lepoker Privacy Policy – How We Handle Your Personal Data

lepoker ("lepoker", "we", "us", "our") operates the online gaming and sports betting platform available at lepoker.app. We are the data controller in respect of the personal data you provide when you create an account, make deposits, place bets, and interact with our services.

This Privacy Policy applies to all players registered on lepoker — specifically those based in Pakistan — and covers every personal data processing activity carried out in connection with your use of the platform. By registering an account, you acknowledge that you have read and understood this policy.

If you have questions about any aspect of this Privacy Policy before or after registering, our support team is available 24/7 and can respond in both Urdu and English. You should never feel uncertain about how your data is being handled on lepoker — if something is unclear, just ask.

lepoker collects personal data through several channels — the registration form, ongoing use of the platform, payment processing, identity verification, and your communications with our support team. The categories of data we collect are as follows:

lepoker does not collect sensitive personal data such as religious beliefs, political views, or health information unless directly relevant to a responsible gaming assessment and only with your explicit consent in that context.

lepoker collects and uses your personal data for specific, legitimate purposes. We do not collect data speculatively or because it might be useful one day — every data point we hold is there because it serves a defined function in the operation of your account and the lepoker platform.

Account Operation & Service Delivery

Your identity, contact, and financial data are essential to operating your lepoker account. Without them, we cannot verify who you are, process your PKR deposits and withdrawals, settle your bets correctly, or send you your account statements. This is the core function your data serves.

Know Your Customer (KYC) & Anti-Money Laundering

lepoker is required to verify the identity of all registered players and to monitor transactions for signs of money laundering or financial fraud. This is a regulatory obligation. Your CNIC, date of birth, and proof of address are used solely to fulfil this requirement. Passing KYC is a prerequisite for withdrawing funds from lepoker.

Fraud Prevention & Platform Security

Technical data — IP address, device fingerprint, login patterns — is used to detect and prevent fraudulent access to accounts, duplicate account creation, and other security threats. If unusual activity is detected on your lepoker account, this data allows us to take protective action quickly.

Responsible Gaming Monitoring

lepoker uses usage data and behavioural patterns to identify players who may be exhibiting signs of problem gambling — for example, unusually long sessions, rapidly increasing deposit amounts, or repeated attempts to place bets after self-exclusion. This data is used exclusively for player welfare purposes, not for marketing or profiling.

Customer Support

When you contact lepoker's support team, your communication history and account details are used to resolve your query accurately and efficiently. Support agents access only the data they need to handle your specific request.

Marketing Communications

If you have opted in to marketing communications, lepoker uses your contact data and usage history to send you relevant promotions, bonus offers, and product updates. You can opt out at any time — see Section 11 for details.

lepoker relies on the following legal bases for processing your personal data, depending on the specific purpose of the processing:

• Performance of a contract: Processing your account data, payment data, and gaming activity data is necessary to deliver the services you have contracted with lepoker to receive. Without this processing, lepoker cannot operate your account.
• Legal obligation: KYC verification, anti-money laundering checks, and responsible gaming obligations are required by applicable regulations. lepoker must process your data for these purposes regardless of your preferences.
• Legitimate interests: Fraud prevention, platform security monitoring, and internal analytics are processed under lepoker's legitimate interest in operating a safe, legally compliant platform. These interests are balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed only on the basis of your explicit consent. You may withdraw consent at any time without affecting any other aspect of your account.

lepoker does not sell your personal data to any third party. Full stop. We share your data only with the categories of service providers listed below, and only to the extent necessary for them to perform their specific function on behalf of lepoker:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and card payment gateways receive only the financial data necessary to process your specific transaction. They do not receive your gaming history or other account data.
• Identity verification providers: Third-party KYC services receive your identity documents and biometric data solely for the purpose of verifying your identity in compliance with our regulatory obligations.
• Game software providers: Casino game providers receive a player identifier to manage your game session and calculate outcomes. They do not receive your full personal details or payment information.
• Cloud infrastructure providers: lepoker's platform runs on secure cloud infrastructure. The infrastructure provider may technically have access to encrypted data stored on their servers, but they are contractually prohibited from accessing or using it.
• Regulatory and law enforcement authorities: lepoker will disclose personal data to regulatory bodies or law enforcement agencies when required to do so by applicable law, court order, or our licensing obligations. We will inform you of such disclosures where legally permitted to do so.

lepoker uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help lepoker recognise you between sessions, maintain your login state, and improve your experience.

Types of Cookies lepoker Uses

You can manage your cookie preferences through your browser settings at any time. Disabling cookies other than strictly necessary ones will not prevent you from using lepoker but may affect your experience in minor ways such as losing remembered preferences between sessions.

lepoker takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information against unauthorised access, accidental loss, and malicious attack:

• TLS/SSL encryption: All data transmitted between your device and lepoker's servers is encrypted using industry-standard Transport Layer Security. The padlock icon in your browser confirms this is active during every session.
• Encrypted data storage: Sensitive data — including identity documents and payment method details — is stored in encrypted form in lepoker's database. Even if the database were accessed without authorisation, the data would not be readable without the encryption keys.
• Access controls: Only lepoker staff who specifically need your data to perform their job role have access to it. Access is logged and audited. Unauthorised internal access is treated as a serious breach.
• Two-factor authentication: lepoker offers two-factor authentication (2FA) for player accounts and mandates it for internal staff access. We strongly encourage all Pakistani players to enable 2FA on their lepoker account.
• Regular security testing: lepoker conducts regular penetration testing and vulnerability assessments on its platform infrastructure. Identified vulnerabilities are remediated within defined timelines based on severity.
• Incident response: In the event of a data breach that poses a risk to your rights, lepoker will notify affected players without undue delay and provide clear information about what happened and what steps are being taken.

lepoker retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, plus any additional period required by law or regulatory obligation.

• Active account data: Retained for the full duration of your account being open and active on lepoker.
• Closed account data: Following account closure, lepoker retains your account records and transaction history for a minimum of five years to comply with anti-money laundering regulations and respond to any regulatory investigations or legal claims.
• KYC documents: Identity and address verification documents are retained for five years from the date of verification or the date of account closure, whichever is later.
• Support communications: Live chat transcripts and email correspondence are retained for up to three years to provide context in the event of a dispute or repeat inquiry.
• Marketing data: If you withdraw consent for marketing communications, your data will be removed from lepoker's marketing lists within 10 business days. However, core account records are retained per the schedule above regardless of marketing opt-out.

When the retention period for any data category expires, lepoker deletes or anonymises the data in a secure manner. Anonymised data — which can no longer be linked to any individual — may be retained for analytics purposes indefinitely.

As a lepoker player, you have the following rights in respect of your personal data. These rights can be exercised at any time by contacting our support team — you do not need a reason to make a request, and lepoker will not penalise you for exercising any of these rights.

lepoker's services are strictly for adults aged 18 and over. lepoker does not knowingly collect or process personal data from anyone under the age of 18. If a lepoker account is found to have been created by a minor, it will be immediately suspended, all balances forfeited, and any personal data associated with the account deleted from our systems.

If you are a parent or guardian and believe that a minor in your care has registered on lepoker, please contact our support team immediately at support@lepoker.app. We take underage access extremely seriously and will act without delay.

lepoker may send you promotional communications — bonus offers, seasonal promotions, new game announcements, and similar content — via SMS, email, or platform notifications. We will only do this if you have explicitly opted in to receive marketing during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from lepoker;
• Replying STOP to any marketing SMS;
• Visiting your lepoker account settings and disabling marketing notifications;
• Contacting lepoker support and requesting removal from all marketing lists.

Opting out of marketing does not affect transactional communications — lepoker will continue to send account-related messages such as deposit confirmations, withdrawal notifications, and important policy updates regardless of your marketing preference.

lepoker may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will notify registered players via email or platform notification and update the "Last Updated" date at the top of this policy.

We recommend reviewing this policy periodically. Previous versions are available on request from our support team. Your continued use of lepoker after a policy update constitutes acceptance of the revised version. If you do not agree with changes, you may request account closure by contacting support.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a complaint about how lepoker has handled your personal data, please contact us using the details below. Our support team handles privacy-related queries in both Urdu and English.

If you are not satisfied with lepoker's response to a data complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.