Alonadt Privacy Policy — How We Protect Your Personal Data

1 Introduction

This Privacy Policy explains how Alonadt ("we", "us", "our") collects, uses, stores, and protects the personal data of players who register and use the Alonadt online casino platform ("the Platform"). It also explains the rights you have regarding your personal information and how to exercise them.

By registering an account on Alonadt, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described here. This policy applies to all users of the Platform based in Pakistan and elsewhere.

At Alonadt, privacy is not an afterthought. Pakistani players are increasingly aware of their digital rights, and rightly so. This policy is written in plain English — not dense legal boilerplate — because we believe you deserve to actually understand what happens to your data. If anything here is unclear, please contact us directly via support@alonadt.com and we'll explain further.

2 Data We Collect

Alonadt collects personal data in several ways — directly from you when you register or contact support, automatically when you use the platform, and from payment processors when transactions are completed. Here is a breakdown of each category:

2.1 — Information You Provide Directly

• Pakistani mobile phone number (used as your account identifier)
• Full name (required at withdrawal verification stage)
• Date of birth (to confirm you are 18 or older)
• CNIC number (Computerised National Identity Card — required for identity verification before first qualifying withdrawal)
• Email address (optional but recommended for account recovery)
• Payment account details — Easypaisa wallet number, JazzCash number, NayaPay/SadaPay details, bank account details for IBFT, or card details for Visa/Mastercard payments
• Any information you voluntarily share when contacting Alonadt's support team

2.2 — Information Collected Automatically

• IP address at login and during active sessions
• Device type, operating system, and browser version
• Session duration and activity logs — pages visited, games played, bets placed
• Transaction history — deposits, withdrawals, bonus claims
• Login timestamps and geographic location data (at city level, derived from IP)
• Cookies and similar tracking technologies — detailed in Section 6 below

2.3 — Information from Third Parties

• Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard networks — to confirm deposits and process withdrawals
• Identity verification data from third-party KYC (Know Your Customer) service providers, used solely for the purpose of confirming your identity at withdrawal
• Fraud prevention signals from security partners — used to protect your account and the platform from fraudulent activity

3 How We Use Your Data

Every piece of data Alonadt collects is used for a specific, legitimate purpose. We do not process data beyond what is necessary for those purposes. The table below sets out the primary uses:

Where Alonadt relies on your consent to process data — for example, to send promotional messages — you can withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support.

4 Sharing Your Data

Alonadt does not sell, rent, or trade your personal data. There are limited circumstances where we share data with carefully selected third parties. In every case, those parties are only permitted to use your data for the specific purpose for which it was shared.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT networks, and Visa/Mastercard processors receive only the transaction data needed to process a specific payment. They do not receive your game history or any data beyond what the payment requires.
• Identity verification providers: When KYC verification is required, your name, CNIC details, and date of birth may be shared with a third-party KYC provider. This is strictly limited to the verification process and the provider is contractually prohibited from using your data for any other purpose.
• Fraud prevention services: Transaction signals and device data may be shared with security partners for the purpose of detecting and preventing fraudulent transactions. This is done to protect your account.
• Legal authorities: If required by applicable law, court order, or regulatory instruction, Alonadt may be required to disclose certain account and transaction data to law enforcement or regulatory bodies. We will inform you of such disclosure unless legally prohibited from doing so.
• Business transfers: In the event that Alonadt or part of its business is transferred or acquired, your personal data may be transferred as part of that transaction. You will be notified in advance of any such transfer and given the opportunity to close your account and withdraw your balance if you do not wish your data to be transferred.

All third parties with whom Alonadt shares data are required to have appropriate data protection agreements in place and to process your data in accordance with applicable data protection standards.

5 How We Protect Your Data

Protecting your personal data is one of Alonadt's most important operational responsibilities. The following technical and organisational security measures are in place at all times:

• Transport encryption: All data transmitted between your device and the Alonadt platform is encrypted using 256-bit SSL/TLS. This means that even if data were intercepted in transit, it would be unreadable.
• Encryption at rest: Sensitive personal data — including identity documents, payment details, and CNIC information — is encrypted when stored on Alonadt's servers, not just when in transit.
• Access controls: Access to personal data within Alonadt is restricted to staff members who have a genuine operational need to access it. Access is logged and reviewed regularly. Former employees lose access immediately upon leaving the company.
• Two-factor authentication: Your Alonadt account supports SMS-based two-factor authentication. We strongly recommend enabling this in your account settings to add an additional layer of protection against unauthorised access.
• Regular security audits: Alonadt's platform undergoes regular security reviews by both internal and external security professionals. Vulnerability assessments and penetration testing are conducted periodically.
• Incident response: Alonadt maintains a formal data breach response plan. In the event of a confirmed breach affecting your personal data, we will notify you within 72 hours of becoming aware, explaining what was affected and the steps being taken.

6 Cookies & Tracking Technologies

Alonadt uses cookies and similar technologies to make the platform work properly, to improve your experience, and to understand how the platform is being used. Cookies are small text files stored on your device when you visit a website.

Alonadt does not use third-party advertising cookies. You will not see data from your Alonadt session used to serve you advertisements on other websites. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent the platform from functioning correctly.

7 Data Retention

Alonadt keeps your data only for as long as it is needed. The specific retention period depends on the type of data and the reason it was collected:

• Account data (name, mobile number, email): Retained for the duration your account is active, plus 5 years after account closure — this is a standard requirement under financial services best practices to allow for dispute resolution.
• Transaction records (deposits, withdrawals, bet history): Retained for 7 years from the date of each transaction. This is aligned with financial record-keeping norms and is necessary to investigate any dispute involving a specific transaction.
• Identity verification documents (CNIC copies): Retained for 5 years from the date of verification or account closure, whichever is later. After this period, identity documents are permanently deleted from our systems.
• Support communications: Retained for 3 years from the date of the conversation, to allow for follow-up on any ongoing matters.
• Session and activity logs: Retained for 90 days, after which they are anonymised or deleted.

When the applicable retention period ends, Alonadt permanently deletes the data from active systems and removes it from backups on the next scheduled backup cycle.

8 Your Data Rights

As an Alonadt player, you have the following rights over your personal data. These are not just words — Alonadt takes data rights seriously and responds to every request within 30 days.

• Right of Access: You can request a copy of all personal data Alonadt holds about you. We will provide this in a clear, readable format within 30 days of your request.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. Simple corrections (like updating a phone number) can be done through your account settings. For identity-related corrections, please contact support.
• Right to Erasure: You can request that we delete your personal data. We will honour this request where we are not legally required to retain the data. Note that we must retain financial transaction records for a statutory minimum period — deletion requests cannot override this legal obligation.
• Right to Restrict Processing: You can ask us to stop using your data for certain purposes — for example, to stop sending marketing messages — without requesting full deletion of your account.
• Right to Data Portability: You can request your personal data in a commonly used machine-readable format (such as CSV or JSON) so that you can transfer it to another service if you choose.
• Right to Object: Where Alonadt processes your data based on legitimate interest, you have the right to object. We will stop processing unless we have compelling legitimate grounds that override your interests.

To exercise any of the above rights, send a request to support@alonadt.com with the subject line "Data Rights Request — [your account username]". Include a brief description of your request and, for identity-sensitive requests, a copy of your CNIC to confirm your identity. Alonadt will respond within 30 calendar days.

9 Minors & Age Restriction

Alonadt is strictly for players aged 18 and above. The platform is not intended for, marketed to, or accessible to anyone under the age of 18. Alonadt takes its responsibility regarding underage access seriously.

If at any point Alonadt identifies that an account is being used by someone under 18, or that false age information was provided during registration, the account will be immediately suspended, all bonuses forfeited, and any winnings from real-money play during the period of underage use forfeited. The original deposited amount may be returned to the relevant payment account, subject to Alonadt's fraud investigation process.

If you believe a minor in your household may have accessed or created an Alonadt account, please contact support@alonadt.com immediately so we can investigate and take appropriate action.

10 Third-Party Links

The Alonadt platform does not contain links to external third-party websites in its gaming or account management sections. Where links to third parties are present — for example, in our Responsible Gaming resources — Alonadt is not responsible for the privacy practices of those external sites.

If you visit any external website via a link from Alonadt, that website's own privacy policy governs how your data is handled there. Alonadt's Privacy Policy applies only to data processed within the Alonadt platform.

11 Changes to This Privacy Policy

Alonadt may update this Privacy Policy from time to time to reflect changes in the platform, our data practices, or applicable legal requirements. When changes are made, the "last updated" date at the top of this page will be revised.

Where a change is material — for example, a significant new category of data collection or a new type of data sharing — Alonadt will notify active players by SMS or email notification before the change takes effect, giving you the opportunity to review the updated policy and, if you disagree, to close your account and withdraw your balance.

Continued use of the Alonadt platform after any revision to this Privacy Policy constitutes your acknowledgement of and agreement to the updated policy.

12 Contact & Data Requests

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact Alonadt through the following channels:

• Email (preferred for data requests): support@alonadt.com — Subject: "Privacy Request — [your username]"
• Live Chat: Available 24/7 from your account dashboard. For data right requests, live chat will direct you to the email process to ensure a proper written record.

Alonadt aims to acknowledge all privacy-related queries within 48 hours and to provide a full resolution within 30 calendar days. Complex requests — such as full data access exports — may take the full 30-day period. You will be kept informed of progress throughout.