Crazy Time Pakistan — Privacy Policy

Crazy Time (operating at crazytime-bangla.com) is an online gaming platform dedicated to Pakistani players. In the context of this Privacy Policy, "Crazy Time", "we", "us" and "our" refer to the operator of this platform. "You" and "your" refer to any person who accesses the platform, whether as a registered account holder or as a visitor.

We are the data controller for the personal information you provide to us. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is lawful, fair, and transparent.

The categories of personal data that Crazy Time collects depend on how you interact with the platform. Below is a full breakdown of the data categories and when each is collected:

We do not collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, biometric data, or health information. The CNIC number collected during identity verification is used solely to confirm your identity and age; it is stored in encrypted form and not used for any other purpose.

Most of the data we hold about you comes directly from you — through the registration form, the payment process, your account settings, and your communications with our support team. In addition, data is generated automatically as you use the platform:

• Directly provided by you — registration details, verification documents, payment information, support communications, and any data you voluntarily update in your account settings.
• Automatically generated — technical data such as your IP address, device and browser information, and session logs are collected automatically each time you access the platform. This happens regardless of whether you are logged in.
• Via cookies and similar technologies — small data files stored on your device that help the platform remember your session, preferences, and security status. Full details are in Section 6 of this policy.
• From payment processors — when you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, or bank transfer, the relevant payment provider confirms transaction status to Crazy Time. We receive confirmation data but do not have access to your full wallet credentials or bank account details.

Every use of your personal data by Crazy Time has a specific, legitimate purpose. We do not process data speculatively or for undefined future uses. The table below sets out each processing purpose and its legal basis:

Where we rely on "legitimate interest" as a legal basis, we have assessed that our interests do not override your rights and freedoms. Where we rely on "consent" — specifically for promotional communications — you can withdraw that consent at any time by updating your preferences in account settings or contacting support.

Crazy Time does not sell your personal data. We share data only with the categories of third parties described below, and only to the extent necessary for the specified purpose:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and our banking partners receive only the transaction data necessary to process your deposit or withdrawal. They operate under their own privacy policies and data protection obligations.
• Game software providers — third-party game studios whose titles appear in the Crazy Time library receive anonymised session data for game performance and fairness monitoring purposes. They do not receive your identity or contact data.
• Identity verification services — a third-party verification provider may process your CNIC and identity documents to confirm your eligibility as a player. This provider operates under a strict data processing agreement with us.
• Regulatory and legal authorities — we will disclose personal data to law enforcement agencies, regulatory bodies, or courts if we are legally required to do so. We will always seek to limit such disclosures to the minimum necessary and, where legally possible, will notify you of a disclosure request.
• Platform security providers — fraud detection and cybersecurity service providers receive technical data to identify suspicious activity. These providers operate under confidentiality obligations and are not permitted to use your data for any purpose other than providing their service to us.

Crazy Time uses cookies and similar browser-based technologies to operate the platform correctly, maintain your session, and understand how the platform is being used. Here is what each category of cookie does:

• Strictly necessary cookies — these are required for the platform to function. They manage your login session, remember your security status, and ensure that game state is maintained correctly. You cannot opt out of these cookies while using the platform.
• Functional cookies — these remember your preferences such as preferred language, game display settings, and whether you have seen a particular notification. They improve your experience but are not essential for the platform to work.
• Analytics cookies — we use anonymised analytics data to understand which pages and games are most popular, how long sessions last, and where players encounter difficulties. This data is aggregated and does not identify you individually.
• Security cookies — short-lived cookies that help detect and prevent fraudulent account access and bot activity on the platform.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using Crazy Time but may affect certain preferences or features. Disabling strictly necessary cookies will prevent you from logging in.

We take the security of your personal data seriously. The technical and organisational measures in place at Crazy Time include:

• TLS encryption for all data in transit between your device and our servers — the same standard used by banking platforms.
• Encryption at rest for all sensitive data stored on our servers including payment method identifiers and identity documents.
• Access controls — only authorised staff whose roles require access to specific data categories can access that data. Access is logged and reviewed regularly.
• Regular security audits conducted by independent security professionals to identify and address potential vulnerabilities before they can be exploited.
• Incident response procedures — in the event of a data breach, we have a documented response plan that includes notifying affected players and relevant authorities within the timeframes required by applicable law.

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure. Your cooperation in maintaining secure account credentials (as described in the Terms and Conditions) is an important part of keeping your data safe. If you become aware of any security concern related to your Crazy Time account, please contact us immediately.

We retain personal data only as long as it is needed for the purposes described in this policy. Specific retention periods are:

• Account data — kept for the duration of your account and for a period of five years after account closure, to satisfy potential regulatory audit requirements.
• Financial transaction data — retained for a minimum of five years following each transaction in accordance with anti-money laundering obligations.
• Identity verification documents — retained for the period required by applicable verification regulations and deleted promptly once that period expires.
• Support communications — retained for two years after the relevant support case is closed, in case the same issue recurs.
• Technical and session data — retained for 12 months for security monitoring purposes, then anonymised or deleted.
• Marketing preference data — retained until you withdraw consent or close your account, whichever comes first.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained for aggregated analytics purposes indefinitely.

You have a number of rights over your personal data held by Crazy Time. These are not complicated processes — you can exercise most of them simply by contacting us at support@crazytime-bangla.com with the subject line "Privacy Request."