Privacy Policy

02. Information We Collect

We collect information required to operate a secure digital telecom reseller ecosystem:

• Reseller Account Data: Full name, email address, password (cryptographically hashed using bcrypt/argon2), contact number, and unique referral codes.
• Identity Verification (KYC): National Identity details (CNIC number, CNIC front/back images) required for reseller partner compliance and fraud prevention.
• Subscriber / Recipient Data: Target mobile recipient phone numbers, designated telecom network operator, and activation details submitted by resellers for package provisioning.
• Technical & Security Data: IP addresses, browser fingerprinting heuristics, device specifications, session timestamps, and audit logs.

03. How We Use Information

The data collected is strictly utilized to:

• Provision, authenticate, and administer your reseller partner account.
• Process and verify digital SIM package activation requests across supported cellular networks (Jazz, Zong, Telenor, Ufone).
• Manage multi-level reseller commissions (Direct sales and 4-level team referral bonuses).
• Process manual wallet deposits, audit payout disbursements, and maintain unalterable financial ledgers.
• Detect, prevent, and mitigate unauthorized account access, fraudulent top-up receipts, and automated platform abuse.
• Dispatch critical transactional notices, security alerts, and activation confirmations.

04. SIM Package Activation & Subscriber Data

When a reseller submits a package activation request:

• We collect the Subscriber Mobile Number, Selected Package Plan, and Network Operator (Jazz, Zong, Telenor, Ufone).
• No Physical Delivery: We provide digital cellular provisioning exclusively; no physical shipping address or delivery logistics data is collected or stored.
• Subscriber numbers are used solely to facilitate the specific activation request and verify telecom operator confirmation status.

05. Reseller Wallet, Deposits & Withdrawal Data

To operate the integrated prepaid wallet and commission disbursement system:

• Deposit Verifications: When requesting manual wallet credits, we collect the sender bank/wallet name (e.g., EasyPaisa, JazzCash, Nayapay, Meezan Bank), sender account title/number, transaction ID (Trx ID), and payment receipt screenshots.
• Payout Disbursements: When requesting commission withdrawals, we collect your designated payout channel details, account title, and IBAN/mobile account number.
• Ledger Immutability: All credit/debit adjustments, commission allocations, and withdrawal records are permanently recorded in an encrypted audit ledger.

06. Uploaded Documents & Identity Proofs

• Identity proofs (CNIC) and bank payment receipts uploaded to the Platform are hosted in secure, access-restricted cloud storage infrastructure.
• Documents are reviewed exclusively by authorized platform administrators for account KYC verification and financial settlement validation.
• We never utilize uploaded identity documents or payment proofs for commercial profiling or marketing.

07. Multi-Level Referral & Team Visibility

• Resellers participating in the 4-level referral program can view high-level network performance metrics (e.g., direct referral counts, total team sales volume, indirect commission bonuses).
• For privacy protection, sensitive credentials, individual customer recipient numbers, and personal banking data of downstream resellers are never exposed to upstream referral partners.

08. Cookies, Session Tokens & Local Storage

We utilize secure HTTP-only cookies, JWT session tokens, and local storage mechanisms to:

• Maintain secure, authenticated reseller sessions.
• Preserve user interface preferences (such as dark mode settings).
• Prevent Cross-Site Request Forgery (CSRF) and secure API endpoints.
• You may configure your browser to reject cookies, though doing so will restrict authentication and portal access.

09. Data Security & Encryption Standards

We enforce enterprise-grade security protocols:

• End-to-end transport layer security (TLS 1.3 / SSL encryption) across all API endpoints and dashboards.
• Encrypted password hashing and granular role-based access control (RBAC) separating reseller data from administrative interfaces.
• Isolated database clusters with continuous backup replication.
• While we adhere to rigorous security standards, no method of digital transmission or cloud storage is 100% immune; we encourage strong passwords and confidential handling of credentials.

10. Disclosure of Information

We do not sell, rent, or monetize your personal or subscriber data. Information is disclosed solely under the following conditions:

• Authorized Service Providers: Cloud hosting, database clusters, secure file storage, and transactional notification gateways operating under non-disclosure obligations.
• Legal & Regulatory Compliance: When mandated by applicable Pakistani law, court order, regulatory directives, or PTA telecom guidelines.
• Platform Integrity: To enforce our Terms of Service, investigate fraudulent deposit slips, and protect the rights and safety of PackVerse.

11. Third-Party Integrations

Our platform utilizes select third-party enterprise services (e.g., cloud storage engines, infrastructure monitoring tools). These providers process technical data strictly in accordance with their respective privacy policies and solely to execute platform infrastructure tasks.

12. Transactional & Operational Communications

We utilize registered email addresses and phone numbers to deliver essential operational notifications, including:

• Account authentication and password recovery links.
• Real-time SIM package activation status updates (Pending, Processing, Activated, Cancelled).
• Wallet deposit approvals, balance adjustments, and withdrawal payout confirmations.

* Because these communications are vital to financial accuracy and operational execution, resellers cannot opt out of essential transactional notifications.

13. User Rights & Data Management

Resellers have the right to:

• Review and update their account contact details and profile preferences.
• Request an audit summary of their personal ledger and activation history.
• Request account closure and data archival, subject to legal and financial compliance retention requirements.

14. Data Retention Policy

We retain account records, package activation logs, and financial ledger data for as long as your reseller account remains active, and for a subsequent statutory retention period necessary to resolve disputes, comply with financial audit standards, and satisfy regulatory legal mandates.

15. Fraud Prevention, Automated Monitoring & Audits

To preserve system liquidity and prevent digital transaction fraud:

• The platform employs automated monitoring to detect duplicate deposit transaction IDs, falsified payment screenshots, brute-force API requests, and unauthorized proxy networks.
• Accounts identified engaging in fraudulent financial submissions or system exploits will be subject to immediate suspension, forfeiture of fraudulent balances, and potential reporting to relevant cybercrime authorities.

16. Children's Privacy

Package s Mart is a commercial B2B/B2C digital reseller platform intended strictly for individuals who meet the legal age of majority. We do not knowingly solicit or collect data from minors.

17. Updates to This Policy

We reserve the right to revise this Privacy Policy to reflect platform enhancements, operational changes, or legal updates. Updates become effective immediately upon posting with the revised "Last updated" date displayed at the top of this document.

18. Contact & Legal Support

For inquiries, data access requests, or compliance questions regarding this Privacy Policy, contact our legal and support team: