o789 Privacy Policy – How We Handle Your Personal Data in Pakistan

o789 is an online sports betting and casino platform operated at o789.im, designed specifically for Pakistani players. The platform offers cricket betting, PSL betting, virtual sports, online casino, live casino, slots and related services — all denominated in Pakistani Rupees (PKR).

For the purposes of this Privacy Policy, o789 is the data controller responsible for the personal information collected through the platform. This means we determine how and why your data is processed. If you have any questions about how o789 handles your data, or want to exercise any of the rights described in this document, you can contact us at support@o789.im.

o789 collects personal data through three main channels: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from third parties such as payment processors and identity verification services.

We collect only the data that is necessary for the purposes described in this policy. Where we ask for optional information, we make that clear at the point of collection. You are not required to provide optional data to use the core features of the o789 platform.

o789 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without first seeking your consent where required.

• Account Creation and Management: Processing your registration, maintaining your account, authenticating your identity at login and at key account actions such as withdrawals.
• Identity Verification (KYC): Confirming that you meet the minimum age requirement of 18 years and verifying the accuracy of the information provided during registration, as required under our operating licence.
• Payment Processing: Facilitating deposits to and withdrawals from your o789 PKR balance using your chosen Pakistani payment method. Transaction records are maintained for accounting and audit purposes.
• Platform Operation: Ensuring bets are placed, settled and recorded accurately. Maintaining bet history, account balance records and bonus tracking.
• Fraud Prevention and Security: Monitoring account activity to detect fraudulent behaviour, unauthorised access, money laundering, multi-accounting and any other activity that breaches our Terms and Conditions or applicable law.
• Responsible Gaming: Monitoring betting patterns to identify players who may be showing signs of problem gambling, and acting on that information in line with our responsible gaming obligations. This includes reaching out to affected accounts and enforcing self-exclusion requests.
• Customer Support: Using your account information and communication history to resolve support tickets, investigate complaints and assist you with account or payment queries.
• Marketing (with consent only): Sending promotional offers, bonus notifications and platform updates by SMS or email — only where you have opted in to receive such communications. You can withdraw this consent at any time by contacting support@o789.im.
• Legal and Regulatory Compliance: Retaining and disclosing data as required by applicable law, court orders or regulatory requests from authorised bodies.

o789 processes your personal data on one or more of the following legal grounds depending on the specific purpose:

• Contract Performance: Processing necessary to create and operate your account, process bets and handle deposits and withdrawals — all of which are required to deliver the services you signed up for.
• Legal Obligation: Processing necessary to comply with KYC, anti-money laundering, age verification and other legal requirements applicable to licensed betting operators.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring and improvement of our services, where those interests do not override your rights.
• Consent: Processing for direct marketing communications, where you have given explicit opt-in consent. You can withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

o789 does not sell, rent or trade your personal data. We share data only where necessary and only with the categories of recipient listed below, each of whom is subject to appropriate data protection obligations:

• Identity Verification Providers: Licensed KYC service providers who verify your identity documents and age against official databases. These providers process verification data on our behalf under strict data handling agreements.
• Payment Processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT network participants and card payment gateway operators receive the payment details necessary to process your specific transaction. Each processor operates under its own privacy framework and applicable Pakistani financial regulations.
• Game Content Providers: Third-party software providers whose casino games, live casino and virtual sports products appear on o789 receive game session data necessary for game operation, fairness auditing and dispute resolution.
• Fraud and Security Services: Third-party fraud detection tools that monitor transaction patterns and account behaviour across the platform. These tools process data on our behalf under processor agreements.
• Regulatory and Law Enforcement Authorities: Where required by law, court order or regulatory direction, o789 may disclose personal data to authorised authorities. o789 will notify you of such disclosures where legally permitted to do so.

The security of your financial information is treated as a priority at o789. Here is specifically how payment data is handled:

• Card Payments: Card numbers, CVV codes and expiry dates entered during card deposits are transmitted directly to our PCI-DSS certified payment gateway using 256-bit SSL encryption. o789 never receives or stores the full card number on its own servers. What o789 retains is a tokenised reference that allows us to match transactions to your account without holding the sensitive card data itself.
• Mobile Wallet Transactions: Easypaisa and JazzCash deposits and withdrawals are processed via each wallet's secure API. The mobile number associated with your wallet is stored in your account to facilitate withdrawals to the correct destination. This number is protected under the same security controls as all other account data.
• IBFT Bank Transfers: Bank account details provided for IBFT withdrawals are stored securely and used only to process your requested withdrawal to the same bank account. This data is not shared with any party other than the IBFT network participants necessary to complete the transfer.
• Transaction History: A full record of all deposits, withdrawals and balances is maintained on your account and is accessible from your account dashboard at any time. Transaction records are retained for the period described in the Data Retention section of this policy.

o789.im uses cookies and similar tracking technologies to operate the platform correctly and to improve the experience for Pakistani players. Here is what we use and why:

You can manage cookie preferences from your browser settings at any time. Disabling essential cookies will prevent you from logging into your o789 account. Disabling functional or analytics cookies will not affect your ability to bet, deposit or withdraw.

o789 retains personal data for as long as is necessary for the purpose for which it was collected, subject to the following minimum retention periods:

• Account Data: Retained for the lifetime of your active account plus a minimum of 5 years after account closure, to meet regulatory and audit obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years following account closure or the last transaction, in line with anti-money laundering record-keeping requirements.
• Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of 5 years for accounting, audit and dispute resolution purposes.
• Betting History: Retained for a minimum of 3 years after each bet is settled, to support dispute resolution and regulatory compliance.
• Support Communications: Retained for 2 years after the issue was resolved, to provide context for related future enquiries.
• Marketing Preferences: Records of your consent or opt-out for marketing communications are retained for as long as your account exists plus 2 years after closure.

When data is no longer required, o789 deletes or anonymises it using secure disposal methods. You may request early deletion of certain categories of data — see the Your Rights section below for more information on how to make such a request.

As a player on o789, you have the following rights with respect to your personal data. To exercise any of these rights, send a request to support@o789.im with the subject line "Data Rights Request" — the compliance team will respond within 30 days.

o789 is strictly an adults-only platform. Registration and use of any part of the platform is prohibited for anyone under the age of 18 years. o789 does not knowingly collect personal data from children. Age verification is a mandatory step in the account opening process and is enforced through KYC checks on all accounts before the first withdrawal is processed.

If o789 discovers that an account has been registered by a person under 18, the account will be immediately and permanently closed. Any balance in the account will not be returned if it was funded from an unverified source. If you believe a minor has registered on o789, please contact support@o789.im immediately so the account can be investigated and closed.

Parents and guardians concerned about underage access to online betting are encouraged to use parental control software on devices accessible to minors, and to visit the Responsible Gaming page for further guidance on protecting younger family members.

o789 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration or disclosure:

• Transport Layer Security: All data transmitted between your device and o789's servers uses TLS 1.2 or higher with 256-bit AES encryption — the same standard applied by Pakistani commercial banks and financial institutions.
• Server-Side Security: o789 infrastructure runs on access-controlled environments with network-level firewalls, intrusion detection systems and regular security audits. Access to production systems is restricted to authorised personnel on a need-to-know basis.
• Password Hashing: Account passwords are stored as cryptographic hashes — o789 staff cannot read your password. If you forget your password, it must be reset — it cannot be retrieved.
• Two-Factor Authentication: Login and withdrawal actions are subject to OTP verification sent to your registered Pakistani mobile number, providing a second layer of protection beyond your password alone.
• Fraud Monitoring: Automated systems continuously monitor account and transaction patterns for signs of unauthorised access or fraudulent activity. Suspicious activity triggers account reviews and, where necessary, temporary holds pending investigation.

No security system is completely impenetrable. In the event of a data breach that is likely to affect your rights and interests, o789 will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

o789 may update this Privacy Policy from time to time as the platform evolves, as new payment methods are added, or as applicable legal requirements change. When updates are made, the revised policy will be published on this page with an updated effective date at the top of the document.

Where changes are material — for example, a new category of data being collected, a new purpose for which existing data will be used, or a new category of third party receiving your data — o789 will provide notice to registered players via email or in-platform notification before the change takes effect, where reasonably practicable to do so.

Your continued use of the o789 platform after a revised policy is published constitutes acceptance of the updated terms. If you do not agree with changes to this policy, you should stop using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, need to report a suspected data breach involving your account, or simply want to understand more about how o789 handles your personal data, please get in touch:

• Email: support@o789.im — include "Privacy Request" in the subject line for faster routing to the compliance team
• Live Chat: Available from within your o789 account dashboard — 24 hours a day, 7 days a week
• Languages: Requests handled in English and Urdu
• Response Time: Privacy-related requests acknowledged within 48 hours, substantive response within 30 days