Timislot Privacy Policy – How We Handle Your Personal Data

Timislot is the online gaming platform operated at timislot.im, serving players across Pakistan. For the purposes of this Privacy Policy, timislot is the data controller — meaning we are responsible for deciding how and why your personal data is processed.

If you have any questions about how timislot handles your data, you can reach us at any time via the contact details in Section 14 of this Policy. We aim to respond to all privacy-related queries within 72 hours.

Timislot collects the following categories of personal data from players:

Registration Data: When you create a timislot account, we collect your full legal name, date of birth, email address, mobile phone number, and the payment method details you register with your account.

Identity Verification Data (KYC): To comply with our anti-money laundering and responsible gaming obligations, timislot may request copies of government-issued identification (such as your National Identity Card or passport), a selfie for liveness verification, and proof of address. This data is collected only when required and handled with additional security measures.

Financial Data: We collect records of all deposits, withdrawals, bonus claims, and wagers made through your timislot account. We do not store your full payment card numbers — card payments are processed by a certified payment gateway and only a tokenised reference is retained on our systems.

Technical Data: We automatically collect certain technical information when you use the timislot platform, including your IP address, device type, operating system, browser type, and session timestamps. This data helps us maintain platform security and improve performance for Pakistani users.

Usage Data: We collect records of your activity on the timislot platform — which games you play, how long sessions last, stake levels, and your interaction with bonuses and promotions. This data is used for responsible gaming monitoring and to personalise your experience.

Communication Data: When you contact timislot support, we retain records of those communications — including live chat transcripts, emails, and any WhatsApp messages exchanged with your VIP account manager. This helps us provide consistent support and resolve disputes accurately.

Timislot collects personal data through the following channels:

• Directly from you — when you register, complete KYC, make a deposit or withdrawal, contact support, or accept a bonus offer
• Automatically — through cookies, session tracking, and server logs when you visit or use the timislot platform
• From payment processors — transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card processors when you deposit or withdraw
• From identity verification providers — confirmation responses from KYC verification services when you submit identity documents
• From fraud prevention systems — device fingerprinting and behavioural signals used to detect account sharing, bonus abuse, or suspicious activity

Timislot does not purchase personal data from data brokers or third-party list providers.

Timislot uses your personal data for the following purposes, each of which has a lawful basis under applicable data protection principles:

To operate your account and provide the service: This is the primary purpose. Your registration data, financial data, and usage data are all necessary to create and maintain your timislot account, process your deposits and withdrawals in PKR, calculate and credit bonuses, and maintain accurate game records. Without this processing, timislot simply cannot function.

To verify your identity and comply with legal obligations: Timislot is required to verify the identity of players as part of its anti-money laundering and responsible gaming obligations. KYC data is collected and processed on this legal basis. We do not use this data for any purpose beyond verification and compliance.

To monitor responsible gaming compliance: Your usage data — game activity, session length, stake patterns, deposit frequency — is analysed to identify signs of problem gambling. If our monitoring identifies a player who may benefit from intervention, timislot's responsible gaming team may make contact. This processing is conducted in your interest and is a core part of timislot's commitment to player wellbeing.

To maintain platform security and prevent fraud: Technical data and usage patterns are analysed to detect and prevent fraud, account sharing, bonus abuse, money laundering, and other prohibited activities. This processing is necessary to protect the integrity of the timislot platform and the experience of genuine players.

To improve the platform: Anonymised and aggregated usage data is used to understand how Pakistani players use the timislot platform, identify areas for improvement, and make decisions about game selection, mobile performance, and support resources.

To communicate with you: We use your contact details to send you account-related notifications (deposit confirmations, withdrawal updates, security alerts), respond to support queries, and — where you have opted in — send promotional communications about bonuses, VIP Club updates, and new games.

Timislot does not sell your personal data to any third party. Data sharing is limited to the following categories of trusted service providers, each of whom processes your data only as necessary to provide their services to timislot and under confidentiality obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT facilitators, and Visa/Mastercard processing partners receive the minimum data required to execute your deposit or withdrawal transactions in PKR
• Identity verification providers: KYC service providers receive identity documents and biometric confirmation data strictly for the purpose of verifying your identity — this data is not retained by the provider beyond the verification purpose
• Fraud prevention and security providers: Anti-fraud systems receive technical and behavioural data to detect prohibited activity. These providers operate under strict data processing agreements with timislot
• Platform infrastructure providers: Cloud hosting, database, and content delivery providers that underpin the timislot platform may process technical data as part of their service. All infrastructure providers operate under data processing agreements
• Regulatory authorities: Timislot may be required to share player data with regulatory or law enforcement authorities in response to a lawful request. We will not share data beyond what is legally required

Timislot uses cookies and similar tracking technologies on the timislot.im platform. A cookie is a small text file placed on your device when you visit a website. Timislot uses the following types of cookies:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language and display preferences, and enable secure payment processing. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to understand how players navigate the timislot platform — which pages are visited, how long sessions last, and where players encounter difficulties. Analytics data is anonymised before analysis and is not linked to your personal account.
• Security cookies: Used for fraud detection, device fingerprinting, and protection against automated abuse. These cookies identify legitimate returning users and flag suspicious access patterns.
• Preference cookies: Store your display settings, notification preferences, and game layout choices so you do not need to reset them each visit.

Managing Cookies: You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your experience on the timislot platform — for example, you may need to log in again on each visit. The exact steps for managing cookies depend on your browser; most browsers have a settings or privacy menu where cookies can be managed.

Timislot takes data security seriously and implements technical and organisational measures proportionate to the sensitivity of the data being protected. The specific measures timislot employs include:

• 256-bit SSL/TLS encryption for all data in transit between your device and timislot's servers — the same standard used by major financial institutions
• Encryption at rest for sensitive stored data including identity documents and financial records
• Access controls ensuring that only authorised personnel with a legitimate operational need can access personal data, and only to the extent necessary for their role
• Regular security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited
• Two-factor authentication options for player accounts to prevent unauthorised access even if login credentials are compromised
• Fraud monitoring systems that operate continuously to detect unusual access patterns or suspicious account activity

Despite these measures, no online platform can guarantee absolute security. Timislot will notify affected players promptly in the event of a data breach that poses a risk to their personal data, in accordance with applicable legal requirements.

Players also have a role in keeping their accounts secure. Use a strong, unique password for your timislot account, enable two-factor authentication if available, and never share your login credentials with anyone.

Timislot retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The key retention periods that apply to timislot player data are:

• Account and transaction data: Retained for the lifetime of your active account and for a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping requirements
• KYC and identity documents: Retained for the duration of your account and for 5 years post-closure. Where required by regulatory request, retention may be extended
• Support communications: Retained for 3 years from the date of the last communication in a thread. This enables us to investigate complaints and disputes accurately
• Technical and usage data: Anonymised after 24 months and retained in aggregated form for platform analysis. Non-anonymised logs are deleted after 12 months unless required for an active investigation
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever comes first

When data is no longer required, timislot deletes it securely in accordance with industry best practices for secure data disposal.

You have a number of rights in relation to the personal data timislot holds about you. These rights are meaningful — timislot takes them seriously and will respond to any request within 30 days of receipt.

Timislot may send you promotional communications about bonuses, VIP Club benefits, new games, and platform updates. Marketing communications from timislot are opt-in only — you will only receive them if you have given explicit consent during registration or later through your account settings.

You can withdraw your consent and unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any timislot email
• Updating your communication preferences in your account settings
• Contacting support and requesting to be removed from all marketing lists

Withdrawing marketing consent does not affect your ability to continue using the timislot platform. You will still receive essential account communications — such as deposit confirmations, withdrawal updates, and security alerts — regardless of your marketing preferences, as these are necessary for the operation of your account.

The timislot platform is strictly for adults aged 18 and over. Timislot does not knowingly collect personal data from individuals under the age of 18. The registration process requires players to confirm they are 18 or older, and timislot uses age verification procedures to enforce this requirement.

If timislot becomes aware that personal data has been collected from a person under 18, the account will be closed immediately, all collected data will be securely deleted, and any funds deposited will be returned to the payment source after deduction of any bonuses claimed.

Some of timislot's infrastructure and service providers are located outside Pakistan. Where your personal data is transferred to a service provider outside Pakistan, timislot ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or better than that required under Pakistani law.

These safeguards include contractual data processing agreements that bind the recipient to confidentiality, security, and limitation-of-use obligations. Timislot does not transfer personal data to any jurisdiction or entity that cannot provide adequate data protection assurances.

Timislot may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to how we explain our data practices. The most current version of this Policy is always available at timislot.im/privacy-policy and shows the date it was last updated at the top of the page.

When material changes are made, timislot will notify registered players by email or in-platform notification at least 7 days before the changes take effect. If you continue using the timislot platform after a Policy update, you are accepting the revised Policy.

We recommend reviewing this Policy periodically, especially if you are a regular timislot user, to stay informed about how your data is being handled.

For any questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact the timislot privacy and data team through the following channels:

• Email: support@timislot.im (subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Live Chat: Available within your timislot account 24 hours a day, 7 days a week
• VIP Account Manager: Gold tier and above players may raise privacy matters directly with their assigned account manager

Timislot aims to acknowledge all privacy-related requests within 24 hours and to fully respond within 30 days. For complex requests that require additional investigation or verification, we will inform you if more time is needed beyond the 30-day window.