pkrbet Privacy Policy — Your Data, Your Rights, Our Obligations

pkrbet ("we", "us", "our") is committed to protecting the personal information of every individual who interacts with the pkrbet Platform — whether as a registered Player, a visitor to the website at pkrbet.vu, or an individual who contacts our customer support team. This Privacy Policy explains in clear terms what personal data pkrbet collects, why we collect it, how we use and protect it, how long we retain it, with whom we may share it, and what rights you have in relation to it.

This Policy applies to all personal data processed by pkrbet in connection with: the registration and maintenance of player accounts; the processing of financial transactions including deposits and withdrawals; the delivery of casino and sports betting services; customer support interactions; marketing communications; and the technical operation and security of the Platform, including fraud prevention and anti-money laundering compliance.

This Policy does not apply to third-party websites or services that may be linked from the pkrbet Platform. pkrbet is not responsible for the privacy practices of third parties and recommends that you review the privacy policies of any external services you access independently.

For the purposes of applicable data protection law, pkrbet is the data controller in respect of all personal data collected and processed through the pkrbet Platform. As data controller, pkrbet determines the purposes for which and the means by which personal data is processed, and bears primary responsibility for ensuring that such processing is lawful, fair, and transparent.

pkrbet operates under an internationally recognised gaming license which imposes specific data management obligations on the platform as a condition of license retention. These obligations include the maintenance of data processing records, the implementation of appropriate security measures, and the provision of mechanisms for data subjects to exercise their rights — all of which are reflected in this Policy.

For all data protection queries, access requests, erasure requests, or complaints relating to pkrbet's handling of your personal information, you may contact pkrbet's data protection contact point at [email protected]. pkrbet commits to acknowledging all formal data protection requests within five (5) business days.

pkrbet collects personal data across several categories depending on your interaction with the Platform. The categories and specific data types we may collect include:

3.1 Identity & Contact Information

• Full legal name as it appears on your government-issued identity document
• Date of birth (required for mandatory 21+ age verification)
• Pakistani national identity card number (CNIC) or equivalent identity document number where provided for KYC purposes
• Email address registered with your pkrbet Account
• Pakistani mobile telephone number registered with your pkrbet Account
• Residential address provided during registration or KYC verification

3.2 Financial & Transaction Data

• Payment channel identifiers (JazzCash account reference, EasyPaisa wallet number, HBL/UBL/Meezan Bank account details as applicable)
• Complete deposit and withdrawal transaction history including amounts in PKR, timestamps, and processing status
• Current and historical PKR balance within your pkrbet Account
• Source of funds documentation where provided in response to AML requests
• Bonus and promotional credit history including applicable wagering requirement progress

3.3 Gameplay & Betting History

• Complete record of all casino games played, stakes wagered, outcomes, and net results
• Complete sports betting history including all markets wagered, stakes, odds accepted, and settlement outcomes
• Session duration and active gameplay timing data
• Responsible gaming tool elections including deposit limits, session limits, cooling-off periods, and self-exclusion records

3.4 Technical & Usage Data

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser type and version
• Login timestamps, session duration, and logout records
• Pages visited within the Platform and navigation patterns
• Cookie identifiers and tracking technology data as described in Section 10

3.5 Communications Data

• Records of all live chat, email, and support ticket communications with pkrbet's customer support team
• Records of formal complaints and dispute correspondence
• Marketing communication preference records and opt-out records

pkrbet collects personal data through the following mechanisms:

• Direct provision by you: Information you provide when completing pkrbet's registration form, when submitting KYC documents, when updating your Account profile, and when contacting pkrbet's customer support team
• Automated Platform collection: Technical and usage data collected automatically through cookies, server logs, and session monitoring as you interact with the Platform
• Payment channel data: Transaction confirmation data received from integrated payment providers (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank) when you initiate deposits or withdrawals
• Third-party identity verification: Where pkrbet uses a third-party identity verification service to confirm identity document authenticity during KYC, that service may provide pkrbet with a verification result and associated identity data
• Fraud prevention and AML services: Where required for compliance purposes, pkrbet may receive data from third-party fraud screening or AML monitoring services regarding your transactions

pkrbet processes your personal data only for defined purposes and only where a lawful legal basis for that processing exists. The following table summarises pkrbet's primary processing purposes and the corresponding legal basis applicable to each:

pkrbet does not sell, rent, barter, or otherwise commercially transfer your personal data to any third party. pkrbet shares personal data with third parties only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose:

6.1 Payment Processing Partners

pkrbet shares transaction data with its integrated payment channel partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — solely for the purpose of processing your deposit and withdrawal transactions. Each payment partner operates under its own privacy policy and applicable Pakistani financial services regulatory framework.

6.2 Identity Verification & AML Service Providers

pkrbet may engage accredited third-party identity verification and AML screening services to assist with KYC compliance. These service providers process your identity data solely on pkrbet's behalf under contractual data processing agreements that restrict use of your data to the specific purposes for which it is shared.

6.3 Gaming Software Providers

Games delivered through the pkrbet Platform are provided by third-party licensed software providers. These providers may process your gameplay data (session duration, game results) for the technical purpose of delivering the game and maintaining game integrity logs. Software providers engaged by pkrbet are bound by data processing agreements consistent with their own licensing obligations.

6.4 Regulatory & Law Enforcement Disclosure

pkrbet will disclose personal data to regulatory authorities, licensing bodies, or law enforcement agencies where required to do so by applicable law, court order, or licensing obligation — or where disclosure is necessary to prevent, detect, or prosecute fraud, money laundering, or other serious criminal activity. pkrbet will, where legally permitted, notify you of such disclosure.

As an internationally licensed online gaming platform, pkrbet's data processing infrastructure may involve the transfer of personal data to, and storage of personal data in, jurisdictions outside Pakistan. Such transfers may occur in connection with pkrbet's server infrastructure, its identity verification service providers, its gaming software partners, and its licensing authority's compliance reporting requirements.

Where personal data is transferred internationally, pkrbet ensures that appropriate safeguards are in place to protect the data to a standard at least equivalent to that which would apply within a well-regulated data protection framework. These safeguards include contractual data transfer agreements incorporating standard data protection clauses, requirements that receiving entities implement appropriate technical and organisational security measures, and limitation of transferred data to the minimum necessary for the relevant processing purpose.

By registering an Account with pkrbet and accepting this Privacy Policy, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan as described in this Section, and you consent to such transfers to the extent that your consent is required by applicable law.

pkrbet retains your personal data only for as long as is necessary for the purposes for which it was collected, or for as long as pkrbet is legally required or permitted to retain it under applicable law and regulatory obligations. The following retention principles apply:

• Active Account data: All personal data associated with an active pkrbet Account is retained for the duration of the Account's active status plus a minimum period of five (5) years following account closure, in compliance with AML and gaming regulatory record-keeping requirements
• Financial transaction records: Complete transaction records are retained for a minimum of five (5) years from the date of each transaction, as required under applicable anti-money laundering regulations
• KYC documents: Identity verification documents are retained for the duration of the Account plus five (5) years following closure, and may be retained longer where required by a specific regulatory investigation or court order
• Gameplay records: Complete gameplay and betting history is retained for five (5) years from each session date for integrity and dispute resolution purposes
• Self-exclusion records: Where a Player has self-excluded, a record of the self-exclusion status is retained indefinitely to prevent re-registration during the exclusion period and to support responsible gaming obligations
• Support communications: Customer support records are retained for three (3) years from the date of the relevant interaction unless they are associated with an ongoing dispute, in which case they are retained until the dispute is fully resolved
• Marketing consent records: Records of marketing consent elections and opt-outs are retained for the duration of the Account plus three (3) years, to evidence compliance with consent requirements

Upon expiry of the applicable retention period, pkrbet will securely delete or anonymise your personal data in accordance with its data destruction procedures.

Subject to applicable data protection law and the limitations arising from pkrbet's regulatory obligations, you have the following rights in relation to your personal data held by pkrbet. To exercise any of these rights, contact pkrbet at [email protected]. pkrbet will respond to all rights requests within thirty (30) days. Where a request is complex or numerous, pkrbet may extend this period by a further thirty (30) days with notification.

pkrbet uses cookies and similar tracking technologies on the Platform to deliver essential functionality, improve platform performance, understand usage patterns, and — where you have consented — to support marketing activities. A cookie is a small data file stored on your device by your web browser when you visit the Platform.

pkrbet uses the following categories of cookies and similar technologies on the Platform:

You may control non-essential cookie categories through your browser settings. Note that disabling essential cookies will affect the functionality of the Platform, including your ability to log in to your pkrbet Account and process transactions. pkrbet recommends reviewing your browser's cookie management options and selectively disabling only non-essential categories where you have privacy concerns.

pkrbet implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are designed to provide a level of security appropriate to the risk presented by processing personal data in an online gaming context, where both financial and identity data is handled at scale.

• 256-bit SSL encryption: All data transmitted between your device and pkrbet's servers is encrypted using 256-bit SSL/TLS protocols — the same standard applied by Pakistan's major commercial banks including HBL and UBL
• Encrypted data storage: Sensitive personal data including identity documents and payment details is stored in encrypted form on pkrbet's servers with access restricted to authorised personnel on a strict need-to-know basis
• Access controls: Access to personal data within pkrbet's organisation is controlled through role-based access permissions, with multi-factor authentication required for all administrative system access
• Intrusion detection and monitoring: pkrbet's infrastructure is monitored continuously for suspicious access patterns, with automated alerting and response protocols for detected intrusion attempts
• Regular security assessments: pkrbet conducts periodic security assessments and penetration testing of its Platform infrastructure to identify and remediate vulnerabilities
• Staff training: All pkrbet personnel with access to personal data receive data protection and information security training as part of their onboarding and on an ongoing basis
• Data breach response: pkrbet maintains a formal data breach response procedure. In the event of a breach affecting your personal data, pkrbet will notify you and, where required, the relevant regulatory authority within the timeframes required by applicable law

pkrbet's services are strictly available only to individuals aged twenty-one (21) years or older. pkrbet does not knowingly collect personal data from individuals under the age of 21, and the Platform is not directed at or intended for use by minors of any age. The Platform implements mandatory age verification procedures as part of the account KYC process specifically to prevent underage access.

If pkrbet becomes aware, or has reasonable grounds to believe, that an Account has been registered by or on behalf of an individual who is under 21 years of age, pkrbet will immediately: suspend the Account and prevent further access; void any gameplay or betting activity conducted from the Account; return any net deposits to the payment source where technically possible; and report the matter to the relevant regulatory authority as required under its licensing obligations.

If you are a parent or guardian and you believe that a person under 21 in your household has registered an Account with pkrbet, please contact pkrbet immediately at [email protected]. pkrbet will investigate and take appropriate action as described above. pkrbet also strongly recommends the use of parental control software on shared household devices to prevent minors from accessing online gambling platforms of any description.

pkrbet may send you marketing communications about new games, promotions, bonuses, and platform updates where you have given your explicit consent to receive such communications during the registration process or subsequently through your Account settings. Marketing communications may be delivered via email to your registered address or via SMS to your registered Pakistani mobile number.

You may withdraw your consent to receive marketing communications at any time, at no cost, and without affecting your ability to continue using the pkrbet Platform. To opt out of marketing communications, update your communication preferences in your Account settings, or contact pkrbet at [email protected] requesting removal from marketing lists. pkrbet will process opt-out requests within ten (10) business days.

pkrbet will not send marketing communications to Players who have an active cooling-off period or who have self-excluded under pkrbet's Responsible Gaming Policy. If you receive marketing communications after self-exclusion, contact pkrbet immediately — this represents a process failure that pkrbet takes seriously and will investigate and remediate as a priority matter.

pkrbet reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable data protection law, regulatory requirements, the scope of pkrbet's data processing activities, or the introduction of new Platform features. Where an amendment is material — meaning it substantially affects the way pkrbet processes your personal data or alters your rights as a data subject — pkrbet will provide at least fourteen (14) days' written notice of the change to your registered email address before the amended Policy takes effect.

Minor amendments — such as clarifications, corrections of typographical errors, or additions required for regulatory compliance that do not substantively alter your rights — may be published on the Platform without advance notice. The "Last Updated" date at the heading of this Policy will be updated to reflect the effective date of each amendment.

Your continued use of the pkrbet Platform after any amendment's effective date constitutes your acceptance of the amended Privacy Policy. pkrbet recommends that you review this Policy periodically to stay informed of how your personal data is being handled.

For any query, concern, or formal request relating to pkrbet's processing of your personal data — including requests to access, correct, delete, or restrict your data — please contact pkrbet's data protection contact point using the details below. All formal data protection requests should be submitted in writing and include your full registered name, the email address associated with your pkrbet Account, and a clear description of the request or concern.

Data Protection Contact: [email protected]

pkrbet commits to acknowledging receipt of formal data protection requests within five (5) business days and providing a substantive response within thirty (30) days. Where a request is complex, pkrbet may extend the response period by a further thirty (30) days with notification and explanation of the reason for the extension.

If you are not satisfied with pkrbet's response to a data protection request or complaint, you have the right to escalate the matter to pkrbet's licensing authority through the regulatory dispute resolution mechanism available under pkrbet's gaming license. Information about this escalation process is available from pkrbet's compliance team upon request.