dream17 Privacy Policy – How We Handle Your Data

1. Overview

dream17 operates the online gaming platform available at dream17.vu. As a platform that handles real PKR transactions, account registrations and personal gameplay data, we take our responsibility around data privacy seriously. This policy is written in plain language so that every player — not just those with a legal background — can understand what we do with their information.

The information we collect is used primarily to operate the platform, process PKR deposits and withdrawals through payment methods like JazzCash, Easypaisa, Raast and Bank Transfer, verify player identities, manage bonus and promotional programmes, and improve the overall experience on dream17.

We do not sell your personal data to third parties for their own marketing purposes. Any sharing of data described in this policy is limited to what is necessary to operate the platform and fulfil the services you have requested.

2. Data We Collect

dream17 collects different types of information depending on how you interact with the platform. This falls broadly into three categories: information you provide directly, information collected automatically when you use the platform, and information we may receive from third-party payment processors.

We only collect information that is relevant and necessary for the purpose it is being collected for. You are not required to provide optional information fields, though incomplete profiles may limit certain platform features or delay verification.

3. How We Use Your Data

The personal data dream17 collects is used for the following purposes:

• Account Management: To create and maintain your player account, process login requests, and keep your account details accurate and up to date.
• Identity Verification: To confirm that you are who you say you are, that you meet the minimum age requirement of 18 years, and that you are the legitimate owner of the payment methods linked to your account.
• Payment Processing: To process PKR deposits and withdrawals via JazzCash, Easypaisa, Raast, Bank Transfer and other supported payment channels. Transaction records are maintained for financial compliance and dispute resolution.
• Platform Operation: To run games, settle bets, apply bonuses, track wagering progress and deliver the services you have registered to use.
• Security and Fraud Prevention: To detect and prevent fraudulent activity, account abuse, multi-accounting, bot usage and other behaviour that violates the platform's Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes and process requests such as self-exclusion or account closure.
• Platform Improvement: To analyse usage patterns, identify technical issues and improve the performance, design and features of dream17 for all players.
• Responsible Gaming: To monitor for signs of problem gambling behaviour and, where appropriate, take steps such as contacting the player or flagging the account for review.
• Promotions and Offers: To assess eligibility for bonuses, apply promotional credits and communicate relevant offers to registered players. You can opt out of marketing communications at any time by contacting support.

dream17 does not use your data for automated decision-making that produces significant legal effects without human oversight. If your account is suspended or a withdrawal is held based on automated detection, the matter is reviewed by the support team before a final decision is made.

4. Payment Data and PKR Transactions

Because dream17 handles real PKR transactions, payment data is among the most sensitive information we process. We take specific steps to protect it.

When you make a PKR deposit or withdrawal on dream17 using JazzCash, Easypaisa, Raast or Bank Transfer, the transaction is processed through the respective payment provider's secure infrastructure. dream17 receives confirmation of the transaction outcome but does not have direct access to your payment provider account credentials.

Transaction records are retained for a period consistent with standard financial record-keeping requirements. These records may be reviewed during account verification, withdrawal processing or in the event of a dispute.

5. Cookies and Tracking Technologies

dream17 uses cookies and similar tracking technologies to operate the platform, remember your session, and understand how players interact with the site. There are three main types of cookies used on dream17:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of dream17, though some personalisation features may not work as expected. Continuing to use the platform after being presented with this policy constitutes consent to our use of essential cookies.

6. Data Sharing

dream17 does not sell your personal data. We do not share your information with third parties for their own commercial or marketing purposes. Data sharing is limited to the following categories of recipients, strictly for the purposes described:

• Payment Processors: JazzCash, Easypaisa, Raast, banks and other payment service providers receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game Providers: Third-party game studios and live casino providers that supply games available on dream17 may receive anonymised gameplay data necessary to operate and verify game outcomes. They do not receive your personal registration or payment details.
• Identity Verification Services: Where automated verification tools are used to cross-check identity documents, a specialist verification provider may process your documents. These providers are bound by strict data handling obligations.
• Fraud Prevention and Security: Information may be shared with fraud detection services and security partners to identify and prevent unauthorised access, account abuse and financial crime on the platform.
• Legal and Regulatory Obligations: Where required by applicable law or in response to a valid legal request, dream17 may disclose personal data to the relevant authorities. We will only do so to the extent required and will not volunteer data beyond what is legally compelled.

All third parties with whom data is shared are required to handle it securely, use it only for the purpose it was shared for, and not retain it beyond what is necessary. dream17 does not transfer personal data to parties outside of what is described above.

7. Data Security

dream17 applies technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the dream17 platform, including during login, deposit and withdrawal processes.
• Encrypted storage of sensitive account data, including passwords which are hashed and never stored in plain text.
• Access controls that restrict internal access to personal data on a need-to-know basis, with staff access logged and monitored.
• Regular security reviews and monitoring of platform infrastructure to identify and address vulnerabilities promptly.
• Secure integrations with payment providers to ensure that PKR transaction data is handled in compliance with payment security standards.

While dream17 takes data security seriously and applies appropriate safeguards, no online platform can guarantee absolute security. You also have a role to play in keeping your account secure — use a strong, unique password for your dream17 account and do not share your login credentials with anyone.

8. Data Retention

dream17 retains your personal data for as long as your account is active and for a period afterwards as required for legitimate operational and compliance purposes. Specifically:

• Active Accounts: All registration, verification, transaction and gameplay data is retained while your account remains active on dream17.
• Closed Accounts: Following account closure, core account and transaction records are retained for a standard period to allow for dispute resolution, fraud investigations and to meet any applicable record-keeping requirements. After this retention period, data is securely deleted or anonymised.
• Self-Excluded Players: Where a player has requested self-exclusion, their data is retained for the duration of the exclusion period and beyond, as necessary to prevent re-registration. This is done in the player's own interest to ensure the self-exclusion remains effective.
• Support Communications: Chat and email records with the support team are retained for a reasonable period to provide context for follow-up queries and to resolve ongoing matters.

When data is no longer required for any of the purposes described in this policy, it is securely disposed of in a manner that prevents unauthorised recovery or access.

9. Your Rights Over Your Data

As a player on dream17, you have certain rights regarding the personal data we hold about you. These include:

• Right to Access: You can request a summary of the personal data dream17 holds about your account. This can be submitted through the support team.
• Right to Correction: If any of the personal information on your account is inaccurate or out of date, you can request that it be corrected. Some updates — such as changes to your registered name — may require supporting documentation.
• Right to Deletion: You can request deletion of your personal data. Please note that certain data — particularly transaction records and verification documents — may need to be retained for a minimum period for legal and compliance reasons even after a deletion request is submitted.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you can withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to Restrict Processing: In certain circumstances you may request that dream17 limits how your data is used while a complaint or query is being resolved.

To exercise any of these rights, contact the dream17 support team with your registered account details and a clear description of your request. We aim to respond to all data rights requests within a reasonable timeframe. Some requests may require identity verification before they can be processed.

10. Under-18 Players

If you are a parent or guardian and believe that a minor has accessed or registered on dream17, please contact the support team immediately with the relevant account details. We will investigate and take appropriate action promptly.

dream17 uses date of birth collection at registration and may request identity verification to confirm age. Players who cannot confirm they meet the 18+ requirement will not be permitted to deposit, play or withdraw on the platform.

11. Changes to This Privacy Policy

dream17 may update this Privacy Policy from time to time to reflect changes in platform functionality, payment methods, data handling practices or applicable requirements. When material changes are made, the "Last Updated" date at the top of this page will be revised.

Where a change significantly affects how your data is used, we will make reasonable efforts to notify registered players through the platform or via the email address associated with your account. It remains your responsibility to review this policy periodically. Continued use of dream17 following any published update constitutes your acceptance of the revised Privacy Policy.

12. Contact and Data Enquiries

If you have any questions about this Privacy Policy, want to understand more about how dream17 uses your data, or wish to exercise any of your data rights, please get in touch with the support team through the contact channel available within the platform.

The dream17 support email is displayed in the footer of this page. When submitting a data-related request, please include your registered username and a clear description of your query. For access, correction or deletion requests, identity verification may be required before the request can be processed.

We take privacy enquiries seriously and aim to respond to all data-related requests as promptly as possible. If you are not satisfied with the response you receive, you have the right to escalate the matter through appropriate channels.