dandy895 Privacy Policy —
Your Data, Your Rights, Our Commitment

1.1 dandy895 ("we", "us", "our") is the data controller for the personal information collected from players who register and use the dandy895 platform at https://dandy895.com. dandy895 operates under an international online gambling licence.

1.2 For all privacy-related enquiries, data subject access requests, or concerns about how dandy895 handles your personal data, please contact the dandy895 Data Protection team via live chat within your account or by email. The contact email is provided in Section 14 of this policy.

1.3 This Privacy Policy applies to all personal data collected by dandy895 through the website at https://dandy895.com, the dandy895 mobile application, and all customer support communications. It applies to all registered players, including Pakistan players who hold PKR-denominated accounts.

dandy895 collects personal data from you in three ways: information you provide directly during registration and account use, information generated automatically through your use of the platform, and information received from third-party sources such as payment processors and identity verification providers.

2.1 dandy895 does not collect biometric data, sensitive health data, or racial/ethnic origin data. The only category of sensitive data we collect is data related to responsible gaming status, which is required to fulfil our responsible gaming obligations.

dandy895 uses your personal data for the following specific purposes:

• Account registration and management: creating and maintaining your dandy895 account, processing your dandy895 login, managing your PKR balance, and communicating account-related information to you.
• Identity verification (KYC): verifying your identity in compliance with anti-money-laundering (AML) and counter-terrorism financing (CTF) obligations, including processing your Pakistani CNIC document.
• Payment processing: processing PKR deposits and withdrawals via Allied Bank Transfer, Easypaisa, JazzCash, and other supported Pakistan payment methods; reconciling transactions; detecting payment fraud.
• Gameplay and platform delivery: providing access to all dandy895 games and betting markets; maintaining game session logs; resolving game disputes; calculating jackpot outcomes.
• Fraud prevention and security: detecting and preventing fraudulent account activity, bonus abuse, multi-accounting, collusion, and money laundering through analysis of gameplay patterns and account behaviour.
• Responsible gaming monitoring: monitoring play patterns for markers of problem gambling; enforcing self-exclusion, deposit limits, and loss limits; fulfilling responsible gaming regulatory obligations.
• Customer support: responding to your queries, resolving complaints, providing account recovery assistance, and maintaining records of support interactions.
• Legal and regulatory compliance: fulfilling obligations under dandy895's operating licence, responding to regulatory enquiries, and meeting record-keeping requirements.
• Platform improvement: analysing aggregated, anonymised usage data to improve the dandy895 platform experience for Pakistan players.
• Marketing communications: sending promotional communications to you regarding dandy895 offers, new games, and promotions — only where you have given consent or where there is a legitimate interest basis. You may opt out at any time.

4.1 Contract performance: The majority of dandy895's data processing is necessary for the performance of the contract between you and dandy895 — specifically, the operation of your PKR account and the delivery of gaming services.

4.2 Legal obligation: dandy895 processes certain personal data because it is required to do so by law — including KYC/AML obligations under applicable anti-money-laundering regulations and data retention obligations under dandy895's operating licence.

4.3 Legitimate interests: dandy895 processes some data on the basis of legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and improvement of the dandy895 service — where these interests are not overridden by your rights and freedoms.

4.4 Consent: Where dandy895 relies on your consent as the legal basis for processing — specifically for direct marketing communications — you may withdraw that consent at any time by updating your communication preferences in your dandy895 account settings.

5.1 dandy895 does not sell, rent, or trade your personal data to any third party. Data sharing is limited to the specific categories of recipients below, and only to the extent strictly necessary:

• Payment processors: Allied Bank Limited, Easypaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), SadaPay, Raast (State Bank of Pakistan's instant payment system), HBL, UBL, MCB Bank, Bank Alfalah, and Meezan Bank — for the purpose of processing PKR deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who verify your CNIC and confirm your identity against Pakistani government records and international sanctions lists.
• Game providers: Pragmatic Play, PG Soft, JILI, Evolution Gaming, BBIN, Habanero, NetEnt, and other certified providers whose games are available on dandy895 — for the purpose of game session management and dispute resolution.
• Fraud prevention services: Third-party systems that help dandy895 detect and prevent fraudulent activity, bonus abuse, and multi-accounting.
• Regulatory and law enforcement authorities: Where dandy895 is required by its operating licence or applicable law to disclose information to a regulatory body, court, or law enforcement agency.
• Platform service providers: Cloud infrastructure, customer support software, and analytics providers who process data on dandy895's behalf under strict data processing agreements that prohibit independent use of the data.

5.2 All third-party data processors used by dandy895 are required to handle your data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific task for which they have been engaged.

6.1 dandy895 uses cookies and similar tracking technologies on its website and mobile application. The types of cookies used by dandy895 are as follows:

• Strictly necessary cookies: Required for the dandy895 platform to function — including maintaining your login session after you authenticate, managing your PKR wallet state, and ensuring the platform loads correctly on your device. These cannot be disabled without disrupting the service.
• Functional cookies: Store your dandy895 preferences such as language settings, preferred game categories, and display options so that your experience is consistent across sessions.
• Analytics cookies: Help dandy895 understand how Pakistan players navigate the platform — which pages are most visited, session durations, and feature usage — in aggregated, anonymised form. This data is used solely to improve the platform.
• Security cookies: Used to detect fraudulent access patterns, enforce session timeouts, and identify suspicious login behaviour across different IP addresses and device types.

6.2 dandy895 does not use third-party advertising cookies or tracking pixels that profile your behaviour for advertising purposes on other websites. All dandy895 cookies serve operational, functional, analytics, or security purposes only.

6.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impact the functionality of the dandy895 platform, including the ability to maintain your login session.

7.1 dandy895 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the dandy895 platform.
• Encryption of sensitive data (including passwords and payment identifiers) at rest using industry-standard cryptographic algorithms.
• Access controls that limit access to personal data to authorised dandy895 personnel only, on a strict need-to-know basis.
• Two-factor authentication (2FA) available to all dandy895 account holders as an additional login security layer.
• Automated session timeout after periods of inactivity to reduce the risk of unauthorised account access on shared devices.
• Intrusion detection systems and security monitoring across dandy895's server infrastructure.
• Regular security audits and penetration testing of the dandy895 platform.

8.1 dandy895 retains your personal data for as long as your account remains active, and for a defined period following account closure, in accordance with applicable regulatory requirements. The standard retention periods applied by dandy895 are as follows:

• Account identity data (name, CNIC, date of birth): Retained for the duration of your account plus five years following account closure, to meet anti-money-laundering record-keeping requirements.
• Financial transaction data (PKR deposit/withdrawal records): Retained for a minimum of five years following the transaction date, in compliance with financial crime regulations applicable under dandy895's operating licence.
• Gaming session data: Retained for a minimum of three years following the session date for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for three years following the resolution of the support interaction.
• Responsible gaming records: Retained for the duration of any self-exclusion or restriction period plus five years, to prevent re-registration in breach of exclusion commitments.
• Marketing preferences: Retained until you withdraw consent or close your account. Opt-out records are retained indefinitely to prevent inadvertent re-marketing.

8.2 At the end of applicable retention periods, personal data is securely deleted or anonymised using procedures that prevent reconstruction or re-identification.

As a dandy895 account holder, you have the following rights regarding your personal data. These rights can be exercised by contacting dandy895 support via live chat or by email:

10.1 dandy895 is strictly an 18+ platform. dandy895 does not knowingly collect personal data from individuals under the age of 18. The dandy895 registration process includes an age declaration and dandy895 conducts age verification checks as part of the account lifecycle.

10.2 If dandy895 discovers that personal data has been collected from an individual under 18 years of age, that account will be closed immediately, all funds will be forfeited, and all personal data associated with the account will be deleted as soon as the regulatory record-keeping period for the relevant transactions has elapsed.

10.3 If you have reason to believe that a minor has registered a dandy895 account, please contact dandy895 support immediately via live chat so the account can be investigated and appropriate action taken without delay.

11.1 dandy895 collects and processes data related to your responsible gaming status — including self-exclusion elections, deposit limit settings, loss limit settings, session time controls, and system-generated markers from dandy895's responsible gaming monitoring programme.

11.2 This data is treated with the highest level of sensitivity within dandy895's data governance framework. It is used solely for the purpose of fulfilling dandy895's responsible gaming obligations — specifically, enforcing the restrictions you have set, monitoring for harmful play patterns, and complying with responsible gaming regulatory requirements.

11.3 Self-exclusion records are retained beyond your account closure date to prevent re-registration during an active exclusion period. dandy895 takes self-exclusion commitments extremely seriously and will not process registration applications from individuals who are within a self-exclusion period, even under a new email address or identity.

11.4 For full information about dandy895's responsible gaming tools and commitments, please visit the Responsible Gaming page.

12.1 dandy895's platform infrastructure and some third-party service providers — including game providers such as Pragmatic Play and Evolution Gaming — operate in jurisdictions outside Pakistan. Your personal data may therefore be transferred to, and processed in, countries other than Pakistan.

12.2 When dandy895 transfers personal data internationally, it ensures that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other mechanisms recognised under applicable data protection frameworks. This means your data receives a level of protection equivalent to the standards described in this policy, regardless of where it is processed.

12.3 All transfers of PKR financial data to Pakistan payment processors (Allied Bank, Easypaisa, JazzCash, etc.) are conducted under data processing agreements that comply with applicable Pakistan financial data handling regulations.

13.1 dandy895 may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal obligations, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

13.2 When material changes are made — that is, changes that affect how dandy895 uses your data, who it shares data with, or your data rights — dandy895 will notify all registered Pakistan players via the email address associated with their account at least 14 days before the revised policy takes effect.

13.3 Continued use of the dandy895 platform after the effective date of a policy revision constitutes your acceptance of the updated policy. If you do not accept the revised policy, you may close your dandy895 account before the effective date.

14.1 For all privacy-related enquiries, data subject access requests, data deletion requests, or complaints about how dandy895 handles your personal data, please contact the dandy895 Data Protection team through one of the following channels:

• Live chat: Available 24/7 inside your dandy895 account. This is the fastest channel for privacy enquiries and typically receives a first response within two minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line along with your registered dandy895 username and a description of your request.

14.2 dandy895 will acknowledge all privacy requests within 72 hours of receipt and will provide a substantive response within 30 calendar days.

14.3 If you are dissatisfied with dandy895's response to a privacy complaint, you may refer the matter to the relevant data protection supervisory authority under dandy895's operating licence jurisdiction.