a26game Privacy Policy — Your Data, Your Rights, Our Responsibilities

a26game operates the online sports betting and casino platform accessible at a26game.bet. For the purposes of this Privacy Policy, a26game acts as the data controller — meaning we are responsible for deciding how and why your personal data is collected and used.

If you have any question, concern, or request relating to your personal data, you can reach the a26game Data Privacy team at support@a26game.bet. Mark your subject line "Privacy Request" and we will respond within 5 business days. For general support questions unrelated to privacy, live chat within the platform is the fastest option.

a26game collects only the personal data that is genuinely necessary to provide our services, meet our legal obligations, and keep the platform safe for all users. We do not collect data speculatively or build advertising profiles. The categories of data we collect are set out in the table below:

a26game does not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where required by identity verification regulations that specifically mandate such collection.

a26game collects your personal data through the following sources:

• Directly from you: when you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in a promotion on a26game.
• Automatically from your device: when you use the a26game website or app, technical data and usage data are collected automatically through cookies, server logs, and similar technologies.
• From payment providers: when you process a transaction, a26game receives confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or card network. We receive only what is needed to confirm and reconcile your transaction — we never receive or store your full card or wallet credentials.
• From identity verification services: a26game uses third-party KYC (Know Your Customer) service providers to verify government-issued identification documents. These providers confirm the authenticity of your documents and return a verification result to a26game.
• From fraud and security tools: a26game uses specialised fraud detection systems that may cross-reference certain technical data points (such as IP geolocation) against known fraud indicators.

a26game uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with what is set out in this Privacy Policy:

• Account creation and management: to set up your a26game account, verify your identity and age, and manage your account settings throughout your relationship with us.
• Providing platform services: to process your bets, settle winnings, execute deposits and withdrawals in PKR, and give you access to live casino, sports betting, and card game services.
• Customer support: to respond to your queries, resolve complaints, and investigate disputes about bet settlements or account issues.
• Security and fraud prevention: to detect and prevent unauthorised account access, bonus abuse, money laundering, match-fixing, and other prohibited activities that could harm our players or the integrity of a26game.
• Regulatory and legal compliance: to meet our obligations under applicable licensing requirements, including anti-money laundering (AML) regulations, responsible gaming duties, and data retention requirements.
• Responsible gaming: to monitor usage patterns and identify signs of problem gambling — such as rapidly increasing deposit frequency, unusual loss patterns, or extended playing sessions — so that we can reach out sensitively where appropriate.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the a26game interface, fix technical issues, and develop new features that are relevant to Pakistani players.
• Marketing communications: to send you promotional offers, bonus notifications, and updates about new features on a26game — but only where you have opted in to receive such communications.

Every use of your personal data by a26game is grounded in one of the following lawful bases:

• Contract performance: processing that is necessary to fulfil the services described in our Terms and Conditions — such as processing bets, managing your account, and executing withdrawals.
• Legal obligation: processing required to comply with applicable laws and licensing requirements, including KYC checks, AML monitoring, and data retention obligations imposed by our regulatory licence.
• Legitimate interests: processing for purposes such as fraud detection, platform security, and responsible gaming monitoring — where our legitimate interest in keeping the platform safe does not override your privacy rights.
• Consent: processing for optional purposes such as marketing emails and push notifications — only where you have given explicit, informed consent that you can withdraw at any time.

a26game does not sell, rent, or otherwise commercialise your personal data to any third party. However, to operate the platform effectively and meet our legal obligations, we do share certain information with the following categories of third-party service providers, all of whom are bound by contractual data protection obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive transaction data necessary to process your PKR deposits and withdrawals.
• KYC and identity verification providers: receive your submitted identity documents to confirm their authenticity and return a verification status to a26game.
• Fraud and security vendors: receive technical data such as IP addresses, device fingerprints, and transaction patterns to identify and prevent fraudulent activity.
• Game content providers: live casino and RNG game providers may receive a pseudonymised player identifier to track game session data for settlement purposes. They do not receive your name, CNIC, or contact details.
• Cloud infrastructure providers: a26game uses cloud hosting services to store and process data. All data stored in the cloud is encrypted at rest.
• Regulatory and law enforcement authorities: a26game is required by law to disclose certain information to licensing authorities, financial intelligence units, and law enforcement where legally mandated — for example, as part of AML compliance or in response to a valid court order.

a26game requires all third-party service providers to implement appropriate technical and organisational security measures and to process personal data only as instructed by a26game.

a26game retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected and to meet applicable legal retention requirements. The following general retention periods apply:

• Account and identity data: retained for the duration of your account plus a minimum of 5 years after account closure. This is required by our licensing obligations and AML regulations.
• Transaction and bet records: retained for a minimum of 5 years from the date of the transaction, as required by financial regulations applicable to our licence.
• Support communications: retained for 3 years after the closure of the support case, to support dispute resolution and quality assurance.
• Technical and usage data (logs): retained for 12 months in full, then in aggregated, anonymised form for up to 36 months for product analytics purposes.
• Marketing consent records: retained for the period during which you remain subscribed plus 2 years, to maintain evidence of consent.

a26game applies comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and a26game's servers — including login, registration, deposits, withdrawals, and game sessions.
• Encryption at rest for all sensitive data fields stored in a26game's databases, including identity documents, financial details, and contact information.
• Multi-factor authentication options for player account login, strongly recommended for all accounts.
• Role-based access controls that limit a26game staff access to personal data to only those whose job functions require it — with all access logged and audited.
• 24/7 security monitoring of platform infrastructure for intrusion attempts, unusual access patterns, and known threat indicators.
• Regular security audits and penetration testing carried out by independent third-party security specialists.

In the event of a personal data breach that poses a risk to your rights, a26game will notify affected players promptly and will report the breach to the relevant regulatory authority within the timeframes required by law. We will also provide guidance on steps you can take to protect yourself.

a26game uses cookies and similar tracking technologies on the platform website. Cookies are small text files stored on your device that help the platform remember your preferences, keep you logged in securely, and understand how players use the platform so we can improve it.

The following categories of cookies are used on a26game:

a26game does not use third-party advertising cookies or allow advertising networks to place tracking cookies on the platform. You can manage your cookie preferences through your browser settings, though disabling essential cookies may affect your ability to log in and use the platform.

You have meaningful rights over your personal data held by a26game. These rights can be exercised by contacting us at support@a26game.bet with the subject line "Privacy Request." We will acknowledge your request within 2 business days and respond fully within 15 business days. If your request is complex or you have submitted multiple requests, we may extend this by a further 15 business days with prior notice.

• Right of Access: You can request a copy of all personal data a26game holds about you. We will provide this in a structured, readable format.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it. Some data — such as your registered name or date of birth — requires additional identity verification before it can be changed.
• Right to Erasure: You can request deletion of your personal data in certain circumstances — for example, when data is no longer needed for the purpose it was collected. Note that regulatory retention obligations mean we may be required to retain some data despite a deletion request.
• Right to Restriction: You can ask us to stop actively processing your data — for example, while a rectification request is being resolved — without requiring deletion.
• Right to Data Portability: You can request that we provide your personal data in a machine-readable format that you can transfer to another service provider.
• Right to Object: You can object to processing based on our legitimate interests — including profiling for responsible gaming purposes — where you believe your privacy interests override ours.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you can withdraw that consent at any time with immediate effect.

a26game is strictly an adult platform intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If a26game discovers or is notified that an account has been registered by a person under 18, that account will be closed immediately, all associated data will be deleted as soon as legally permissible, and any deposited funds will be returned to the original payment method.

Parents and guardians who believe their child has created an a26game account should contact us immediately at support@a26game.bet. We take all such reports seriously and will act on them without delay. Please refer to our Responsible Gaming page for information about parental control tools that can prevent children from accessing gambling sites at the device or network level.

a26game sends marketing communications — including bonus offers, promotion announcements, and platform updates — only to players who have opted in to receive them. You can opt in or out of marketing communications at any time through your account notification settings, or by contacting support.

• SMS / WhatsApp: sent only with explicit opt-in. You can opt out by replying STOP to any marketing message or through your account settings.
• Email: sent only with explicit opt-in. Each marketing email includes an unsubscribe link that takes effect immediately.
• Push notifications (app): controlled through your device notification settings and your a26game account preferences.
• Transactional communications — such as deposit confirmations, withdrawal receipts, and account security alerts — are not marketing and will be sent regardless of marketing preference settings, as they are necessary for account management.

Opting out of marketing communications will not affect your access to promotions that you discover and claim through the Promotions page. It simply means we will not proactively send you promotional messages by SMS, email, or push notification.

a26game may update this Privacy Policy from time to time to reflect changes in how we process data, changes in our services, or changes in applicable legal requirements. When we make material changes, we will notify you by email (if we hold a valid email address for you) and by displaying a notice on the a26game platform for at least 7 days before the changes take effect.

The "Last Updated" date at the top of this policy always shows the most recent revision. We encourage you to review this Privacy Policy periodically so you remain informed about how a26game handles your personal data. Continued use of the a26game platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

For any privacy-related question, data access request, or complaint about how a26game handles your personal information, please get in touch using the contact details below:

• Privacy requests: support@a26game.bet — subject line: "Privacy Request"
• Live Chat: Available 24/7 within the a26game platform after login
• General FAQ: a26game FAQ — covers the most common account and data questions

If you are not satisfied with a26game's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. a26game will provide details of the appropriate authority upon request.

a26game is committed to resolving all privacy complaints fairly and promptly. We acknowledge all privacy-related emails within 2 business days and aim to fully resolve the matter within 15 business days. For complex cases, we will keep you informed of progress throughout.