1Who We Are and What This Policy Covers
This Privacy Policy applies to OpsAPK, the online gaming platform operated at opsapk.app. When we refer to "OpsAPK", "we", "us", or "our" in this document, we mean the team and legal entity operating opsapk.app. When we say "you" or "your", we mean any individual who visits, registers with, or uses the OpsAPK platform in any capacity.
This policy covers all personal data collected through the opsapk.app website, the OpsAPK mobile application, communications between you and OpsAPK support, and any other interaction you have with the OpsAPK platform or team. It does not cover third-party websites or services that may be linked to or integrated with OpsAPK — those parties have their own privacy practices which are their own responsibility.
OpsAPK is the data controller for all personal information described in this policy. This means we are responsible for deciding how and why your personal data is processed, and we are accountable for making sure it is handled correctly.
If you have any questions about this Privacy Policy or how OpsAPK handles your personal data, you can contact us directly at privacy@opsapk.app. We respond to all privacy-related queries within 5 business days.
2Personal Data We Collect
OpsAPK collects personal data in several ways: data you provide directly when registering and using the platform, data generated automatically by your use of the platform, and data from third parties such as payment processors and identity verification services. Below is a transparent breakdown of exactly what we collect.
2.1 Data You Provide Directly
| Data Type | When Collected | Why Required |
|---|---|---|
| Mobile Number | Registration | Account identity and OTP verification |
| Date of Birth | Registration | Age verification — must be 18+ |
| Full Name | Registration / KYC | Identity matching with payment methods |
| CNIC Number | KYC verification | Identity verification as required |
| CNIC Image | KYC verification | Document verification, anti-fraud |
| Payment Details | Deposit / Withdrawal | Processing transactions in PKR |
| Support Communications | When you contact support | Resolving your query, audit trail |
2.2 Data Collected Automatically
When you use OpsAPK, our systems automatically log certain technical information. This includes your IP address, device type and operating system, browser type and version, the pages and features you access and the time you spend on them, game sessions and bet history, deposit and withdrawal transaction records, and login timestamps and session durations. This information is used to operate the platform, detect fraud, improve performance, and — where you have consented — personalise your experience.
2.3 Data From Third Parties
OpsAPK may receive data about you from third parties in limited circumstances. Payment processors such as Easypaisa and JazzCash confirm transaction status and the name registered to your payment account. Identity verification services may confirm whether the CNIC you have provided is valid. Fraud prevention services may provide risk scores based on your device and network characteristics. In all cases, OpsAPK uses this third-party data only for the purpose for which it was obtained.
3How OpsAPK Uses Your Personal Data
OpsAPK uses your personal data for the following purposes. Each purpose is tied to a specific legal basis, which is explained in Section 4.
- Account creation and management — to create and maintain your OpsAPK account, authenticate your identity when you log in, and allow you to access all platform features.
- Transaction processing — to process your deposits and withdrawals in PKR via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payment methods.
- Identity verification (KYC) — to verify that you are who you say you are, that you are of legal age to play, and that your payment methods are registered in your name. This protects both you and OpsAPK from fraud and identity theft.
- Customer support — to respond to your queries, resolve disputes, and maintain records of interactions for audit and training purposes.
- Fraud prevention and security — to detect and prevent fraudulent activity, money laundering, multiple account abuse, and other security threats. This is an essential function that protects all OpsAPK players.
- Platform improvement — to understand how players use OpsAPK, identify areas for improvement, and develop new features and games that better serve Pakistani players.
- Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling, and to apply the responsible gaming tools available on your account where appropriate.
- Marketing communications — to send you information about promotions, new games, and special offers, but only where you have opted in to receive such communications. See Section 11 for how to manage marketing preferences.
- Legal and regulatory compliance — to meet any legal obligations that apply to OpsAPK, including anti-money laundering obligations and responses to lawful requests from law enforcement or regulatory authorities.
4Legal Basis for Processing Your Data
OpsAPK processes your personal data on the following legal grounds, depending on the specific use:
- Contract performance — processing your data is necessary to provide the service you signed up for. Without processing your account information, transaction data, and identity information, OpsAPK cannot operate your account or process your money. This is the primary legal basis for most of OpsAPK's data processing activities.
- Legal obligation — OpsAPK is required to collect and retain certain data by law, including transaction records for anti-money laundering compliance and identity documents for KYC purposes. We have no choice but to collect this data and retain it for the legally required period.
- Legitimate interests — OpsAPK processes some data on the basis of its legitimate interest in operating a safe, fair, and commercially viable platform. This includes fraud detection, security monitoring, and platform analytics. We balance our legitimate interests against your privacy rights and only proceed where our interests are not overridden by your rights.
- Consent — where OpsAPK relies on your consent (primarily for marketing communications and non-essential cookies), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
5Who OpsAPK Shares Your Data With
OpsAPK does not sell your personal data to third parties. We share data only in the following limited and controlled circumstances:
5.1 Payment Processors
To process your deposits and withdrawals, OpsAPK must share relevant transaction data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and bank IBFT systems. This sharing is limited to what is necessary to complete the transaction — typically your account name, transaction amount, and payment reference. Payment processors are not permitted to use your data for any purpose beyond completing the transaction.
5.2 Identity Verification Services
When KYC verification is required, OpsAPK shares your CNIC number and document image with a certified identity verification service. This service checks the validity of your document and confirms your identity. The verification service processes your data under strict confidentiality obligations and does not retain or use your data for any other purpose.
5.3 Fraud Prevention and Anti-Money Laundering
OpsAPK may share data with specialist fraud prevention and anti-money laundering services to detect and prevent financial crime. This is a legal obligation, not a discretionary choice. Any organisation that receives your data in this context is bound by confidentiality obligations and applicable law.
5.4 Legal and Regulatory Authorities
OpsAPK will disclose personal data to law enforcement, regulatory authorities, or courts where we are required to do so by law or a valid legal order. OpsAPK does not make voluntary disclosures to government authorities beyond what is legally required. Where permitted by law, OpsAPK will notify you of any such disclosure.
OpsAPK will never share your personal data with advertising companies, data brokers, social media platforms, or any other commercial third party for marketing purposes. If you receive communications claiming to be from OpsAPK partners offering promotions based on your OpsAPK account, treat these with suspicion and contact our support team.
6Cookies and Tracking Technologies
OpsAPK uses cookies and similar technologies on opsapk.app to make the platform work properly and to improve your experience. Here is a plain-language explanation of what we use and why.
6.1 Essential Cookies
These cookies are necessary for OpsAPK to function at all. They maintain your login session so you do not have to re-authenticate every time you load a page, remember your currency and language preferences, and ensure the platform's security features work correctly. You cannot opt out of essential cookies without breaking the platform's core functionality.
6.2 Analytical Cookies
OpsAPK uses analytical cookies to understand how players use the platform — which pages are most visited, where players tend to drop off, and how different features are used. This information is aggregated and anonymised where possible. It helps the product team make better decisions about what to improve and build next. You can opt out of analytical cookies through your account settings or via standard browser cookie controls.
6.3 Preference Cookies
These cookies remember your preferences such as game display settings, favourite sports markets, and notification preferences. They make your OpsAPK experience more personalised and convenient. Disabling these cookies will not break the platform but may mean you need to set your preferences again each visit.
OpsAPK does not use third-party advertising cookies. No advertising networks or social media platforms have access to data about your OpsAPK activity through our cookies.
7How Long OpsAPK Keeps Your Data
OpsAPK retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. The table below summarises our main retention periods.
8How OpsAPK Secures Your Data
OpsAPK takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, loss, destruction, or disclosure.
8.1 Technical Security Measures
- TLS/SSL encryption — all data in transit between your device and OpsAPK servers is encrypted using 256-bit TLS, the same standard used by major Pakistani banks.
- Encryption at rest — sensitive data including CNIC information and payment details is encrypted in our databases. Even in the event of a database compromise, this data cannot be read without the encryption keys.
- Access controls — employee access to personal data is granted on a strict need-to-know basis. Only team members who need to access specific data to perform their job function are granted access, and all access is logged and audited.
- Two-factor authentication — all internal OpsAPK systems that access player data require two-factor authentication for employee login.
- Regular security audits — OpsAPK engages third-party security professionals to conduct regular penetration testing and vulnerability assessments of the platform.
8.2 Organisational Security Measures
Beyond technical controls, OpsAPK maintains strict internal policies around data handling. All staff who have access to personal data complete mandatory data protection training. OpsAPK has a designated data protection officer responsible for overseeing compliance with this policy. Incidents involving personal data are escalated immediately to senior management and investigated thoroughly.
It is important to note that no digital system can guarantee 100% security. While OpsAPK takes every reasonable precaution, we cannot guarantee that our systems will never be breached. In the event of a breach affecting your personal data, OpsAPK will notify you in accordance with our breach notification commitment described in the Key Commitments section above.
9Your Data Rights
As an OpsAPK player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@opsapk.app. We will respond within 30 days and will not charge you for making a request.
Right of Access
You have the right to request a copy of all personal data OpsAPK holds about you. This includes your account information, transaction history, KYC data, and support correspondence. We will provide this in a clear, readable format within 30 days of your request.
Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account information such as your name or mobile number, you can update some details directly through your account settings. For KYC data, contact support.
Right to Erasure
You have the right to request that we delete your personal data. We will fulfil this request where we have no overriding legal obligation to retain the data. Note that we are legally required to retain certain financial records and KYC documentation for a minimum of 5 years after account closure, which means full deletion is not always possible immediately.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that you can transfer it to another service. Submit a portability request to privacy@opsapk.app and we will prepare your data within 30 days.
Right to Object to Processing
You have the right to object to OpsAPK processing your personal data for marketing purposes at any time. You can also object to processing based on our legitimate interests, though this right may be overridden where we have compelling grounds to continue. Objections should be sent to privacy@opsapk.app.
Right to Restriction of Processing
In certain circumstances — for example, while a rectification request is being reviewed — you can request that OpsAPK restricts processing of your data. During a restriction, we may only store your data and not actively process it, except with your consent or for legal claims.
10Children's Privacy
OpsAPK is strictly intended for adults aged 18 and above. OpsAPK does not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete that data immediately, close the associated account, and return any deposited funds in accordance with our underage account policy.
If you are a parent or guardian and believe that a person under 18 in your household has registered with OpsAPK, please contact support@opsapk.app immediately. We take underage access seriously and will act quickly to investigate and resolve any reported cases.
Providing false date of birth information to circumvent OpsAPK's age verification is a breach of the Terms and Conditions and may constitute fraud. OpsAPK cooperates with law enforcement in cases involving underage gaming where criminal fraud is suspected.
11Marketing Communications
OpsAPK sends promotional communications — including SMS messages about bonus offers, new game launches, and seasonal promotions — only to players who have opted in to receive them. Opt-in occurs during registration when you confirm that you wish to receive OpsAPK promotions.
11.1 Opting Out
You can opt out of marketing communications at any time through your account notification settings, by replying STOP to any OpsAPK SMS, or by emailing privacy@opsapk.app with the subject "Marketing Opt-Out". Opt-out requests are processed within 5 business days. Note that opting out of marketing does not affect transactional communications — OpsAPK will still send you account-related messages such as deposit confirmations, withdrawal notifications, and security alerts.
11.2 What We Do Not Do
OpsAPK does not sell your contact details to third-party marketers. We do not share your mobile number or email with affiliates for their own marketing purposes. If you receive unsolicited communications claiming to be from OpsAPK promotions but not from official OpsAPK channels, report them to support@opsapk.app — this may indicate a phishing attempt.
12Updates to This Privacy Policy
OpsAPK may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.
For material changes — those that significantly affect your rights or the way we use your data — OpsAPK will notify you by SMS to your registered mobile number at least 7 days before the change takes effect. For minor changes that do not materially affect your rights, we will update the policy without advance notice, though the updated date will always reflect the change.
We encourage you to review this policy periodically. Continued use of OpsAPK after a policy update takes effect constitutes your acceptance of the updated terms. If you disagree with a material change, you have the right to close your account before the change takes effect.
13How to Contact OpsAPK About Privacy
If you have questions, concerns, or requests relating to your personal data or this Privacy Policy, please get in touch with us through any of the following channels. We respond to all privacy-related enquiries within 5 business days.
Privacy Team Email
For data access requests, deletion requests, corrections, or any detailed privacy query, email the OpsAPK Privacy Team directly. Include your registered mobile number and a brief description of your request.
General Support
For urgent privacy concerns or if you believe your account or data has been compromised, contact OpsAPK's 24/7 support team who can escalate to the privacy team immediately.
This Privacy Policy was last updated on 20 January 2025 and applies to all use of opsapk.app from that date. If you are reading this policy as a new user, please be aware that by registering for an OpsAPK account, you confirm that you have read and understood this policy in full. If anything is unclear, please contact us before registering — we are happy to explain any section in more detail, including in Urdu if you prefer.