isb15 Privacy
Policy

1. Introduction

isb15 is Pakistan's leading online cricket betting and casino platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, and every corner of the country. We know that handing over personal information to an online platform requires trust — and we do not take that trust lightly.

This Privacy Policy has been drafted to be clear, honest, and direct. We have avoided deliberately complicated legal language where plain English serves the same purpose. Where legal terminology is necessary — particularly in the context of our licensing obligations — we have explained what it means in practical terms for you as an isb15 user.

Our approach to data privacy rests on four principles: collect only what is necessary, use it only for its stated purpose, protect it with appropriate security measures, and give you genuine control over your own information. Everything in this Policy flows from those four commitments.

2. Data Controller

For the purposes of this Policy and applicable data protection law, isb15 acts as the data controller in respect of the personal data of its users. As data controller, isb15 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

isb15 operates under an international gaming license. Regulatory obligations attached to that license — including KYC, AML, and responsible gaming requirements — form part of the legal basis for certain data processing activities described in this Policy.

3. Personal Data We Collect

isb15 collects personal data across several categories, depending on how you interact with the platform. The specific data collected is set out in the table below:

Category	Data Points Collected	When Collected
Registration Data	Full name, date of birth, email address, mobile number, chosen username, password (hashed)	Account registration
Identity (KYC) Data	CNIC / passport / driver's license scan, selfie or liveness check, proof of address document	KYC verification request
Financial Data	Deposit and withdrawal history, payment method details (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank account reference), transaction amounts in PKR	Deposit / withdrawal activity
Gaming Activity Data	Bet history, game session logs, win/loss records, sports markets accessed, casino games played	Ongoing platform use
Technical Data	IP address, device type, operating system, browser type, session timestamps, geolocation (approximate)	Each platform session
Communication Data	Support ticket content, live chat transcripts, email correspondence with isb15 support	When you contact support
Responsible Gaming Data	Deposit limit settings, self-exclusion requests, cooling-off period activations, session time preferences	When tools are activated

isb15 does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (beyond standard liveness checks for KYC), or health information unless directly relevant to a responsible gaming welfare assessment at the User's own initiative.

4. How We Collect Your Data

isb15 collects personal data through the following channels and mechanisms:

• Direct input by you: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or activating responsible gaming tools.
• Automated collection: Technical and session data collected automatically when you access the isb15 website, including IP address, device identifiers, and browsing behaviour within the platform, via server logs and cookies.
• Payment providers: Transaction confirmation data passed to isb15 by payment processors such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank upon successful deposit or withdrawal processing.
• Identity verification partners: Where isb15 uses a third-party KYC verification service to process identity documents, that provider may return structured verification results (e.g., document authenticity status, age confirmation) to isb15's systems.
• Gaming platform providers: Game result data and session metadata from the casino game and live dealer providers integrated into the isb15 platform, used for bet settlement, dispute resolution, and responsible gaming monitoring.

5. Purpose & Legal Basis for Processing

isb15 processes your personal data only where a lawful basis exists for doing so. The primary purposes of data processing on the isb15 platform, and the legal basis for each, are as follows:

• Account creation and management — necessary for the performance of the contract between you and isb15 (i.e., providing the gaming services you have registered to use).
• Payment processing and transaction management — necessary for contract performance and to comply with financial record-keeping obligations.
• KYC and identity verification — required by isb15's international gaming license and applicable AML regulatory obligations; a legal compliance necessity.
• Fraud prevention, security monitoring, and abuse detection — legitimate interest of isb15 to maintain platform integrity and protect all users from financial crime.
• Responsible gaming monitoring and intervention — legal obligation under isb15's licensing terms; also a legitimate interest in protecting player welfare.
• Customer support and dispute resolution — necessary for contract performance and legitimate interest in resolving complaints fairly.
• Platform analytics and performance improvement — legitimate interest in maintaining and improving the quality of the isb15 service.
• Marketing communications — only where you have provided explicit consent to receive promotional emails or SMS messages from isb15. You may withdraw consent at any time.
• Legal and regulatory compliance — legal obligation where required by our licensing authority, a court order, or applicable law.

6. Data Sharing & Third Parties

isb15 does not sell or commercially share your personal data with any third party for marketing purposes. Data is shared with third parties only in the following limited and controlled circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive only the minimum data required to process your deposit or withdrawal transaction.
• KYC verification providers: Third-party identity verification services receive your submitted KYC documents solely for the purpose of verifying your identity and age on behalf of isb15. These providers are contractually bound to handle your documents with confidentiality.
• Game and casino software providers: Live dealer and slot game providers receive session and bet data necessary for game operation and result confirmation. They do not receive your financial or identity data beyond what is required for the gaming session.
• Regulatory and licensing authorities: isb15's licensing authority and any government regulator with lawful authority to request data may receive information about your account and activity as required under our operating license.
• Law enforcement and fraud prevention agencies: Where isb15 is legally compelled to disclose data by court order, regulatory direction, or law enforcement request, we will comply with that obligation. Where permitted by law, we will notify you of such a request.
• Professional advisers: Legal, accounting, and audit advisers acting for isb15 may access account or transaction data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

7. Data Retention

isb15 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and licensing obligations. The following general retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AML and gaming license record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support correspondence: Retained for three (3) years from the date of the most recent communication in a support thread, or longer where the correspondence relates to an unresolved dispute or legal matter.
• Technical and session logs: Retained for up to twelve (12) months for fraud prevention and platform security monitoring purposes, then anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent plus three (3) years to demonstrate compliance with consent obligations.

After the applicable retention period expires, isb15 will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.

8. Data Security

isb15 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and isb15 servers.
• Encryption of sensitive data fields (including passwords, stored as irreversible hashes, and payment method references) in the isb15 database.
• Role-based access controls ensuring that only authorised isb15 personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments and penetration testing of the isb15 platform infrastructure.
• Intrusion detection and monitoring systems that flag unusual access patterns for immediate review.
• Formal incident response procedures that govern how isb15 responds to any suspected data breach, including notification obligations.

While isb15 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. In the unlikely event of a data breach that materially affects your personal data, isb15 will notify affected users promptly in accordance with applicable notification requirements.

9. Cookies & Tracking Technologies

isb15 uses cookies and similar technologies (including local storage and session tokens) to operate and improve the platform. The categories of cookies used on isb15 are as follows:

• Strictly Necessary Cookies: Essential for platform functionality, including maintaining your logged-in session, remembering your language preference, and enabling the bet slip and deposit workflow to function correctly. These cannot be disabled without breaking core platform features.
• Performance & Analytics Cookies: Used to collect anonymised information about how users navigate the isb15 platform — such as which pages are visited most frequently and where users encounter errors. This data helps isb15 improve the user experience. No personally identifiable information is collected through these cookies.
• Functional Cookies: Used to remember choices you make on the platform — such as responsible gaming settings, preferred payment method, or display preferences — so that you do not need to re-enter them each time you visit.

isb15 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

10. Your Data Rights

As an isb15 user, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the isb15 support team at support@isb15.bet with a clear description of your request:

• Right of Access: You may request a copy of all personal data isb15 holds about you. We will provide this within a reasonable timeframe, in a clear and readable format.
• Right to Rectification: If any personal data held by isb15 is inaccurate or incomplete, you have the right to request its correction. For account details, many fields can be updated directly through your isb15 account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that isb15 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that KYC and transaction data must be retained for the regulatory periods specified in Section 7 and cannot be deleted on request.
• Right to Restriction: You may request that isb15 restrict the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: You may request a copy of personal data you have provided to isb15 in a structured, machine-readable format (e.g., CSV) for transfer to another service provider.
• Right to Object: You may object to isb15's processing of your personal data where that processing is based on legitimate interests. You also have the right to withdraw marketing consent at any time with immediate effect.

isb15 will not discriminate against users who exercise their data rights. Exercising these rights will not affect your ability to use the platform, subject to any access restrictions that arise from regulatory obligations (such as the inability to process withdrawals without completed KYC).

11. Minors & Age Restriction Policy

The isb15 platform is strictly for adults aged 21 years and over. isb15 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

During registration and KYC verification, isb15 employs age verification measures to confirm that all account holders meet the minimum age requirement. Where isb15 has reasonable grounds to believe that an account holder is under 21, the account will be immediately suspended pending age verification. If the user cannot demonstrate they are 21 or over, the account will be permanently closed and any remaining balance returned after deduction of any bonus funds awarded.

If you are aware of a minor attempting to use or currently using the isb15 platform, please notify our support team immediately at support@isb15.bet. We will investigate and take appropriate action without delay.

12. International Data Transfers

As an international gaming platform, isb15 may process or store your personal data on servers or through service providers located outside Pakistan. In such cases, isb15 ensures that any international transfer of personal data is subject to appropriate safeguards, including:

• Contractual data protection obligations imposed on all third-party processors who handle isb15 user data outside Pakistan, consistent with internationally recognised data protection standards.
• Use of service providers who are subject to equivalent data protection frameworks in their home jurisdictions.
• Where a gaming license authority imposes specific data residency or transfer requirements, isb15 complies with those requirements as a condition of its license.

By using the isb15 platform and accepting this Privacy Policy, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan as described in this section. isb15 will always apply the protections set out in this Policy regardless of where your data is physically processed.

13. Changes to This Privacy Policy

isb15 may update this Privacy Policy from time to time to reflect changes in platform functionality, applicable law, regulatory requirements, or our data processing practices. Where changes are material — meaning they significantly affect your rights or the way we handle your data — isb15 will provide notice through the platform and, where practicable, via email to your registered address.

The effective date at the top of this Policy indicates when the current version came into force. Continued use of the isb15 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of any updates.

All prior versions of the isb15 Privacy Policy are superseded by the current published version from the stated effective date onward.

14. Contact & Data Queries

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how your personal data has been handled by isb15, please contact our support team through the following channel:

• Email: support@isb15.bet (plain text — not a clickable link)
• Subject Line: Please use "Privacy Query" or "Data Rights Request" in your subject line to ensure your message is routed to the appropriate team.
• Response Time: isb15 aims to acknowledge all data-related queries within 5 business days and to resolve them within 30 days, subject to the complexity of the request.

When submitting a data rights request, please include your registered isb15 username and a clear description of your request so that we can locate your account and process your query efficiently. We may need to verify your identity before actioning certain requests to prevent unauthorised access to your data.