Privacy Policy — How 123 Reg Keeps Your Data Safe

This Privacy Policy applies to 123reg.ws — referred to throughout this document as "123 reg", "we", "us", or "our". 123 reg is an online gaming platform serving players in Pakistan, offering sports betting, live casino, slots, crash games, and Ludo. The platform is accessible at https://123reg.ws and through any associated mobile application.

For the purposes of this Privacy Policy, 123 reg is the data controller — meaning we are responsible for deciding how and why your personal information is collected and used. When you create an account on 123 reg, use any of our games or services, or contact our support team, you are providing your personal data to us as the data controller.

If you have questions about this Privacy Policy or wish to exercise any of your data rights, you can reach us at support@123reg.ws. We aim to respond to all privacy-related queries within 10 business days.

123 reg collects personal data in three main ways: information you give us directly, information generated by your use of the platform, and information we receive from third parties such as payment providers. Here is a breakdown of each category.

Every piece of data that 123 reg collects serves a specific, legitimate purpose. We do not collect information speculatively or because it might be useful later. Below is a plain-language explanation of what we use your data for.

• Account management: Your registration data is used to create and maintain your 123 reg account, verify your identity, and enable you to log in securely.
• Processing transactions: Your financial data is used to process your deposits, verify that payments come from accounts registered in your own name, and execute your withdrawal requests.
• Anti-money laundering (AML) and fraud prevention: 123 reg has legal obligations under financial crime prevention frameworks. We analyse transaction patterns and account behaviour to detect suspicious activity. This is not optional — it is a legal requirement.
• Responsible gaming: Your gaming activity data is used to monitor for patterns that may indicate problem gambling. If concerning patterns are detected, 123 reg may proactively contact you or apply account limits. This is done to protect you, not to penalise you.
• Customer support: Communications data is used to resolve your queries and improve the quality of our support service.
• Platform improvement: Aggregated, anonymised technical and usage data helps us identify performance issues, improve the user interface, and prioritise new features.
• Marketing (with your consent): If you have opted in to marketing communications, we may send you information about promotions, new games, and platform updates. You can opt out at any time from your account settings or by contacting support.

123 reg processes your personal data on the following legal bases, depending on the type of data and its purpose:

• Contractual necessity: Processing your registration data, KYC documentation, and transaction records is necessary to provide the services you signed up for. Without this data, 123 reg cannot operate your account.
• Legal obligation: AML checks, identity verification, and the retention of transaction records are required by applicable financial regulations. We are legally obligated to process this data and cannot remove it from our systems before the legally mandated retention period expires, even if you request deletion of your account.
• Legitimate interests: Using technical and usage data to improve platform performance and security represents a legitimate business interest. We apply a balancing test to ensure our interests do not override your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only with your explicit consent. You have the right to withdraw consent at any time, and doing so will not affect the services you receive from 123 reg.

123 reg does not sell your personal information to any third party under any circumstances. We share data with a limited set of third parties only where it is necessary to deliver our services or comply with legal requirements. These parties are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and partner banks receive the minimum data necessary to process your deposits and withdrawals — typically your mobile number or account reference and the transaction amount. These processors are bound by their own privacy and security standards.
• Identity verification partners: Third-party KYC service providers may receive your CNIC details and verification documents to perform identity checks. These partners are contractually bound to use your data solely for verification purposes.
• Game content providers: Live casino providers such as Evolution Gaming, Ezugi, and Pragmatic Live receive your account identifier (not your full personal details) to track game sessions and ensure game integrity. Full personal data is not shared with game providers.
• Regulatory and law enforcement authorities: 123 reg will share data with Pakistani financial authorities, law enforcement, or courts where we are legally compelled to do so — for example, as part of an AML investigation or a court order. We do not share data proactively beyond what is required.
• Technical infrastructure providers: Cloud hosting and CDN providers may process data as part of platform operation. These providers operate under strict data processing agreements and do not have independent access to your personal data.

No marketing companies, social media platforms, advertising networks, or data brokers receive any personal data from 123 reg. This is a firm, unconditional policy.

Handling money responsibly means handling the data connected to that money responsibly. 123 reg applies the following specific practices for financial data:

• Full payment card numbers are never stored on 123 reg's servers. When a card payment is processed, the card details are handled exclusively by the payment processor — 123 reg receives only a confirmation reference and the last four digits for display purposes.
• Mobile wallet transaction records — including Easypaisa and JazzCash reference numbers — are stored in encrypted form in our transaction database and are accessible only to authorised finance team members for dispute resolution and AML monitoring.
• Your complete transaction history on 123 reg is accessible to you at any time from your account dashboard. This history is maintained for a minimum of five years in line with financial record-keeping requirements.
• Withdrawals are processed only to payment accounts verified as belonging to the registered account holder. This protects you against unauthorised withdrawal attempts and satisfies AML requirements simultaneously.

123 reg uses cookies — small text files stored on your device — for the following purposes. We do not use cookies for advertising or social media tracking.

• Essential cookies: These are necessary for the platform to function. They maintain your login session, keep your game preferences, and remember items in your bet slip. You cannot opt out of essential cookies without also preventing the platform from working.
• Analytics cookies: We use anonymous, aggregated analytics to understand how players navigate the platform — which pages are visited most, where navigation breaks down, and how long sessions last. This data does not identify individuals and is used purely to improve the platform experience.
• Security cookies: Fraud detection and bot prevention tools use cookies to distinguish human players from automated scripts. This protects the integrity of the platform for all players.

123 reg does not use Facebook Pixel, Google Ads tracking, or any advertising network cookies. You can control non-essential cookies through your browser settings. Common browsers used in Pakistan — Chrome on Android, Firefox, Safari on iOS — all provide cookie management tools in their settings menus.

123 reg retains personal data only for as long as necessary to fulfil the purpose it was collected for, or to comply with legal retention requirements. The following periods apply:

• Account data and KYC documents: Retained for the duration of your account plus a minimum of five years after account closure, as required for AML compliance.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping obligations.
• Gaming activity logs: Retained for three years from the date of each session for responsible gaming monitoring purposes, and up to five years where connected to a transaction.
• Support communications: Retained for two years from the date of the interaction, then deleted unless connected to an ongoing dispute or regulatory matter.
• Analytics data: Anonymised and aggregated analytics data is retained indefinitely as it contains no personal identifiers. Individual session logs are retained for 12 months.

When data is no longer required, it is securely deleted from 123 reg's systems. Note that legal retention obligations take precedence over deletion requests for specific data categories — for example, we cannot delete your transaction history on request because it is required to be retained under AML rules.

As a 123 reg player, you have the following rights over your personal data. To exercise any of these rights, email support@123reg.ws with the subject line "Data Rights Request" and we will respond within 10 business days.

123 reg is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is conducted during registration and identity verification. If 123 reg discovers that a registered account belongs to an individual under 18, the account will be closed immediately, any balance will be returned to the payment source where technically possible, and all associated personal data will be deleted.

If you are a parent or guardian and believe that your child has created an account on 123 reg, please contact us immediately at support@123reg.ws. We will investigate and take appropriate action within 24 hours of notification.

123 reg applies the following technical and organisational security measures to protect your personal data:

• Transport encryption: All data transmitted between your device and 123 reg's servers is encrypted with TLS 1.3 (256-bit). No data is transmitted over unencrypted connections.
• Storage encryption: Sensitive data fields — including CNIC numbers, KYC document references, and financial identifiers — are encrypted at rest in our database using AES-256 encryption.
• Access controls: Internal access to player personal data is restricted to authorised personnel on a need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-factor authentication: Available for all player accounts and mandatory for staff accounts accessing player data systems.
• Penetration testing: 123 reg's platform undergoes regular security assessments by independent security professionals to identify and address vulnerabilities before they can be exploited.
• Incident response: A documented data breach response procedure is in place. In the event of a security incident, affected players will be notified within 72 hours and relevant authorities will be informed as required by applicable regulations.

While 123 reg implements industry-standard security measures, no digital platform can guarantee absolute security. Players can strengthen their own account security by using a strong, unique password, enabling 2FA, and never sharing login credentials with anyone.

123 reg may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes — particularly those that affect your rights or how your data is used — we will notify you by email to your registered address at least 14 days before the changes take effect.

For minor updates (such as clarifications, corrections, or changes that do not materially affect your rights), we will update the "Effective" date at the top of this page. It is good practice to review this policy periodically, particularly if you are about to share sensitive information with us such as during a KYC process.

If you disagree with any changes to this Privacy Policy, you should stop using 123 reg and request account closure before the changes take effect. We will return your real-money balance and delete your personal data in line with applicable retention obligations.

For all privacy-related queries, data access requests, correction requests, or complaints about how 123 reg handles your personal data, please contact us using the details below. We take privacy matters seriously and respond to all queries within 10 business days.

• Email: support@123reg.ws — use the subject line "Privacy Query" or "Data Rights Request" for faster routing.
• Live Chat: Available 24/7 within your 123 reg account — for urgent privacy concerns or suspected data breaches affecting your account.

If you raise a data rights request and are not satisfied with our response, you have the right to escalate the matter. 123 reg is committed to resolving all privacy complaints fairly and transparently. Details of escalation options for Pakistani users are available upon request from our support team.