Bad Pro Privacy Policy – How We Protect Your Data

Who We Are

Bad Pro operates the online casino and sports betting platform accessible at badpro.ws. In the context of this Privacy Policy, "Bad Pro", "we", "us", and "our" refer to the operating entity behind the platform. "You" and "your" refer to any person who accesses, browses, registers on, or uses any part of the Bad Pro platform.

This Privacy Policy applies to all products and services offered through Bad Pro, including the casino games section, live dealer tables, slots, jackpots, crash games, card games such as Teen Patti and Baccarat, and the sports betting section covering cricket, football, and other markets.

We take our responsibilities around data protection seriously. If you have any questions about this policy or about how your personal information is handled, please contact us through the details in Section 13. We'd rather you ask than wonder.

Information We Collect

2.1 Information You Provide Directly

When you register for a Bad Pro account, you provide us with information including your full name, mobile phone number, and a password of your choosing. You may also choose to provide an email address. During the identity verification process — which may be triggered before large withdrawals — you may be asked to provide a copy of your CNIC or another form of government-issued identification along with a utility bill or similar proof of address.

When you contact our support team, we collect and retain the content of that conversation along with identifying information such as your registered mobile number, so that we can follow up effectively and maintain a record for quality assurance and dispute resolution purposes.

2.2 Information Collected Automatically

When you use the Bad Pro platform, we automatically collect certain technical information. This includes your IP address, the type of device you are using (mobile or desktop), your browser type and version, your operating system, the pages you visit within the platform, the time and duration of your visits, games you play and bets you place, and referring URLs where applicable.

This automatic collection helps us maintain platform security, detect fraudulent activity, optimise performance for common device types used in Pakistan, and understand how players use the platform so we can improve it.

2.3 Payment Information

When you make a deposit or withdrawal through Bad Pro, payment processing is handled by our certified payment processing partners. Bad Pro does not store complete card numbers, full Easypaisa or JazzCash account credentials, or full IBAN numbers on its own servers. We retain a tokenised or truncated reference to the payment method for reconciliation and anti-fraud purposes only.

Full transaction records — amounts, dates, method types, and reference numbers — are retained as required by applicable financial regulations.

How We Use Your Data

Bad Pro uses your personal information for the following purposes:

• Account management: Creating and maintaining your Bad Pro account, processing login requests, and ensuring that only you can access your account.
• Payment processing: Enabling deposits and withdrawals in PKR via your chosen payment method, recording transactions, and resolving payment disputes.
• Identity verification: Confirming your age and identity as required before large withdrawals, and as required by anti-money laundering obligations.
• Service communications: Sending you account-related notifications such as deposit confirmations, withdrawal approvals, and security alerts via your registered mobile number or email.
• Customer support: Responding to your queries and resolving issues raised through live chat or email.
• Security and fraud prevention: Monitoring for unusual activity, investigating suspected fraud, enforcing our Terms and Conditions, and protecting the integrity of the platform.
• Responsible gaming: Monitoring play patterns to identify signs of problematic gambling behaviour and intervening appropriately, in accordance with our Responsible Gaming obligations.
• Platform improvement: Analysing usage patterns to understand how the platform is being used and to make it better for Pakistani players.
• Legal and regulatory compliance: Meeting obligations under applicable laws, responding to lawful requests from regulatory and law enforcement authorities, and maintaining records as required by financial regulations.

Legal Basis for Processing

Bad Pro processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:

• Contract performance: Processing necessary to provide the services you have signed up for — creating your account, processing bets, and handling payments in PKR. Without this processing, we cannot deliver the Bad Pro service.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, financial record-keeping requirements, and age verification obligations.
• Legitimate interests: Processing for purposes such as fraud detection, security monitoring, and platform analytics, where those interests do not override your privacy rights. We balance these interests carefully and take the minimum data needed for each purpose.
• Consent: Where we ask for your consent for a specific processing activity — such as optional marketing communications — we will only proceed if you provide explicit agreement, and you can withdraw consent at any time.

Sharing Your Data

Bad Pro does not sell your personal data. We share information with third parties only in the following specific circumstances:

• Payment processors: Your payment information is shared with certified payment processing partners (those handling Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card transactions) solely for the purpose of processing your deposits and withdrawals. These partners operate under their own privacy policies and applicable financial regulations.
• Game providers: Certain technical data — such as session identifiers — may be shared with our game providers (Pragmatic Play, Evolution, NetEnt, Ezugi, Spribe, and others) for the purpose of delivering the game experience. These providers do not receive identifiable personal information such as your name or mobile number.
• Regulatory and law enforcement authorities: We will share information with government bodies, regulators, or law enforcement agencies where we are legally required to do so, or where we have a reasonable belief that disclosure is necessary to prevent or report a crime or to protect the safety of our players or the public.
• Service providers: We work with contracted service providers for functions such as IT infrastructure, customer support tools, and fraud detection systems. These providers process data solely on our instructions and are contractually bound to protect it.
• Business transfers: In the event of a merger, acquisition, or sale of Bad Pro assets, personal data may be transferred as part of that transaction. Affected users will be notified in advance where possible.

In all cases of data sharing, Bad Pro takes reasonable steps to ensure that the recipient provides an adequate level of data protection.

International Data Transfers

Some of Bad Pro's service providers and game providers operate infrastructure outside Pakistan. Where personal data is transferred internationally, Bad Pro takes steps to ensure that appropriate safeguards are in place, including contractual protections, to maintain a level of data protection equivalent to the standards applied within Pakistan.

If you have questions about specific international transfers and the safeguards applied, please contact our support team at support@badpro.ws.

Data Security

Bad Pro implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Bad Pro's servers.
• Encryption at rest for sensitive stored data including identity documents and payment references.
• Access controls limiting which staff members can access personal data to those with a legitimate operational need.
• Two-factor authentication available on all player accounts and required for sensitive internal administrative systems.
• Continuous security monitoring using automated systems that flag anomalous access patterns and potential security incidents.
• Regular security reviews of systems, processes, and third-party integrations.

No security system is completely impenetrable. In the event of a data breach that poses a risk to your rights, Bad Pro will notify affected users and relevant authorities as required by applicable law, without undue delay.

You also play a role in keeping your account secure. Use a strong, unique password for your Bad Pro account. Enable two-factor authentication. Do not share your login credentials with anyone. Contact support immediately if you notice any suspicious activity on your account.

Data Retention

Bad Pro keeps personal data for as long as it is needed for the purpose it was collected, or as required by applicable legal and regulatory obligations. The general retention periods are summarised in the table earlier on this page. Key points:

• Financial transaction records are kept for seven years in compliance with financial regulations.
• Identity verification documents are retained for five years after account closure.
• Technical log data (including IP addresses) is retained for thirteen months on a rolling basis.
• Customer support communications are retained for three years from the date of the last communication in a thread.

When a retention period expires, data is securely deleted or irreversibly anonymised. Anonymised data that cannot be linked back to you may be retained for analytical purposes without a defined deletion schedule, as it no longer constitutes personal data.

If you request deletion of your account and we are not subject to any overriding legal obligation, we will process the deletion within thirty days and confirm when it is complete.

Cookies & Tracking Technologies

Bad Pro uses cookies and similar tracking technologies to operate the platform, maintain your login session, detect security threats, and understand how the platform is used. Here's a plain-language breakdown of the types of cookies in use:

Most modern browsers allow you to control cookie settings. Disabling cookies other than essential ones may affect the functionality of some platform features. For questions about specific cookies, contact support.

Children's Privacy

Bad Pro is strictly an adult platform for players aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18. If we discover that an account has been created by a person under 18, we will close the account immediately, void any associated winnings, and delete the personal data collected during registration to the extent permitted by our legal obligations.

If you are a parent or guardian and you believe your child has registered on Bad Pro, please contact us immediately at support@badpro.ws. We take underage access very seriously and will act on any verified report without delay.

Third-Party Services

The Bad Pro platform integrates with third-party services including certified game providers, payment processors, and analytics tools. Each of these services operates under its own privacy policy. Bad Pro selects third-party partners carefully, assessing their data protection practices before integration, and requiring contractual commitments to appropriate data handling standards.

Bad Pro is not responsible for the privacy practices of any third-party service accessed separately from the Bad Pro platform — for example, if you independently visit the website of a game provider whose games appear in our library.

Changes to This Privacy Policy

Bad Pro may update this Privacy Policy from time to time as the platform evolves or as regulatory requirements change. When material changes are made, we will notify registered users via their registered mobile number or email address at least 14 days before the changes take effect, unless an urgent security or legal reason requires immediate implementation.

The date of the most recent update is shown at the top of this page. Continued use of the Bad Pro platform after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you disagree with any change, you should contact support to discuss your options, including account closure and data deletion.

Contact & Complaints

For any questions about this Privacy Policy, to exercise any of your data rights, or to raise a privacy-related complaint, please contact the Bad Pro team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the chat icon on the platform. Fastest method for most queries.
• Email: support@badpro.ws — for formal data access requests, deletion requests, and privacy complaints. We aim to acknowledge receipt within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate to relevant regulatory authorities. Details of the escalation process will be provided in our response to your initial complaint.

We take privacy feedback seriously and use it to continuously improve our data protection practices. If something in this policy isn't clear, or if you have a concern about how Bad Pro handles data, please reach out — we genuinely want to get this right.