BadPro operates the online betting and gaming platform accessible at badpro.bet. For the purposes of this Privacy Policy, "BadPro", "we", "us" and "our" all refer to the operator of this platform. "You" and "your" refer to any person who accesses badpro.bet, registers an account, or uses any service offered through the platform.
BadPro is built specifically for the Pakistani market. All accounts are denominated in Pakistani Rupees (PKR), all payment methods supported — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard — are standard in Pakistan, and our support team is oriented around the needs of Pakistani players. This Privacy Policy reflects that context: it's written for Pakistani users and describes how BadPro handles data collected from people in Pakistan.
Questions about this Privacy Policy can be directed to support@badpro.bet at any time. For account-specific data requests, contact us via live chat from within your BadPro account. We will respond to data-related requests within 30 calendar days.
BadPro collects personal data in two main ways: information you actively provide when registering or using the platform, and information collected automatically through your device and browser as you use the site. Here is a full breakdown of what we collect and why we need it.
Data You Provide Directly
| Data Type | When Collected | Why It's Needed |
|---|---|---|
| Full name | Registration | Account identification and KYC verification |
| Date of birth | Registration | Age verification — players must be 18+ |
| Pakistani mobile number | Registration | Account login, OTP verification, withdrawal confirmation |
| Email address | Registration (optional) | Account communications, promotional opt-in |
| CNIC number | KYC verification | Identity verification for withdrawals above Rs 50,000 |
| CNIC scan / selfie | KYC verification | Confirming identity documents match account name |
| Payment account details | Deposit / withdrawal | Processing PKR transactions via Easypaisa, JazzCash, etc. |
| Support communications | When contacting support | Resolving your queries and maintaining a support record |
Data Collected Automatically
- Device information: Device type, operating system, browser type and version, screen resolution. Used to ensure the BadPro platform displays correctly on your device.
- IP address: Logged at registration and each login. Used for fraud detection, account security, and to confirm you are accessing from an eligible location.
- Session data: Pages visited, games played, bets placed, time spent on each page. Used to improve platform performance and personalise your experience.
- Transaction logs: A full record of every deposit, withdrawal, bet, win, bonus credit, and referral reward. Maintained for account management, dispute resolution, and regulatory compliance.
- Cookies and local storage: See Section 6 for the full cookie policy.
BadPro does not collect sensitive personal data such as political views, religious beliefs, or medical information. The only biometric data collected is the CNIC photograph submitted for KYC, which is used solely for identity verification and is not processed for facial recognition purposes.
Every piece of data BadPro collects has a specific, documented purpose. We do not collect data for its own sake, and we do not use data in ways that are unrelated to operating the BadPro platform for Pakistani players. Here is a full account of how your data is used.
BadPro processes personal data on the following legal grounds. Processing that falls outside these grounds is not carried out by BadPro.
The majority of data processing at BadPro is necessary to perform the contract between BadPro and you as a registered player. Without processing your name, mobile number, payment details, and transaction history, we cannot operate your account, accept your deposits, process your withdrawals, or settle your bets. This is the primary legal basis for data processing at BadPro.
BadPro processes IP address data, device data, and transaction pattern data for fraud prevention, duplicate account detection, and platform security. These purposes are legitimate interests of BadPro — protecting the platform and its players from fraudulent activity is in the interest of all users.
Where BadPro sends optional marketing communications — promotional emails, SMS notifications about bonuses or events — it does so on the basis of your consent, given at registration via the marketing preferences checkbox. You can withdraw this consent at any time through your account settings without affecting your ability to use the platform.
BadPro may be required to retain certain transaction and identity records to comply with applicable financial crime regulations, respond to lawful requests from regulatory or law enforcement authorities, or satisfy audit requirements. Data retained on this basis is held for the minimum period required by the applicable obligation.
BadPro does not sell your personal data to anyone. We do not share your data with advertisers or third-party marketing platforms. The only circumstances under which your data is shared with any external party are described below.
- Payment processors: When you make a deposit or request a withdrawal, your transaction details are shared with the relevant payment gateway (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processor, or card payment gateway). Only the data necessary to process the specific transaction is shared.
- Identity verification services: When KYC verification is required, your CNIC details and supporting documents may be submitted to a certified identity verification provider for cross-reference checks. These providers are bound by data processing agreements with BadPro and are prohibited from using your data for any other purpose.
- Game providers: When you play a third-party game on BadPro (crash games, slots, etc.), the game provider's servers process your bet and game result in real time. The data shared is limited to a pseudonymous player identifier and bet value — your name and payment details are never shared with game providers.
- Legal and regulatory authorities: If BadPro is required by law, court order, or regulatory directive to disclose your data, we will comply. Where legally permitted, BadPro will notify you before disclosing your data in this context.
- Fraud prevention networks: Anonymised risk signals (not your full identity) may be shared with fraud prevention networks to detect patterns of abuse that affect multiple platforms. These signals cannot be used to identify you individually.
Important: No BadPro employee, contractor, or partner is authorised to share your personal data with any third party for commercial, marketing, or any other purpose not listed above. If you receive a suspicious communication claiming to be from BadPro and requesting personal data, contact support immediately — we will never ask for your password or CNIC over chat or SMS.
BadPro uses cookies and similar technologies (local storage, session tokens) to keep the platform functioning correctly, remember your login state, and improve your experience. Here's exactly what we use and why.
You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent BadPro from functioning correctly. Blocking analytics cookies will not affect your ability to use the platform — it will only prevent us from collecting usage data to improve the service.
BadPro takes data security seriously. Given that the platform handles real PKR transactions and sensitive identity documents, the security measures in place are designed to be robust and layered. Below is an overview of the technical and operational safeguards BadPro employs.
Data breach response: In the event of a data breach that poses a risk to your personal data, BadPro will notify affected players as quickly as practically possible — and within 72 hours of becoming aware of the breach. The notification will explain what happened, what data was involved, and what steps are being taken.
BadPro keeps your personal data for as long as it is needed for the purpose it was collected, and no longer. The specific retention periods by data type are as follows.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Regulatory and audit requirements |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | Financial record-keeping and dispute resolution |
| KYC documents (CNIC) | Duration of account + 5 years | AML compliance and regulatory obligation |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| IP and device logs | 12 months rolling | Fraud detection and security monitoring |
| Marketing preferences | Until consent withdrawn or account closed | To honour your communication preferences accurately |
| Analytics data (anonymised) | 24 months | Platform improvement and performance analysis |
When the applicable retention period expires, data is deleted or permanently anonymised. Anonymised data — where it is no longer possible to identify you from the data — may be retained indefinitely for statistical purposes.
As a BadPro player, you have the following rights over your personal data. These rights can be exercised by contacting support@badpro.bet or via live chat in your account. BadPro will respond to all data rights requests within 30 calendar days.
Marketing opt-out: You can unsubscribe from BadPro promotional SMS and email communications at any time through your account settings under "Notification Preferences". Opting out of marketing communications does not affect your account or your ability to continue using the platform.
BadPro is strictly for adults aged 18 and above. The platform does not knowingly collect personal data from anyone under the age of 18. Every registration requires confirmation of age, and accounts are subject to age verification through CNIC documentation.
If BadPro discovers that an account has been registered by someone under 18, that account will be closed immediately. Any deposited funds will be returned to the source payment method. Winnings generated by an underage player will be forfeited. If you believe a minor may have registered a BadPro account, please contact support@badpro.bet immediately and we will investigate and close the account without delay.
BadPro does not display advertising on external websites, so there is no mechanism by which the BadPro brand is shown to minors browsing unrelated content. All registration pathways include age confirmation steps before any account creation proceeds.
BadPro may update this Privacy Policy from time to time to reflect changes in the platform, how we use data, or applicable regulations. When material changes are made, we will notify registered players by SMS or email at least 7 days before the change takes effect — except where a change is required by law, in which case it may take effect sooner.
- The "Last updated" date at the top of this page always reflects the date of the most recent revision.
- Your continued use of the BadPro platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.
- If you do not agree with a material change to this Privacy Policy, you may close your account before the effective date by contacting support. Your PKR wallet balance will be returned to your verified payment method.
- Previous versions of the Privacy Policy are available on request — contact support@badpro.bet if you need an archived version for any reason.
If you have any question about this Privacy Policy, want to exercise any of your data rights, or need to report a privacy concern, please reach out through any of the following channels. All privacy-related communications will be handled by BadPro's compliance team.
Related documents: Terms and Conditions · Responsible Gaming · FAQ