Chance Privacy Policy – How We Protect Your Data

1 About This Policy

Chance (chance.vin) is an online entertainment platform serving adult players in Pakistan. This Privacy Policy describes how we collect, use, store, and protect personal data provided by users of the platform. It also explains the choices you have regarding your own information and how to exercise those choices.

We take data privacy seriously. The platform is built to collect only what is genuinely needed to operate player accounts, process transactions in PKR, and deliver a reliable gaming experience. We do not collect data speculatively or retain it longer than necessary.

This policy should be read alongside our Terms and Conditions, which govern the overall use of the platform. Where this policy uses the terms "we", "us", or "our", these refer to Chance (chance.vin).

2 Data We Collect

The personal information we collect depends on how you interact with the platform. Below is a breakdown of the main categories:

Registration and Account Data

When you create a Chance account, we collect information including your full name, date of birth, email address, mobile number, and the login credentials you set up. This information is required to establish your account and verify that you meet the minimum age requirement of 18 years.

Identity Verification Data

As part of standard account management, we may request a copy of a valid identity document such as your CNIC, passport, or driving licence, along with proof of address. This is used solely for identity verification purposes and is handled with strict confidentiality.

Transaction and Payment Data

All financial activity on your account is recorded, including deposit amounts, withdrawal requests, transaction timestamps, and the payment methods used (JazzCash, Easypaisa, Raast, Bank Transfer, cards, mobile wallets). Full payment credentials are not stored on Chance servers – payments are processed through secure third-party payment channels.

Gaming Activity Data

Your activity on the platform, including game sessions, bet history, wins, losses, and bonus usage, is recorded as part of normal account operation. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Device and Technical Data

When you access the platform, we automatically collect certain technical information including your IP address, browser type, device type, operating system, and session duration. This helps us optimise performance, detect suspicious activity, and ensure the platform loads correctly across different devices commonly used in Pakistan.

Communications Data

If you contact support or respond to surveys, we retain records of those communications. This allows us to follow up on unresolved issues and maintain quality standards in our service.

3 How We Use Your Data

Personal data collected by Chance is used for the following purposes:

• Account Operation: Creating and maintaining your player account, processing deposits and withdrawals in PKR, managing bonuses, and providing access to the full game library including Slots, Live Casino, Fish Games, and Bingo.
• Identity Verification : Confirming that account holders are genuine adults meeting our eligibility criteria, and verifying payment methods to prevent fraud.
• Customer Support: Responding to your queries, resolving disputes, and following up on open support tickets in a timely manner.
• Security and Fraud Prevention: Monitoring account activity to detect and prevent unauthorised access, suspicious transactions, duplicate accounts, and any attempts to abuse the platform or its promotions.
• Responsible Gaming: Tracking gaming patterns to identify accounts that may benefit from responsible gaming tools such as deposit limits, session reminders, or self-exclusion options.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the platform and improve the overall experience for users in Pakistan.
• Marketing Communications: Sending you information about promotions, new games, and platform updates if you have opted in to receive such communications. You can opt out at any time.
• Legal Compliance: Retaining records as required by applicable law and responding to lawful requests from authorities where legally obligated to do so.

4 Legal Basis for Processing

We process your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to create and operate your account, process your PKR deposits and withdrawals, and deliver the services you signed up for. Without this processing, we cannot provide the platform.
• Legitimate Interests: Processing carried out to protect the security of the platform, prevent fraud, detect duplicate or abusive accounts, and improve our services. These interests do not override your fundamental privacy rights.
• Legal Obligation: Processing necessary to comply with applicable legal requirements, including financial record-keeping and responding to lawful requests from competent authorities.
• Consent: Where we send you optional marketing communications, we do so only with your prior consent. You may withdraw this consent at any time by contacting support or using the opt-out mechanism in any marketing message.

5 Sharing Your Data

Chance does not sell your personal information. We share data only in the following limited and controlled circumstances:

Payment Service Providers

To process your PKR deposits and withdrawals, we share the minimum necessary transaction data with our payment partners, including providers supporting JazzCash, Easypaisa, Raast, Bank Transfer, and card payments. These providers are contractually required to handle your data securely and use it only for payment processing purposes.

Identity Verification Partners

Where identity verification is conducted through a third-party service, your verification documents may be shared with that service solely for the purpose of confirming your identity. Verification partners are bound by strict data handling requirements.

Technology and Infrastructure Providers

We use third-party providers for hosting, security monitoring, and platform infrastructure. These providers may process technical data such as IP addresses and session logs as part of delivering their services. They act as data processors under our instructions and are not permitted to use your data for their own purposes.

Game Software Providers

Some games available on the Chance platform are powered by third-party game studios. These providers may receive anonymised session data for game performance purposes. They do not receive personally identifiable information about individual players.

Legal and Regulatory Requests

Where we receive a lawful and properly authorised request from a competent authority, we may be required to share relevant account or transaction data. We will only do so to the extent legally required and will notify affected users where permitted by law.

6 Cookies and Tracking Technologies

The Chance platform uses cookies and similar technologies to operate the website, remember your session preferences, and understand how users interact with the platform. Below is a summary of the types of cookies used:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling essential cookies will affect your ability to log in and use core platform features. The Chance mobile app uses equivalent technologies to cookies for session management and analytics.

We do not use cross-site tracking cookies to follow you across unrelated websites after you leave the Chance platform.

7 Data Security

Protecting your personal information is a core operational priority for Chance. We apply a layered approach to data security that includes both technical and organisational measures:

• Encryption in Transit: All data transmitted between your device and the Chance platform is encrypted using TLS (Transport Layer Security). This protects your login credentials, payment details, and personal information from interception during transmission.
• Encryption at Rest: Sensitive data stored on our servers, including identity documents and financial records, is encrypted at rest using strong encryption standards.
• Access Controls: Access to personal data within Chance's systems is restricted on a need-to-know basis. Staff members only have access to the data necessary for their specific role.
• Security Monitoring: Our infrastructure is monitored continuously for unusual activity, attempted breaches, and anomalous access patterns. Alerts are reviewed and acted upon promptly.
• Regular Security Reviews: We conduct periodic reviews of our security practices and update them in line with evolving best practices to maintain robust protection for player data.

In the unlikely event of a data security incident that affects your personal information, Chance will notify affected users promptly and take all reasonable steps to contain and remediate the incident.

8 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, meet legal obligations, or resolve any ongoing disputes. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration your account remains active on the platform.
• Transaction Records: Financial transaction records including deposit and withdrawal history are retained for a minimum of five years following the transaction date, in line with standard financial record-keeping requirements.
• Identity Verification Documents: Retained for a period of five years following account closure, or longer where required by applicable law.
• Gaming Activity Logs: Retained for a minimum of two years following the relevant gaming session, for dispute resolution and responsible gaming purposes.
• Support Communications: Retained for two years following the closure of the relevant support case.
• Marketing Consent Records: Retained for the period during which consent is active, plus a reasonable period thereafter as evidence of the consent given.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate analytics purposes.

9 Your Rights

As a user of the Chance platform, you have rights regarding your personal data. These rights can be exercised by contacting the Chance support team with your registered account details and a description of your request.

• Right of Access: You may request a copy of the personal data that Chance holds about you. We will provide this in a readable format within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact support with the relevant details and we will update our records promptly.
• Right to Erasure: In certain circumstances, you may request that your personal data be deleted. Note that this right does not apply where we are required by law to retain the data, for example financial transaction records. Where erasure is possible, we will action it within a reasonable period.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain situations, for example while a dispute is being investigated.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. We will cease that processing unless we have compelling legitimate grounds to continue.
• Right to Data Portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used format for transfer to another service provider.

10 Children's Privacy

The Chance platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has created an account or provided personal information to Chance, please contact support immediately so that we can investigate and close the account as required.

Age verification is a mandatory part of our registration and account management process. Where we have reasonable grounds to believe an account is held by an underage user, that account will be suspended pending investigation. Any funds deposited by a verified underage user will be handled in accordance with our Terms and Conditions and applicable legal requirements.

We encourage parents and guardians to use available parental control tools on shared devices to prevent minors from accessing online gaming platforms. Further guidance on this is available on our Responsible Gaming page.

11 Changes to This Policy

Chance may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When material changes are made, we will update the effective date shown at the top of this page and, where appropriate, notify active account holders via their registered contact details.

We encourage you to review this page periodically so that you remain aware of how your personal data is being handled. The most current version of this Privacy Policy will always be accessible at chance.vin/privacy-policy.

Continued use of the Chance platform after any update to this policy constitutes your acknowledgement of the revised version. If you have any concerns about changes made, you are welcome to contact the support team for clarification before continuing to use the platform.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information is being handled, please get in touch with the Chance support team. You can reach us through the support channels available within the platform.

When contacting us about a data privacy matter, please include:

• Your registered email address or account username.
• A clear description of your request or concern.
• Any relevant reference numbers if you are following up on an existing matter.

You can also review our related policies for a full picture of how we operate: Terms and Conditions and Responsible Gaming.