FanDuel Cash Privacy Policy – How We Protect Your Data

1. Who This Policy Covers

This Privacy Policy applies to every person who interacts with fanduel — whether you are a registered Pakistani player with an active account, someone who has visited fanduel.cash without signing up, or a former account holder whose data we retain for regulatory compliance purposes. References to "you" and "your" throughout this policy mean any of these individuals.

fanduel is the data controller for all personal information collected through this platform. This means we make the decisions about how and why your data is used. Where we engage third-party processors — such as payment gateway providers for JazzCash and Easypaisa transactions — those processors act only on our instructions and are contractually bound to the same data protection standards we apply internally.

This policy is written for and directed at Pakistani players. All references to your rights, contact methods, and fanduel's obligations should be understood in the context of our Pakistani user base. If you have accessed fanduel from outside Pakistan, please be aware that this policy reflects our practices for Pakistani operations.

2. What Data We Collect from You

fanduel collects only the personal data it genuinely needs to operate your account and deliver the services you use. We do not collect data speculatively or build extensive profiles beyond what is necessary. Below is a clear breakdown of the categories of data we collect and how they arise.

2.1 Data You Give Us Directly

• Registration data: Your name, date of birth, Pakistani mobile number, email address, and chosen username when you create a fanduel account.
• Identity verification documents: A copy of your CNIC (Computerised National Identity Card) or other government-issued ID when requested for KYC (Know Your Customer) compliance.
• Payment information: Your mobile wallet details (JazzCash or Easypaisa account number), bank account details for IBFT transfers, or card details for Visa/Mastercard transactions. fanduel does not store full card numbers — these are tokenised by our payment processor.
• Communications: Any messages you send to fanduel support through live chat, email, or any other channel. We retain these to resolve your queries and to improve our service.
• Responsible gaming preferences: Any deposit limits, session time limits, or self-exclusion requests you set within your fanduel account.

2.2 Data Collected Automatically

• Device and technical data: Your IP address, device type, operating system version, browser type, and screen resolution when you access fanduel.
• Usage data: Pages visited on fanduel, bets placed, games played, session duration, betting history, and navigation patterns within the platform.
• Transaction data: A complete record of all deposits, withdrawals, bonuses claimed, and bet settlements on your fanduel account.
• Location data: Country-level location inferred from your IP address. fanduel does not collect precise GPS location data.

3. Why fanduel Collects Your Data

Every piece of data collected by fanduel serves a specific, documented purpose. We are not in the business of data brokerage and we do not profit from selling your information to advertisers or any other third parties. Here is exactly why we use each category of data.

fanduel does not use your personal data to make automated decisions that have legal or similarly significant effects on you, except in the context of fraud detection systems where a transaction may be temporarily held pending manual review. If your account is affected by an automated decision, you have the right to request human review — see Section 9 (Your Rights).

4. Legal Basis for Processing Your Data

fanduel processes your personal data on the following legal grounds. Each processing activity maps to one of these bases:

• Contractual necessity: Processing your registration data, payment details, and betting activity is necessary to deliver the services you have contracted with fanduel to receive. Without this processing, fanduel cannot operate your account.
• Legal obligation: Identity verification, anti-money laundering checks, and the retention of transaction records for the minimum statutory period are legal obligations that fanduel must fulfil regardless of your preferences.
• Legitimate interests: Fraud detection, platform security monitoring, and certain analytics used to improve fanduel's services are carried out on the basis of our legitimate interest in operating a safe and reliable platform.
• Consent: Where fanduel sends you optional marketing communications about promotions or new games, this is done only with your explicit consent, which you can withdraw at any time from your account settings.

5. How fanduel Stores and Protects Your Data

Data security is not an afterthought at fanduel — it is a core infrastructure requirement. The following technical and organisational measures are in place to protect your personal information.

5.1 Technical Safeguards

• All data transmitted between your device and fanduel's servers is encrypted using 256-bit TLS (Transport Layer Security). This applies to every page, login, deposit, withdrawal, and game session.
• Passwords are stored using industry-standard one-way hashing algorithms. fanduel staff cannot read your password — only you know it.
• Payment card numbers are never stored on fanduel's systems. Card transactions are processed by a PCI-DSS Level 1 compliant payment processor, and only a tokenised reference is retained by fanduel.
• Database access is restricted on a strict need-to-know basis. Only authorised fanduel staff whose role requires access to personal data can access production systems, and all such access is logged and audited.
• Automated intrusion detection systems monitor fanduel's infrastructure 24/7 and generate alerts for any unusual access patterns.

5.2 Organisational Safeguards

• All fanduel staff who handle personal data receive data protection training as part of their onboarding and annual refresher programme.
• Access to production data is reviewed quarterly and revoked immediately when a staff member changes role or leaves fanduel.
• Third-party processors who handle personal data on fanduel's behalf are contractually required to maintain security standards equivalent to those we apply ourselves.
• In the event of a data breach that poses a risk to your rights and freedoms, fanduel will notify affected users without undue delay and take immediate steps to contain and investigate the breach.

6. Who fanduel Shares Your Data With

fanduel does not sell, rent, or trade your personal data to any third party. We share data only where it is strictly necessary for the delivery of services or required by law. The categories of third parties with whom fanduel may share data are:

6.1 Payment Processors

To process your PKR deposits and withdrawals, fanduel shares the minimum necessary transaction details with our payment processing partners — JazzCash, Easypaisa, NayaPay, SadaPay, and our banking partners for IBFT and card transactions. These partners receive only the data needed to process the specific transaction and are bound by their own data protection obligations.

6.2 Identity Verification Providers

For KYC verification, fanduel may use a third-party identity verification service to validate the CNIC or other documents you submit. These providers confirm authenticity of documents but do not retain your full identity data beyond the verification process. All such providers are contractually bound to fanduel's data handling standards.

6.3 Analytics and Platform Providers

fanduel uses analytics tools to understand how Pakistani players interact with the platform so we can improve it. Where these tools involve third-party providers, they receive only aggregated or pseudonymised data — not your name, contact details, or financial information. You can opt out of non-essential analytics in your account privacy settings.

6.4 Law Enforcement and Regulatory Bodies

If fanduel receives a lawful request from a competent authority — such as a court order, regulatory instruction, or law enforcement request — we will provide the requested data as required by law. Where legally permitted to do so, fanduel will notify you of such a request before complying. fanduel cooperates fully with investigations into fraud, money laundering, and other criminal activity.

7. Cookies and Tracking Technologies

fanduel uses cookies and similar technologies on fanduel.cash to ensure the platform works correctly, to keep you securely logged in, and to understand how players navigate the site. Below is a breakdown of the cookies used.

Essential cookies cannot be disabled as they are required for fanduel to function. Analytics and optional cookies can be managed from the cookie preference centre, accessible via the link in the footer of any fanduel page. If you block all cookies using your browser settings, some fanduel features may not work correctly.

8. How Long fanduel Retains Your Data

The length of time fanduel retains your personal data depends on the type of data and the reason it was collected.

• Active account data: All data associated with your fanduel account is retained for as long as your account remains open, plus five years after account closure to satisfy legal and regulatory retention obligations.
• Transaction records: Deposit and withdrawal records, including PKR amounts, dates, and payment method references, are retained for a minimum of five years after the transaction date in compliance with financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for five years after account closure. After this period, documents are securely destroyed.
• Support communications: Chat logs and email correspondence with fanduel support are retained for three years after the conversation closes, or five years if the communication relates to a formal dispute or complaint.
• Self-exclusion records: If you self-exclude from fanduel, your exclusion record is retained permanently to prevent re-registration during the exclusion period and to honour the exclusion even if your original account is subsequently closed.
• Analytical data: Pseudonymised usage data used for platform analytics is retained for 24 months before being deleted or further anonymised.

After any applicable retention period, fanduel securely destroys personal data using methods appropriate to the format of the data. Digital data is permanently deleted from active systems and removed from backups within the next scheduled backup cycle. Physical documents, where they exist, are shredded by a certified secure destruction service.

9. Your Rights Over Your Personal Data

As a Pakistani fanduel player, you have meaningful rights over your personal data. fanduel takes these rights seriously and will respond to all valid requests within 30 days. You can exercise any of the following rights by contacting privacy@fanduel.cash.

10. Children's Privacy

fanduel is a real-money gaming platform and is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes an age declaration and identity verification step specifically designed to prevent underage registration.

If fanduel discovers that personal data has been collected from a person under 18, we will immediately close the account, delete the associated personal data as quickly as legally permissible, and return any real-money balance to the payment source used for the initial deposit. If you believe a minor has created a fanduel account, please notify us immediately at privacy@fanduel.cash. We will investigate and act promptly.

We also encourage parents and guardians in Pakistan to be aware of tools available to restrict access to gambling websites on shared devices, including parental control software and network-level filtering.

11. Changes to This Privacy Policy

fanduel reviews this Privacy Policy regularly and updates it when our practices change or when legal requirements evolve. For material changes — those that meaningfully affect how your data is used or your rights regarding it — you will receive at least 14 days' advance notice via email and an in-platform notification before the changes take effect.

For minor corrections, clarifications, or updates that do not affect the substance of our data practices, fanduel may update this policy without advance notice, with the "last updated" date at the top of the page reflecting any changes. We recommend bookmarking this page and checking it periodically if you want to stay up to date with our current practices.

If you are not comfortable with changes to this Privacy Policy, you can request account closure before the changes take effect. Your real-money balance will be returned in full. Your right to access, correct, and delete data already held by fanduel is not affected by account closure.

12. Contact Our Privacy Team

For any questions, concerns, or requests related to this Privacy Policy or your personal data on fanduel, please contact our dedicated privacy team:

• Privacy email: privacy@fanduel.cash
• General support: support@fanduel.cash
• Live chat: Available 24/7 inside the fanduel platform after login.

When contacting us about a data rights request, please include your registered mobile number or account username to help us locate your data promptly. We will acknowledge your request within 2 working days and provide a full response within 30 days. Complex requests may take longer, in which case we will notify you of the extended timeline and the reason for it.