This Privacy Policy describes how ComeOn ("ComeOn," "we," "us," "our") collects, processes, stores and protects the personal data of players who register and use the ComeOn platform at comeon-bangla.com and through the ComeOn mobile application. It applies to all players based in Pakistan and to anyone who visits the ComeOn website, whether or not they hold a registered account.
We take our data protection obligations seriously. The ComeOn platform handles sensitive personal and financial information on behalf of hundreds of thousands of Pakistani players, and that responsibility is not something we take lightly. This policy has been written in plain English to make sure you can actually understand what we do with your data — not just what we are legally required to say.
1. Introduction – Who Controls Your Data
ComeOn is the data controller for all personal data collected and processed in connection with your use of the ComeOn platform. As data controller, ComeOn determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection law and with the commitments made in this Privacy Policy.
This Privacy Policy applies to:
- All registered ComeOn account holders based in Pakistan
- Visitors to the ComeOn website who have not yet registered
- Any person who contacts ComeOn support via live chat, email or any other channel
- Anyone who participates in ComeOn promotions, surveys or competitions
2. Personal Data We Collect at ComeOn
ComeOn collects only the personal data that is necessary for the purposes described in this policy. We do not collect data we do not need. Below is a clear breakdown of the categories of data ComeOn collects and the circumstances in which each category is collected.
2.1 Registration and Identity Data
When you create a ComeOn account, we collect: your full legal name, date of birth, residential address in Pakistan, email address and mobile phone number. This information is required to create and verify your account, comply with our age verification obligations and fulfil Know Your Customer (KYC) requirements as part of our anti-money-laundering programme.
2.2 Identity Verification Documents
When you are asked to complete identity verification — typically before your first withdrawal or when your account activity triggers a KYC review — ComeOn may collect a copy of your Computerised National Identity Card (CNIC), a photograph taken via your device camera and, in some cases, a utility bill or bank statement for address verification. These documents are handled with heightened security measures and stored in encrypted form.
2.3 Financial and Payment Data
When you make deposits or withdrawals through ComeOn using Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer or card payment, ComeOn records transaction amounts, transaction dates and times, payment method identifiers (such as your Easypaisa mobile number or the last four digits of your card number) and transaction reference numbers. ComeOn does not store full card numbers — card data is processed by certified payment gateways.
2.4 Betting and Gaming Activity Data
ComeOn records all betting and gaming activity associated with your account, including: bets placed, game sessions played, bet outcomes, win/loss history, bonus claims and wagering activity. This data is used for account management, dispute resolution, fraud prevention and — with your consent — for personalising your ComeOn experience.
2.5 Device and Technical Data
When you access ComeOn through a web browser or mobile app, we automatically collect certain technical data, including: your IP address, device type and operating system, browser type and version, and session timestamps. This data is used for security monitoring, platform optimisation and fraud detection.
2.6 Communications Data
If you contact ComeOn support via live chat, email or any other channel, the content of that communication is recorded and stored. This is for quality assurance purposes, to ensure accurate dispute resolution and to provide a record of the assistance we have given you.
| Data Category | Collected At | Required? | Stored Encrypted? |
|---|---|---|---|
| Name & CNIC Details | Registration / KYC | Yes | Yes |
| Mobile Number & Email | Registration | Yes | Yes |
| PKR Payment Data | Deposits / Withdrawals | Yes | Yes |
| Betting History | Ongoing gameplay | Yes | Yes |
| Device / IP Data | Every session | Auto | Yes |
| Marketing Preferences | Opt-in only | Optional | Yes |
3. How ComeOn Uses Your Personal Data
ComeOn uses your personal data only for clearly defined, legitimate purposes. We never use your data for purposes that are incompatible with the reason it was originally collected. The primary purposes for which ComeOn processes your personal data are:
3.1 Account Creation and Management
Your registration data is used to create and maintain your ComeOn account, verify your identity and age, process your PKR deposits and withdrawals and provide you with access to the full range of ComeOn's sports betting and casino services. Without this data, we simply cannot operate your account.
3.2 Legal and Regulatory Compliance
ComeOn is required to collect and retain certain data — particularly identity and transaction data — to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) obligations and the terms of our operating licence. This is non-negotiable: we cannot offer you the ComeOn platform without meeting these requirements.
3.3 Fraud Prevention and Security
Device data, IP addresses and betting patterns are analysed by ComeOn's security systems to detect and prevent fraud, account takeovers and abuse of the bonus system. This processing protects both ComeOn and every legitimate player on the platform — including you.
3.4 Customer Support
Communications and account activity data are used by ComeOn's support team to resolve your queries, investigate complaints and provide accurate assistance with any account, payment or game-related issue you raise.
3.5 Responsible Gaming
ComeOn uses your betting activity data to monitor for signs of problem gambling behaviour — such as significantly increasing bet sizes, extended uninterrupted play sessions, or patterns consistent with chasing losses. When such patterns are detected, ComeOn may proactively contact you with information about responsible gaming tools or, in serious cases, implement account protections.
3.6 Platform Improvement
Aggregated and anonymised data about how players use the ComeOn platform — which games are most popular, which pages take longest to load, which payment methods are preferred — is used to improve the platform for all users. This analysis does not identify you personally.
3.7 Marketing Communications (Opt-In Only)
If you have explicitly opted in to receive marketing communications from ComeOn, we may send you emails or push notifications about new games, promotions and special offers. You can withdraw your consent to marketing communications at any time by contacting support or by using the unsubscribe link in any marketing email.
4. Legal Basis for Processing
ComeOn processes your personal data on the following legal bases, depending on the specific processing activity involved:
- Contract performance: Processing necessary to operate your ComeOn account, process your PKR transactions and provide you with the betting and casino services you have signed up for.
- Legal obligation: Processing required to comply with AML, KYC and other regulatory requirements that apply to ComeOn as a licensed gaming operator.
- Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring and platform improvement — where our legitimate interests do not override your fundamental privacy rights.
- Consent: Processing for marketing communications and optional personalisation features — where we rely on your explicit, freely given and withdrawable consent.
5. Data Sharing – Who We Share Your Data With
ComeOn does not sell your personal data to any third party. We do not share your data with advertisers, data brokers or marketing companies. However, ComeOn does share certain data with carefully selected third parties where this is necessary for the legitimate operation of the platform:
5.1 Payment Processing Partners
Your PKR payment data is shared with the payment service providers that process your Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer and card transactions. These providers receive only the data necessary to process your specific transaction and are contractually obligated to handle your data securely.
5.2 Identity Verification Services
Where ComeOn uses a third-party KYC service to assist with identity verification, your identity documents may be shared with that service. Any such third party is required to operate under equivalent data protection standards to those set out in this policy.
5.3 Game Software Providers
The casino game software providers whose games are available on ComeOn may receive limited data about your game sessions — such as session start/end times and game outcomes — for technical operation purposes. These providers do not receive your identity or payment details.
5.4 Regulatory and Law Enforcement Bodies
ComeOn may disclose personal data to regulatory authorities or law enforcement bodies where required by law or where we are legally compelled to do so — for example, in connection with a formal investigation into financial crime or fraud. ComeOn will not voluntarily share your data with law enforcement beyond what is legally required.
6. PKR Payment Data – Special Protections
Given the sensitivity of financial data, ComeOn applies heightened protections to payment information specifically. When you make a deposit to or withdrawal from your ComeOn account using Easypaisa, JazzCash or any other supported Pakistani payment method, the following measures apply:
- Full card numbers are never stored on ComeOn's servers — card processing is handled entirely by PCI-DSS-compliant payment gateways
- Easypaisa and JazzCash mobile numbers associated with your account are stored in encrypted form
- All financial transaction data is transmitted over 256-bit SSL-encrypted connections
- Access to financial data within ComeOn is restricted to authorised personnel on a strict need-to-know basis
- A full audit log of all PKR transactions is maintained for regulatory compliance and dispute resolution purposes
ComeOn's withdrawal policy requires that funds are returned to the same payment method used for the original deposit — this is both an AML requirement and a security measure that protects you against unauthorised withdrawal of your PKR balance.
7. Cookies and Tracking Technologies
The ComeOn website and application use cookies and similar tracking technologies to improve your experience, keep you logged in securely and analyse how the platform is used. Below is a clear breakdown of the cookies ComeOn uses:
You can manage your cookie preferences at any time through your browser settings. Disabling non-essential cookies will not affect your ability to use your ComeOn account, though some personalisation features may be unavailable.
8. Data Retention – How Long We Keep Your Data
ComeOn retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
- Account and identity data: Retained for the duration of your active ComeOn account, plus a minimum of 5 years after account closure to comply with AML and regulatory record-keeping obligations.
- PKR transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping requirements.
- KYC verification documents: Retained for the duration of your account plus 5 years, or as required by our licensing authority.
- Betting and gaming history: Retained for the duration of your account plus 3 years after closure for dispute resolution purposes.
- Support communications: Retained for 2 years from the date of the communication unless associated with an open dispute.
- Device and IP data: Retained for 12 months from collection for security and fraud analysis purposes.
- Marketing preferences and consent records: Retained for the duration of your account plus 2 years.
When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to you personally. ComeOn does not retain data "just in case" — every piece of data we hold has a defined purpose and retention period.
9. Security Measures
ComeOn implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our security programme includes:
- Encryption in transit: All data transmitted between your device and ComeOn's servers is encrypted using TLS 1.3 / 256-bit SSL, ensuring that your personal and financial information cannot be intercepted during transmission.
- Encryption at rest: Sensitive personal data — including identity documents, CNIC details and payment identifiers — is stored in encrypted form on ComeOn's servers using AES-256 encryption.
- Access controls: Access to personal data within ComeOn is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
- Two-factor authentication: ComeOn supports and encourages the use of two-factor authentication (2FA) on your account to prevent unauthorised access even if your password is compromised.
- Penetration testing: ComeOn's platform is subject to regular security penetration tests by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
- Incident response: ComeOn maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights, we will notify affected players promptly and take all necessary remediation steps.
10. Your Data Rights as a ComeOn Player
As a ComeOn player, you have the following rights in relation to your personal data. ComeOn respects all of these rights and will respond to your exercise of them promptly — typically within 48 hours for straightforward requests.
Right of Access
You have the right to request a copy of all personal data ComeOn holds about you. We will provide this in a structured, readable format within 30 days of your request, free of charge.
Right of Rectification
If any personal data ComeOn holds about you is inaccurate or incomplete, you have the right to have it corrected. Contact support with your correction request and we will update your records promptly.
Right to Erasure
In certain circumstances — for example, if we no longer need your data for the purpose it was collected — you may request deletion. Note that we are required to retain some data for regulatory compliance even after your account closes.
Right to Object
You have the right to object to ComeOn processing your data for direct marketing purposes. If you object, we will stop processing your data for that purpose immediately and without question.
Right to Portability
Where ComeOn processes your data by automated means on the basis of your consent or contract, you have the right to receive your data in a machine-readable format and transfer it to another service if you wish.
Right to Withdraw Consent
Where ComeOn processes your data based on your consent — for example, marketing communications — you can withdraw that consent at any time without affecting the lawfulness of prior processing.
11. Minors – Under 18 Policy
The ComeOn platform is strictly for adults aged 18 and above. ComeOn does not knowingly collect personal data from anyone under the age of 18. The platform includes age verification measures at registration, and accounts found to belong to minors are closed immediately with any deposited funds refunded to the payment method of origin.
If you believe that a minor has registered a ComeOn account or that personal data of a minor has been inadvertently collected, please contact ComeOn support immediately at support@comeon-bangla.com. We will investigate and take appropriate action without delay.
12. Changes to This Privacy Policy
ComeOn may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law or operational changes to the platform. When we make material changes — that is, changes that significantly affect your privacy rights or how we use your data — we will notify you by email to your registered address and/or through a prominent notice within the ComeOn platform, at least 7 days before the changes take effect.
For minor updates — such as clarifications of existing language or corrections of typographical errors — we will update the "Last Updated" date at the top of this policy without separate advance notice. We encourage you to review this policy periodically. Continued use of the ComeOn platform following any update constitutes acceptance of the revised policy.
13. Contact Us About Privacy
If you have any questions, concerns or requests relating to this Privacy Policy or to ComeOn's handling of your personal data, please contact us using the details below. We take all privacy enquiries seriously and aim to respond within 48 hours.