pkr99 Privacy Policy

This Privacy Policy is issued by pkr99, the operator of the online gaming platform accessible at pkr99.ws (hereinafter referred to as "pkr99", "we", "us", or "our"). pkr99 operates under an international gaming licence and provides sports betting, live casino, jackpot slots, cricket markets, and related gaming services to players in Pakistan and other permitted jurisdictions.

pkr99 is the data controller in respect of the personal data collected through the pkr99 platform. This means pkr99 determines the purposes and means by which your personal data is processed. Where pkr99 engages third-party processors — such as payment service providers or KYC verification partners — those parties act on pkr99's instructions and are bound by contractual data processing agreements that require them to protect your data to the same standard as this Policy.

For all data-related enquiries, requests, or complaints, you may contact the pkr99 Data Protection team at: [email protected]

pkr99 collects the following categories of personal data in the course of providing its services:

pkr99 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technologies: Technical and behavioural data collected automatically when you visit or interact with the pkr99 platform, including via cookies, web beacons, pixel tags, and server logs. See Section 7 for full details on cookies.
• Third-party sources: Identity and fraud-check data received from licensed KYC verification providers, payment processors, and where required by our licensing obligations, from publicly available sanctions and politically exposed persons (PEP) screening databases.
• Referral partners: If you arrived at pkr99 via an affiliate or referral partner, that partner may share limited referral data (such as a referral code or click identifier) with pkr99 solely for the purpose of attribution tracking. No sensitive personal data is shared by referral partners with pkr99.

pkr99 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil the pkr99 player account agreement — including account creation, payment processing, bet settlement, and customer support — is conducted on the basis that it is necessary to perform the contract between you and pkr99.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, identity verification under gaming licence conditions, and cooperation with law enforcement requests, is conducted on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, product improvement, and responsible gaming monitoring is conducted on the basis of pkr99's legitimate interests, provided those interests are not overridden by your own privacy interests or fundamental rights.
• Consent: Processing for direct marketing communications and non-essential cookies is conducted solely on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pkr99 uses the personal data it collects for the following specific purposes:

• Creating, verifying, and managing your pkr99 player account, including processing your initial registration and all subsequent profile updates.
• Conducting KYC identity and age verification to confirm that you are at least 21 years of age and are the legitimate holder of the payment methods linked to your account.
• Processing deposits and withdrawals in Pakistani Rupees (PKR) via your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20 — accurately and securely.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other forms of abuse or illegal conduct on the pkr99 platform.
• Monitoring your gaming behaviour to identify signs of problem gambling and to facilitate responsible gaming interventions where appropriate, including offering deposit limits, cooling-off periods, and self-exclusion options.
• Providing customer support in response to your queries, complaints, or requests via live chat or email.
• Sending you account-related transactional communications, including deposit confirmations, withdrawal status updates, and security alerts.
• Sending promotional and marketing communications, including information about pkr99 bonuses, cricket betting promotions, and new game launches — but only where you have provided explicit consent to receive such communications.
• Improving the pkr99 platform through analysis of aggregated, anonymised usage data, including identifying popular features, load time bottlenecks, and areas where the user experience can be enhanced.
• Meeting pkr99's obligations under its international gaming licence, including maintaining records for audit purposes and responding to regulatory inquiries.

pkr99 does not sell your personal data to third parties. pkr99 shares personal data only in the following specific, controlled circumstances:

• Payment processors: pkr99 shares financial data with your chosen payment provider (e.g. JazzCash, EasyPaisa, Meezan Bank) solely for the purpose of executing your deposit or withdrawal transaction. Each processor receives only the minimum data required to complete the transaction.
• KYC verification partners: pkr99 shares identity documents and related data with licensed third-party identity verification providers for the purpose of fulfilling age verification and AML screening obligations under pkr99's gaming licence conditions.
• Game content providers: When you play a casino game or place a bet on sports markets, limited technical and transaction data is shared with the relevant game studio or sports data provider to enable game functionality and bet settlement. These providers do not receive your full identity profile.
• Regulatory and law enforcement authorities: pkr99 will disclose personal data to competent authorities when legally required to do so, including in response to a valid court order, regulatory investigation, or law enforcement request. pkr99 will notify affected players of such disclosures where it is legally permitted to do so.
• Professional advisers: pkr99 may share limited data with its legal counsel, auditors, or insurers where necessary for the conduct of professional advisory services. These parties are bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pkr99's business, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any resulting changes to this Privacy Policy before the transfer takes effect.

pkr99 uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The following categories of cookies are used on the pkr99 platform:

• Strictly necessary cookies: These cookies are essential for the pkr99 platform to function and cannot be disabled. They include session management cookies that keep you logged in, security cookies that detect and prevent fraudulent activity, and load-balancing cookies that ensure platform stability. No consent is required for these cookies.
• Functional cookies: These cookies remember your preferences — such as your selected language, preferred odds format, and previously viewed game categories — to provide a more personalised experience. These cookies require your consent and can be disabled without affecting core platform functionality.
• Analytical cookies: pkr99 uses anonymised analytics data to understand how players navigate the platform and which features are most used. This data helps pkr99 make informed product improvement decisions. Analytical cookies require your consent.
• Marketing cookies: Where you have consented to receive marketing communications, pkr99 may use tracking pixels or cookies to measure the effectiveness of promotional campaigns. Marketing cookies are never activated without explicit prior consent.

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the pkr99 platform and may prevent you from logging in or completing transactions.

pkr99 implements a layered, defence-in-depth approach to data security that encompasses technical, organisational, and procedural safeguards:

• Encryption in transit: All data exchanged between your device and pkr99 servers is encrypted using 256-bit SSL/TLS protocols. pkr99 enforces HTTPS across all pages of the platform without exception.
• Encryption at rest: Sensitive personal data — including identity documents, payment account references, and KYC records — is encrypted at rest using AES-256 encryption on access-controlled storage infrastructure.
• Access controls: Access to personal data within pkr99's internal systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required to perform their specific role. All access is logged and subject to periodic audit review.
• Security testing: pkr99 conducts regular vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses on an ongoing basis.
• Incident response: pkr99 maintains a documented data breach incident response plan. In the event of a confirmed data breach that poses a risk to your rights and freedoms, pkr99 will notify affected players without undue delay in accordance with its regulatory obligations.

pkr99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any overriding legal, regulatory, or licensing retention requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active pkr99 account plus a minimum of five (5) years following account closure, in accordance with gaming licence anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial regulation requirements.
• Betting and gaming history: Retained for five (5) years from the date of each transaction, to facilitate dispute resolution and regulatory audit requirements.
• Customer support communications: Retained for three (3) years from the date of the last interaction, for service quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your marketing consent plus three (3) years following withdrawal of consent, as evidence of lawful processing during the consent period.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.

pkr99 respects and upholds your rights in relation to your personal data. You may exercise any of the following rights at any time by contacting pkr99 at [email protected]:

• Right of access: You may request a copy of all personal data pkr99 holds about you, together with information about how it is being used and on what legal basis.
• Right to rectification: If any personal data pkr99 holds about you is inaccurate or incomplete, you may request that it be corrected. For identity data corrections, you may be required to provide updated documentary evidence.
• Right to erasure ("right to be forgotten"): You may request that pkr99 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you have objected to processing. Note that this right is subject to overriding legal and regulatory retention obligations — pkr99 cannot erase data that it is legally required to retain.
• Right to restriction of processing: You may request that pkr99 restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested or while an objection to processing is assessed.
• Right to data portability: You may request that pkr99 provide your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV), or transmit it directly to another controller where technically feasible.
• Right to object: You may object at any time to pkr99's processing of your personal data on the basis of legitimate interests, including profiling. pkr99 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

pkr99 will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases this period may be extended by a further sixty (60) days, in which case pkr99 will notify you of the extension and the reason for it within the initial thirty-day window.

The pkr99 platform is strictly intended for adults aged 21 and above. pkr99 does not knowingly collect, store, or process personal data relating to individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process applied to all pkr99 accounts prior to withdrawal processing.

If pkr99 discovers that personal data has been collected from an individual who is under 21 years of age — whether through a misrepresentation made during registration or any other means — pkr99 will immediately suspend the relevant account, void any associated gaming activity, and delete the personal data of the minor in question as quickly as operationally possible, subject to any minimum retention obligations arising from regulatory compliance requirements.

Parents and guardians who believe that a minor may have registered on the pkr99 platform are encouraged to contact pkr99 support immediately at [email protected] so that the matter can be investigated and resolved without delay.

pkr99 sends promotional and marketing communications — including information about welcome bonuses, PKR deposit offers, PSL cricket betting promotions, new slot game releases, and seasonal campaigns — only to players who have provided explicit prior consent to receive such communications.

You may opt in to marketing communications during account registration or at any later time via the communication preferences section of your pkr99 account settings. You may withdraw your marketing consent at any time by:

• Clicking the "unsubscribe" link in any marketing email sent by pkr99; or
• Updating your communication preferences directly in your pkr99 account settings; or
• Contacting pkr99 support at [email protected] with a clear request to be removed from marketing lists.

Withdrawal of marketing consent will take effect within five (5) business days. Please note that withdrawal of marketing consent does not affect your receipt of essential transactional communications — such as deposit confirmations, withdrawal status updates, and security alerts — which pkr99 is required to send to you as part of its contractual obligations.

The pkr99 platform integrates with third-party services to deliver certain functionality — including game content from licensed game studios, live sports data feeds, and payment gateway services. When you interact with these integrated services through the pkr99 interface, those third-party providers may process certain technical and interaction data in accordance with their own privacy policies.

pkr99 requires all integrated third-party service providers to implement data protection standards that are consistent with the commitments made in this Privacy Policy. However, pkr99 is not responsible for the independent data practices of third-party providers operating outside the pkr99 platform interface.

pkr99 does not include outbound links to external websites, and this Privacy Policy does not apply to any website or service that pkr99 does not directly operate or control.

pkr99 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the features and services offered on the pkr99 platform.

Where amendments are material — meaning they significantly alter the way pkr99 collects or uses your personal data, or affect your privacy rights in a meaningful way — pkr99 will provide notice to registered players via the email address associated with their account no less than fourteen (14) days before the amended policy takes effect.

Non-material amendments, such as clarifications of existing practices or corrections of typographical errors, may be published without prior individual notice. The effective date displayed at the top of this page will always reflect when the current version entered into force.

Continued use of the pkr99 platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not accept the amended policy, you should close your pkr99 account and discontinue use of the platform.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pkr99 has handled your personal data, please contact the pkr99 Data Protection team using the following details:

• Email: [email protected]
• Subject line for data requests: "Privacy / Data Rights Request"
• Support Hours: 10:00 AM – 2:00 AM PKT, daily

pkr99 is committed to resolving all privacy-related enquiries and complaints fairly, promptly, and transparently. If you are not satisfied with pkr99's response to your complaint, you have the right to escalate the matter to the data protection supervisory authority designated by pkr99's licensing jurisdiction, or to seek independent dispute resolution through the mechanism provided by pkr99's gaming licence regulator.