Data & Privacy

derm17 Privacy Policy

This Privacy Policy explains exactly what personal data derm17 collects when you use our Casino, Sports Betting and Bingo platform, how we use it, who we share it with and what rights you have over your own information.

Last updated: January 2026

1 Overview

derm17 takes your privacy seriously. This policy applies to all users of the derm17 website and mobile app — including people who browse without an account and registered players who deposit, wager and withdraw. Reading this document in full will give you a clear picture of how your personal information is handled at every stage of using the platform.

The data controller responsible for your personal information is derm17 (referred to throughout this policy as "derm17", "we", "us" or "our"). If you have any questions about how your data is used, the contact details in Section 13 apply.

By registering an account or continuing to use derm17 after this policy has been updated, you confirm that you have read and understood how we handle your personal data.

2 Data We Collect

The personal data derm17 collects depends on how you interact with the platform. The main categories of data we collect are set out below.

Category Examples When Collected
Identity Data Full name, date of birth, CNIC number, nationality Registration & KYC verification
Contact Data Email address, mobile number, city/address Registration & account updates
Financial Data JazzCash/Easypaisa wallet number, bank account details, transaction history in PKR Deposits & withdrawals
Technical Data IP address, device type, browser, OS version, session data Each platform visit
Usage Data Games played, bets placed, time on platform, pages visited Active platform sessions
Verification Documents CNIC copies, utility bills, selfie photos for identity checks KYC & withdrawal verification

We do not collect data that goes beyond what is necessary for the specific purpose stated. If we need to collect a new category of data in the future, this policy will be updated accordingly.

3 How We Use Your Data

Your personal data is used only for the specific purposes set out below. We do not use your data for any purpose that conflicts with what is stated here without first updating this policy and notifying you.

  • Account Management: To create and maintain your derm17 account, verify your identity, process your login and manage your account settings.
  • Transaction Processing: To handle PKR deposits via JazzCash, Easypaisa, Raast, bank transfer and cards, and to process withdrawal requests accurately and securely.
  • Platform Security: To detect and prevent fraudulent activity, unauthorised account access, money laundering and other conduct that violates our Terms and Conditions.
  • Responsible Gaming: To monitor for patterns that may indicate problem gambling and to enforce deposit limits, self-exclusion and other responsible gaming tools you have set on your account.
  • Customer Support: To respond to queries and resolve issues you raise with the derm17 support team.
  • Promotions & Communications: To send you relevant bonus offers, Casino promotions, Cricket and PSL betting updates and platform news — only where you have opted in to receive them.
  • Legal Compliance: To meet any legal or regulatory obligations that apply to the operation of derm17.
  • Platform Improvement: To analyse aggregated, anonymised usage data and improve the platform experience for all players.

5 Sharing Your Data

derm17 does not sell, rent or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the following circumstances and only to the extent necessary for the stated purpose.

  • Payment Processors: JazzCash, Easypaisa, Raast and banking partners receive transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy and security standards.
  • Identity Verification Providers: Third-party KYC services receive the minimum identity data necessary to verify your CNIC and confirm your identity before withdrawals are processed.
  • Game Software Providers: Casino game providers receive session and bet data in order to run the games you play. This data does not include your full identity profile.
  • Legal and Regulatory Requirements: We may be required to share data with authorities if required by law or in connection with an investigation of fraud, money laundering or similar matters.
  • Business Transfers: In the event of a merger, acquisition or restructuring, your data may be transferred to the successor entity under equivalent privacy protections.

We will never share your data with advertisers, data brokers or unrelated third parties. Any request from an outside party for your personal data is declined unless legally required.

6 Payment Data

Financial data relating to your PKR deposits and withdrawals on derm17 is handled with a particularly high level of care. All payment transactions are processed over encrypted connections and your full financial account details are not stored on derm17's servers beyond what is necessary for transaction records.

JazzCash and Easypaisa wallet numbers linked to your account are stored only in encrypted form. Card details for players using debit or credit card payments are handled by our payment processor and are not accessible to derm17 staff. Transaction history in PKR is retained as required for account records and legal compliance.

  • Payment data is never shared with Casino game software providers.
  • Withdrawal verification uses identity data, not full financial credentials.
  • Historical PKR transaction records are accessible to you at any time through your account history.

7 Cookies & Tracking Technologies

derm17 uses cookies and similar tracking technologies to make the platform work correctly and to improve your experience. The types of cookies we use are explained below.

  • Essential Cookies: Required for core platform functionality — keeping you logged in, maintaining your session, remembering your language and currency preferences. These cannot be disabled without breaking the platform.
  • Analytics Cookies: Used to understand how players navigate derm17 — which pages are visited most, where users spend time and where they leave. This data is aggregated and anonymised. Analytics cookies can be declined.
  • Preference Cookies: Remember your platform settings between sessions — such as your preferred game categories or notification preferences. These can be cleared in your browser settings.

derm17 does not use third-party advertising cookies or allow advertising networks to track your activity across other websites through cookies set on derm17.

You can manage cookies through your browser settings at any time. Disabling essential cookies will affect platform functionality. Disabling analytics cookies will not impact your ability to use derm17.

8 Data Retention

derm17 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below reflect the purposes for which the data is held.

  • Account and Identity Data: Retained for the duration of your account plus a minimum of five years after account closure to meet legal and audit requirements.
  • Transaction Records: PKR deposit and withdrawal records are retained for a minimum of five years in accordance with financial record-keeping requirements.
  • Customer Support Records: Support interactions are retained for up to two years after the last communication.
  • Marketing Preferences: Retained until you withdraw consent or close your account, after which they are deleted within 30 days.
  • Technical and Usage Data: Anonymised usage data may be retained indefinitely for platform analytics. Personally identifiable technical data is deleted within 12 months of your last session.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you personally.

9 Data Security

derm17 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. The security measures in place include the following:

  • SSL/TLS encryption on all data transmitted between your device and derm17's servers.
  • Encrypted storage of sensitive account data including payment wallet numbers and CNIC information.
  • Access controls that limit internal access to personal data to only those staff members who need it for their specific role.
  • Regular security reviews and monitoring of platform infrastructure for unusual activity.
  • Two-factor account security options available to all registered players.

While derm17 takes data security seriously, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, derm17 will notify affected users in accordance with applicable requirements.

You play an important role in keeping your account secure. Use a strong, unique password for derm17 and do not share your login credentials with anyone.

10 Your Rights Over Your Data

You have the following rights regarding the personal data derm17 holds about you. To exercise any of these rights, contact the derm17 support team using the details in Section 13.

Right of Access

Request a copy of the personal data derm17 holds about you, including your transaction history, account details and any verification documents on file.

Right of Rectification

Request correction of any inaccurate personal data we hold. For example, if your contact details or address have changed, you can ask us to update them.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.

Right to Restrict Processing

Ask us to restrict how we use your data in certain circumstances — for example, while we investigate a dispute about its accuracy.

Right to Portability

Request your personal data in a structured, machine-readable format where processing is based on consent or contract and carried out automatically.

Right to Object

Object to processing based on legitimate interests, including direct marketing. Marketing opt-out can also be managed directly in your account settings.

11 Minors

derm17 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the registration and withdrawal process to prevent minors from accessing the platform.

If you believe a minor has registered a derm17 account or accessed the platform, please contact us immediately using the details in Section 13. Any account found to belong to a person under 18 will be closed immediately and any associated data will be handled in accordance with applicable requirements.

12 Changes to This Policy

derm17 reserves the right to update this Privacy Policy at any time. When material changes are made, registered account holders will be notified via their registered contact details or through a notice displayed upon login. The "last updated" date at the top of this page reflects the most recent revision.

Your continued use of derm17 following notification of an updated Privacy Policy constitutes your acknowledgement of the changes. If you disagree with any update to this policy, you should stop using the platform and contact us to arrange account closure.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how your personal data is being handled, you can reach the derm17 team through the following channels:

Email Support

[email protected]

Our support team is available 24/7 and aims to respond to all privacy-related queries within two business days. For data access or deletion requests, please include your registered account email address and a brief description of your request.

How derm17 Protects Your Data

A quick summary of the practical ways derm17 keeps your personal information secure and respects your privacy.

SSL Encryption on Every Page

Every page and transaction on derm17 is protected by SSL/TLS encryption. Your login details, PKR transaction data and personal information travel over secure, encrypted connections at all times.

No Data Sales — Ever

derm17 does not sell, rent or trade your personal data to advertisers or data brokers. Your information is used only to operate your account, process your PKR payments and keep the platform secure.

Secure PKR Payment Handling

JazzCash and Easypaisa wallet numbers are stored in encrypted form. Card details are handled by the payment processor only — derm17 staff never have access to your full financial credentials.

You Control Your Data

Access, correct, download or request deletion of your personal data at any time by contacting support. Marketing preferences can be updated directly within your derm17 account settings.

Minimal Data Collection

derm17 only collects data that is genuinely necessary for the purpose it is used for. We do not build unnecessary data profiles or collect information speculatively beyond what is needed to operate your account.

Marketing Only With Consent

Promotional emails about Casino bonuses, PSL betting offers and platform news are only sent when you have opted in. You can withdraw consent at any time and opt out will be honoured immediately.

Privacy FAQs

Common questions Pakistani players ask about how derm17 handles their personal data.

Identity verification using your CNIC is a standard part of the Know Your Customer (KYC) process for online gaming platforms. It confirms that you are who you say you are, that you meet the minimum age requirement of 18 and that your account cannot be used by someone else to withdraw funds in your name. CNIC data is stored in encrypted form and used solely for the verification purpose — it is never shared with advertisers or unrelated third parties.

Yes. You can request a copy of your personal data at any time by contacting the derm17 support team at [email protected] with your registered email address. We will provide your data in a clear format within a reasonable timeframe. The data provided will include your account details, transaction history in PKR, any KYC documents on file and your communication history with support.

Only the minimum transaction data necessary to process your PKR deposit or withdrawal is shared with payment processors like JazzCash and Easypaisa. This typically includes the transaction amount, your wallet number and a reference code. Your full account profile, game history and CNIC data are not shared with payment providers. Each payment provider operates under its own privacy policy for the data they receive directly from their own service.

You can update your marketing communication preferences directly in your derm17 account settings under the notifications section. Alternatively, you can contact support and request to be removed from all marketing communications. Opt-out requests are processed immediately and you will not receive further promotional emails once the preference is updated. Note that transactional communications — such as deposit confirmations and withdrawal notifications — are not affected by marketing opt-out as they are essential to your account.

When you close your derm17 account, your personal data is not immediately deleted. Identity data and PKR transaction records are retained for a minimum of five years after account closure to meet financial record-keeping and legal requirements. After this retention period, your data is securely deleted or irreversibly anonymised. Marketing preferences are deleted within 30 days of account closure. You can request details of what data is retained and for how long by contacting support.

Your Privacy Is Protected on derm17

Ready to get started? Registration is free, your data is handled securely and all transactions are in PKR via JazzCash, Easypaisa and more.

SSL-encrypted platform PKR banking only No data sold to third parties 18+ only