support communications – chat logs and email correspondence are retained for two years from the date of the last interaction.
• Marketing consent records – records of your consent or opt-out decisions are retained for three years to demonstrate compliance.
• Verification documents – identity and address documents submitted for KYC are retained for five years after account closure.

Once the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be linked back to you.

7Sharing Your Data

dream17 does not sell your personal data to any third party, ever. We share data only in the following limited and controlled circumstances:

• Payment providers – JazzCash, Easypaisa, Raast and our banking partners receive the minimum data required to process your PKR transactions securely.
• Identity verification providers – our KYC partner receives your identity data solely to carry out verification checks. They are contractually bound to use the data only for that purpose.
• Technology and hosting providers – the companies that provide our servers, software infrastructure and security tools may process certain technical data as part of delivering those services. All such providers operate under strict data processing agreements.
• Customer support tools – our support platform may process your name, contact details and chat history to enable our support agents to assist you.
• Law enforcement and legal requests – we will share data with relevant authorities when legally required to do so by a valid lawful order. We do not voluntarily disclose player data to any government body beyond what is legally required.
• Business transfers – if dream17's business is acquired, merged or transferred in whole or in part, player data may form part of that transfer. You will be notified in advance of any such change that materially affects how your data is processed.

All third parties who receive dream17 player data are required to maintain appropriate security standards and are prohibited from using your data for their own independent purposes.

8Payment Data and PKR Transactions

Since all dream17 transactions are processed in PKR, your financial data relates entirely to Pakistani Rupee payments. When you deposit using JazzCash, Easypaisa, Raast, bank transfer, debit card or a supported mobile wallet, the payment provider processes your transaction and returns a confirmation reference to dream17. We record the amount, date, method and outcome of each transaction.

dream17 does not store full payment credentials on its own servers. We do not hold your JazzCash or Easypaisa PIN, your bank account password, your full debit card number or CVV. Payment credential data is processed entirely within the encrypted systems of the respective payment provider.

9Cookies and Tracking

dream17 uses cookies and similar tracking technologies to make the platform work correctly and to understand how players use it. The types of cookies we use are:

• Essential cookies – required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site attacks. You cannot opt out of essential cookies while using the platform.
• Analytics cookies – help us understand which games are most popular, how long sessions last and where players encounter difficulty. This data is aggregated and does not identify you individually. You can opt out via your cookie preferences.
• Preference cookies – remember your settings such as language preference and display options. Opting out may affect your platform experience.
• Marketing cookies – used to show you relevant promotions within the platform based on your activity. These are only active if you have given consent.

You can manage your cookie preferences at any time through the cookie settings link in the footer of the platform. Note that blocking essential cookies will prevent you from logging in or using core platform features.

10Your Rights Over Your Data

You have the following rights in relation to the personal data that dream17 holds about you. To exercise any of these rights, contact our support team through the platform:

• Right of access – you can request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to rectification – if any of your data is inaccurate or incomplete, you can ask us to correct it. For identity data, we may require supporting documentation before making changes.
• Right to erasure – you can request deletion of your personal data in certain circumstances. Note that we may be legally required to retain certain data (such as transaction records) even after account closure, and erasure requests cannot override those obligations.
• Right to restrict processing – you can ask us to pause the processing of your data in certain situations, for example while a dispute is being resolved.
• Right to data portability – you can request a copy of data you have provided to us in a structured, machine-readable format.
• Right to object – you can object to processing based on legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and respond within 30 days.
• Right to withdraw consent – where processing is based on your consent (e.g. marketing), you can withdraw that consent at any time without affecting processing that took place before the withdrawal.

11Data Security

dream17 applies industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and dream17's servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of our infrastructure.
• Secure deletion protocols for data that has reached its retention period.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your dream17 account has been accessed without your authorisation, contact our support team immediately so we can take protective action.

12Children's Privacy

dream17 is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from any person under 18 years of age. If we discover that an account has been registered by or is being used by a minor, we will close the account immediately, delete the associated personal data and, where applicable, reverse any deposits made.

If you are a parent or guardian and you believe a person under 18 has registered on dream17, please contact our support team immediately with relevant details so we can investigate and act without delay.

13Changes to This Policy

dream17 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law or improvements to our data practices. The most current version of the policy will always be published on this page, with the date of last update shown at the top.

For material changes – those that significantly affect how we use your data or your rights – we will provide advance notice via the platform or your registered email address before the changes take effect. Your continued use of dream17 after the effective date of an updated policy constitutes acceptance of the revised terms.

If you have questions about any update or about this policy in general, our support team is available 24/7 via live chat on the platform.