DuckDice Privacy Policy – How We Protect Your Personal Data

Your privacy is not an afterthought at DuckDice. This policy explains exactly what personal data we collect from Pakistani players, why we collect it, how we use and store it, who we share it with, and what rights you have over your own information.

Last updated: 1 January 2025
English (en-PK)
SSL Encrypted
18+ Only
Encrypted Storage

All personal data is stored on encrypted servers. Access is restricted to authorised personnel on a need-to-know basis only.

No Selling of Data

DuckDice does not sell, rent, or trade your personal information to third-party marketers under any circumstances.

Your Controls

You can access, correct, and request deletion of your personal data at any time by contacting DuckDice support.

Cookie Transparency

We explain exactly which cookies DuckDice uses, what each one does, and how you can manage your preferences.

duckdice
Plain-language commitment: Privacy policies can be dense and hard to follow. We have written this one as clearly as possible. If anything is unclear after reading, contact our support team at support@duckdice.im — we are happy to explain any section in plain terms.

1. Who We Are and Who This Policy Applies To

DuckDice is operated by DuckDice Ltd (referred to in this policy as "DuckDice", "we", "us", or "the Company"). Our platform is accessible at duckdice.im and provides online casino games, sports betting, and related services primarily to players based in Pakistan.

This Privacy Policy applies to every person who interacts with DuckDice — whether you are a registered player, a visitor browsing the platform without an account, or a person who contacts our support team. It covers all personal data collected through the website, mobile browser access, and any communications between you and DuckDice via email, live chat, or phone.

DuckDice acts as the data controller in respect of the personal data it collects through the platform. This means DuckDice determines the purposes and means of processing your personal information and is responsible for ensuring that processing is carried out in accordance with applicable data protection legislation.

2. Personal Data We Collect

DuckDice collects only the data genuinely necessary to provide the services you have requested or to comply with our legal obligations. The categories of personal data we may collect include:

2.1 Identity and Contact Information

  • Full legal name as it appears on your CNIC, passport, or other government-issued ID
  • Date of birth
  • Residential address in Pakistan
  • Mobile phone number
  • Email address
  • CNIC number (required for identity verification prior to withdrawal)

2.2 Financial and Payment Data

  • Easypaisa or JazzCash mobile wallet number
  • Bank account number and branch details (for IBFT transfers)
  • Masked card number and card type (for Visa/Mastercard transactions — full card numbers are never stored by DuckDice and are handled only by our certified payment processor)
  • Transaction history — deposits, withdrawals, and amounts

2.3 Gaming and Betting Activity

  • Game history, bet records, session durations, and outcomes
  • Bonus usage and wagering history
  • Platform preferences and settings
  • Responsible gaming tool activations (deposit limits, self-exclusion etc.)

2.4 Technical and Device Data

  • IP address and geographic location derived from it
  • Device type, operating system, and browser version
  • Session logs, page views, and click paths on the platform
  • Cookie identifiers and similar tracking technologies

2.5 Communications Data

  • Content of support tickets, live chat conversations, and emails
  • Survey responses and feedback submitted voluntarily
DuckDice does not collect or store sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric identifiers — except where identity document verification is required by our KYC obligations, in which case document images are processed securely and not retained beyond the verification period.

3. How DuckDice Uses Your Personal Data

The table below summarises the primary purposes for which DuckDice uses your personal data and the type of data involved in each:

Purpose Data Used Legal Basis
Account registration and management Identity, contact, device data Contract performance
Processing deposits and withdrawals Financial, identity data Contract performance
Identity verification (KYC/AML) Identity, financial data Legal obligation
Delivering games and betting services Gaming activity, device data Contract performance
Responsible gaming monitoring Gaming activity, communications Legal obligation / legitimate interest
Fraud prevention and security Identity, financial, device, gaming data Legitimate interest / legal obligation
Customer support Communications, identity, account data Contract performance
Marketing communications (with consent) Identity, contact, gaming activity Consent
Platform improvement and analytics Device, gaming activity (anonymised) Legitimate interest
Regulatory reporting Identity, financial, gaming data Legal obligation
duckdice

4. Legal Bases for Processing

DuckDice processes personal data only where we have a lawful basis for doing so. The four bases we rely on are:

  • Contract performance: Processing necessary to provide the services you have signed up for — creating your account, processing your deposits, delivering game results, and paying out your winnings.
  • Legal obligation: Processing required by law — including anti-money laundering (AML) checks, age verification, regulatory reporting, and responding to lawful requests from authorities.
  • Legitimate interest: Processing that serves DuckDice's legitimate business interests without overriding your rights — such as fraud detection, platform security, and improving the quality of the service.
  • Consent: Processing for purposes you have specifically agreed to — primarily marketing communications. You can withdraw your consent at any time through your account settings or by contacting support.

5. Who DuckDice Shares Your Data With

DuckDice does not sell, rent, or trade your personal data. We share data with third parties only to the extent necessary to deliver the service, meet legal obligations, or protect the integrity of the platform. Categories of third parties who may receive your data include:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment gateways — to process your deposits and withdrawals. These parties receive only the data necessary to execute transactions.
  • Identity verification providers: KYC verification platforms used to authenticate your CNIC or other identity documents as required by our licence obligations.
  • Game software providers: Casino game and sports data suppliers may receive anonymised session data for performance and integrity purposes. They do not receive your personal identity information.
  • Regulatory authorities: Where required by applicable law or our gaming licence conditions, DuckDice will report data to relevant regulatory or law enforcement bodies.
  • Fraud prevention services: Third-party systems used to detect suspicious account activity, multi-accounting, and financial crime. Data shared is used solely for security purposes.
  • Cloud and hosting providers: Secure, certified infrastructure providers who store DuckDice platform data under strict data processing agreements.

All third-party data processors are required to maintain appropriate security standards and may only use your data for the specific purposes for which it was shared.

6. How Long DuckDice Keeps Your Data

DuckDice retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and defend against potential legal claims. Specific retention periods include:

  • Account data: Retained for the lifetime of your account plus 5 years following account closure — in line with standard AML record-keeping requirements.
  • Financial transaction records: Retained for a minimum of 5 years from the date of each transaction to comply with financial regulations.
  • Identity verification documents: Retained for the duration of your account plus 5 years. Copies of identity documents are stored in encrypted form.
  • Support communications: Retained for 2 years from the date of the last interaction unless a longer period is required for dispute resolution.
  • Marketing consent records: Retained until withdrawal of consent plus 1 year for audit purposes.
  • Technical logs: Typically retained for 90 days for security and debugging purposes, then automatically purged.

When data is no longer required, it is securely deleted or anonymised in accordance with DuckDice's data lifecycle procedures.

7. How We Keep Your Data Secure

DuckDice takes data security seriously and implements a range of technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure. These include:

  • TLS/SSL encryption on all data transmitted between your device and DuckDice's servers
  • AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
  • Access controls — employee access to personal data is restricted based on job role and logged for audit purposes
  • Two-factor authentication (2FA) available for all player accounts to prevent unauthorised login
  • Regular security audits and penetration testing conducted by independent cybersecurity specialists
  • Incident response procedures — in the event of a data breach that could affect your rights, DuckDice will notify affected players within 72 hours of becoming aware of the incident
Your responsibility: DuckDice can only protect data once it is on our systems. Keeping your account password strong and confidential, enabling 2FA, and logging out from shared devices are steps you can take to protect your own account security.
duckdice

8. Cookies and Tracking Technologies

DuckDice uses cookies and similar technologies to operate the platform, remember your preferences, keep your session secure, and understand how players use the site so we can improve it. A cookie is a small text file stored on your device when you visit a website.

8.1 Types of Cookies We Use

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core site functionality.
  • Analytics cookies: We use aggregated, anonymised analytics to understand which pages are visited most, where players encounter difficulties, and how the platform can be improved. Individual players are not identified in this data.
  • Preference cookies: Remember your language, display settings, and other platform preferences so you do not need to reset them every visit.
  • Security cookies: Help detect suspicious activity such as multiple failed login attempts, unusual geographic access patterns, and potential account takeover attempts.

8.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies will impair the functionality of DuckDice significantly — including the ability to log in and maintain a gaming session. Your cookie preferences for analytics can also be managed through the cookie consent banner displayed on your first visit to the platform.

9. Your Data Rights

As a DuckDice player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@duckdice.im with the subject line "Data Rights Request". We will respond within 30 days.

Right to Access

Request a copy of all personal data DuckDice holds about you (a Subject Access Request). We will provide this in a readable format within 30 days.

Right to Rectification

If any data we hold about you is inaccurate or outdated, you have the right to have it corrected. Update basic details directly in your account settings.

Right to Erasure

Request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal retention obligations (e.g., AML records) may prevent full deletion.

Right to Restriction

Request that we limit processing of your data — for example, while a dispute is being resolved or while you verify the accuracy of data we hold.

Right to Portability

Receive a structured, machine-readable copy of data you have provided to DuckDice, suitable for transfer to another service provider if you wish.

Right to Object

Object to processing based on legitimate interest — particularly in relation to marketing communications and profiling. You can unsubscribe from marketing emails at any time.

DuckDice will not charge a fee for handling data rights requests and will respond within 30 calendar days. Where a request is complex or high in volume, the response period may be extended to 60 days — we will inform you if this is the case.

10. Children's Privacy

DuckDice is strictly an adult platform. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe a minor has accessed or registered on DuckDice, please contact us immediately at support@duckdice.im. Upon confirmation, the account will be closed, all data associated with it will be deleted, and any funds held will be handled in accordance with applicable law.

Parents and guardians are encouraged to use parental controls on shared devices and to ensure that DuckDice account credentials are not accessible to anyone under 18. DuckDice supports third-party parental filtering tools and recommends their use in households with minors.

11. Third-Party Links and Services

The DuckDice platform does not contain links to external third-party websites in its standard operation. However, some payment methods — such as Easypaisa and JazzCash — involve redirecting to or interacting with third-party applications or websites to complete transactions. DuckDice is not responsible for the privacy practices or content of those third-party services.

When you interact with a third-party payment provider as part of a DuckDice transaction, that provider's own privacy policy governs the handling of data collected during that interaction. DuckDice recommends reviewing the privacy policies of any payment service you use.

12. Marketing Communications

DuckDice may send you promotional communications by email or SMS about new games, bonuses, tournaments, and platform updates. We will only do this where you have given explicit consent during registration or opted in through your account settings. Every marketing communication includes an unsubscribe option that allows you to stop receiving marketing messages at any time.

Withdrawing your consent to marketing does not affect the legal processing of data for any other purpose — you will continue to receive transactional communications (such as deposit confirmations, withdrawal notifications, and account security alerts) which are necessary for the operation of your account and cannot be opted out of while your account remains active.

DuckDice does not engage in unsolicited cold-calling or SMS marketing to persons who have not registered an account and provided consent. If you receive a communication purporting to be from DuckDice that you did not consent to, please report it to support@duckdice.im.

13. International Data Transfers

DuckDice Ltd operates with infrastructure and service providers across multiple jurisdictions. This means your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, DuckDice ensures appropriate safeguards are in place — including standard contractual clauses, data processing agreements, and reliance only on providers who meet equivalent data protection standards to those applicable in DuckDice's licensing jurisdiction.

DuckDice does not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate contractual protections. If you have questions about specific transfer mechanisms, contact support@duckdice.im.

14. Changes to This Privacy Policy

DuckDice may update this Privacy Policy from time to time — for example, to reflect changes in our services, new legal obligations, or feedback from players. When material changes are made, we will notify you via a notice on the DuckDice platform or by email to your registered address before the changes take effect.

The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Continued use of DuckDice following a notified update constitutes acceptance of the revised policy. If you do not agree with changes, you should close your account before the effective date.

15. How to Contact Us and Make a Complaint

If you have any questions about this Privacy Policy, want to exercise a data right, or have a concern about how DuckDice has handled your personal information, please contact our Data Protection team:

  • Email: support@duckdice.im (subject: "Privacy / Data Rights")
  • Live Chat: Available 24/7 from your DuckDice account dashboard

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority in the jurisdiction governing DuckDice's licence. Details of the appropriate authority will be provided in our response to your complaint if escalation is relevant.

DuckDice will acknowledge all privacy-related enquiries within 5 business days and aims to resolve them fully within 30 calendar days. Complex requests may take up to 60 days — we will always keep you informed of progress.

Why DuckDice Handles Your Data Responsibly

Pakistani players deserve a platform that takes privacy as seriously as payouts. Here is how DuckDice earns that trust.

No Third-Party Data Sales

DuckDice has never sold player data and will never do so. Your personal information exists on our platform to run your account — full stop. It is not a product we monetise.

Minimal Data Collection

DuckDice collects only what is genuinely necessary. We do not build exhaustive profiles for advertising. If a piece of data is not needed to run your account or meet a legal requirement, we do not ask for it.

Breach Notification

In the unlikely event of a security breach affecting your personal data, DuckDice will notify you within 72 hours with details of what was affected, what we are doing about it, and what steps you should take.

Secure KYC Process

Identity documents uploaded for KYC verification are processed through encrypted channels and are not stored beyond the verification period unless required by our AML obligations. Staff access to raw document images is strictly logged.

Anonymised Analytics Only

Platform usage analytics at DuckDice are anonymised before analysis. We study patterns and trends — not individuals. No personal identity is linked to analytics data used for platform improvement.

Opt-Out Marketing Anytime

Every marketing email from DuckDice includes a one-click unsubscribe link. You can also manage all communication preferences from your account dashboard without needing to contact support.

🦆

Play on DuckDice — Where Your Data Is as Safe as Your Winnings

You have read how DuckDice protects your privacy. Now enjoy the platform. Create a free account, claim your Welcome Bonus of up to Rs 30,000, and join over 200,000 Pakistani players who trust DuckDice.

Data encrypted at rest & in transit No data selling. Ever. 18+ only

By registering you agree to our Terms and Conditions and this Privacy Policy. Responsible Gaming