Last Updated: 1 January 2025

Coinback Privacy Policy – How We Protect Your Personal Data

Coinback takes your privacy seriously. This policy explains exactly what data we collect, why we collect it, how it's used, and what rights you have over it. We've written it plainly so it's actually readable — no legal maze.

Our Core Privacy Commitments

Six principles that guide how coinback handles your personal information.

We Only Collect What We Need
Coinback collects personal data only when there is a clear, legitimate reason for it — account verification, payment processing, legal compliance, or improving platform performance. We do not collect information speculatively or beyond what the operational purpose requires.
We Don't Sell Your Data
Coinback does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data stays within the coinback ecosystem and is shared externally only when required for service delivery, legal compliance, or fraud prevention.
Your Data Is Secured
All data stored and transmitted on coinback is protected using industry-standard encryption. Access to personal data internally is restricted to staff who genuinely need it, and those staff operate under strict data handling policies and confidentiality obligations.
You Control Your Data
Registered coinback players have the right to access, correct, and request deletion of their personal data. You can also object to certain types of processing and request that we restrict how your data is used while a query is under review. Requests are handled within 30 days.
Full Transparency
This privacy policy tells you precisely what data coinback collects, the legal basis for collecting it, how long it is retained, and who it is shared with. There are no hidden data practices. If this policy changes in a material way, you'll be informed before the changes take effect.
We Don't Keep Data Longer Than Needed
Personal data held by coinback is retained only as long as necessary for the purpose it was collected, or as required by applicable law. Account data is typically retained for the duration of your account and a limited period afterward for legal and compliance purposes.
coinback
1

Who We Are

Coinback is an online gaming platform operating at coinback.ws. When this Privacy Policy refers to "coinback", "we", "us", or "our", it refers to the entity responsible for operating the coinback platform and for the processing of personal data collected through it.

Coinback is the data controller for the personal information you provide when registering and using the platform. As data controller, coinback is responsible for determining the purposes and means of processing your personal data and for ensuring that processing is carried out in accordance with applicable data protection obligations.

If you have any questions or concerns about how coinback handles your personal data, you can contact us at any time via email at support@coinback.ws. We aim to respond to all privacy-related queries within five business days.

This policy applies to all personal data collected through coinback.ws, including data collected during registration, gameplay, payment transactions, customer support interactions, and use of the coinback mobile platform.
2

Data We Collect

Coinback collects personal data from players in several ways — information you provide directly when registering or contacting support, information generated automatically through your use of the platform, and information provided by third-party service providers such as payment processors and identity verification services.

Information you provide directly to coinback:

Full name Date of birth CNIC number Email address Mobile number Residential address Payment method details Support communications

Information collected automatically when you use coinback:

IP address Browser type & version Device type & OS Session duration Transaction history Gameplay activity Login timestamps Pages visited

Information received from third parties:

Coinback may receive identity verification data from KYC providers, transaction confirmation data from payment processors, and fraud risk signals from anti-fraud services. This information is used exclusively for the purposes described in this policy and is not combined with your coinback profile for any unrelated purpose.

3

Why We Collect Your Data

Every piece of data that coinback collects has a defined purpose. We do not collect information for its own sake. The main reasons coinback collects and processes personal data are:

  • Account creation and management: To register your coinback account, verify your identity, and maintain your account profile accurately.
  • Payment processing: To process deposits and withdrawals in PKR, verify that payment methods belong to you, and maintain transaction records.
  • Legal and regulatory compliance: To meet Know Your Customer (KYC) obligations, anti-money laundering requirements, and other applicable legal duties that coinback must fulfil as a gaming platform.
  • Fraud prevention and security: To identify and prevent unauthorised account access, duplicate account registration, and fraudulent payment activity.
  • Platform operation and improvement: To ensure the coinback platform functions correctly, to identify and fix technical issues, and to improve game performance and user experience based on aggregated usage data.
  • Customer support: To resolve queries, process complaints, and communicate with you about your account or transactions.
  • Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to implement and enforce responsible gaming tools such as deposit limits and self-exclusion.
  • Promotions and communications: To send you information about coinback promotions, provided you have not opted out of marketing communications.
coinback
4

Legal Basis for Processing

Coinback processes your personal data on one or more of the following legal bases depending on the specific processing activity:

Legal Basis When It Applies on Coinback
Contractual necessity Processing required to provide you with coinback services — account management, payment processing, game access, and support.
Legal obligation KYC verification, AML compliance, age verification, and record-keeping required under applicable law.
Legitimate interests Fraud prevention, security monitoring, responsible gaming monitoring, and platform analytics where coinback's interests don't override your rights.
Consent Marketing communications, non-essential cookies, and promotional profiling. You can withdraw consent at any time without affecting prior processing.

Where coinback relies on legitimate interests as the legal basis for processing, we conduct a balancing assessment to ensure that our interests do not override your fundamental rights and freedoms. If you wish to receive information about a specific legitimate interests assessment, contact us at support@coinback.ws.

5

How We Use Your Data

Coinback uses your personal data in the following specific ways, each linked to a defined purpose and legal basis:

  • Your name, CNIC number, and date of birth are used exclusively for identity verification and KYC compliance. They are not used for any marketing purpose and are not combined with your gameplay data for profiling.
  • Your mobile number and email address are used to communicate with you about your account, transactions, and — if you have opted in — coinback promotions. You can update your communication preferences in your account settings at any time.
  • Your payment method details are used to process deposits and withdrawals. Coinback does not store full card numbers. Payment data is handled by PCI-compliant payment processors and is not accessible to coinback staff in full form.
  • Your gameplay transaction history is used to calculate weekly cashback amounts, apply wagering requirements, verify the legitimacy of bonus claims, and — in anonymised, aggregated form — improve game performance across the platform.
  • Your IP address and device information are used for security monitoring, fraud detection, and responsible gaming compliance. These are not used to identify your physical location for marketing purposes.
  • Customer support communications are retained to maintain a record of the interaction, facilitate follow-up, and improve coinback's support quality. Recordings of live chat sessions are retained for a maximum of 90 days.
Coinback does not use automated decision-making or profiling that produces significant legal effects on players without human review. If an automated system flags your account for investigation, a coinback team member reviews the case before any action is taken.
6

Data Sharing

Coinback does not sell your personal data to third parties. Your data is shared externally only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

Service providers who process data on coinback's behalf:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard processing networks — to complete deposit and withdrawal transactions.
  • Identity verification providers: Third-party KYC services used to verify identity documents submitted during account verification.
  • Fraud prevention services: Anti-fraud providers that help coinback identify patterns associated with identity fraud, account takeover, and money laundering.
  • Cloud infrastructure providers: Services used to host the coinback platform and store data securely. These providers operate under strict data processing agreements.
  • Customer support platforms: Tools used to manage live chat and email support queues.

Disclosure required by law:

Coinback may disclose your personal data to law enforcement, regulatory authorities, or judicial bodies if required to do so by applicable law, by court order, or in response to a legitimate legal request. Coinback will notify you of such disclosure requests where legally permitted to do so.

Business transfers:

In the event of a merger, acquisition, or sale of all or part of coinback's business, personal data held by coinback may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy commitments applicable to your data under the new arrangement before the transfer takes effect.

coinback
7

Data Retention

Coinback retains your personal data only as long as necessary for the purposes described in this policy or as required by applicable law. The following retention periods apply:

Data Category Retention Period Reason
Account registration data Duration of account + 5 years after closure Legal and regulatory compliance
Transaction history 7 years from transaction date Financial record-keeping obligations
KYC documents 5 years after account closure AML compliance requirements
Customer support records 3 years from last interaction Service quality and dispute resolution
Live chat transcripts 90 days Quality assurance review
Marketing consent records Until withdrawn + 1 year Proof of consent basis
Website usage logs 13 months rolling Security and fraud detection

When the retention period for any category of data expires and there is no remaining legal basis to continue holding it, coinback will securely delete or anonymise the data. Anonymised data may be retained indefinitely for statistical analysis purposes, as it can no longer be linked back to any individual.

8

Security Measures

Coinback implements technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly as technology and threat landscapes evolve.

  • Encryption in transit: All data transmitted between your device and coinback is encrypted using TLS (Transport Layer Security). This applies to login, registration, payment, and all other platform interactions.
  • Encryption at rest: Sensitive data stored on coinback's servers is encrypted at rest. This includes identity documents, payment method identifiers, and personal profile data.
  • Access controls: Access to personal data internally is restricted to staff and systems with a legitimate operational need. Access rights are reviewed periodically and revoked when no longer required.
  • Two-factor authentication: Coinback supports two-factor authentication for player accounts, which we encourage all registered players to enable for additional account security.
  • Penetration testing: Coinback's systems undergo periodic security testing by qualified professionals to identify and address potential vulnerabilities before they can be exploited.
  • Incident response: Coinback maintains a data breach response plan. In the event of a breach affecting your personal data, we will notify you and relevant authorities within the timeframes required by applicable law.
While coinback takes all reasonable steps to secure your data, no system is entirely impenetrable. You play an important role in security by using a strong, unique password for your coinback account and enabling two-factor authentication.
9

Cookies and Tracking Technologies

Coinback uses cookies and similar tracking technologies on coinback.ws. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and gather usage statistics to improve the experience for all players.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the coinback platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10

Your Privacy Rights

As a registered coinback player, you have the following rights over your personal data. To exercise any of these rights, contact coinback at support@coinback.ws with your request. We will respond within 30 days and may need to verify your identity before acting on the request.

1
Right of Access
Request a copy of all personal data coinback holds about you, including what categories of data we have, why we hold it, and who it has been shared with.
2
Right to Rectification
Request correction of any inaccurate personal data we hold about you. If you notice an error in your coinback account profile, you can also update some information directly through account settings.
3
Right to Erasure
Request deletion of your personal data where there is no longer a legitimate reason for coinback to hold it. Note that legal retention requirements may mean some data cannot be deleted immediately.
4
Right to Restriction
Request that coinback restrict how your data is processed while a query or complaint is under review, rather than deleting it entirely.
5
Right to Data Portability
Request your personal data in a structured, machine-readable format that you can transfer to another service provider where technically feasible.
6
Right to Object
Object to processing based on coinback's legitimate interests or for direct marketing purposes. Marketing objections are processed immediately and without question.
11

Children's Privacy

The coinback platform is strictly intended for adults aged 18 years and over. Coinback does not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification checks, and we may request CNIC or other identity documentation to confirm that a player meets the minimum age requirement.

If coinback becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately, the data will be deleted, and any deposits made to the account will be returned to the originating payment method following verification. If you believe a minor has registered on coinback, please contact us at support@coinback.ws immediately.

12

Updates to This Privacy Policy

Coinback may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. When we make material changes — changes that significantly affect how your data is used or your privacy rights — we will notify you by email at least 14 days before the changes take effect.

Non-material changes such as clarifications, corrections, or updates to contact information may be made without prior notice. The date of the most recent revision is always displayed at the top of this policy. We encourage coinback players to review this policy periodically to stay informed about how your data is being handled.

Continued use of coinback after the effective date of any revision constitutes your acknowledgment of the updated policy. If you do not agree with a material change, you have the right to close your account before the change takes effect.

13

Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or how coinback handles your personal data, please get in touch using the details below. We take all privacy queries seriously and aim to resolve them promptly and transparently.

  • Email: support@coinback.ws
  • Live Chat: Available 24/7 on coinback.ws
  • Response time: Within 5 business days for privacy-related requests

When submitting a data access, correction, or deletion request, please include your registered email address and enough detail for us to identify your account and understand the specific request. We may need to verify your identity before acting on the request — this is a security measure to protect your data from unauthorised access.

If you're not satisfied with coinback's response to a privacy concern after giving us a reasonable opportunity to address it, you may have the right to raise the matter with a relevant data protection authority. We would always prefer to resolve issues directly and encourage you to contact us first.

For the fastest response on privacy matters, use the live chat option on coinback.ws and specify that your query relates to data privacy. This routes your message to the team member best placed to handle it.

Your Privacy Rights at a Glance

Access
See your data
Correct
Fix inaccuracies
Delete
Erase your data
Restrict
Limit processing
Portability
Export your data
Object
Stop marketing

To exercise any of these rights, email support@coinback.ws. We respond within 30 days.

Trust Is at the Centre of Everything Coinback Does

Our privacy policy is one part of a broader commitment to being a platform Pakistani players can genuinely trust. Fair games, honest bonus terms, fast PKR payouts, and now a privacy framework that tells you exactly how your data is handled. Register today and experience coinback for yourself — it takes under two minutes.