Privacy Policy — smspin

1 Introduction

This Privacy Policy ("Policy") describes the data practices of smspin ("Platform", "we", "us", "our"), accessible at https://smspin.cam. It applies to all personal data collected, processed or stored in connection with your use of the smspin website, its features, content and associated services.

smspin operates as an online gaming information and entertainment platform, providing guides, educational content, game descriptions, odds explanations and sports betting information primarily for users located in Pakistan and other jurisdictions where such content may be legally accessed. We do not act as a licensed gambling operator, process bets or hold user funds.

By accessing or using smspin, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform and contact us to request erasure of any previously collected data.

2 Definitions

The following terms carry the meanings assigned to them throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including name, email address, IP address, device identifiers and usage behaviour.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, deletion or destruction.
• "Controller" means smspin, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Processor" means any third party that processes personal data on behalf of smspin, under written instruction and data processing agreements.
• "User" or "you" means any individual who accesses or uses the Platform, whether as a registered account holder or unregistered visitor.
• "Consent" means a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.
• "Cookies" means small text files placed on your device by the Platform to record session information, preferences and analytics data.
• "KYC" or "Know Your Customer" means the identity verification process — which may include CNIC/NICOP submission, proof of address and other documentation — required for certain platform features or by applicable regulatory obligations.

3 Data We Collect

3.1 Data You Provide Directly

When you register for an account, complete forms or contact smspin support, you may provide:

• Full name and date of birth
• Email address
• Username and password (stored in encrypted form)
• City or region of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Identity documents submitted for KYC purposes, such as CNIC or NICOP
• Support correspondence, feedback and enquiry content

3.2 Data Collected Automatically

When you browse the Platform, certain technical data is collected automatically:

• IP address and approximate geographic location derived from it
• Browser type, version and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Pages visited, time on page and navigation paths
• Referral source (e.g., search engine, direct access)
• Session duration and interaction events

3.3 Cookies and Similar Technologies

smspin uses cookies and similar tracking technologies to deliver and improve Platform functionality. For full detail on our cookie practices, see Section 7 of this Policy.

3.4 Data We Do Not Collect

smspin does not collect, store or process payment card numbers, bank account details, mobile wallet credentials (including Easypaisa, JazzCash or Raast credentials) or any financial transaction data. All payment-related transactions, where applicable, occur directly between the User and the relevant third-party Operator, whose own privacy policy governs such data.

4 Legal Basis for Processing

smspin processes personal data on the following legal bases, as applicable:

5 How We Use Your Data

smspin uses collected personal data for the following purposes:

• Account administration: Creating, maintaining and securing your Platform account, including password recovery and account settings management.
• Platform personalisation: Remembering your preferences, language settings and region to improve your browsing experience.
• Customer support: Responding to queries, resolving issues and handling account management requests submitted via email or live chat.
• Identity verification: Where required, processing KYC documentation to verify identity before granting access to certain Platform features.
• Security and fraud prevention: Monitoring for suspicious activity, protecting against unauthorised access, and detecting and preventing fraud, account abuse and prohibited conduct.
• Analytics and improvement: Understanding how users navigate the Platform so we can improve content, layout and feature functionality. This is conducted using aggregated, anonymised data where possible.
• Legal compliance: Meeting obligations under applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining required records.
• Direct communications: Sending transactional messages (e.g., account confirmation, support responses) and, where you have opted in, promotional communications about Platform updates and content.

smspin does not use personal data for automated profiling that produces legal or similarly significant effects on Users without their explicit consent.

6 Data Sharing & Disclosure

smspin does not sell, rent or trade your personal data to third parties for independent commercial use. We may share personal data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process data on our behalf under contractual data processing agreements. These may include hosting providers, analytics platforms, email delivery services and customer support tools. These parties are contractually prohibited from using your data for their own purposes.

6.2 Legal Obligations

We may disclose personal data where required by applicable law, regulation, court order or lawful request from a governmental or regulatory authority. smspin will, where legally permitted, attempt to notify you of such requests before disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of assets, personal data held by smspin may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Users will be notified of any such transfer where required by applicable law.

6.4 Protection of Rights

We may share data where we believe in good faith that disclosure is necessary to protect the rights, property or safety of smspin, its users or the public — including exchanging information with other organisations for the purposes of fraud prevention and credit risk reduction.

7 Cookies & Tracking Technologies

smspin uses cookies and similar technologies to operate, improve and secure the Platform. When you first visit smspin, you may be presented with a cookie consent notice. Where required by applicable law, non-essential cookies will only be set with your explicit consent.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or delete cookies already set. Please note that disabling strictly necessary cookies may impair Platform functionality. Consult your browser's help documentation for specific instructions on managing cookies on your device.

8 Data Retention

smspin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention principles apply:

• Account data: Retained for the duration of your active account plus a post-closure period of up to five (5) years to meet legal, regulatory and audit requirements.
• KYC documentation: Retained for the period specified by applicable anti-money laundering regulations and operator compliance obligations, typically five (5) years from the date of submission.
• Support correspondence: Retained for up to three (3) years from the date of the last interaction to enable us to handle follow-up queries and disputes.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it no longer constitutes personal data. Raw session logs are retained for up to twenty-four (24) months.
• Marketing consent records: Retained for the duration of your subscription plus a reasonable period thereafter to demonstrate consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9 Data Security

smspin implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, destruction or accidental loss. These measures include:

• SSL/TLS encryption: All data transmitted between your browser and the Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Password hashing: User passwords are stored using strong cryptographic hashing algorithms and are never stored in plain text.
• Access controls: Personal data is accessible only to authorised personnel on a strict need-to-know basis. Role-based access controls are enforced.
• Security monitoring: The Platform is actively monitored for intrusion attempts, anomalous access patterns and security vulnerabilities.
• Third-party vetting: Service providers are assessed for their data security practices before engagement and are bound by contractual security obligations.

Notwithstanding these measures, no method of data transmission or storage is completely secure. smspin cannot guarantee absolute security of all data and users are encouraged to use strong, unique passwords and to report any suspected security incidents to [email protected] immediately.

10 International Data Transfers

smspin may transfer personal data to servers or service providers located outside Pakistan. Where such transfers occur, smspin takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with applicable privacy standards.

By using the Platform from Pakistan or any other jurisdiction, you acknowledge that your data may be processed in countries that may have different data protection standards than those applicable in your home jurisdiction. smspin endeavours to apply consistent protections regardless of where data is processed.

11 Your Rights

Subject to applicable law and certain legal exceptions, you have the following rights with respect to your personal data held by smspin. To exercise any of these rights, contact us at [email protected] with a clear description of your request.

smspin will respond to valid data rights requests within thirty (30) days. In complex cases, we may extend this period by up to a further sixty (60) days, with notification provided to you. We reserve the right to verify your identity before processing a data rights request.

12 Children's Privacy

The smspin Platform is strictly intended for use by adults aged 18 years or older, or the higher minimum age required by the relevant Operator's terms or license jurisdiction. We do not knowingly collect, process or store personal data relating to individuals under the age of 18.

If you are a parent or guardian and believe that a minor has provided personal data to smspin without your consent, please contact us immediately at [email protected]. We will take prompt steps to investigate and, where appropriate, delete any such data from our systems.

Parents and guardians in Pakistan and elsewhere are strongly encouraged to use parental control software and to maintain open conversations with minors about safe and responsible internet use, including the importance of avoiding gambling-related platforms.

13 Third-Party Links

The smspin Platform may contain references to third-party Operator platforms and services for informational context. These third-party platforms are governed by their own independent privacy policies and terms of service. smspin has no control over, and assumes no responsibility for, the data practices of third-party platforms.

We strongly encourage you to review the privacy policy of any third-party platform before providing any personal data to them, particularly before registering an account, making a deposit or engaging in any gambling activity on an Operator platform. smspin's responsibility for your personal data ends at the point of any transfer to a third-party platform.

14 Policy Amendments

smspin reserves the right to update or modify this Privacy Policy at any time. All changes will be reflected on this page with a revised "Last Updated" date. Where changes are material, we will endeavour to provide reasonable notice via the Platform or by email to registered users.

Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the Platform and may contact us to request deletion of your data.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy, your personal data or your data rights, please contact the smspin data protection team using the details below. All privacy-related correspondence is handled in English, with Urdu support available on request.