Vave Privacy Policy – How We Protect Your Personal Data

01 Introduction

Vave operates an online gaming platform serving players in Pakistan, offering slot games, live casino, and sports betting — all in PKR. When you use the platform, certain personal information is collected as part of the normal operation of the service. This Privacy Policy is designed to give you a clear, honest picture of what that information is, why it is collected, and how it is handled.

We understand that privacy matters a great deal to Pakistan users. When you share your name, phone number, CNIC details, or payment information with us to set up your Vave account, you are placing trust in the platform. We take that trust seriously and have built our data practices around the principle that your information should only ever be used for the purposes you would expect.

This policy should be read alongside our Terms and Conditions. Both documents together form the full agreement between you and Vave regarding your use of the platform and the handling of your personal data.

02 Data We Collect

Vave collects personal data in two main ways — information you provide directly, and information collected automatically when you use the platform. Here is a breakdown of what we collect and why:

Information you provide directly includes anything you enter during registration, identity verification, or when contacting our support team. This is the most sensitive category of data and is handled with the highest level of care.

Automatically collected information includes technical data about your device and how you use the platform. This is standard practice across virtually all online platforms and is used primarily for security monitoring and service improvement — not for invasive profiling.

03 How We Use Your Data

Every piece of data collected by Vave has a specific, legitimate purpose. We do not collect information for the sake of it. Below are the primary ways in which your personal data is used on the platform:

• Account management — To create, maintain, and secure your Vave account throughout your time on the platform.
• Identity verification — To confirm that you are who you say you are, that you are at least 18 years of age, and that your payment methods belong to you.
• Payment processing — To facilitate PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer, cards, and mobile wallets.
• Customer support — To respond to your queries, resolve account issues, and handle complaints efficiently.
• Platform security and fraud prevention — To detect unusual activity, prevent unauthorised account access, and identify potential misuse of the platform.
• Responsible gaming monitoring — To identify players whose gaming behaviour may suggest a problem and to provide appropriate tools or interventions in line with our responsible gaming commitments.
• Legal and regulatory compliance — To meet any applicable legal obligations, including anti-money laundering (AML) requirements.
• Service improvement — To understand how the platform is used so we can make it better, faster, and more useful for Pakistan players.
• Promotional communications — If you have opted in to receive communications, to inform you about bonuses, new games, and promotions. You can opt out at any time.

04 Payment Data

Because Vave handles real-money PKR transactions, payment data requires special attention. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, Bank Transfer, or any other supported payment method, certain financial details are processed to complete that transaction.

Vave does not store full card numbers, bank account PINs, or complete mobile wallet credentials on our own servers. Payment transactions are processed through third-party payment processors who operate under their own strict security standards. When you provide payment details, those details are transmitted directly to the payment processor using encrypted channels.

• Transaction records — including amounts, dates, and payment method types — are retained on your account for account management and dispute resolution purposes.
• Vave may request proof of ownership of a payment method during the verification process. This is a standard fraud prevention measure.
• Any chargeback attempts or payment disputes may trigger a review of your account and relevant transaction records.
• Vave complies with applicable anti-money laundering obligations. Unusually large or suspicious transactions may be flagged and reviewed, as required by standard financial compliance practices.

05 Cookies and Tracking Technologies

Vave uses cookies and similar tracking technologies to make the platform work properly and to improve the experience for players. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain viruses or harmful code — they are simply pieces of data that help the platform recognise your device and preferences.

The types of cookies used on the Vave platform include:

• Essential cookies — These are required for the platform to function. They manage your login session, keep your account secure, and allow you to navigate between pages without being repeatedly logged out. You cannot opt out of essential cookies while using the platform.
• Functional cookies — These remember your preferences, such as your selected language or display settings, so the platform behaves consistently each time you visit.
• Analytics cookies — These help us understand which parts of the platform are used most frequently, where players encounter issues, and how the overall user experience can be improved. Data collected via analytics cookies is aggregated and does not identify individual users by name.
• Security cookies — These help detect and prevent fraudulent login attempts, bot activity, and other security threats to your account.

Most modern browsers allow you to manage cookie preferences through their settings. You can choose to block or delete cookies, though doing so may affect the functionality of certain parts of the Vave platform. Blocking essential cookies in particular may prevent you from logging in or using core platform features.

06 Data Sharing

Vave does not sell your personal data. We do not hand your information to marketing companies, data brokers, or unrelated third parties. That said, operating a platform of this nature requires working with certain third-party service providers, and your data may be shared with them strictly to the extent necessary for them to perform their services.

The categories of third parties with whom data may be shared include:

• Payment processors — JazzCash, Easypaisa, Raast, bank partners, and card networks need certain transaction data to process your deposits and withdrawals in PKR.
• Identity verification providers — Third-party KYC (Know Your Customer) services may be used to verify identity documents such as CNIC as part of the account verification process.
• Game studio providers — Game studios whose titles are available on the Vave platform may receive anonymised gameplay session data for technical and quality purposes.
• IT and infrastructure providers — Cloud hosting, server management, and cybersecurity providers who support the technical operation of the platform.
• Legal and compliance authorities — In cases where we are required by law to disclose information, such as in response to a valid legal request or as part of AML compliance obligations.

All third-party service providers who handle Vave player data are required to maintain appropriate data security standards and are only permitted to use the data shared with them for the specific purpose for which it was shared. They are not permitted to use it for their own marketing or to share it further without authorisation.

07 Data Retention

Vave retains your personal data for as long as your account is active and for a reasonable period thereafter, depending on the type of data and the purpose for which it was collected. We do not keep your data indefinitely without good reason.

• Account data — Retained for the duration of your account and for a period following account closure, as required for dispute resolution and compliance purposes.
• Transaction records — Financial transaction records including PKR deposits, withdrawals, and betting history are retained for a minimum period in line with standard financial record-keeping requirements.
• Verification documents — Copies of identity verification documents such as CNIC are retained for the minimum period required by applicable compliance obligations and then securely deleted.
• Support communications — Chat logs and email correspondence with our support team are retained for a defined period to assist with follow-up queries and quality review.
• Technical and usage data — Log files and technical data are typically retained for a shorter period, sufficient for security monitoring and performance analysis purposes.

When data is no longer needed and the retention period has passed, it is deleted or anonymised securely so that it can no longer be associated with you as an individual. If you close your account, your personally identifiable data will be removed from active systems within a reasonable time frame, subject to any legal retention obligations that may apply.

08 Data Security

Keeping your personal data and your PKR account balance secure is one of Vave's core operational priorities. We implement a range of technical and organisational security measures designed to protect your information from unauthorised access, accidental loss, alteration, or disclosure.

• SSL/TLS encryption — All data transferred between your browser or app and Vave's servers is encrypted in transit using SSL/TLS protocols.
• Secure password storage — Account passwords are never stored in plain text. They are processed using industry-standard cryptographic hashing methods.
• Access controls — Access to player data within Vave's internal systems is restricted on a strict need-to-know basis. Staff cannot access your data without a legitimate operational reason.
• Fraud monitoring — Automated systems continuously monitor account activity for signs of suspicious behaviour, including unusual login patterns, atypical transaction volumes, and other potential fraud indicators.
• Secure data storage — Personal data is stored on protected servers with access restrictions, firewalls, and regular security audits.

While Vave takes every reasonable precaution to protect your data, no online system can guarantee absolute security. You also play an important role in keeping your account secure — use a strong, unique password, never share your login credentials with anyone, and contact our support team immediately if you suspect unauthorised access to your account.

09 Your Rights Over Your Data

You have clear rights over the personal data that Vave holds about you. These rights are straightforward to exercise — simply contact our support team and we will handle your request as quickly as possible.

To exercise any of these rights, contact our support team at [email protected] with your registered account details. We aim to respond to all data rights requests within a reasonable time frame and will keep you informed of progress throughout the process.

10 Children's Privacy

Vave is strictly an adults-only platform. The minimum age to register and use any part of the platform is 18 years. We do not knowingly collect personal data from anyone under the age of 18.

During registration and at various points throughout account use, Vave may request age and identity verification to confirm that a player meets the minimum age requirement. If we have reason to believe that a registered user is under 18, the account will be suspended immediately and age verification documents will be requested before any further access is granted.

If you are a parent or guardian and believe that someone under 18 has registered an account on Vave using their details or yours, please contact our support team immediately at [email protected]. We will investigate and take appropriate action, including the closure of the account and the return of any funds deposited, in line with our standard procedures.

We encourage parents and guardians to make use of parental control tools available on devices and through internet service providers to prevent underage access to online gaming platforms.

11 Updates to This Policy

Vave may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes to the payment methods or services we offer, or changes in applicable data protection standards and practices. When this policy is updated, the revised date at the top of the page will be changed to reflect when the update was made.

For significant changes that materially affect how your personal data is used or your rights as a player, Vave will make reasonable efforts to notify you through your registered email address or via an in-platform notification. However, we recommend checking this page periodically to stay informed.

Your continued use of the Vave platform after any updates to this Privacy Policy are published constitutes your acceptance of those updates. If you disagree with any changes, please stop using the platform and contact support to arrange account closure.

12 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the way Vave handles your personal data, our support team is available around the clock to help.