svipgems Privacy Policy — How We Handle Your Personal Data

Who We Are

svipgems is an online gaming and sports betting platform accessible at svipgems.im, operated by a licensed gaming entity (the "Operator"). For the purposes of data privacy, svipgems acts as the data controller — meaning we determine how and why your personal data is collected and processed.

This Privacy Policy applies to all registered members of svipgems, visitors to the platform who have not yet registered, and anyone who interacts with our customer support team. It covers all data collected through the svipgems website, mobile browser interface, and any communication channels including live chat and email.

This policy should be read alongside our Terms and Conditions, which form the broader contractual basis of your relationship with svipgems. In the event of a conflict between this Privacy Policy and the Terms, the Terms prevail on operational matters while this Policy governs on data privacy matters specifically.

Data We Collect

svipgems collects personal data in three main ways: data you provide directly during registration and account use, data generated automatically by your use of the platform, and data we receive from third-party services you use to interact with us (such as payment providers).

We do not collect sensitive personal data beyond what is required for identity verification — specifically, we do not collect biometric data beyond what a government-issued ID photograph provides, and we do not collect financial account numbers or payment credentials beyond what payment processors require to execute transactions.

How We Use Your Data

Every piece of data that svipgems holds about you is used for a specific purpose. Below are the primary uses and the data categories involved in each.

• Account creation and management: Identity and contact data are used to create your account, verify your identity at registration and during periodic reviews, and communicate essential account information such as password resets and security alerts.
• Processing transactions: Transaction data enables us to credit deposits, process withdrawal requests, verify that payment methods belong to you, and maintain accurate financial records in compliance with regulations.
• Providing gaming services: Gaming data — your bet history, session records, and balance information — is used to run the platform as a functioning betting and gaming service. Without this data, svipgems cannot settle bets or operate games.
• KYC and fraud prevention: Identity data, device data, and transaction patterns are analysed to prevent fraudulent account creation, money laundering, underage registration, and suspicious payment activity.
• Personalisation: Gaming and interaction data is used to surface game recommendations, show relevant promotions based on your interests, and customise the lobby view to reflect the games and categories you use most.
• Customer support: Communication data is used to understand and resolve your queries, improve response quality over time, and maintain a record of interactions relevant to dispute resolution.
• Responsible gaming: Your gaming data — session frequency, deposit velocity, bet size patterns — is analysed to identify members who may benefit from responsible gaming tools. This is a player welfare function, not a commercial one.
• Legal and regulatory compliance: Transaction records and identity data are retained as required by applicable law. svipgems may be required to share specific data with licensing authorities or law enforcement when legally compelled.
• Platform analytics and improvement: Aggregated and anonymised device and session data is used to understand how the platform is used, identify performance issues, and prioritise features for development.

We do not use your personal data to make fully automated decisions that have a significant legal or material effect on you without human oversight. Responsible gaming alerts and bonus eligibility checks involve automated data processing but are subject to human review where they result in account-level action.

Legal Basis for Processing

svipgems processes your personal data under the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the svipgems membership contract — account management, bet settlement, payment processing, and customer support. Without this processing, we cannot provide the service.
• Legal obligation: Processing required to comply with applicable law — KYC identity verification, anti-money laundering checks, retention of transaction records, and cooperation with regulatory bodies.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where our legitimate interest does not override your fundamental rights.
• Consent: Where we send marketing communications beyond essential transactional messages, we rely on your consent. You can withdraw marketing consent at any time from your account settings without affecting your membership or ability to use the platform.

Data Sharing

svipgems does not sell, rent, or trade your personal data. We share data only in the following specific circumstances, and only to the extent necessary for the stated purpose.

• Licensed game providers (Pragmatic Play, Ezugi, PG Soft, NetEnt, and others): Your account identifier and session data are shared with game providers to enable gameplay. Providers receive a pseudonymous player ID — not your full name or CNIC. All providers operate under data protection agreements with svipgems.
• Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners): Transaction data necessary to process deposits and withdrawals is shared with the relevant payment service. We share only what is required to complete the transaction — no unnecessary personal data is included.
• Identity verification services: KYC document images may be processed by a licensed identity verification provider to authenticate your CNIC or passport. These providers operate under strict data handling agreements and are prohibited from retaining or repurposing your documents.
• Regulatory and law enforcement authorities: svipgems is required by law to respond to valid legal requests from licensing authorities and law enforcement. We provide only the data specifically requested and legally required — not broader account information.
• Professional advisors: Lawyers, auditors, and compliance consultants who assist svipgems may have access to data under confidentiality obligations in the course of providing professional services.

Cookies & Tracking Technologies

svipgems uses cookies and similar technologies to keep the platform functional, understand how it is used, and improve your experience. Here is a breakdown of the cookie categories we use.

svipgems does not use third-party advertising cookies or tracking pixels that report your activity to external advertisers. You can manage non-essential cookies through your browser settings. Note that disabling essential cookies will prevent core platform functionality from working correctly.

Data Retention

svipgems retains your personal data for as long as necessary to fulfil the purpose for which it was collected, and for as long as required by applicable law. The following retention schedule applies.

• Active account data: Retained for the duration of your membership plus a minimum post-closure period as required by regulatory obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by anti-money laundering regulations applicable to licensed gaming operators.
• KYC documents: Retained for a minimum of 5 years from account closure. Document images are stored in an encrypted data store with access limited to compliance staff.
• Support communications: Live chat transcripts and email correspondence are retained for up to 3 years to support dispute resolution and quality improvement.
• Marketing consent records: Retained for 3 years from the date of consent or withdrawal of consent, whichever is later.
• Gaming session data: Full session logs retained for 2 years; aggregated gaming statistics retained indefinitely in anonymised form.

When the retention period for a data category expires and no legal reason to retain it further exists, svipgems deletes or permanently anonymises that data. Deletion requests received from members are actioned within 30 days where no legal retention obligation prevents deletion.

Data Security

svipgems implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following technical and operational measures are in place.

• 256-bit SSL/TLS encryption for all data in transit between your device and svipgems servers.
• Encryption at rest for sensitive data categories including KYC documents, identity fields, and payment records.
• Role-based access controls: Staff access to personal data is limited to what is required for their specific job function. Database access is logged and regularly audited.
• Two-factor authentication required for all administrative access to production systems.
• Regular security assessments including penetration testing and vulnerability scanning conducted by qualified security professionals.
• Incident response procedures: In the event of a data breach that poses a risk to members, svipgems will notify affected individuals and relevant regulatory bodies within the timeframe required by applicable law.

Despite these measures, no internet transmission is completely secure. You also have a role to play in account security — use a strong, unique password for your svipgems account, do not share your login credentials, and enable two-factor authentication from your account settings. svipgems support will never ask for your password.

Your Data Rights

As a svipgems member, you have the following rights over your personal data. These rights can be exercised by contacting us at support@svipgems.im with the subject line "Data Rights Request" and your registered mobile number.

We will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by up to 60 days with notification to you. There is no charge for exercising your data rights. However, we may refuse or charge a reasonable fee for requests that are manifestly unfounded or repetitive.

Children's Privacy

svipgems is strictly for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is a mandatory step in our KYC process, and any account found to belong to someone under 18 is closed immediately.

If you are a parent or guardian and believe that someone under 18 in your household has registered on svipgems, please contact us immediately at support@svipgems.im. We will investigate, close the account if confirmed, and delete all associated personal data except where legal retention obligations apply to transaction records that may need to be reported.

svipgems implements parental control awareness measures and does not serve advertising through channels specifically targeting minors. If you are concerned about underage access to online gaming in general, please visit the Responsible Gaming page for guidance on parental control tools available on mobile devices.

Responsible Gaming & Data Processing

svipgems processes gaming data — session frequency, deposit patterns, bet size history, and time-of-day activity — as part of our responsible gaming programme. This processing is conducted under our legitimate interest in protecting player welfare, and is not used for any commercial purpose.

The responsible gaming data analysis is used to:

• Identify accounts showing patterns associated with problematic gambling behaviour
• Generate internal welfare alerts for review by our responsible gaming team
• Proactively contact members who may benefit from limit-setting tools or a conversation about their gaming activity
• Ensure that self-exclusion requests are properly actioned and that excluded accounts are not contacted with promotional material

Responsible gaming data is not shared with third parties for any purpose. It is used exclusively within svipgems for player welfare functions. If you have questions about how your data is used in the context of responsible gaming, or if you would like to discuss your account with our welfare team, contact support@svipgems.im. Full details of the tools available are at Responsible Gaming.

Changes to This Privacy Policy

svipgems may update this Privacy Policy from time to time as our services evolve, legal requirements change, or we improve how we explain our data practices. When changes are made:

• The "Last Updated" date at the top of this page is always changed to reflect the revision date.
• For changes that materially affect your rights or the way we use your data, we will notify you via your registered mobile number or email at least 7 days before the change takes effect.
• For minor clarifications or formatting updates that do not affect your rights, we may update the policy without advance notification.
• Continued use of svipgems after a policy update takes effect constitutes acceptance of the revised policy.

We recommend reviewing this page periodically, particularly if you receive a notification about a policy update. Previous versions of this policy are available on request from support@svipgems.im for members who wish to understand what has changed.

Contact Us & Privacy Complaints

If you have a question about how svipgems handles your personal data, want to exercise any of your data rights, or have a complaint about our privacy practices, the following channels are available.

• Email: support@svipgems.im — use subject line "Privacy Request" for data rights matters and "Privacy Complaint" for complaints.
• Live Chat: Available 24/7 from the svipgems platform. For initial queries or to understand what information to include in a formal data request.
• Response commitment: Privacy requests acknowledged within 48 hours, substantive response within 30 days.

If you make a complaint and are not satisfied with our response, you have the right to escalate to the relevant regulatory authority. Details of the applicable authority are available in the licensing information on file with svipgems's licensing jurisdiction.