TweakZen Privacy Policy

1Introduction

This Privacy Policy explains how TweakZen ("we," "us," "our") collects, processes, stores, and protects the personal information of users ("you," "your") who register and interact with the TweakZen platform — including the website at tweakzen.bet and all associated mobile interfaces and services.

TweakZen operates as an online betting and gaming platform serving Pakistani players. The personal information we collect is used to operate your account, process transactions in PKR, verify your identity, comply with legal obligations, and improve our services. We do not collect personal data that we do not need, and we do not use your data for purposes beyond what is set out in this Policy.

By registering an account on TweakZen, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described here. This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy.

2Who We Are

TweakZen is an online betting and casino platform operating at tweakzen.bet and its associated mobile interfaces, serving users in Pakistan. For the purposes of data protection, TweakZen is the data controller — meaning we are the entity that determines why and how your personal data is processed.

If you have any questions about how TweakZen handles your data, or if you wish to exercise any of your data rights, you can reach our data team directly at:

3Data We Collect

TweakZen collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in this Policy.

Registration and Identity Data

When you create a TweakZen account, we collect: your full legal name, date of birth, Pakistani mobile number, email address, CNIC number (for identity verification), and chosen username. This information is required to create and operate your account.

Payment and Financial Data

To process deposits and withdrawals, we collect information about the payment method you use — including Easypaisa account numbers, JazzCash wallet details, NayaPay or SadaPay identifiers, bank account details (for IBFT), and masked Visa/Mastercard numbers. We do not store full card numbers — card data is handled by our payment processor. We also maintain a record of all deposits, withdrawals, and transaction amounts in PKR on your account.

Betting and Gaming Activity

We collect a record of all bets placed on TweakZen, including market selections, stake amounts, odds, bet outcomes, casino sessions, poker hands played, and tournament participation. This data is used to operate your account, settle bets, calculate VIP rewards, and monitor for unusual activity.

Technical and Device Data

When you use TweakZen, we automatically collect certain technical data: your IP address, device type and model, operating system version, browser type and version, session duration and pages visited, and approximate geographic location derived from your IP address. This is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data

If you contact TweakZen support by live chat, email, or any other channel, we retain a record of that communication, including the content and timestamp. This is used to resolve your query and to improve our support quality.

4Why We Collect Your Data

TweakZen collects and processes your personal data for the following specific purposes:

• Account creation and operation: We need your identity and contact information to create your TweakZen account, authenticate your logins, and operate your account on an ongoing basis.
• Processing deposits and withdrawals: We need your payment details to process PKR transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments reliably and securely.
• Age and identity verification (KYC): Pakistan's regulatory requirements and TweakZen's own policies require us to verify that all players are aged 18 or over before allowing real-money betting. We use your CNIC and other identity documents for this purpose.
• Fraud prevention and account security: We monitor technical data, IP addresses, login patterns, and betting behaviour to detect and prevent fraud, unauthorised account access, and multiple account violations.
• Anti-money laundering (AML) compliance: We are required to monitor transactions and verify the source of funds for large deposits and withdrawals as part of our legal AML obligations.
• Responsible gaming: We use your betting activity data to identify patterns that may indicate problem gambling and to enforce any self-imposed limits or exclusions you have requested.
• Customer support: We retain communication records to resolve your queries, investigate complaints, and maintain service quality.
• Platform improvement: Anonymised, aggregated technical data is used to improve platform performance, identify bugs, and develop new features.
• Legal compliance: We process and retain certain data to comply with applicable laws and respond to lawful requests from regulatory authorities.

5Legal Basis for Processing

TweakZen processes your personal data under one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing your identity, payment, and account data is necessary to fulfil the contract between you and TweakZen — i.e., to operate your betting account and process your transactions.
• Legal obligation: Age verification, KYC, and AML monitoring are required by applicable law and regulatory guidance. We must process this data to remain compliant.
• Legitimate interests: Fraud prevention, security monitoring, and platform improvement processing is conducted under our legitimate interest in operating a secure and reliable platform. We balance this against your privacy interests when determining what data to collect and retain.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we will first obtain your specific, freely-given consent. You can withdraw consent at any time by contacting us or updating your account preferences.

6Data Sharing

TweakZen does not sell your personal data. We do not share it for commercial marketing purposes with any third party. The only circumstances in which TweakZen shares your data with external parties are:

• Payment processors: To process your deposits and withdrawals, we share necessary transaction data with our integrated payment service providers (including Easypaisa, JazzCash, NayaPay, SadaPay, and card processors). These providers process your payment information under their own privacy policies and are contractually required by us to handle your data securely.
• Identity verification providers: To carry out KYC verification, we may share identity document information with specialist verification service providers. These providers are bound by strict data handling agreements with TweakZen.
• Security and fraud prevention: We may share account data with industry fraud-prevention databases and security partners where there is a reasonable suspicion of fraudulent activity.
• Legal and regulatory authorities: TweakZen will disclose personal data to regulatory bodies, law enforcement agencies, or courts when required to do so by law or valid legal process. We will notify you of any such disclosure where legally permitted to do so.
• Responsible gaming partners: Where a player has requested self-exclusion, we may share limited data with responsible gaming organisations for the purpose of enforcing that exclusion across partner platforms.

7Payment Data Security

Given that TweakZen handles PKR financial transactions for Pakistani players, we apply particular care to the security of payment-related data. Here is specifically how payment data is handled on TweakZen:

• Full card numbers are never stored on TweakZen's servers. Card data entered during a deposit is handled directly by our PCI-DSS compliant payment processor and only a masked reference is retained by TweakZen for your transaction history.
• Easypaisa and JazzCash wallet numbers are stored in encrypted form and are used only for processing transactions on your account.
• Withdrawals can only be processed to a payment method that has been verified as belonging to you — this prevents unauthorised withdrawals to an unrelated account.
• All payment API connections between TweakZen and payment processors are made over encrypted channels using current TLS standards.
• Transaction history stored on TweakZen is accessible only to authorised TweakZen staff for specific operational and compliance purposes.

8Data Retention

TweakZen retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following specific retention periods:

• Active accounts: All account data, betting history, and transaction records are retained for the duration that your TweakZen account remains active.
• Closed accounts: Following account closure, TweakZen retains identity and financial transaction records for a minimum of five years to comply with AML legal obligations and to respond to any subsequent regulatory requests or legal proceedings.
• Communication records: Support chat and email records are retained for three years from the date of the interaction.
• Technical logs: System access logs and security event data are retained for 12 months and then deleted or anonymised unless a specific investigation requires retention beyond that period.
• Verification documents: Copies of CNIC and other KYC documents are retained for the same period as identity data — five years post account closure.

After applicable retention periods expire, data is securely deleted or anonymised such that it can no longer be linked to you as an individual.

9Data Security

TweakZen employs a multi-layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information. Key security measures include:

• Encryption in transit: All data transmitted between your device and TweakZen is encrypted using 256-bit SSL/TLS. Any connection that is not encrypted is automatically redirected to the secure version of the site.
• Encryption at rest: Sensitive personal data fields — including CNIC numbers, payment account identifiers, and identity document images — are encrypted in TweakZen's database using strong encryption keys managed by our security infrastructure.
• Access controls: Internal access to personal data is restricted to TweakZen staff who genuinely need it for their specific job function. Access logs are maintained and reviewed regularly.
• Two-factor authentication: TweakZen uses OTP-based two-factor authentication for account logins and for sensitive account actions such as password changes and withdrawal requests.
• Penetration testing: TweakZen's platform undergoes periodic security assessments to identify and address potential vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data breach affecting your personal information, TweakZen has incident response procedures in place to contain the breach, assess its impact, notify affected users, and report to relevant authorities as required by law.

10Cookies and Tracking Technologies

TweakZen uses cookies and similar technologies on its platform. A cookie is a small text file stored on your device that helps the platform recognise you and remember your preferences. Here is a breakdown of the cookies TweakZen uses:

You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect the functionality of your TweakZen account. TweakZen does not use third-party advertising cookies or retargeting pixels to serve ads to you on other websites.

11Your Data Rights

You have meaningful rights over the personal data TweakZen holds about you. TweakZen respects and supports these rights. Here is what you can request and how:

To exercise any of these rights, contact TweakZen at support@tweakzen.bet or via live chat. We will verify your identity before processing any data rights request and will respond within 30 days. There is no charge for exercising your rights.

12Minors

TweakZen is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. Age verification is conducted during the registration process and may be repeated at any time via CNIC verification.

If TweakZen becomes aware that a user is under 18, the account will be immediately suspended, all funds will be returned to the originating payment method, and any personal data collected in connection with the underage account will be deleted.

If you believe a minor has registered on TweakZen, please contact us immediately at support@tweakzen.bet so we can investigate and take action promptly.

13International Data Transfers

TweakZen primarily processes your personal data within Pakistan. In certain limited circumstances, data may be processed by our technology or payment service providers in other countries. Where this occurs, TweakZen ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure your data receives a standard of protection equivalent to what it would receive under Pakistani data handling standards.

TweakZen does not transfer personal data to countries with inadequate data protection frameworks without first establishing appropriate legal safeguards for that transfer.

14Changes to This Privacy Policy

TweakZen may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our operational practices. When we make material changes, we will notify registered users by email and by displaying a prominent notice on the platform for at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend revisiting this Policy periodically. Your continued use of TweakZen after the updated Policy takes effect constitutes your acceptance of the revised terms.

15Contact Us & Complaints

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how TweakZen has handled your personal information, please contact us through any of the following channels:

• Email: support@tweakzen.bet
• Live Chat: Available 24/7 directly from the TweakZen platform when logged in
• FAQ: Common questions answered at tweakzen.bet/faq

We take all privacy concerns seriously and will respond to your query within 30 days of receipt. If you are not satisfied with our response to a data privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.