DuckDice Privacy Policy – How We Protect Your Data in Pakistan

This Privacy Policy applies to all users of the DuckDice platform at duckdice.click and any associated interfaces. By creating a DuckDice account or continuing to use the platform, you acknowledge that you have read and understood this policy. This document is part of the overall agreement between you and DuckDice, alongside the Terms and Conditions and Responsible Gaming Policy.

DuckDice operates the online casino and sports betting platform at duckdice.click. We are the data controller for all personal information collected through this platform. "Personal data" means any information that can be used to identify you — your name, phone number, email address, payment details, and your activity on the platform all fall under this definition.

This Privacy Policy covers all personal data collected when you visit the DuckDice website, register an account, make deposits or withdrawals in PKR, place bets on cricket, football, or casino games, claim bonuses, contact our support team, or use any other feature of the DuckDice platform. It also covers data collected when you visit the DuckDice site without registering an account.

DuckDice's platform is designed for Pakistani members. All references to payment methods, currency, and local practices in this policy refer to Pakistani Rupees (PKR) and commonly used Pakistani payment services including Easypaisa, JazzCash, NayaPay, SadaPay, and domestic bank IBFT transfers.

DuckDice collects data in two main ways: information you provide directly, and information collected automatically when you use the platform. Here is a clear breakdown of both categories.

DuckDice only collects personal data when we have a clear and legitimate purpose for doing so. We do not collect data "just in case" it might be useful later. Below are all the reasons we process personal data, along with the legal basis for each one.

• Account creation and management — To set up and maintain your DuckDice account, verify your identity, and ensure only you can access your funds. (Basis: Contract)
• Processing PKR deposits and withdrawals — To send and receive funds via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments. (Basis: Contract)
• Identity verification (KYC) — To comply with Anti-Money Laundering obligations and confirm that each DuckDice member is who they say they are. (Basis: Legal Obligation)
• Responsible gaming monitoring — To identify patterns of play that may indicate problem gambling and to enforce self-imposed limits. (Basis: Legitimate Interest)
• Fraud prevention and security — To detect suspicious activity, prevent account takeover, and protect DuckDice members from fraud. (Basis: Legitimate Interest / Legal Obligation)
• Customer support — To assist you when you contact our team and to maintain records of support interactions. (Basis: Contract)
• Platform improvement — Aggregated, anonymised data is used to understand how members use DuckDice and to improve performance. (Basis: Legitimate Interest)
• Marketing communications — To send you bonus offers and promotions by email or SMS, but only if you have opted in. (Basis: Consent)

DuckDice does not sell your personal data to any third party, full stop. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, domestic banks, and card networks receive the minimum financial data required to process your PKR transactions. These processors are bound by their own regulatory obligations.
• Identity verification services — If KYC verification is required, your identity documents are processed by a certified KYC provider. They are contractually required to handle your data securely and only for verification purposes.
• Game providers — When you play a game (slots, live casino, crash games), the relevant provider's software processes game session data. This is technical data only — game providers do not receive your personal identity or payment details.
• Analytics providers — Aggregated, anonymised data about platform usage is shared with analytics partners. This data cannot be used to identify individual members.
• Law enforcement and regulators — DuckDice will disclose personal data to Pakistani authorities when legally required to do so, including in response to court orders and regulatory investigations. We will notify you of any such disclosure where permitted by law.

DuckDice uses cookies — small text files stored in your browser — and similar tracking technologies to keep the platform running smoothly, remember your preferences, and understand how members use the site. You can control most cookies through your browser settings, though disabling essential cookies may affect your ability to log in or use the platform.

DuckDice does not use third-party advertising tracking cookies that follow you across other websites. If you use DuckDice on mobile, the same cookie policy applies to the mobile browser session. DuckDice does not use fingerprinting or other invasive tracking methods beyond standard session management.

DuckDice takes data security seriously. All personal data held by DuckDice is stored on servers that are protected by industry-standard security measures including encryption at rest, encrypted transit (TLS/SSL on all connections), access controls, regular security audits, and intrusion detection systems. Only DuckDice staff and authorised service providers who genuinely need access to specific data to perform their job can access it — and all such access is logged.

Passwords stored by DuckDice are hashed using a strong one-way algorithm — DuckDice staff cannot read your password. Financial data transmitted through the DuckDice platform is encrypted end-to-end. No full payment card details ever pass through or are stored on DuckDice servers.

While DuckDice takes every reasonable step to protect your data, no online system can be guaranteed 100% secure. You are responsible for keeping your DuckDice password confidential and for logging out of shared devices. DuckDice will never ask for your password by email, phone, or chat.

DuckDice retains personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. Here is a practical guide to how long different categories of data are typically retained.

• Account and identity data — Retained for the duration of your account, plus 5 years after account closure (required for AML compliance and legal dispute resolution).
• Transaction records — PKR deposit and withdrawal records are retained for 7 years after the transaction date, in line with financial record-keeping requirements.
• Gaming activity logs — Bet history and game session records are retained for 3 years after the activity date, used for dispute resolution and responsible gaming monitoring.
• Support communications — Customer support chat and email records are retained for 2 years after the last interaction.
• Marketing preferences — Records of your consent or opt-out choices are retained until 1 year after account closure.
• Technical / server logs — IP addresses and connection logs are retained for 90 days, then automatically deleted unless they are associated with an active security investigation.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you personally. If you request account closure, DuckDice will begin the deletion process for data that is not subject to mandatory retention obligations within 30 days of the closure request.

As a DuckDice member and a Pakistani resident, you have the following rights over your personal data. All requests should be sent to support@duckdice.click with your registered email address and a brief description of your request. DuckDice will respond within 30 days.

DuckDice does not knowingly collect personal data from anyone under the age of 18. The platform is strictly an adult gaming platform and all members are required to confirm their age and provide proof of identity before withdrawals are processed. If DuckDice discovers that personal data has been collected from a person under 18, that account will be immediately closed, all balances refunded, and all personal data deleted without retention.

If you believe a minor has registered a DuckDice account using your personal details or payment methods, contact our support team immediately at support@duckdice.click. We will act on all such reports within 24 hours.

DuckDice may send you emails and SMS messages about bonus offers, promotions, new games, and platform updates, but only if you have given your consent during registration or subsequently opted in through your account settings. We will never send you unsolicited marketing if you have not opted in.

You can withdraw consent for marketing communications at any time by clicking the "Unsubscribe" link at the bottom of any DuckDice marketing email, by updating your notification preferences in your account settings, or by emailing support@duckdice.click with the subject "Marketing Opt-Out". Opting out of marketing does not affect operational communications — DuckDice will still send you security alerts, withdrawal confirmations, and essential account notifications.

DuckDice reviews this Privacy Policy regularly and updates it when our data practices change, when we add new features to the platform, or when applicable law requires a revision. The "Last Updated" date at the top of this page will always reflect the most recent revision.

For material changes — changes that could significantly affect how your personal data is used — DuckDice will notify you by email to your registered address at least 7 days before the change takes effect. For minor updates such as clarifications or formatting corrections, we may update the policy without advance notice. Continued use of DuckDice after a policy update constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy whenever you receive a notification about an update. If you have questions about any change, our support team will explain exactly what has changed and why.

If you have any questions about this Privacy Policy, about how DuckDice handles your personal data, or if you wish to exercise any of your data rights, please contact us using the details below. Our support team handles privacy queries in both English and Urdu and will respond within 3 business days.

If you are not satisfied with DuckDice's response to a privacy request or complaint, you have the right to raise the matter with the appropriate data protection authority.