Mr Hand collects only the personal data needed to run your account, process PKR transactions, and keep the platform secure. We do not sell your data. We do not share it with third parties for advertising. You have clear rights over your data at any time. This policy explains exactly what we collect, why, and how you can control it. If anything is unclear, contact us at support@mrhand.net.
01Introduction
This Privacy Policy describes how Mr Hand ("we", "us", "our"), operating through the website at mrhand.net, collects, uses, stores, and protects the personal data of users ("you", "your") who register accounts, make transactions, or interact with the platform in any way.
Mr Hand takes privacy seriously. This isn't just legal language we're required to put up – it's a genuine reflection of how the platform handles the information of its users. We built Mr Hand for Pakistani players, and that means the privacy standards we operate to are designed with Pakistani users' expectations in mind. You should know exactly what data we hold about you, exactly why we hold it, and exactly what your options are at any point.
By creating an account or using any part of the Mr Hand platform, you acknowledge that you have read and understood this Privacy Policy. This policy forms part of the Mr Hand Terms and Conditions and should be read alongside them. If you have any questions after reading this policy, you can reach us directly at support@mrhand.net.
We may update this policy periodically. Each time we make a material change, we will notify registered users via email and update the "Last Updated" date at the top of this page. Your continued use of Mr Hand after any update constitutes acceptance of the revised policy.
02Personal Data We Collect
Mr Hand collects personal data in several categories depending on how you interact with the platform. Below is a clear breakdown of what we collect and why each category exists.
2.1 Account Registration Data
When you register on Mr Hand, we collect the information you provide during the registration process. This includes your Pakistani mobile number, a password you create (stored in encrypted form – we never see your plaintext password), and any additional profile information you choose to provide.
2.2 Identity Verification Data
To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, Mr Hand may request identity documents including a copy of your Computerised National Identity Card (CNIC), proof of address, or source of funds documentation. This data is collected only when verification is required and is handled with the strictest security controls.
2.3 Financial Transaction Data
Every deposit, withdrawal, bet, and win on Mr Hand is recorded. This includes transaction amounts in PKR, payment method identifiers (e.g., the last four digits of a card or a masked Easypaisa number), timestamps, and transaction status. Full payment account numbers are never stored by Mr Hand – payment processing is handled by the relevant payment provider.
2.4 Gaming Activity Data
We record your gaming activity on the platform, including games played, bet amounts, outcomes, session duration, and account balance history. This data is used to operate your account, calculate bonuses, and support responsible gaming monitoring.
2.5 Technical and Device Data
When you access Mr Hand, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance analysis.
2.6 Communications Data
If you contact Mr Hand support via live chat, email, or any other channel, we retain records of those communications. This helps us handle your query accurately and maintain a support history for your account.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration | Mobile number, encrypted password | Account creation and authentication |
| Identity | CNIC copy, address proof | KYC / AML compliance |
| Financial | Transaction amounts (PKR), masked payment IDs | Payment processing and history |
| Gaming | Bets, wins, session data | Account operation, responsible gaming |
| Technical | IP address, device type, browser | Security and fraud prevention |
| Communications | Support chat transcripts, emails | Customer service and dispute resolution |
How Mr Hand Protects Your Privacy
Six concrete measures we have in place to keep your personal data safe and private.
End-to-End Encryption
All data transmitted between your device and Mr Hand is protected with 256-bit SSL/TLS encryption. Your session data cannot be intercepted or read by any third party in transit.
Encrypted Data Storage
Sensitive data stored by Mr Hand, including passwords and identity documents, is encrypted at rest using industry-standard algorithms. Plaintext sensitive values are never stored.
Strict Access Controls
Access to personal data within Mr Hand's systems is restricted to staff who require it to perform their specific role. All internal access is logged and audited regularly.
No Data Sales – Ever
Mr Hand does not sell, rent, or trade your personal data to any third party for any purpose, including marketing or advertising. Your data stays on Mr Hand's platform.
Regular Security Audits
Mr Hand conducts regular independent security audits of its data handling systems. Any vulnerabilities identified are addressed promptly under a structured remediation process.
Data Minimisation
We collect only the data we genuinely need to operate your account. We don't gather information speculatively or beyond what's required for the specific purpose it serves.
03How We Collect Your Data
Mr Hand collects personal data through three primary mechanisms:
3.1 Data You Provide Directly
The majority of the personal data Mr Hand holds about you is information you provide directly: the mobile number you register with, any identity documents you submit for verification, payment details you enter when making a deposit, and any information you share when contacting our support team. We only ask for what we need and at the point we need it.
3.2 Data Collected Automatically
When you access Mr Hand, our servers automatically log certain technical information about your session. This includes your IP address, the type of device you're using, the browser and operating system version, and the time and duration of your session. This data is collected passively – you don't need to provide it actively – and is used primarily for security monitoring and to ensure the platform functions correctly on your device.
3.3 Data From Payment Providers
When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the payment provider confirms the transaction status to Mr Hand. We receive confirmation data (transaction ID, amount in PKR, masked account identifier, timestamp) but we do not receive or store your full payment account credentials. Those remain entirely with your chosen payment provider.
04Why We Use Your Personal Data
Mr Hand uses the personal data it holds for specific, legitimate purposes. We do not use your data for anything beyond what is described here.
4.1 Operating Your Account
The primary reason we hold your data is to operate your Mr Hand account: processing your deposits and withdrawals in PKR, recording your gaming activity accurately, calculating and applying bonuses, maintaining your account balance, and providing you with a correct account history. None of this is possible without holding the relevant data.
4.2 Identity Verification and Compliance
Mr Hand is required by anti-money laundering (AML) obligations to verify the identity of players before processing withdrawals above certain thresholds. The identity data you provide for KYC purposes is used solely for this purpose and is handled under strict access controls. This is a legal requirement, not a choice – and it protects all players on the platform by making Mr Hand harder to abuse.
4.3 Fraud Prevention and Security
Technical data including IP addresses and device identifiers is used by Mr Hand's security systems to detect and prevent fraudulent activity, including attempts to create duplicate accounts, bonus abuse, money laundering, and unauthorised account access. This monitoring is continuous and automated, with human review of flagged cases.
4.4 Customer Support
Communications data – including support chat logs and email correspondence – is retained to help us resolve your queries accurately and efficiently. Having a record of previous interactions means you don't have to repeat yourself, and it helps us identify and escalate recurring issues.
4.5 Responsible Gaming Monitoring
Mr Hand uses gaming activity data to monitor for patterns that may indicate problematic gambling behaviour. This is not surveillance for its own sake – it's a genuine responsible gaming obligation that we take seriously. Where concerning patterns are identified, the Mr Hand responsible gaming team may reach out proactively.
4.6 Service Communications
We use your contact details to send you important service notifications: withdrawal confirmations, account security alerts, and material policy updates. With your separate consent, we may also send promotional communications about offers and new features on Mr Hand. You can withdraw marketing consent at any time.
05Legal Basis for Processing
Mr Hand processes your personal data under the following legal bases:
- Contract performance: Processing necessary to fulfil our obligations under the Terms and Conditions you accepted when registering – including operating your account and processing transactions;
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering, know-your-customer, and tax reporting requirements;
- Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your privacy rights;
- Consent: Where you have given explicit consent for a specific use, such as receiving marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
06Sharing Your Personal Data
Mr Hand does not sell your personal data. We share your data only in the specific, limited circumstances described below:
6.1 Payment Processors
When you make a deposit or withdrawal, the necessary transaction data is shared with the relevant payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, bank processing partners, or card networks). This sharing is limited to what is required to complete the transaction. Each payment provider operates under their own privacy policy and data handling obligations.
6.2 Identity Verification Services
If Mr Hand uses a third-party identity verification service to process KYC documents, your identity data may be shared with that service provider. Any such provider is contractually bound to handle your data securely and use it only for the verification purpose for which it was shared.
6.3 Legal and Regulatory Requirements
Mr Hand may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally compelled to do so. We will notify you of such disclosures where permitted by law. We will not disclose more data than is legally required in any such situation.
6.4 Corporate Transactions
In the event of a merger, acquisition, or sale of Mr Hand's business or assets, personal data held by Mr Hand may be transferred to the successor entity. You will be notified of any such transfer and the privacy policy applicable to your data post-transfer before the transfer takes effect.
Important: In all cases of data sharing, Mr Hand applies the principle of data minimisation – only the data genuinely necessary for the specific purpose is shared. We do not share data speculatively or for the convenience of third parties.
07Data Retention
Mr Hand retains personal data for as long as is necessary for the purpose for which it was collected, subject to any overriding legal or regulatory obligations.
7.1 Active Account Data
While your Mr Hand account is active, we retain all account data needed to operate that account. This includes your registration details, transaction history, gaming activity records, and communications history.
7.2 Closed Account Data
After an account is closed, Mr Hand is required by AML and financial record-keeping obligations to retain certain data for a minimum of five years from the date of account closure. This includes identity verification documents, transaction records, and account activity history. After the retention period expires, data is securely deleted or anonymised.
7.3 Inactive Accounts
For accounts that have been inactive for more than 12 months, Mr Hand reviews retained data and applies minimum necessary retention principles – data not required for compliance purposes may be deleted sooner than the standard retention period.
7.4 Support Communications
Customer support communications are retained for a period of three years from the date of the last interaction, or for the duration of your account, whichever is longer. This helps us provide consistent support and handle any disputes that may arise.
08Cookies and Tracking Technologies
Mr Hand uses cookies and similar tracking technologies on the platform. Here is a plain explanation of what we use and why.
8.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow the website to remember information about your visit – such as that you are logged in – between page loads and sessions. Mr Hand uses cookies only for the purposes described below.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Session management, login authentication, CSRF protection | No – required for the platform to function | |
| Remembering your language preference and display settings | Yes – disabling affects personalisation only | |
| Understanding platform usage patterns to improve performance | Yes – no impact on core functionality | |
| Fraud detection, device fingerprinting for suspicious login detection | No – required for account security |
8.2 Managing Cookies
You can manage non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies selectively. Note that disabling essential or security cookies will prevent you from logging in to your Mr Hand account, as these are necessary for session management and account security.
8.3 No Third-Party Advertising Trackers
Mr Hand does not use third-party advertising networks or tracking cookies that share your browsing behaviour with external advertising platforms. The analytical tools we use are configured to collect only aggregated, anonymised data about platform usage.
09Security Measures
Mr Hand implements a range of technical and organisational measures to protect the personal data it holds. These measures are reviewed and updated regularly.
9.1 Technical Measures
All connections to Mr Hand are encrypted using 256-bit SSL/TLS. Passwords are stored using bcrypt hashing – we never see or store your plaintext password. Identity documents and other sensitive files are encrypted at rest. Database access is restricted and all queries are logged. Payment data beyond transaction confirmation is never stored on Mr Hand systems.
9.2 Organisational Measures
Access to personal data within Mr Hand is governed by a strict need-to-know principle. Staff who do not require access to personal data in order to perform their role do not have it. All staff with access to personal data receive data protection training. Access is logged, and logs are reviewed regularly for anomalies.
9.3 Incident Response
In the event of a data security incident that affects your personal data, Mr Hand will notify affected users as soon as practicable after the incident is identified and assessed. Notifications will include what data was affected, what action Mr Hand has taken, and what steps you can take to protect yourself.
9.4 Your Role in Security
The security of your Mr Hand account also depends on you keeping your login credentials private. Never share your password with anyone, including Mr Hand staff – we will never ask for your password. If you suspect your account has been compromised, contact support immediately and change your password without delay.
10Your Data Rights
You have meaningful rights over the personal data Mr Hand holds about you. Here is what each right means in practice on the Mr Hand platform:
Right to Access
You can request a copy of all personal data Mr Hand holds about you. We will provide this within a reasonable timeframe, typically within 30 days of your request.
Right to Correction
If any personal data Mr Hand holds about you is inaccurate or incomplete, you can request that we correct it. Account profile updates can often be made directly in your account settings.
Right to Deletion
You can request deletion of your personal data. Where we have no legal obligation to retain it, we will delete it promptly. Compliance-related data (transaction records, KYC documents) must be retained for the legally required period.
Right to Object
You can object to Mr Hand processing your data for marketing purposes at any time. Marketing communications include an unsubscribe option. You can also contact support to opt out.
Right to Portability
You can request a machine-readable copy of personal data you have provided to Mr Hand, for the purpose of transferring it to another service. Contact support to make a portability request.
Right to Restrict Processing
In certain circumstances you can request that Mr Hand restrict processing of your data while a query or complaint is being investigated, rather than deleting it entirely.
To exercise any of the rights listed above, email support@mrhand.net with the subject line "Data Rights Request" and a clear description of your request. We will acknowledge receipt within 5 business days and fulfil the request within 30 days. We may need to verify your identity before processing certain requests to protect your account security.
11Children's Privacy
The Mr Hand platform is strictly for users aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete that data immediately and close the associated account.
Parents and guardians in Pakistan who are concerned that a minor in their household may have accessed or registered on Mr Hand are encouraged to contact us immediately at support@mrhand.net. We take these reports seriously and act on them promptly.
We also encourage parents and guardians to use parental control software on devices that may be accessible to minors, to reduce the risk of underage access to gaming platforms of any kind.
12Changes to This Privacy Policy
Mr Hand may update this Privacy Policy from time to time to reflect changes in our data handling practices, changes in applicable law, or improvements to how we explain our practices to users. The "Last Updated" date at the top of this page will always reflect when the most recent version was published.
When we make material changes to this policy – changes that meaningfully affect how we handle your personal data – we will notify registered Mr Hand users via email to the address associated with their account. We will also display a prominent notice on the platform for a reasonable period following any material update.
For minor clarifications or formatting changes that do not affect the substance of the policy, we may update the page without individual notification. We encourage you to review this page periodically to stay informed about how Mr Hand handles your personal data. Continued use of the platform after any update constitutes acceptance of the revised policy.
13Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or how Mr Hand handles your personal data, please get in touch through the following channels:
- Email: support@mrhand.net – for data rights requests, please use the subject line "Data Rights Request"
- Live Chat: Available from any page when logged in to your Mr Hand account
- Response Time: We acknowledge all privacy queries within 5 business days and aim to resolve them within 30 days
For related policies that form part of the overall Mr Hand privacy and compliance framework, please also refer to:
- Terms and Conditions – the full agreement governing your use of Mr Hand
- Responsible Gaming – how Mr Hand handles gaming safety and player protection
- FAQ – answers to common questions about accounts, payments, and policies