Data Protection & Privacy

Bloxflip Privacy Policy — How We Handle Your Data

Your personal information matters. This Privacy Policy explains in plain language exactly what data Bloxflip collects from Pakistani players, why we need it, how we keep it secure, who we share it with, and what rights you have over it at every stage of your relationship with us.

Last Updated: 1 June 2025 en-PK · English Applies to bloxflip.bet
Our Privacy Commitments
We never sell your data to third parties
All data is encrypted at rest and in transit
You can request deletion of your data
Marketing can be opted out any time
KYC documents stored securely with limited access
We will notify you within 72 hrs of any breach
bloxflip

01Who We Are and What This Policy Covers

Bloxflip is an online betting and gaming platform operated at bloxflip.bet, serving Pakistani players across cricket betting, live casino, jackpot slots, Teen Patti, virtual sports and related services. This Privacy Policy describes how Bloxflip ("we", "us", "our") collects, uses, stores, shares and protects the personal data of all individuals ("you", "player", "user") who access or use the Bloxflip platform.

This policy applies to all personal data collected through the Bloxflip website, any mobile-optimised version of the site, live chat interactions, email correspondence, and any other communication channel operated under the Bloxflip brand. It should be read alongside our Terms and Conditions and Responsible Gaming Policy.

By registering an account or using the Bloxflip platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions at any point, contact us at support@bloxflip.bet — we will respond in plain language, not legal boilerplate.

Data Controller: Bloxflip is the data controller for all personal information collected through the platform. Our data protection contact is reachable at support@bloxflip.bet.

02What Personal Data We Collect

Bloxflip collects different categories of personal data depending on how you interact with the platform. We only collect what is genuinely necessary for the purpose being served — we do not collect data speculatively or store information we have no use for.

Category Data Collected When Collected
Account Data Full name, date of birth, email address, mobile number, username At registration
Identity (KYC) CNIC / passport scan, selfie or photo verification, proof of address Before first withdrawal
Financial Data Deposit and withdrawal history, payment method reference numbers (not full card/wallet credentials) During transactions
Betting & Gaming Bet history, game sessions, stakes, winnings and losses, bonus usage During platform use
Technical Data IP address, device type, browser, operating system, session duration Automatically on visit
Communications Live chat transcripts, support emails, survey responses When you contact us
Marketing Preferences Email/SMS opt-in status, promotion interaction history At opt-in or account update

Bloxflip does not collect sensitive data categories such as health information, religious beliefs, or political opinions — and we have no reason to. We also do not store full payment credentials such as complete card numbers or mobile wallet PINs. These are handled entirely by our certified payment processor partners.

03How We Use Your Personal Data

Every piece of data Bloxflip collects is used for a specific, identifiable purpose. We do not process data in ways that you would not reasonably expect given the context in which it was collected. The main purposes for which we use your data are:

  • Account creation and management: Setting up and maintaining your Bloxflip account, enabling login, and keeping account information current and accurate.
  • Identity verification (KYC): Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years, as required for all betting and gaming platforms.
  • Processing payments: Facilitating PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card, and processing withdrawal requests to your registered payment method.
  • Providing betting and gaming services: Running your bet and game sessions, calculating and paying winnings, applying bonuses and promotions to your account.
  • Fraud prevention and anti-money laundering (AML): Detecting unusual account behaviour, flagging potentially fraudulent deposit or withdrawal patterns, and meeting legal obligations relating to financial crime prevention.
  • Responsible gaming: Monitoring for signs of potentially problematic gambling behaviour, applying deposit and loss limits you have set, and managing self-exclusion requests.
  • Customer support: Responding to queries, resolving disputes, and maintaining support records for quality assurance.
  • Marketing communications: Sending promotional emails and SMS about Bloxflip offers, where you have opted in to receive them.
  • Platform improvement: Analysing how players use the platform in aggregate (not individually) to improve navigation, game selection, and overall experience.
bloxflip

04Legal Basis for Processing

Bloxflip processes your personal data on the following legal grounds depending on the purpose involved:

  • Contract performance: Processing necessary to deliver the betting and gaming services you signed up for — including account management, bet settlement, and payment processing.
  • Legal obligation: Processing required to comply with applicable law — including KYC identity verification, age verification, anti-money laundering checks, and responding to lawful requests from authorities.
  • Legitimate interests: Processing justified by Bloxflip's legitimate business interests where those interests are not overridden by your privacy rights — including fraud detection, platform security, and aggregate usage analytics.
  • Consent: Processing based on your explicit opt-in — primarily marketing communications by email and SMS. You may withdraw consent at any time without affecting other processing activities.

You can withdraw marketing consent at any time by clicking "Unsubscribe" in any Bloxflip email or by updating your preferences in Account Settings. Withdrawing consent does not affect your account or access to platform services.

05Who We Share Your Data With

Bloxflip does not sell your personal data to any third party under any circumstances. We share data only where necessary to operate the platform and fulfil our legal obligations, and only with parties who handle it under strict confidentiality and security requirements. The categories of third parties who may receive your data are:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and bank partners receive necessary transaction data (name, account reference, amount) to process deposits and withdrawals. They do not receive your full betting history or other personal data beyond what is required for the transaction.
  • KYC verification providers: Specialist identity verification services receive your submitted identity documents to perform automated and manual verification. These providers are contractually bound to use your data only for this specific purpose.
  • Fraud and AML screening providers: Transaction monitoring services may receive account and transaction data in aggregate form to perform pattern analysis. Individual player data shared in this context is subject to strict data processing agreements.
  • IT infrastructure and cloud providers: Bloxflip uses secure cloud infrastructure to host the platform. These providers have access to server data only in their role as infrastructure operators and cannot use it for independent purposes.
  • Regulatory and law enforcement authorities: Bloxflip will disclose personal data to competent authorities where legally required to do so — for example, in response to a court order or a formal regulatory request. We will notify you of such disclosure unless legally prohibited from doing so.
  • Responsible gaming organisations: In limited circumstances, and only with your explicit involvement or consent, information may be shared with certified responsible gaming support organisations to facilitate welfare referrals.

All third-party data processors engaged by Bloxflip are vetted for data security standards and bound by contractual obligations that prevent them from using your data for any purpose beyond the specific service they provide to Bloxflip.

06KYC & Identity Document Data

Identity documents — CNIC scans, passport copies, selfie photos — are among the most sensitive personal data Bloxflip handles. We take their protection proportionately seriously. KYC documents are stored in an encrypted, access-controlled environment that is completely separate from general account data. Only designated members of the KYC verification team can access identity documents, and all such access is logged.

KYC documents are used exclusively for identity verification and age confirmation. They are not used for marketing, profiling, or any purpose beyond satisfying our legal verification obligations. Once a player's identity has been successfully verified, the underlying documents are retained only for as long as required by applicable law — see Section 9 for retention periods.

Bloxflip will never ask you to send identity documents via live chat, SMS, or unencrypted email. All document submission happens through the secure, encrypted verification portal inside your account. If you receive any request for documents through another channel claiming to be from Bloxflip, report it immediately to support@bloxflip.bet.

07Payment Data & Financial Information

Bloxflip does not store complete payment credentials. When you make a deposit via Easypaisa, JazzCash, or any other method, the transaction is processed entirely by our certified payment processor partner — Bloxflip never holds your mobile wallet PIN, full card number, or bank account credentials on its own systems.

What Bloxflip does store is the transaction record: the amount, date, payment method type, a masked reference identifier (for example, the last four digits of a card or a partial mobile number), and the transaction status. This information is retained for account management, dispute resolution, AML compliance, and to confirm that withdrawals are processed to the correct registered payment method.

All payment transactions between Pakistani players and Bloxflip are conducted in PKR. No foreign currency conversion data is processed or stored because the entire payment stack is designed for the local market from the ground up.

bloxflip

08Cookies & Tracking Technologies

Bloxflip uses cookies and similar technologies to make the platform work properly and to understand how players use it. A cookie is a small text file stored on your device by your browser. Bloxflip uses the following categories of cookies:

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the platform normally. Disabling marketing cookies has no effect on your access to any Bloxflip service. Bloxflip does not use cross-site tracking cookies or sell browsing data to advertising networks.

09Data Retention — How Long We Keep Your Information

Bloxflip retains personal data for as long as it is needed for the purpose for which it was collected, subject to any longer minimum period required by law. The table below sets out the main retention periods applicable to different data categories:

Data CategoryRetention PeriodReason
Account informationDuration of account + 5 yearsDispute resolution, regulatory compliance
KYC identity documentsDuration of account + 5 yearsAML/legal obligation
Transaction & financial records7 years from transaction dateLegal and tax obligations
Betting & gaming historyDuration of account + 3 yearsDispute resolution, responsible gaming monitoring
Support communications3 years from last interactionQuality assurance and dispute resolution
Marketing preferencesUntil opt-out or account closureConsent management
Technical/session data12 monthsSecurity and fraud monitoring

After retention periods expire, data is securely deleted or anonymised so it can no longer be associated with any individual. Anonymised aggregate data — for example, statistics about overall platform usage — may be retained indefinitely for internal analysis.

10How We Protect Your Data

Bloxflip applies multiple layers of technical and organisational security measures to protect personal data from unauthorised access, loss, or disclosure. These measures include:

  • Encryption in transit: All data exchanged between your browser or device and Bloxflip's servers is encrypted using TLS 1.2 or higher (the same technology used by banks and financial institutions).
  • Encryption at rest: Sensitive data categories including KYC documents and financial records are stored in encrypted form. Even if storage infrastructure were compromised, the data would be unreadable without the encryption keys.
  • Access controls: Internal access to personal data is restricted on a need-to-know basis. Staff members can access only the data required for their specific role. All internal access to sensitive data categories is logged and auditable.
  • Two-factor authentication: All Bloxflip player accounts support two-factor authentication (2FA). We strongly recommend enabling it in your account settings. Internal staff systems require 2FA without exception.
  • Regular security assessments: Bloxflip's infrastructure undergoes regular security reviews. Identified vulnerabilities are prioritised and resolved according to their risk level.
  • Breach response: In the event of a data security incident affecting your personal data, Bloxflip will notify you within 72 hours of becoming aware of it, describe what happened, and outline the steps taken to contain and remediate the incident.

While Bloxflip applies robust technical security measures, no system is completely immune to attack. You play a role in protecting your account too — use a strong, unique password, enable 2FA, and never share your credentials with anyone.

11Your Data Rights

You have meaningful rights over your personal data at Bloxflip. These are not token rights buried in a policy — they are real options that Bloxflip will action within 30 days of receiving a valid request.

Right of Access

You can request a copy of all personal data Bloxflip holds about you. We will provide this within 30 days in a readable format. Submit your request to support@bloxflip.bet.

Right to Rectification

If information we hold is inaccurate or incomplete, you have the right to request correction. Contact support and we will update the relevant record promptly.

Right to Erasure

You may request deletion of your personal data. We will comply unless retention is required by law (for example, financial records that must be kept for 7 years under AML regulations).

Right to Restrict Processing

You can ask Bloxflip to restrict how we process your data while a dispute or investigation is ongoing — for example, while you contest the accuracy of information we hold.

Right to Data Portability

You can request your data in a machine-readable format (such as CSV or JSON) so you can transfer it to another provider. This applies to data you provided directly to us.

Right to Object

You can object to processing based on legitimate interests, including profiling for marketing purposes. You can also withdraw marketing consent at any time without penalty.

To exercise any of these rights, email support@bloxflip.bet with the subject line "Data Rights Request" and describe what you are requesting. We will respond within 30 days. We may need to verify your identity before actioning the request to make sure we are disclosing or deleting the right person's data.

12Marketing Communications & Opt-Out

Bloxflip sends promotional emails and SMS messages about bonuses, PSL promotions, new game launches, and special offers on the platform — but only to players who have explicitly opted in to receive them. We do not send marketing to players who have not consented, and we never send marketing to players who have self-excluded from the platform.

You can opt in or out of marketing at any time through your Account Settings under "Communication Preferences". You can also click "Unsubscribe" at the bottom of any Bloxflip promotional email. Opt-out requests are processed immediately — you will not receive further marketing once you have unsubscribed, although it may take up to 48 hours for the change to propagate across all communication channels.

Opting out of marketing has no effect on transactional communications — these are messages you will still receive regardless of marketing preference, including deposit confirmations, withdrawal processing notifications, KYC status updates, and security alerts. These communications are necessary for operating your account and cannot be opted out of while your account remains active.

13Minors & Age Restriction

Bloxflip is strictly an 18+ platform. We do not knowingly collect, process, or store personal data relating to persons under 18 years of age. Age verification is a mandatory step before any player can access funded betting or gaming features on Bloxflip.

If Bloxflip discovers or receives credible information suggesting that an account belongs to a person under 18, the account will be immediately suspended and permanently closed. Any balance in the account will be forfeited in accordance with our Terms and Conditions. If a parent or guardian believes that a minor has registered on Bloxflip, they should contact support@bloxflip.bet immediately so the account can be closed and any personal data relating to the minor can be deleted.

14Updates to This Privacy Policy

Bloxflip reviews this Privacy Policy periodically and updates it when changes to our data practices, applicable law, or platform features require it. When we make material changes — changes that affect how we use your data or your rights over it — we will notify registered players by email at the address on their account at least 7 days before the new version takes effect.

The most current version of this policy is always available on this page, with the "Last Updated" date clearly displayed at the top. Minor corrections or clarifications that do not affect the substance of the policy may be made without advance notice. If you disagree with a material update to the Privacy Policy, you should contact us or close your account before the effective date of the change.

This version of the Bloxflip Privacy Policy was last updated on 1 June 2025. It supersedes all previous versions.

15Contact Us About Privacy

If you have any question about this Privacy Policy, want to exercise a data right, or want to raise a concern about how Bloxflip handles your personal information, please get in touch through any of the following channels:

  • Email (preferred for data requests): support@bloxflip.bet — use subject line "Privacy / Data Rights" for faster routing to the data protection team
  • Live Chat: 24/7 on the Bloxflip platform — for general privacy questions and urgent concerns
  • WhatsApp: Available for quick queries about data and account privacy

We aim to respond to all privacy queries within 5 business days and to complete data rights requests within 30 days of receiving a valid, verified request. If a request is complex or requires additional verification, we will inform you of any delay and provide an updated timeline.

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe Bloxflip has not handled your personal data appropriately. We would, however, ask that you contact us first — the vast majority of privacy concerns can be resolved quickly and directly without the need for a formal complaint.

Privacy That's Practical, Not Just a Document

Six ways Bloxflip's approach to data protection actually shows up in the product you use every day.

End-to-End Encryption

Every interaction between your device and Bloxflip is encrypted. Whether you're placing a live cricket bet or submitting KYC documents, your data travels through an encrypted channel that third parties cannot intercept.

We Never Sell Your Data

This is not a small-print disclaimer — it is a core operating principle. Bloxflip has never sold player data to advertisers, data brokers, or any other third party, and has no intention of doing so.

Marketing You Actually Chose

Bloxflip only sends promotional communications to players who explicitly opted in. Opt out once and you're done — no re-adding you to lists, no dark patterns to confuse the process.

Secure Document Handling

Your CNIC and passport scans are stored in an isolated, access-controlled environment separate from all other account data. Access is logged, restricted to verified staff, and reviewed regularly.

72-Hour Breach Notification

If a security incident ever affects your personal data, Bloxflip commits to notifying you within 72 hours of discovering it — what happened, what data was involved, and what we've done about it.

Your Rights Are Actually Workable

Submit a data access, deletion, or correction request by email and you will get a real response within 30 days — not an automated bounce-back and a months-long wait. Privacy rights mean nothing if the process to exercise them is deliberately broken.

Ready to Play on a Platform That Respects Your Privacy?

Bloxflip is built for Pakistani players who want a fair, transparent betting experience — with data protection that's genuine, not just printed on a policy page.

18+ only  ·  Gamble responsibly  ·  Responsible Gaming