At ShahSpin, the privacy of Pakistani players is treated as a genuine obligation — not a legal box to tick. This policy explains in plain language what personal data we collect, why we collect it, how we use it, who we may share it with, and what rights you have over your own information. Please read it carefully. By creating and using a ShahSpin account, you confirm your acceptance of this policy.
ShahSpin does not sell your personal data. We do not share your information with advertisers for their own marketing purposes. We collect only what we need to operate your account, process payments in PKR, keep the platform secure, and comply with our legal obligations. You have real rights over your data, and we make it straightforward to exercise them.
This Privacy Policy is issued by ShahSpin (referred to throughout as "ShahSpin", "we", "us" or "our"), the operator of the online gaming platform accessible at shahspin.biz. ShahSpin acts as the data controller in respect of personal data collected from players who register and use the platform.
If you have any questions about how ShahSpin handles your personal data, you can contact us directly at support@shahspin.biz. We aim to respond to all privacy-related enquiries within five business days. For formal data rights requests, the process is described in Section 10 below.
This policy applies to all personal data collected through the ShahSpin website, mobile browser interface, and any related communications including email, live chat and SMS. It does not apply to third-party websites or services that may be referenced on the ShahSpin platform — those services have their own privacy policies which you should read separately.
ShahSpin collects personal data about you from several sources. The table below summarises the main categories:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, selfie with CNIC | Provided by you at registration or verification |
| Contact Data | Pakistani mobile number, email address, city of residence | Provided by you at registration |
| Financial Data | Easypaisa / JazzCash account, bank IBFT details, Visa/Mastercard details (masked), deposit and withdrawal history | Provided by you when adding payment methods |
| Transaction Data | Deposit amounts in PKR, withdrawal requests, bonus credits, game bet history, sports bet history | Generated automatically by platform activity |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Collected automatically when you use the platform |
| Usage Data | Pages visited, games played, time spent on platform, features used | Collected automatically via cookies and analytics |
| Communications Data | Live chat transcripts, support email correspondence, feedback submitted | Generated when you contact ShahSpin support |
ShahSpin does not collect special category data (such as health information, ethnicity or religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming self-assessment. Any such information is treated with the highest level of protection and used exclusively for responsible gaming purposes.
Every piece of personal data ShahSpin collects has a specific purpose. We do not collect data "just in case" or to build profiles for advertising purposes. The purposes for which we collect and use your data are:
ShahSpin processes your personal data on the following legal bases depending on the purpose:
In practical terms, here is how ShahSpin uses the personal data it collects from Pakistani players:
Your identity and contact data are used to create and maintain your ShahSpin account, send you account-related notifications (password resets, withdrawal confirmations, security alerts), and update you on changes to terms or policies that affect your account.
Your financial data — including your Easypaisa or JazzCash account details or your bank IBFT information — is used solely to process your deposits and withdrawals in PKR. ShahSpin does not store full card numbers or bank account credentials. Payment data is handled through secure, certified payment processing channels. When verifying withdrawal requests, we may cross-reference your financial data with your identity documents to confirm that payments are being made to accounts you own.
ShahSpin uses your transaction and usage data to monitor for indicators of problem gambling — patterns such as rapidly increasing deposit frequency, chasing losses evident in bet history, or unusual activity compared to your established baseline. This monitoring is conducted as part of our responsible gaming obligations and may trigger a proactive outreach from the support team to make you aware of the tools available to manage your play. It does not involve any automated decision-making that results in account restriction without human review.
Your transaction and usage data are used to calculate your VIP points balance, determine your current tier, and generate personalised bonus offers appropriate to your playing style and preferences. ShahSpin does not use third-party advertising networks to personalise offers — personalisation at ShahSpin is based entirely on your own activity on the platform.
ShahSpin does not use fully automated decision-making processes to take actions that significantly affect your account — such as restricting access, refusing withdrawals, or closing your account — without human review. Where automated systems flag an account for investigation, a member of the ShahSpin team reviews the case before any action is taken.
ShahSpin shares your personal data only in the limited circumstances described below. We do not sell your data to any third party. We do not share your data with advertisers or data brokers.
All third parties with whom ShahSpin shares data are contractually required to handle it in accordance with applicable privacy standards and to use it only for the specific purpose for which it was shared.
ShahSpin uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. Cookies help the platform function correctly, remember your preferences, and allow ShahSpin to understand how players use the site so it can be improved.
You can manage your cookie preferences through your browser settings. Disabling optional cookies will not affect your ability to play games or access your account at ShahSpin. Disabling strictly necessary cookies may prevent certain core features from working correctly.
ShahSpin retains personal data for as long as necessary to fulfil the purposes described in this policy, including any legal retention obligations. The following retention periods apply:
When data is no longer required and retention periods have expired, ShahSpin deletes it securely or anonymises it so it can no longer be associated with you personally.
ShahSpin implements technical and organisational security measures appropriate to the sensitivity of the data processed. These include:
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, ShahSpin will notify affected individuals without undue delay, and will take immediate steps to contain and investigate the breach.
ShahSpin's security measures protect your data on our side. On your side, the most important step is keeping your ShahSpin login credentials — username, password, and any OTP codes — completely private. ShahSpin will never ask for your password via any channel. If you receive a message claiming to be from ShahSpin that asks for your password, do not respond and report it to support immediately.
As a ShahSpin player and the individual to whom the personal data relates, you have the following rights. These are genuine rights that ShahSpin is committed to honouring — not a list of theoretical entitlements buried in small print.
To exercise any of these rights, contact ShahSpin support at support@shahspin.biz or via live chat. We will acknowledge your request within two business days and fulfil it within 30 days, or notify you if more time is needed and explain why.
ShahSpin is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If ShahSpin discovers or reasonably suspects that a player is under 18, the account will be suspended immediately, all bets will be voided, and any balance held will be returned to the payment method on file after verification of ownership.
If you are a parent or guardian and believe your child has registered at ShahSpin, please contact us immediately at support@shahspin.biz with the relevant account details. ShahSpin will investigate promptly and take appropriate action. Please also visit our Responsible Gaming page for information about tools you can use to prevent underage access to online gambling platforms.
ShahSpin may send you promotional communications — including bonus offers, new game announcements, VIP programme updates, and seasonal promotions — by email and SMS, but only if you have opted in to receive such communications. You can opt in during registration or at any time through your account settings.
You can opt out of marketing communications from ShahSpin at any time by:
Opting out of marketing communications does not affect your receipt of service-related messages, which ShahSpin must send regardless of marketing preferences — these include withdrawal confirmations, security alerts, account verification requests, and notifications of material changes to terms or policies.
Players who have activated a self-exclusion period at ShahSpin are automatically removed from all marketing communications for the duration of the exclusion and will not be re-added to marketing lists without making a specific opt-in request after the exclusion period expires.
The ShahSpin platform may contain links to third-party services — for example, payment provider portals or responsible gaming support organisations. Once you leave the ShahSpin platform and visit a third-party site, this Privacy Policy no longer applies. ShahSpin is not responsible for the privacy practices of third-party sites and encourages you to read their privacy policies before providing any personal information.
Game content on ShahSpin is provided by third-party software suppliers who operate under their own data processing agreements with ShahSpin. These suppliers may process limited technical data (such as game round identifiers and bet outcomes) in connection with the operation of their games. They do not have access to your identity data, payment data or contact information held by ShahSpin.
ShahSpin reviews this Privacy Policy regularly and may update it from time to time. Where changes are material — for example, where ShahSpin begins processing data in a new way, shares data with a new category of third party, or changes your rights — affected players will be notified via their registered email address at least seven days before the changes take effect.
Minor changes — such as clarifications of existing practices, corrections of typographical errors, or updates to contact information — may be made without advance notice. The "Last Updated" date at the top of this page is updated to reflect all changes, regardless of their significance.
If you continue to use ShahSpin after the effective date of a revised Privacy Policy, you are deemed to have accepted the revised version. If you do not accept a material change to this policy, your option is to stop using the platform and close your account before the change takes effect.
For any questions, concerns or requests relating to this Privacy Policy or ShahSpin's handling of your personal data, please contact us through one of the following channels:
ShahSpin will acknowledge all privacy-related communications within two business days and will aim to provide a full response within 30 days. For complex requests, we may request additional information from you to verify your identity before processing your request, to ensure we do not inadvertently disclose your data to a third party.
To submit a formal data rights request — for example, to access, correct, delete or export the personal data ShahSpin holds about you — please email support@shahspin.biz with the subject line "Data Rights Request" and include your registered email address and a brief description of your request. We will verify your identity before processing the request and fulfil it within 30 days.
These are not theoretical — every right below is genuinely available to you as a ShahSpin player. Contact support to exercise any of them.
You can request a copy of all personal data ShahSpin holds about you — your account information, transaction history, identity documents on file, and any communications records. ShahSpin will provide this in a readable format within 30 days.
If any personal data ShahSpin holds about you is inaccurate or out of date — for example, a changed mobile number or a misspelled name — you can ask us to correct it. Contact support and we will update your records promptly.
You can request deletion of your personal data. ShahSpin will comply where it is no longer needed and where no legal retention obligation applies. Transaction records and identity documents are subject to minimum legal retention periods before deletion.
You can ask ShahSpin to pause processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or where you have objected to processing and ShahSpin is considering whether legitimate grounds override your objection.
Where ShahSpin processes your data on the basis of your consent or for the performance of a contract, you can request your data in a structured, machine-readable format to transfer to another service. Contact support to submit a portability request.
You can object to ShahSpin processing your data for legitimate interests — including profiling for personalisation. ShahSpin will stop processing unless it can demonstrate compelling legitimate grounds that override your interests. You can always opt out of marketing at any time.
Privacy at ShahSpin is not a checklist — it is a set of active practices that apply every day the platform operates.
Every connection between your device and ShahSpin is encrypted using TLS. Your CNIC documents and financial data are encrypted at rest. Sensitive fields like payment account numbers are masked and never stored in plain text on ShahSpin's servers.
ShahSpin has never sold a player's personal data to any third party and never will. We do not work with advertising networks. We do not share data with brokers. The only parties who receive your data are those directly involved in operating your account and processing your payments.
Not all ShahSpin employees can see your personal data. Access is granted strictly on a need-to-know basis — a payment processor has access to financial records but not identity documents, a support agent can see your contact history but not your full financial data. Access logs are regularly reviewed.
Easypaisa, JazzCash, NayaPay and SadaPay transaction data is shared with the relevant provider only to the extent needed to complete the transaction. ShahSpin does not store your wallet PINs or full wallet account credentials. All payment data is transmitted over encrypted channels.
When ShahSpin makes a material change to how it handles your data, you receive advance notice via your registered email address — not a vague "we may update these terms" notice buried in small print. You are given real advance warning so you can make an informed decision about whether to continue using the platform.
If you use ShahSpin's responsible gaming tools — setting deposit limits, taking a break, or self-excluding — that information is handled with the strictest confidentiality. It is never used for profiling purposes outside of responsible gaming, and it is never shared with third parties in a way that identifies you.
Straight answers to the most common questions about how ShahSpin handles your personal data.