Privacy Policy — golo789

1. Introduction

golo789 ("we", "us", "our", "the Company") is committed to protecting and respecting the privacy of every individual who interacts with the golo789 platform. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us in connection with your use of the golo789 online betting and casino platform at golo789.bet (the "Platform").

We understand that our members in Pakistan and across the region place significant trust in us when they share their personal information. We take that responsibility seriously. This Policy is written in plain, accessible English while maintaining the legal rigour required of a licensed gaming operator. We encourage you to read it fully.

For the purposes of this Policy, the data controller is golo789, operating under its internationally recognised gaming licence. All enquiries regarding data protection should be directed to our support team at the contact details provided in Section 14.

---

2. Personal Data We Collect

We collect and process several categories of personal data, depending on your interaction with the Platform. The categories are as follows:

2.1 Identity Data

Full legal name, date of birth, gender, nationality, and copies of government-issued identification documents such as your CNIC (Computerised National Identity Card), passport, or driving licence. This data is collected primarily for age verification and KYC (Know Your Customer) compliance purposes.

2.2 Contact Data

Email address, mobile phone number, and residential address. We use this information to communicate with you about your account, transactions, and — where you have opted in — promotional offers.

2.3 Financial Data

Payment method details including JazzCash account identifiers, EasyPaisa mobile wallet numbers, bank account details (HBL, UBL, Meezan Bank), and cryptocurrency wallet addresses where applicable. We do not store full debit or credit card numbers on our servers. Payment data is processed by our authorised payment service providers in accordance with their own security standards.

2.4 Transaction Data

Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and winnings or losses associated with your account. This data is retained for financial audit, AML compliance, and dispute resolution purposes.

2.5 Technical Data

IP address, browser type and version, operating system, device identifiers, time zone setting, screen resolution, and session duration. This data is collected automatically via log files and cookies when you visit the Platform.

2.6 Usage Data

Information about how you use the Platform, including pages visited, features accessed, bet types preferred, session frequency, and navigation paths. This data helps us improve the Platform and detect unusual usage patterns associated with fraud or problem gambling.

2.7 Communications Data

Records of any correspondence between you and golo789, including live chat transcripts, email exchanges, and support ticket histories. We retain these records to ensure quality of service and resolve disputes accurately.

---

3. How We Collect Your Data

We collect your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting customer support, or responding to surveys.
• Automated technologies: Cookies, web beacons, server logs, and similar tracking technologies that operate when you access and navigate the Platform. See Section 9 for full cookie details.
• Third-party sources: Identity verification agencies and fraud prevention databases used during KYC checks; payment processors confirming the status of transactions; and analytics providers that supply aggregated behavioural data.
• Publicly available sources: Sanctions lists, politically exposed person (PEP) databases, and adverse media databases reviewed as part of our AML obligations.

---

4. Purposes of Processing

golo789 processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or establishing a new legal basis.

Purpose	Data Categories Used
Account registration and management	Identity, Contact
Age verification and KYC compliance	Identity, Financial
Processing deposits and withdrawals	Financial, Transaction
Bet settlement and game result recording	Transaction, Usage
Fraud detection and prevention	Technical, Transaction, Identity
Anti-money laundering (AML) monitoring	Identity, Financial, Transaction
Responsible gaming monitoring and intervention	Usage, Transaction, Communications
Customer support and dispute resolution	Communications, Transaction, Identity
Platform improvement and analytics	Technical, Usage
Promotional communications (opt-in only)	Contact, Usage
Legal and regulatory compliance	All categories as required

---

5. Legal Basis for Processing

We process your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to fulfil our contractual obligations to you as a member, including account management, transaction processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable laws, including AML legislation, gaming licence conditions, and tax reporting obligations.
• Legitimate interests: Processing carried out in the legitimate interests of golo789, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw your consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.

---

6. Data Sharing & Disclosure

golo789 does not sell your personal data. We may share your data with the following categories of third parties strictly as necessary:

6.1 Service Providers

Third-party suppliers engaged by golo789 to provide technical, operational, or administrative services on our behalf — including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), identity verification providers, cloud hosting services, customer support platforms, and analytics tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory & Licensing Authorities

Where required by our gaming licence conditions, we may be obligated to provide player data to our licensing authority for audit, compliance review, or investigation purposes. We cooperate fully with all lawful regulatory requests.

6.3 Law Enforcement & Legal Process

We will disclose personal data to law enforcement agencies, courts, or other government bodies where required by applicable law, court order, or where we believe disclosure is necessary to protect the safety of any person or to prevent criminal activity, including fraud and money laundering.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of golo789's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via an on-site notice or email prior to the transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Policy.

---

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable laws and our licensing obligations. The following general retention periods apply:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• Transaction records: Retained for five (5) years from the date of each transaction for financial audit and tax purposes.
• Customer support communications: Retained for three (3) years from the date of the final communication to support dispute resolution.
• Marketing consent records: Retained for the duration of your membership plus two (2) years to demonstrate compliance with consent obligations.
• Technical and log data: Typically retained for twelve (12) months for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, data is securely and permanently deleted or anonymised so that it can no longer be associated with any identifiable individual.

---

8. Data Security

golo789 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff who handle personal data undergo background checks and regular data protection training.
• Two-factor authentication: All internal staff accounts with access to member data require multi-factor authentication.
• Penetration testing: Our systems are subject to regular independent security assessments and penetration tests.
• Incident response: We maintain a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.

---

9. Cookies & Tracking Technologies

golo789 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, analyse traffic patterns, and — where applicable — deliver relevant promotional content to members who have opted in.

9.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing core platform functionality.
• Performance cookies: Collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently and whether error messages are received. This data is used to improve the Platform.
• Functional cookies: Remember your preferences such as language settings, preferred sports markets, and notification preferences.
• Analytics cookies: Used by our analytics service provider to compile aggregate reports on Platform usage. No personally identifiable information is shared with the analytics provider.
• Marketing cookies (opt-in only): Used to deliver promotional content relevant to your interests. These cookies are only placed if you have given explicit consent via our cookie preference centre.

9.2 Managing Cookies

You can control the placement of non-essential cookies via the cookie preference centre accessible from the footer of every page on the Platform. You may also manage cookies through your browser settings; however, disabling essential cookies will impair your ability to use core Platform features including login and bet placement.

---

10. Your Data Protection Rights

Depending on your location and the applicable data protection laws, you may have the following rights in relation to your personal data held by golo789:

• Right of access: You may request a copy of the personal data we hold about you, along with information about how we process it. We will respond to verified access requests within 30 days.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details (name, address, contact information), you can update these directly via your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, you have withdrawn consent (and no other legal basis applies), or where we have processed it unlawfully. Note that we may be legally required to retain certain data (e.g. transaction records) even after an erasure request.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances, such as while you contest its accuracy or object to processing based on legitimate interests.
• Right to data portability: Where we process your data based on consent or contract, and by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, or to direct marketing at any time. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team using the details in Section 14. We may need to verify your identity before processing your request. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

---

11. Minors & Under-Age Users

The golo789 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 21.

During registration, we require all users to confirm their date of birth and we conduct age verification checks as part of our KYC process. Where we discover that an account has been opened by a person under 21, or where we have reason to believe a registered member is under 21, we will immediately suspend the account, void any associated bets or winnings, and securely delete or return all data relating to that individual in accordance with our legal obligations.

---

12. International Data Transfers

golo789 operates under an international gaming licence and may engage service providers located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to, stored in, or processed in countries other than the country in which you reside.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include:

• Standard contractual clauses approved by applicable data protection authorities, incorporated into our contracts with third-party service providers.
• Transfers only to countries that provide an adequate level of data protection as recognised by our licensing authority's data protection framework.
• Additional technical safeguards, such as encryption and pseudonymisation, applied to data prior to transfer where the destination country's protections are considered insufficient on their own.

By using the golo789 platform and providing us with your personal data, you acknowledge that your data may be transferred, processed, and stored in jurisdictions outside Pakistan in accordance with this Policy.

---

13. Changes to This Privacy Policy

golo789 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered members by posting a prominent notice on the Platform and, where the change is significant, by sending a notification to your registered email address at least seven (7) days before the revised Policy takes effect.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

---

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way golo789 handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week and aim to acknowledge all privacy-related queries within 48 hours.

You may reach us by email at: [email protected]

When contacting us about a data protection matter, please include your registered username, a brief description of your query or request, and — where applicable — the specific right you wish to exercise (e.g. right of access, right to erasure). This will help us process your request efficiently and accurately.

If you are not satisfied with our response to a data protection query, you have the right to escalate your complaint to the relevant data protection supervisory authority or the dispute resolution body designated by our gaming licence authority.