Privacy Policy – Barhawin Pakistan Online Gaming Platform

Barhawin ("we", "us", "the platform") is committed to protecting the personal information of every user who registers and plays on the platform. This Privacy Policy explains in plain terms what data Barhawin collects from Pakistani players, why it is collected, how it is stored and protected, who it is shared with, and what rights you have over it.

This policy applies to all personal data collected through the Barhawin website at barhawin.app, the mobile browser experience, promotional communications, and any direct communications between you and our customer support team. By registering an account and using the platform, you acknowledge that you have read and understood this Privacy Policy.

This policy should be read alongside the Terms and Conditions, which govern the overall agreement between you and Barhawin. Where the Terms and this Privacy Policy overlap, both documents apply in full to their respective subject matter.

We keep this policy under regular review. The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to check back periodically, and we will notify registered users of material changes by email.

Barhawin collects personal data in several ways — directly from you when you register or interact with the platform, automatically when you use the platform, and in certain cases from third-party sources for verification purposes. Here is a full breakdown:

Barhawin does not collect sensitive personal data such as biometric data, religious beliefs, political opinions, or health information unless specifically required for a regulatory compliance process and disclosed to you at that time.

Payment card details (full card numbers, CVV) are never stored on Barhawin servers. Card payments are processed entirely through PCI-DSS compliant payment processors and only tokenised references are retained.

Barhawin uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected:

• Account Management: Creating, maintaining, and managing your Barhawin account, including identity and age verification.
• Transaction Processing: Processing deposits, managing withdrawals, applying bonuses, and maintaining accurate PKR account balances.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activities on the platform.
• Regulatory Compliance: Meeting our obligations under applicable laws and regulations, including know-your-customer (KYC) and anti-money laundering (AML) requirements.
• Customer Support: Responding to your queries, resolving disputes, and providing technical assistance.
• Platform Improvement: Analysing usage patterns to improve the platform experience, fix bugs, and develop new features relevant to Pakistani players.
• Responsible Gaming: Monitoring account activity to identify players who may be exhibiting signs of problem gambling and proactively offering support tools.
• Marketing (where opted in): Sending promotional offers, bonus notifications, and updates about new games or features where you have given consent to receive such communications.

Barhawin processes your personal data on one or more of the following legal grounds depending on the specific activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — for example, processing your deposits and withdrawals, maintaining your account, and providing access to games.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including identity verification, AML obligations, and record-keeping requirements.
• Legitimate Interests: Processing carried out for the legitimate operational interests of Barhawin — including fraud detection, platform security, and aggregate usage analysis — where those interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — in particular, for sending marketing communications. You may withdraw your consent at any time through your account settings or by contacting support.

Where processing is based on legitimate interests, Barhawin conducts an assessment to ensure those interests are proportionate and do not unfairly impact your rights. If you would like further information about any specific processing activity, please contact us.

Barhawin uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the website. Here is how we use them:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and last-used payment methods to provide a more convenient experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — which pages are visited most, how long sessions typically last, and which game categories are most popular. This data is used purely to improve the platform.
• Marketing Cookies (where consented): Used to ensure that promotional communications and offers shown to you are relevant to your interests and activity on the platform.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Barhawin platform. Barhawin does not use third-party advertising cookies that track your activity across unrelated websites.

Barhawin shares your personal data only with the categories of third parties listed below, and only where necessary for the stated purpose:

• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive transaction data necessary to process your deposits and withdrawals. These parties are bound by their own regulatory obligations and data protection requirements.
• Identity Verification Providers: Third-party KYC and AML screening services receive identity documents and biographic data to complete verification checks. These providers are contractually bound to process data solely for verification purposes.
• Game Providers: Certified game studios whose titles are hosted on the Barhawin platform receive session data (not personal identity data) necessary for game operation, RNG certification, and RTP reporting.
• Platform Technology Partners: Hosting, cloud infrastructure, and cybersecurity providers who support the operation of the Barhawin platform. All partners operate under data processing agreements that restrict how they can use your information.
• Regulatory and Law Enforcement Authorities: Barhawin will disclose data to competent authorities where legally required to do so — for example, in response to a valid court order, regulatory investigation, or AML reporting obligation.

No personal data is shared with any party outside the categories above. Specifically, Barhawin does not share your data with social media platforms, advertising networks, or data aggregation businesses.

Barhawin retains your personal data for as long as is necessary for the purpose it was collected and to fulfil our legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being open on the platform, plus a minimum of five years after account closure for regulatory compliance purposes.
• Financial Transaction Records: Retained for a minimum of five years after the date of the transaction in accordance with AML record-keeping requirements.
• Identity Verification Documents: Retained for the duration of your account and five years post-closure.
• Customer Support Correspondence: Retained for three years after the last interaction, or longer if associated with an unresolved dispute or regulatory matter.
• Marketing Preference Data: Retained until you withdraw consent or for two years after your last interaction with a marketing communication, whichever is sooner.
• Technical and Usage Logs: Retained for twelve months for platform security and performance analysis purposes.

When data is no longer required, Barhawin securely deletes or anonymises it so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis.

The security of your personal data is a priority for Barhawin. We have implemented a layered set of technical and organisational measures to protect your information against unauthorised access, loss, alteration, and disclosure:

• TLS Encryption: All data transmitted between your device and Barhawin servers is encrypted using industry-standard Transport Layer Security (TLS). The padlock icon in your browser confirms this is active.
• Encrypted Storage: Sensitive data including identity documents and financial records is encrypted at rest on our servers using AES-256 encryption.
• Access Controls: Access to personal data within the Barhawin organisation is strictly limited to staff with a legitimate need. All access is logged and regularly audited.
• Two-Factor Authentication: All internal administrative accounts are protected with mandatory two-factor authentication. Players are encouraged to enable 2FA on their accounts for additional protection.
• Regular Security Audits: The platform undergoes periodic independent security assessments to identify and address vulnerabilities before they can be exploited.
• Incident Response: Barhawin maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.

As a registered user of Barhawin, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@barhawin.app:

Barhawin is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. The registration process requires users to confirm that they are 18 or older, and we conduct age verification checks on all accounts.

If Barhawin discovers that an account has been registered by or is being operated by a person under 18, the account will be immediately suspended, all personal data associated with the account will be securely deleted, and any deposited funds will be returned to the payment method used. Parents and guardians who believe a minor may have registered on the platform should contact us at support@barhawin.app immediately.

Barhawin will only send you promotional emails, SMS notifications, and in-platform promotional messages if you have opted in to receive them during registration or subsequently through your account settings.

Marketing messages from Barhawin may include information about new games, bonus offers, seasonal promotions, VIP Club updates, and cricket betting events. We aim to send communications that are relevant to how you actually use the platform — for example, crash game promotions to players who frequently play crash games.

You can unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email.
• Updating your communication preferences in your account settings.
• Contacting support at support@barhawin.app and requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional communications — you will still receive essential account notifications such as deposit confirmations, withdrawal updates, and security alerts regardless of your marketing preferences.

This Privacy Policy is reviewed regularly and updated when necessary to reflect changes in the way Barhawin operates, changes in applicable law, or improvements in how we explain our data practices to users.

When we make material changes — for example, introducing a new category of data collection, changing the purposes for which data is used, or changing how long data is retained — we will notify registered users by email at least 14 days before the change takes effect. For minor clarifications or corrections that do not affect your rights or how your data is handled, we may update the policy without individual notification.

The date at the top of this page will always reflect the most recent update. We recommend checking this page periodically. Continued use of the Barhawin platform after an updated policy takes effect constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Barhawin handles your personal data, please contact our support team. We take all privacy enquiries seriously and aim to respond within 24 hours.