Privacy Policy – How 123go Protects Your Data in Pakistan

This Privacy Policy explains how 123go ("123go", "we", "us", "the Platform") collects, uses, stores, and protects the personal information of players and visitors to 123go-khelo.com. It applies to all interactions with the 123go platform — including registration, depositing funds, playing games, claiming bonuses, using the referral programme, and contacting customer support.

By registering an account with 123go or by continuing to use the platform after this policy has been updated, you confirm that you have read and agreed to the practices described here. If you do not agree with any part of this Privacy Policy, you should not use 123go. For the avoidance of doubt, this policy supplements and should be read alongside our Terms and Conditions.

The data controller responsible for your personal information is 123go. If you have any questions or concerns about how your data is handled, you can reach us at support@123go-khelo.com at any time. We typically respond to privacy-related queries within 48 business hours.

123go collects personal data in three main ways: information you provide directly when you register or use the platform, information collected automatically when you use the platform, and information we receive from third-party service providers such as payment processors and identity verification partners.

Information you provide directly:

• Full legal name and date of birth (required at registration)
• Pakistan mobile number (used for account verification and two-factor authentication)
• Email address (where provided)
• CNIC number and/or a copy of your CNIC (required for identity verification at withdrawal stage)
• Payment account details — Easypaisa/JazzCash number, NayaPay/SadaPay account, bank account number for IBFT, or card details for Visa/Mastercard payments
• Communications you send to 123go support via live chat, email, or in-platform messaging
• Any information you voluntarily provide in connection with responsible gaming requests (e.g., self-exclusion forms)

Information collected automatically:

We use the personal data we collect for specific, legitimate purposes. We do not use your data for anything not described in this policy, and we do not process data in ways that are incompatible with the purposes for which it was originally collected.

• Account creation and management: Your name, mobile number, and date of birth are used to create and maintain your 123go account, confirm your identity at login, and communicate with you about account-related matters.
• Payment processing: Your payment account details are used solely to process deposits, withdrawals, and refunds. 123go uses PCI DSS-compliant payment processing partners; we do not store full card numbers on our servers.
• Identity verification: CNIC data is used to verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. Verification is required before any withdrawal above Rs 10,000 is processed.
• Platform security and fraud prevention: Device data, IP addresses, and login patterns are analysed to detect unusual activity, prevent unauthorised access, and identify potential fraud or bonus abuse.
• Responsible gaming: Your gaming activity data — session times, deposit frequency, bet sizes — is monitored by our responsible gaming systems to identify patterns that might indicate problematic gambling behaviour. Where such patterns are identified, 123go may take proactive steps such as sending a wellbeing check message or applying account protections.
• Customer support: Support communications are retained to maintain a record of your interaction history, which helps us resolve disputes and improve service quality.
• Marketing communications: With your consent, we may use your mobile number to send promotional SMS about new games, bonuses, and events on 123go. You can opt out at any time via account settings or by replying STOP to any SMS.
• Legal and regulatory compliance: We are required by applicable law to retain certain transaction and identity records for a minimum period and to report suspicious financial activity to relevant authorities. We do this without notifying the player where required by law.

Every time 123go processes your personal data, there is a specific legal basis for doing so. We do not process data arbitrarily. The main legal bases we rely on are as follows:

• Contractual necessity: Processing your name, payment details, and gaming activity is necessary to fulfil the contract between you and 123go — i.e., to operate your account and deliver the gaming services you have signed up for.
• Legal obligation: Processing identity verification data and transaction records is required by applicable anti-money laundering regulations and age verification obligations.
• Legitimate interests: Processing device data and session data for fraud detection and platform security is based on our legitimate interest in protecting players and the integrity of the platform.
• Consent: Processing your data for marketing communications is based on your explicit consent, given at registration or subsequently via account settings. You can withdraw this consent at any time.

123go shares your personal data with third parties only where it is strictly necessary for the operation of the platform or where we are legally required to do so. We do not share your data for advertising, marketing research, or any other commercial purpose not directly related to your 123go account.

Payment service providers: We share payment account details and transaction amounts with our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank networks, and card processors) to process deposits and withdrawals. These partners are contractually bound to handle your data securely and to use it only for transaction processing.

Identity verification partners: CNIC data may be shared with a third-party identity verification service provider solely for the purpose of confirming your identity and age. These providers operate under strict data processing agreements with 123go and may not use your data for any purpose other than verification.

Game software providers: The studios whose games appear on 123go may receive anonymised gameplay data (bet amounts, game outcomes) for the purpose of game integrity auditing. No personally identifiable information is shared with game studios.

Law enforcement and regulatory authorities: We are legally required to share information with law enforcement agencies or financial regulators when we receive a valid legal demand — such as a court order, regulatory notice, or anti-money laundering investigation request. Where permitted by law, we will attempt to notify you before disclosing your data.

No data sharing arrangement with any of the above parties permits them to sell, sub-license, or further share your personal data. All third parties with whom 123go shares data are contractually obligated to maintain appropriate security standards and to delete the data once it is no longer needed for the specified purpose.

123go uses cookies and similar tracking technologies to make the platform function correctly and to improve your experience. A cookie is a small text file that is stored on your device when you visit the platform. We use the following types of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect your account from cross-site request forgery, and cookies that remember your language preference. You cannot opt out of essential cookies without ceasing to use the platform.
• Functional cookies: These remember your preferences — such as your preferred game lobby view or notification settings — so that you do not have to reconfigure them on every visit.
• Analytics cookies: We use anonymised analytics tools to understand how players move through the 123go platform — which pages are visited, where players drop off in registration flows, which game categories are most popular. This data is aggregated and contains no personally identifiable information.
• Referral tracking cookies: When you arrive at 123go via a referral link, a cookie records the referral code associated with that link so that the referring player can be credited with their commission if you register and deposit.

You can manage or delete cookies at any time through your browser settings. Disabling essential cookies will prevent you from logging in to your 123go account. Disabling functional or analytics cookies will not affect your ability to use the core platform features.

123go retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law — whichever is longer. Below is a summary of our standard retention periods.

When your data is no longer required under the above criteria, 123go will securely delete or anonymise it so that it can no longer be associated with you as an individual.

Data security is not a box-ticking exercise for 123go — it is an ongoing operational commitment. We use a layered security approach that combines technical, procedural, and physical safeguards to protect your personal information from unauthorised access, loss, or misuse.

• Encryption in transit: All data transmitted between your device and 123go is protected by 256-bit TLS (Transport Layer Security) encryption. The padlock icon in your browser's address bar confirms this is active when you are on the 123go platform.
• Encryption at rest: Sensitive personal data — including CNIC information and payment account details — is encrypted when stored in our systems. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal player data within the 123go organisation is restricted on a strict need-to-know basis. Staff members who do not need access to personal data to perform their job functions are denied access. All data access is logged.
• Two-factor authentication: 123go uses mobile number-based verification at login and for sensitive account actions such as withdrawal requests, providing an additional layer of security beyond your password.
• Regular security audits: 123go conducts scheduled and unscheduled penetration testing and vulnerability assessments of our platform infrastructure. Any vulnerabilities identified are remediated as a priority before they can be exploited.
• Incident response: In the event of a data security incident that affects your personal data, 123go will notify affected players within 72 hours of becoming aware of the breach, providing details of what happened and what steps we are taking to address it.

As a 123go player, you have specific rights over the personal data we hold about you. These rights are described below. To exercise any of them, contact our support team via live chat or email at support@123go-khelo.com. We respond to data rights requests within 30 days.

123go is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm that they are 18 or older, and we perform age verification using CNIC data before processing any significant withdrawal.

If 123go becomes aware that a minor has registered an account and provided personal data, we will immediately close the account, delete all associated personal data, and reverse any deposits made to that account in accordance with our standard refund procedure. If you believe a minor has registered on 123go — particularly using your payment credentials without your knowledge — please contact our support team immediately at support@123go-khelo.com so we can investigate and take action.

We also encourage parents and guardians to use parental controls available on mobile devices and internet services to prevent minors from accessing online gaming platforms.

123go may update this Privacy Policy from time to time to reflect changes in how we operate the platform, changes in applicable law, or improvements in our data protection practices. When we make material changes — changes that affect how your data is collected, used, or shared — we will notify registered players via an in-platform notification and/or by SMS to your registered mobile number at least 7 days before the changes take effect.

Minor updates — such as clarifications of existing practices, corrections of typographical errors, or non-material structural changes — may be made without prior notification. The effective date shown at the top of this page will always reflect the date of the most recent update. We encourage you to review this page periodically to stay informed about how 123go handles your personal information.

Continued use of the 123go platform after the effective date of any update to this policy constitutes your acceptance of the revised terms. If you do not accept the revised policy, you should close your account before the effective date of the changes.

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how 123go has handled your personal information, please get in touch using the details below. We take privacy concerns seriously and will respond within 48 business hours for general queries, and within 72 hours for formal data rights requests.