Noob Vin Privacy Policy – How We Protect Your Data in Pakistan

Noob Vin is an online betting and casino platform operated at noobvin.com, serving registered players based in Pakistan. For the purposes of this Privacy Policy, "Noob Vin", "we", "us" and "our" all refer to the operator of the noobvin.com platform and its associated services.

Noob Vin acts as the data controller in respect of the personal information collected about registered players and users of the platform. This means Noob Vin is responsible for deciding how and why your personal data is processed and for ensuring that processing is carried out lawfully, fairly and transparently.

This Privacy Policy applies to all personal data collected through the noobvin.com website, any associated mobile interface and any communications Noob Vin sends to registered players. It applies to all current and former players with active or closed accounts on the platform.

Noob Vin collects personal data about you through several channels – information you provide directly, information generated by your use of the platform and, in limited circumstances, information received from third-party service providers. The following table sets out the main categories of data collected:

Noob Vin does not intentionally collect sensitive personal data such as health information, religious beliefs or political views. If you voluntarily provide such information in a support interaction, it will be used only to respond to your query and will not be stored separately or used for any other purpose.

Noob Vin uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose not listed here without first obtaining your consent or being required to do so by law. The main purposes for which Noob Vin processes your personal data are:

• Account management: Creating, maintaining and managing your Noob Vin account, including verifying your identity, processing your registration, managing your login sessions and updating your account information when requested.
• Processing transactions: Handling your PKR deposits and withdrawals through local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT and Visa/Mastercard. Transaction data is retained for financial record-keeping purposes.
• Providing betting and gaming services: Facilitating your use of all sports betting, esports betting and casino gaming features on the Noob Vin platform, recording your bets and game results and settling winnings correctly.
• KYC and compliance verification: Verifying your age, identity and address as required before processing withdrawals and in compliance with our operating obligations. This involves processing your CNIC data and associated identity documents.
• Fraud prevention and security: Monitoring accounts and transactions for signs of fraudulent activity, multi-accounting, bonus abuse, money laundering and other prohibited conduct as described in the Noob Vin Terms and Conditions.
• Customer support: Handling your queries, complaints and requests through live chat, email and any other support channel provided by Noob Vin.
• Responsible gaming: Monitoring your gambling patterns to identify signs of problem gambling as part of Noob Vin's responsible gaming obligations and to facilitate your use of responsible gaming tools including deposit limits and self-exclusion.
• Marketing communications: Sending you information about Noob Vin promotions, new features, bonus offers and platform updates, where you have opted in to receive such communications. You can opt out at any time.
• Platform improvement: Using aggregated, anonymised data about how players use the platform to identify bugs, improve user experience, test new features and make product decisions. This analysis does not identify individual players.

Noob Vin processes your personal data on the following legal grounds depending on the specific purpose:

• Contract performance: The majority of data processing on Noob Vin is necessary to perform the contract between Noob Vin and you as a registered player. This includes processing your account data, transaction data and gaming activity data to operate the platform and provide you with the services you have signed up for.
• Legal obligation: Certain processing – particularly KYC identity verification and anti-money laundering checks – is carried out because Noob Vin is legally required to do so as an operator. This processing is not optional and cannot be declined by a player.
• Legitimate interests: Noob Vin processes some data – including technical data for fraud detection and security monitoring – on the basis of legitimate interests. These interests are assessed to ensure they do not override your rights and interests.
• Consent: Where Noob Vin processes data for marketing purposes, this is done on the basis of your consent obtained at registration or subsequently. You have the right to withdraw this consent at any time without affecting the lawfulness of any processing carried out before your withdrawal.

Noob Vin shares personal data with third parties only in the following circumstances:

• Payment processors: Noob Vin shares the minimum necessary transaction and identity data with payment service providers (including the operators of Easypaisa, JazzCash and bank payment gateways) solely for the purpose of processing your PKR deposits and withdrawals.
• Identity verification providers: For KYC purposes, Noob Vin may share your name, CNIC number and identity document scans with specialist identity verification service providers who process this data on Noob Vin's behalf under strict data processing agreements.
• Fraud prevention services: Noob Vin uses third-party fraud detection tools that process device fingerprint data and transaction patterns to identify suspicious activity. These providers process data on Noob Vin's instructions only.
• Game software providers: When you play casino games, the game software is provided by third-party developers who may log game session data (game outcomes, wager sizes) for audit and certification purposes. This data does not include your personal identity information.
• Legal and regulatory authorities: Noob Vin will share data with government authorities, law enforcement or regulatory bodies where required by law. This includes disclosures required under anti-money laundering obligations.
• Business transfers: In the event that Noob Vin's business or platform is acquired by or merged with another entity, your personal data may be transferred as part of that transaction. You would be notified of any such transfer and your rights would be maintained.

The way Noob Vin handles payment data is particularly important for Pakistani players given that transactions involve local wallets and bank accounts. Here is exactly how payment data is managed on the Noob Vin platform:

• When you make a deposit via Easypaisa or JazzCash, you are directed through a secure payment interface operated by the relevant payment provider. Noob Vin does not see or store your full mobile wallet credentials (PIN, full account number).
• Noob Vin stores only a transaction reference token and the PKR amount of each transaction, along with the payment method type and the last few digits of a mobile number where applicable, for the purpose of matching transactions to your account.
• For card payments (Visa/Mastercard), full card numbers and CVV codes are never transmitted to or stored by Noob Vin. Card processing is handled entirely by our PCI-DSS-compliant payment processor.
• Transaction records are retained for a minimum of five years as part of Noob Vin's financial record-keeping obligations. This retention period applies even if you close your account.
• Withdrawals are only processed to payment methods previously used for deposits on the same account. This matching requirement is a security measure to protect against unauthorised withdrawals.

Noob Vin uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit the platform. They allow Noob Vin to recognise your device, remember your preferences and gather information about how you use the site.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using key platform features including logging into your account. Disabling performance or marketing cookies will not affect your ability to use the core platform.

Noob Vin retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the main categories of data:

• Account and identity data: Retained for the lifetime of your account plus a minimum of five years after account closure, to comply with our record-keeping and anti-money laundering obligations.
• Transaction data: Retained for a minimum of five years from the date of each transaction, irrespective of account status, in accordance with financial record-keeping requirements.
• Betting and gaming data: Retained for five years from the date of each bet or game session for audit and dispute resolution purposes.
• KYC documents: Identity documents submitted for KYC verification are retained for five years from account closure.
• Support communications: Records of customer support interactions are retained for three years from the date of the interaction.
• Marketing data: Retained until you withdraw consent for marketing communications, after which marketing preference records are kept for two years to evidence the opt-out.
• Technical and log data: Server logs and technical data are retained for up to 12 months for security and fraud detection purposes.

When data is no longer required and its retention period has expired, it is securely deleted or permanently anonymised so that it can no longer be associated with any individual player.

Noob Vin takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against loss, theft, unauthorised access, misuse or disclosure:

• Encryption in transit: All data transmitted between your device and the Noob Vin platform is protected with 256-bit TLS/SSL encryption. You can verify this by checking for the padlock icon in your browser address bar when using the platform.
• Encryption at rest: Personal data stored on Noob Vin servers is encrypted at rest. Sensitive fields including CNIC numbers and identity document references are stored in encrypted form.
• Access controls: Access to personal data within Noob Vin is restricted to staff who require it for their specific job function. Access is logged and regularly reviewed. All staff with data access are subject to confidentiality obligations.
• Two-factor authentication: Noob Vin's internal systems use multi-factor authentication. We also make 2FA available and strongly recommended for all player accounts.
• Regular security audits: The Noob Vin platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: Noob Vin maintains a documented data breach response procedure. In the event of a security incident affecting player data, Noob Vin will notify affected players promptly as described in Section 13 of this policy.

As a Noob Vin player you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact Noob Vin at support@noobvin.com and your request will be handled within 30 days.

The Noob Vin platform is strictly intended for adults aged 18 and over. Noob Vin does not knowingly collect personal data from individuals under the age of 18. Registering as a minor is a breach of the Noob Vin Terms and Conditions and will result in immediate account closure.

If Noob Vin becomes aware that personal data has been collected from an individual under 18, that data will be deleted as promptly as possible, subject only to any retention obligations that may apply where the account was used to make transactions. Any funds in such an account will be handled in accordance with applicable legal requirements.

Parents or guardians who believe a minor has opened a Noob Vin account should contact support@noobvin.com immediately. Noob Vin will co-operate fully to close the account and address the situation.

Noob Vin sends marketing communications including promotional emails, SMS notifications and platform notifications about bonuses, new games, sports events and special offers. These communications are only sent where you have opted in to receive them.

• During registration, you are given the option to opt in to marketing communications. This is not mandatory and you can register and use Noob Vin without opting in to any marketing.
• If you opt in, you can choose the types of communication you receive (email, SMS or both) and the categories of content (sports betting, casino, promotions).
• You can opt out of all marketing communications at any time by clicking the unsubscribe link in any email, replying STOP to any SMS or updating your communication preferences in your Noob Vin account settings.
• Opting out of marketing does not affect your ability to use the Noob Vin platform and does not unsubscribe you from transactional communications that are necessary for your account (such as deposit confirmations, withdrawal notifications and security alerts).
• Noob Vin does not share your contact details with third parties for their own marketing purposes.

Despite all precautions, no system is entirely immune to security incidents. In the event that Noob Vin experiences a data breach that poses a risk to the rights and freedoms of registered players, the following response process will be followed:

• Noob Vin's security team will identify and contain the breach as quickly as possible, including taking affected systems offline if necessary to prevent further exposure.
• The scope and nature of the breach will be assessed to determine which players' data has been or may have been affected and what risk the breach creates for those individuals.
• Affected players will be notified by email within 72 hours of Noob Vin becoming aware of the breach, unless it is determined that the breach poses no significant risk to individual players. The notification will describe what data was involved, what Noob Vin is doing about it and what steps affected players can take to protect themselves.
• Where the breach involves payment data, Noob Vin will co-ordinate with the relevant payment providers to assess any financial risk and will advise affected players on appropriate precautionary steps.
• Following any breach, Noob Vin will conduct a full post-incident review to identify the root cause and implement measures to prevent recurrence.

Noob Vin may update this Privacy Policy from time to time to reflect changes in the platform, applicable data protection standards or legal requirements. When updates are made, the revised policy will be published at noobvin.com/privacy-policy with a new "Last Updated" date at the top of the page.

Where changes are material – meaning they significantly affect how your data is used or your rights as a player – Noob Vin will notify registered players by email and will display a prominent notice on the platform for at least 30 days after the updated policy takes effect.

If you have any questions about this Privacy Policy, about how Noob Vin handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact Noob Vin using the details below. All privacy-related requests will be acknowledged within 48 hours and handled within 30 days.

• Email (privacy and data requests): support@noobvin.com – clearly mark your message with "Privacy Request" in the subject line so it is routed to the correct team.
• Live Chat: Available 24/7 directly on the Noob Vin platform for general privacy questions and guidance on how to exercise your rights.

Noob Vin is committed to resolving all privacy-related queries fairly and promptly. If you are not satisfied with the response you receive, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.