This Privacy Policy explains what personal data Black Jack collects when you use the platform, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own information. We believe every player deserves to know exactly what happens with their data — so we've written this in plain language rather than legalese.
Your privacy matters to us. This policy applies to all personal data collected through the Black Jack platform at blackjack-khelo.net, including the website, mobile interface and any communications between you and the Black Jack team. Using the platform means you have read and accepted this policy.
Black Jack is an online gaming platform operating at blackjack-khelo.net, designed and built specifically for Pakistani players. The platform offers online casino games including blackjack, Teen Patti, roulette, crash games, virtual sports, fishing games and card game variants — all with PKR (Pakistani Rupee) denomination and local payment method support.
For the purposes of this Privacy Policy, "Black Jack", "we", "us" and "our" refer to the operator of the blackjack-khelo.net platform. "You" and "your" refer to the registered account holder or any visitor to the platform. "Personal data" refers to any information that can identify you as an individual, directly or in combination with other data.
If you have any questions about how Black Jack handles your data, or wish to exercise any of the rights described in this policy, you can contact our Data Protection team at any time at support@blackjack-khelo.net.
Black Jack collects personal data in three main ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party service providers where you have given appropriate consent.
Information you provide directly:
Information collected automatically:
We do not collect full payment card numbers, CVV codes or mobile wallet PINs. Payment credentials are processed through PCI-DSS Level 1 compliant gateways and tokenised before any data reaches Black Jack systems. We store only the tokenised reference — never the underlying credential.
Black Jack uses personal data for specific, legitimate purposes — not for anything beyond what is necessary to operate the platform and serve registered players. The table below summarises the main uses.
| Purpose | Data Used | Why Necessary |
|---|---|---|
| Account creation & management | Name, mobile number, email, date of birth | To identify you, authenticate logins and communicate about your account |
| Age & identity verification (KYC) | CNIC, date of birth, address, selfie where requested | Legal obligation to verify players are 18+; AML compliance |
| Processing deposits & withdrawals | Payment method identifiers, transaction records | To execute financial transactions accurately and securely in PKR |
| Fraud prevention & security | IP address, device data, session behaviour, transaction patterns | To detect suspicious activity, prevent duplicate accounts and protect player funds |
| Customer support | Support communications, account history, transaction records | To investigate and resolve queries, disputes and technical issues |
| Responsible gaming | Gameplay activity, deposit history, session data | To identify problematic gaming patterns and apply player-requested limits |
| Marketing communications | Email address, mobile number, gameplay preferences | To send promotional offers and updates — only with your consent, opt-out available at any time |
| Platform improvement | Aggregated, anonymised usage data | To understand how players use the platform and improve the experience |
Black Jack processes personal data under the following legal bases, consistent with internationally recognised data protection principles:
Financial data at Black Jack receives the highest level of protection we apply to any category of information. Here is exactly what happens when you make a deposit or withdrawal.
How deposits work: When you initiate a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment credentials are entered directly into our PCI-DSS Level 1 certified payment gateway. These credentials are processed and tokenised by the gateway — a unique, irreversible token is returned to Black Jack systems. The original credential (wallet number with PIN, card number with CVV, or bank account number) is never stored in Black Jack databases. We store only the token and the transaction reference.
Withdrawal security: All withdrawal requests require OTP confirmation via your registered Pakistani mobile number before they enter the processing queue. This means that even in the unlikely event that your Black Jack password were compromised, no one could withdraw funds without also having access to your registered mobile handset.
Transaction records — amounts, timestamps, method references and outcomes — are retained for 7 years as required by anti-money-laundering regulations. These records are encrypted at rest and accessible only to authorised Black Jack finance and compliance staff.
AML monitoring: Black Jack monitors transaction patterns as part of its anti-money-laundering (AML) obligations. Unusual deposit or withdrawal patterns — such as rapid cycling of funds without gameplay, structuring of transactions to stay below reporting thresholds, or deposits originating from multiple payment methods in quick succession — may trigger a review. Where a review results in a suspicious activity report being filed with relevant authorities, Black Jack is legally prohibited from disclosing this to the affected account holder.
Black Jack does not sell your personal data to any third party, ever. We do share limited personal data with specific categories of third parties where necessary to operate the platform, and always under contractual obligations that restrict the recipient's use of that data.
Third parties we may share data with:
Marketing data: We do not share your personal data with advertising networks, data brokers or marketing agencies. Any promotional communications you receive from Black Jack come directly from us — not via third-party data matching.
Black Jack retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. The following retention periods apply:
When a retention period expires, data is securely deleted or anonymised so it can no longer be linked to an individual player. Anonymised aggregate data (for example, platform usage statistics with no individual identifiers) may be retained indefinitely for analytical purposes.
Protecting your personal data is a technical and operational priority at Black Jack. The following security measures are in place across the platform.
Black Jack uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session and understand how players use the site. Here is a breakdown of the categories in use.
Required cookies cannot be disabled without breaking core platform functionality. Optional cookies can be managed through your browser settings. Black Jack does not use advertising cookies or share cookie data with advertising networks.
You have the following rights over your personal data held by Black Jack. To exercise any of these rights, contact our support team via live chat or at support@blackjack-khelo.net. We will respond within 30 days.
You can request a copy of all personal data we hold about you. We will provide this in a readable format within 30 days of your request. There is no fee for a first access request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Contact support with the details to be updated and we will act on it within 5 business days.
You can request deletion of your personal data. This right applies where the data is no longer necessary for its original purpose, or where you withdraw consent on which processing was based. Note that data we are legally required to retain (such as AML transaction records) cannot be deleted until the statutory retention period expires.
You can request that we limit how we use your data in certain circumstances — for example, while a dispute about accuracy is being resolved. A processing restriction does not delete your data but prevents it from being used beyond account maintenance.
You can request your personal data in a structured, machine-readable format (JSON or CSV) so that you can move it to another service provider. This right applies to data you provided to us and that we process on the basis of your consent or a contract with you.
You can object to receiving marketing communications at any time by updating your preferences in account settings, using the unsubscribe link in any email from us, or contacting support. Opt-out requests are processed immediately — you will not receive further marketing communications after opting out.
The Black Jack platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that an account has been registered by someone under 18 — whether through KYC verification, a report from a third party, or any other means — we will immediately close the account and delete all associated personal data, with the exception of a minimal record of the closure retained for legal compliance purposes.
If you are a parent or guardian and believe your child has registered an account or provided personal data to Black Jack, please contact us immediately at support@blackjack-khelo.net. We will treat such reports as urgent and act on them the same day they are received.
Black Jack may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or platform functionality. Where changes are material — such as a new category of data being collected, a new third-party sharing relationship, or a change to retention periods — registered players will be notified by email and an in-platform notification at least 7 days before the change takes effect.
Minor changes — such as rewording for clarity, correcting a typo or updating contact details — may be made without prior notice. The version number and effective date at the top of this page always indicate the current version.
Continued use of the Black Jack platform after the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with a material change, you have the right to close your account and request deletion of your data before the change takes effect.
If you have any questions about this Privacy Policy, want to exercise a data right, or want to raise a concern about how Black Jack handles your personal data, please get in touch:
If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. Black Jack will cooperate fully with any such inquiry.
Six concrete commitments — not just promises on paper.
Every byte of data passing between your device and Black Jack servers travels over TLS 1.3 encryption. Unencrypted connections are refused. Your login credentials, game activity and PKR transaction data are never exposed in transit.
Your Easypaisa, JazzCash, NayaPay or card credentials are tokenised at entry. Black Jack never stores a full wallet number, card number, PIN or CVV. Only a secure, irreversible token sits in our database — meaningless without the gateway key.
No one can move funds from your Black Jack account without access to your registered Pakistani mobile number. Every withdrawal triggers an OTP sent by SMS — only you can approve it.
Black Jack has never and will never sell player personal data to third parties, data brokers, marketing agencies or advertising networks. Your data is used only to run your account and operate the platform — nothing else.
Promotional SMS and email communications can be switched off instantly from your account settings or via the unsubscribe link in any message. Opt-out is processed in real time — no 30-day waiting periods.
Request deletion of your data and we will action it promptly — within 30 days for data not subject to legal retention obligations. Statutory records (AML, financial) are securely deleted once their mandatory retention periods expire.