Data Retention Period
Stated identically in this policy and in our account terms: active account data is held for the life of the account plus the period required by applicable law.
LEGAL REFERENCE
How We Handle Your Personal Information
At 29d, your privacy is built into how we operate — not added as an afterthought. This page explains exactly what data we collect when you open an...
Encrypted account dataPakistani payment privacyClear data rightsSecure session handlingTransparent retention
What This Privacy Policy Covers and Why
This policy applies to all personal data processed by 29d when you access our platform from supported regions, including Pakistan. We collect information you provide directly — such as your name, contact details, and payment method — alongside technical data like device type and session logs. Payment data tied to JazzCash, Easypaisa, SadaPay, and Raast transactions is handled under encrypted channels and
never stored in plain form. We retain account data only as long as your account remains active or as required under applicable law. Where local law permits, you may request deletion or correction of your records at any time by contacting our support team. We do not sell your personal data to third parties, and we share it only with service providers
who are contractually bound to protect it to the same standard we apply internally.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
POLICY TRUST SIGNALS
Why You Can Rely on Our Privacy Practices
We have structured our data practices around verifiable, auditable commitments rather than vague assurances. Each signal below reflects a concrete operational decision we have made to protect your...
Encrypted Data Storage
All personal records, including payment method references for JazzCash and Easypaisa, are stored using AES-256 encryption at rest. Decryption keys...
No Third-Party Data Sales
We do not monetise your personal data. Your name, contact details, and transaction history are never sold or rented to...
Minimal Data Collection
We collect only what is necessary to operate your account and process payments through SadaPay, Raast, and other supported rails...
Regular Policy Reviews
Our privacy policy is reviewed on a scheduled basis and updated whenever our data practices change or applicable law in...
Staff Access Controls
Access to personal account data is restricted to staff with a documented operational need. All internal access is logged, and...
Breach Notification Commitment
In the event of a data incident affecting your account, we commit to notifying affected account holders promptly and clearly...
POLICY CONSISTENCY CHECK
How This Policy Aligns Across Our Platform
Our privacy commitments are consistent whether you are reading this page, our cookie notice, or our account terms. The table below shows how key principles carry through each document so you are...
Payment Data Handling
Our cookie notice, this policy, and our deposit flow all confirm that JazzCash, Easypaisa, SadaPay, and Raast transaction references are encrypted and not stored in plain text.
Third-Party Sharing Scope
Every document that references data sharing uses the same definition: contracted service providers only, bound by data protection obligations equivalent to our own.
Your Right to Erasure
The erasure right described here matches the process documented in our account settings portal — one request, one confirmation, one reference number.
Cookie Consent Scope
Our cookie policy and this privacy policy use the same category definitions for analytics, functional, and preference cookies, so your consent choices apply consistently.
Marketing Communications
Opt-out instructions in our email footers and in this policy both point to the same account settings toggle, ensuring a single action stops all marketing contact.
Policy Update Notification
Both this page and our account terms describe the same update process: we post the revised policy and, for material changes, send a direct notification to your registered contact.
Core Principles Shaping Our Privacy Approach
These six principles define how we have structured data handling across the 29d platform. They are not aspirational statements — each one maps to a specific...
Purpose Limitation
Every data field we collect is tied to a specific, documented purpose. We do not repurpose account data for functions beyond what you were told at the point of collection, and we review purpose assignments when our services change.
Data Minimisation
Our account registration form requests only the fields required to verify your identity and process payments. Optional fields are clearly marked, and we do not make account approval conditional on providing them.
Storage Security
Personal data is stored in access-controlled environments with encryption at rest and in transit. Database credentials rotate on a scheduled basis, and production data is never used in testing environments.
Transparency by Default
We write our privacy notices in plain Pakistani English so you can understand what we do with your data without needing a legal background. If a section is unclear, our support team can walk you through it.
Account Holder Control
You can view, correct, export, or request deletion of your personal data through your account settings at any time. These controls are available without needing to contact support first, putting the action in your hands.
Consistent Enforcement
Our privacy standards apply uniformly across all account types and all supported regions. There is no reduced standard for any segment of our account base, including Pakistani account holders accessing the platform where local law permits.
Frequently Asked Questions About Your Privacy
We collect your name, contact details, date of birth, and the payment method you choose — such as JazzCash or Easypaisa. We also log technical data like your device type and session timestamps to keep your account secure.
Payment references for JazzCash, Easypaisa, SadaPay, and Raast are encrypted in transit and at rest. We do not store full payment credentials on our servers; tokenised references are used for transaction matching only.
Yes. Log into your account, go to the privacy section in settings, and submit a data export request. We will prepare a structured copy of your personal records and make it available within the timeframe stated in your request confirmation.
Submit an erasure request through your account settings or by emailing our privacy team. We will confirm receipt, process the request in line with our retention obligations, and notify you once deletion is complete.
Only with contracted service providers who need it to operate your account — for example, payment processors handling your JazzCash or Raast transactions. We do not sell your data or share it with advertisers under any circumstances.
We update the effective date on this page whenever the policy changes. For material changes that affect your rights or how we use your data, we send a direct notification to your registered contact before the new version takes effect.
We retain records for the period required by applicable law in supported regions, then delete them. You will receive confirmation of the deletion timeline when you submit your account closure request through our support team.