Vave Privacy Policy – How We Protect Your Data

1. Introduction

Vave operates an online gaming platform offering live casino, slots, fish games, sports betting and more for players in Pakistan. When you use the Vave platform — whether you are browsing the lobby, registering an account, making a PKR deposit via JazzCash or Easypaisa, or placing a bet on a PSL cricket match — certain information about you is collected and processed.

This Privacy Policy explains in plain terms what that information is, why it is collected, how it is used and how long it is kept. It also sets out the choices and rights you have in relation to your personal data. We have written this policy to be as clear and readable as possible for our Pakistan player base, avoiding unnecessary legal jargon where we can.

By registering a Vave account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about anything in this document, the FAQ page is a good starting point, or you can contact Vave support directly.

2. Data We Collect

Vave collects personal information in three main ways: information you provide directly, information generated by your use of the platform, and information received from payment processors when you make a deposit or withdrawal in PKR.

2.1 Information You Provide Directly

• Registration details: Full name, date of birth, email address, phone number and country of residence when you create a Vave account.
• Identity verification documents: A copy of your CNIC or other government-issued ID when requested as part of the account verification process.
• Payment information: Payment method details such as your JazzCash or Easypaisa mobile wallet number, bank account details for Raast or bank transfers, or card details for card payments. See Section 4 for how payment data is handled.
• Communications: Any messages you send to Vave support, including chat transcripts and email correspondence.

2.2 Information Generated by Platform Use

• Account activity: Login times, session duration, games played, bets placed, bonuses claimed and transaction history.
• Device and connection data: IP address, device type, operating system, browser type and approximate geographic location derived from IP.
• Behavioural data: Navigation patterns within the platform, pages visited and features used, collected via cookies and similar technologies as described in Section 6.

2.3 Data from Third Parties

When you make a deposit or withdrawal, Vave receives a transaction confirmation and reference number from your payment provider (for example JazzCash, Easypaisa or your bank). This confirmation is used solely to credit or debit your account correctly and to maintain an accurate transaction record. Vave does not receive your full payment credentials from these providers.

Data Type	Source	Purpose
Name, DOB, email	You (registration)	Account creation & identity verification
CNIC / ID document	You (verification)	Age & identity confirmation
Payment method details	You + payment processor	Processing PKR deposits & withdrawals
IP address & device info	Automatically collected	Security, fraud prevention
Game & betting history	Platform activity	Account records, dispute resolution
Support communications	You (support contact)	Customer service & complaint handling

3. How We Use Your Data

Vave uses the personal data it collects for the following purposes:

• Account management: To create and maintain your Vave account, process your login sessions and keep your account records accurate.
• Transaction processing: To handle your PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfers and card payments reliably and correctly.
• Identity and age verification: To confirm that you meet the 18+ age requirement and to verify your identity when required before processing withdrawals.
• Security and fraud prevention: To detect and prevent fraudulent activity, bonus abuse, multiple account creation and unauthorised access attempts.
• Customer support: To respond to your enquiries, resolve disputes and handle complaints effectively.
• Platform improvement: To understand how players use Vave so that we can improve the gaming experience, fix technical issues and prioritise new features.
• Responsible gaming: To monitor account activity for signs of problem gaming and to apply the deposit limits, session reminders or self-exclusion settings you request.
• Legal compliance: To meet any record-keeping, identity verification or reporting obligations that apply to the operation of an online gaming platform.

4. Payment Data & PKR Transactions

Given that all Vave Pakistan transactions are conducted in PKR, payment security is a top priority. Here is specifically how we handle your payment information:

4.1 What Vave Stores

Vave stores the minimum payment information necessary to process your transactions and maintain your account history. For mobile wallet payments via JazzCash or Easypaisa, we store the wallet number associated with the transaction. For bank transfers and Raast, we store the bank account reference used. Vave does not store full debit or credit card numbers on its servers. Card transactions are handled through a PCI-compliant payment gateway which tokenises card data before it reaches Vave's systems.

4.2 Transaction Records

A complete record of your deposit and withdrawal history in PKR is maintained for account management and dispute resolution purposes. This includes transaction amounts, dates, payment methods used and status. You can view your own transaction history at any time within your Vave account.

4.3 Withdrawal Verification

Before processing a withdrawal, Vave may need to confirm that the payment method you are withdrawing to matches the one used for your deposit. This is a security measure to prevent unauthorised withdrawals and is standard practice across online gaming platforms.

5. Data Sharing

Vave does not sell, rent or trade your personal data. However, there are limited circumstances in which your information may be shared with third parties:

5.1 Payment Processors

To process your PKR deposits and withdrawals, Vave must share the relevant transaction information with payment processors including JazzCash, Easypaisa, Raast and banking partners. These providers receive only the data required to complete the specific transaction and are bound by their own data protection obligations.

5.2 Game Providers

Some games on Vave — particularly live casino titles and certain slot game providers — are operated by third-party game studios. These providers may receive a session token and account reference to deliver the game to you. They do not receive your full personal profile, payment information or CNIC details.

5.3 Platform Services

Vave uses trusted third-party service providers for functions such as hosting infrastructure, customer support tooling and fraud detection. These providers process data strictly on Vave's behalf and are contractually restricted from using your data for any other purpose.

5.4 Legal Requirements

In the event that Vave is required by applicable law or a valid legal process to disclose certain information, we will comply with that requirement. We will notify affected users where we are legally permitted to do so.

6. Cookies & Tracking Technologies

Vave uses cookies and similar technologies to keep the platform working correctly and to understand how it is being used. The types of cookies used are as follows:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during your gaming session. Without these, the platform cannot operate.
• Security cookies: Used to detect and prevent fraudulent logins and unauthorised account access attempts.
• Performance cookies: Collect anonymised data about how pages are used — for example which games are most popular or where technical errors occur — so that Vave can improve the platform.
• Preference cookies: Remember your account settings and preferences, such as your chosen language or display settings, so you do not have to re-enter them each time.

Vave does not use third-party advertising cookies or social media tracking pixels. You can manage cookie settings in your browser, though disabling essential cookies will prevent you from using the platform.

7. Data Retention

Vave retains your personal data for as long as your account is active and for a period after account closure as required to meet legal record-keeping obligations and to resolve any outstanding disputes.

Specifically:

• Account and identity data is typically retained for a minimum of five years after account closure.
• Transaction records in PKR are retained for the same period to support dispute resolution and financial record-keeping.
• Support communications are retained for three years after the matter is resolved.
• Device and session log data is retained for a shorter period, typically up to 12 months, unless it is required as part of a fraud or security investigation.

After the applicable retention period has expired, your data is securely deleted or anonymised so that it can no longer be linked back to you personally.

8. Security Measures

Vave takes the security of your personal data seriously. The technical and organisational measures we have in place include:

• SSL/TLS encryption for all data transmitted between your device and Vave's servers.
• Encrypted storage of sensitive account data including passwords, which are hashed and never stored in plain text.
• Access controls that limit which Vave staff can access personal account data, based on their role and genuine business need.
• Automated monitoring systems that flag unusual login activity, including logins from unrecognised devices or locations.
• Regular internal security reviews of platform infrastructure and data handling processes.

Despite these measures, no online platform can guarantee 100% security. You play an important role in keeping your account safe by using a strong, unique password and by logging out after each session, particularly on shared devices. If you ever suspect your account has been accessed without your permission, contact Vave support immediately.

9. Your Rights Over Your Data

As a Vave account holder, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data Vave holds about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can ask us to correct it.
• Right to deletion: You can request that your personal data be deleted. This right is subject to Vave's legal obligation to retain certain records for the minimum retention periods described in Section 7.
• Right to restrict processing: In certain circumstances, you can ask Vave to limit the way your data is used while a concern is being resolved.
• Right to data portability: You can request a copy of your account data in a commonly used, machine-readable format.
• Right to object: You can object to the processing of your data for purposes that are not strictly necessary for your account or legal compliance.

To exercise any of these rights, contact Vave support through the FAQ page. We will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before fulfilling a request to ensure that we are not disclosing or deleting data belonging to someone else.

10. Under-18 Policy

Vave is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered a Vave account or provided personal data to the platform, please contact Vave support immediately. We will investigate and, where confirmed, delete the account and associated data without delay.

Vave uses age verification checks during the registration process and reserves the right to request identity documents at any stage to confirm that a player meets the 18+ requirement. Any account found to belong to a minor will be closed and the balance forfeited in accordance with the platform's Terms and Conditions.

11. Updates to This Privacy Policy

Vave may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make material changes, the "Last Updated" date at the top of this page will be revised. Where the changes are significant, we will notify active account holders through the platform or by email.

Continued use of the Vave platform after an updated Privacy Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this page periodically so that you are always aware of how your data is being handled.

12. Contact & Data Enquiries

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how Vave has handled your personal information, you can reach the Vave support team through the contact details on the FAQ page. For general platform queries, the FAQ section covers the most common questions about accounts, deposits in PKR, withdrawals, bonuses and responsible gaming tools.

We aim to acknowledge all privacy-related enquiries promptly and to resolve data rights requests within a reasonable timeframe. Your privacy matters to us and we treat every enquiry seriously.