Privacy Policy — How ls1ak Handles Your Data

01About This Policy

This Privacy Policy applies to all personal data collected by ls1ak through its website and mobile application. It covers data collected during registration, during ongoing account use, through payment transactions and through any communications you have with the ls1ak support team.

ls1ak is committed to handling your personal information responsibly. We understand that Pakistani players trust us with sensitive details — including identity documents and payment information — and we take that responsibility seriously. This policy is written in plain language so you can understand exactly what happens with your data without needing to wade through legal jargon.

This policy should be read together with the ls1ak Terms and Conditions, which govern the overall use of the platform. Where this policy refers to account-related matters, the Terms and Conditions will provide additional context.

02Data We Collect

ls1ak collects personal data through several channels. The table below summarises the main categories of data collected, the specific information involved and the circumstances in which it is collected.

ls1ak does not collect your mobile wallet PIN, bank account password or card CVV. These credentials are entered directly on the respective payment provider's interface during transactions. We receive only the transaction outcome and a reference number.

03How We Use Your Data

Every piece of data ls1ak collects serves a specific purpose. We do not collect data speculatively. The following are the primary purposes for which your personal data is used:

• Account creation and management: Your registration details are used to create and maintain your ls1ak account, authenticate your logins and apply your personal settings and preferences.
• Payment processing: Your payment method details and transaction history are used to process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and other supported methods. Financial records are also maintained to comply with anti-money laundering obligations.
• Identity verification: Your CNIC and supporting documents are used to verify that you are who you say you are, that you meet the age requirement of 18 or above, and to prevent fraud and duplicate accounts.
• Platform operation: Your activity data — betting history, game records, session data — is used to operate the platform correctly, settle bets and games accurately, and resolve any disputes about outcomes or transactions.
• Responsible gaming: Your activity patterns may be reviewed to identify signs of problem gambling behaviour. If patterns consistent with harmful play are identified, ls1ak may proactively contact you or apply account restrictions in line with our Responsible Gaming Policy.
• Security and fraud prevention: Technical data including IP addresses, device identifiers and login patterns is used to detect and prevent unauthorised account access, fraudulent registrations and prohibited conduct.
• Customer support: Your contact details and support communication history are used to respond to your queries, resolve disputes and follow up on any ongoing issues.
• Platform improvement: Aggregated, anonymised usage data is used to understand how players interact with the platform, which features are most used, and where improvements can be made. This analysis does not identify individual users.
• Promotional communications: If you have opted in to receive marketing communications, your contact details may be used to send you information about ls1ak promotions, new features and offers. You can opt out of marketing communications at any time through your account settings or by contacting support.

04Legal Basis for Processing

ls1ak processes your personal data on the following legal grounds depending on the purpose:

• Contract performance: Processing necessary to provide you with the platform services you have registered for, including account management, bet settlement and payment processing.
• Legal obligation: Processing required to comply with anti-money laundering rules, identity verification requirements and financial record-keeping obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, abuse detection and general platform improvement, where these interests do not override your individual data protection rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given explicit consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05Data Sharing

ls1ak does not sell your personal data. We share data only where it is necessary to operate the platform or comply with legal requirements. The categories of third parties who may receive your data are as follows:

• Payment processors: JazzCash, Easypaisa, Raast, bank partners and card processors receive the minimum data required to process your PKR transactions. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Where third-party KYC (Know Your Customer) tools are used to assist with CNIC verification or document checking, your identity documents may be processed by the provider's system. These providers are contractually bound to handle data securely and only for the purpose of verification.
• Game content providers: Third-party casino game studios and live casino providers may receive session identifiers and game-related data necessary to operate their games on the ls1ak platform. These providers do not receive your identity documents or full financial records.
• Analytics and performance tools: Aggregated, anonymised technical data may be processed by platform monitoring tools to help identify performance issues and uptime problems. No personally identifiable information is included in this data.
• Legal and regulatory authorities: ls1ak may disclose personal data to relevant authorities where required to do so by applicable law, court order or where disclosure is necessary to prevent or investigate serious fraud or financial crime.

All third-party service providers who handle personal data on behalf of ls1ak are required to maintain appropriate security standards and to use that data only for the specific purpose for which it was shared.

06Cookies & Tracking

ls1ak uses cookies and similar technologies to keep the platform running smoothly and securely. A cookie is a small text file placed on your device when you visit the platform. The following types of cookies are used:

• Session cookies: These are temporary cookies that keep you logged in during your current visit. They are automatically deleted when you close your browser or end your session. Without session cookies, you would be logged out every time you navigated to a new page.
• Security cookies: These help identify and block suspicious activity, including multiple rapid login attempts from different locations and other patterns associated with account takeover attempts.
• Preference cookies: These remember settings you have chosen — such as language preference or responsible gaming limit settings — so you do not have to reset them on each visit.
• Performance cookies: These collect anonymised data about how pages are loaded and where errors occur, helping the technical team identify and fix issues faster.

ls1ak does not use third-party advertising cookies or tracking pixels that would allow external ad networks to profile your browsing behaviour across other websites. You can manage cookie settings through your browser settings, though disabling essential session cookies will prevent you from staying logged in.

07Data Retention

ls1ak retains personal data only for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable law. The general retention periods that apply are:

• Active account data: Retained for the full duration of your account's active status plus a minimum post-closure period as required for financial and legal record-keeping.
• Transaction and financial records: Retained for a minimum of five years following the transaction date, in line with standard financial record-keeping requirements for anti-money laundering compliance.
• Identity verification documents: Retained for a minimum period following account closure as required by applicable anti-money laundering and identity verification obligations.
• Support communications: Chat transcripts and email records relating to account matters are retained for as long as the account is active and for a reasonable period after closure to assist with any follow-up queries or disputes.
• Marketing consent records: If you have opted in to marketing, a record of that consent is retained until it is withdrawn plus a short additional period to demonstrate compliance.

When retention periods expire and there is no ongoing legal obligation to retain the data, ls1ak will securely delete or anonymise the relevant information so that it can no longer be associated with you as an individual.

08Data Security

ls1ak implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols, ensuring that data sent between your device and ls1ak servers cannot be intercepted in readable form.
• Encryption of sensitive data at rest, including stored identity documents and financial records, so that even in the event of a server-level breach the data is not accessible in plain text.
• Access controls ensuring that only authorised ls1ak staff with a specific operational need can access personal account data, and that all such access is logged and auditable.
• Regular security reviews of platform infrastructure and third-party integrations to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication options for player accounts, adding a second layer of protection beyond the password alone.

While ls1ak takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a significant risk to your rights, ls1ak will notify affected users promptly and take all necessary steps to contain and remediate the incident.

You also play a role in keeping your account secure. Using a strong, unique password, enabling two-factor authentication and logging out after each session all significantly reduce the risk of unauthorised access to your account.

09Your Rights

You have the following rights in relation to the personal data ls1ak holds about you. To exercise any of these rights, contact the ls1ak support team with your account details and a clear description of your request.

• Right of access: You may request a copy of the personal data ls1ak holds about you. We will provide this within a reasonable timeframe after verifying your identity.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account name or date of birth corrections, identity document verification will be required.
• Right to deletion: You may request deletion of your personal data where there is no longer a legitimate reason for us to hold it and where no legal retention obligation applies. Note that financial transaction records and identity verification records are subject to minimum retention periods that cannot be shortened regardless of a deletion request.
• Right to restrict processing: In certain circumstances — for example, where you have contested the accuracy of data we hold — you may request that we restrict processing of that data while the matter is resolved.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. The most common use of this right is to opt out of marketing communications.
• Right to data portability: You may request a copy of personal data you have provided to ls1ak in a structured, commonly used format where technically feasible.

ls1ak aims to respond to all data rights requests within 30 days. In cases of particular complexity, a further extension of up to 30 days may be required, in which case you will be notified of the delay and the reason for it.

10Children's Privacy

The ls1ak platform is strictly for adults aged 18 and above. ls1ak does not knowingly collect personal data from anyone under the age of 18. The registration process includes an age declaration, and accounts are subject to identity verification to confirm age eligibility.

If ls1ak becomes aware that personal data has been collected from a person under the age of 18, the relevant account will be immediately closed and any associated data will be deleted except where retention is required to document the breach and prevent re-registration by the same individual.

If you believe that a minor has registered an account on the ls1ak platform, please contact support immediately so that the matter can be investigated and resolved without delay.

11Changes to This Policy

ls1ak may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. When meaningful changes are made, registered users will be notified via email or an in-platform notification before the updated policy takes effect.

The updated policy will always be available on this page with a revised "Last Updated" date at the top. We encourage you to review this page periodically, especially if you receive a notification of changes.

Your continued use of the ls1ak platform after the effective date of any changes to this policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and contact support to request account closure.

12Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal data has been handled, please contact the ls1ak support team. You can reach us via live chat after login, or by email — our support address is displayed in the footer of this page.

When submitting a data rights request, please include your registered account username or email address so that we can locate your account and respond accurately. All requests are handled with care and in strict confidence.

For questions about responsible gaming tools including deposit limits and self-exclusion, please visit the Responsible Gaming page or mention your request clearly when contacting support.