pkr68 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how pkr68 ("we", "us", "our") collects, uses, stores, shares and protects the personal information of users ("you", "your") who access or use the pkr68 online gaming platform at pkr68.cam and any associated services (collectively, the "Platform").

pkr68 is an English-language online gaming information and platform service targeting Pakistani users. We operate under applicable international licensing frameworks and take our data protection obligations seriously. This Policy is designed to be transparent and readable — not a wall of inaccessible legal language.

By registering an Account, depositing funds or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

Definitions

Throughout this Policy, the following terms have the meanings assigned to them below:

• "Personal Data" — Any information that identifies or could reasonably identify a living individual, directly or indirectly, including name, email address, CNIC number, IP address or device identifier.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the Platform, this is pkr68.
• "Data Processor" — A third-party entity that processes personal data on behalf of pkr68, under written instruction and in accordance with this Policy.
• "Consent" — A freely given, specific, informed and unambiguous indication of the User's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer. The identity, age and address verification process required before withdrawals can be processed.
• "Account" — A registered User profile on the Platform.
• "Special Category Data" — Sensitive personal data including health information, which pkr68 may process only in limited, specified circumstances.

Data Controller Identity

For the purposes of this Policy, pkr68 is the Data Controller in respect of personal data collected from users of the Platform. pkr68 operates under applicable international licensing frameworks and is responsible for ensuring that personal data is processed lawfully, fairly and transparently in accordance with this Policy.

Where pkr68 engages third-party service providers to process data on its behalf, those parties act as Data Processors under contractual obligations that require them to process data only as instructed by pkr68 and to maintain appropriate security measures.

Enquiries relating to data processing, rights requests and privacy complaints can be directed to the pkr68 support team at the contact details set out in Section 16 of this Policy.

Personal Data We Collect

pkr68 collects the following categories of personal data from users:

pkr68 does not intentionally collect special category personal data (such as health or biometric data) from users. If such data is incidentally provided — for example, in a self-exclusion request citing health reasons — it will be treated with heightened confidentiality and processed only for the stated purpose.

How We Collect Personal Data

pkr68 collects personal data through the following methods:

• Direct Collection: Information you provide when creating an Account, completing KYC, making deposits or withdrawals, contacting support, or responding to communications from pkr68;
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, browser and device data, session activity and cookies (see Section 9);
• Third-Party Sources: Identity verification providers, fraud prevention services, payment processors and, where applicable, publicly available data sources used for AML and compliance screening; and
• Inferred Data: Patterns and profiles derived from your gameplay, deposit behaviour and Platform interactions, used for responsible gambling monitoring and, where consented, personalisation.

Legal Basis for Data Processing

pkr68 processes personal data only where a lawful basis exists. The primary legal bases we rely upon are:

1. Contractual Necessity: Processing required to register and manage your Account, process deposits and withdrawals, and fulfil our obligations under the Terms & Conditions;
2. Legal Obligation: Processing required to comply with applicable AML, KYC, licensing and regulatory requirements under the frameworks governing pkr68's operations;
3. Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gambling monitoring and improving the Platform experience, where these interests are not overridden by your rights;
4. Consent: Processing for marketing communications and non-essential cookies, where you have provided a clear opt-in. You may withdraw consent at any time without detriment to your Account (subject to other legal bases applying); and
5. Vital Interests: Processing necessary to protect your vital interests or those of others — for example, in cases where responsible gambling concerns raise welfare issues.

How We Use Your Personal Data

pkr68 uses personal data for the following purposes, each tied to a lawful basis as described in Section 6:

• Account Registration & Management: Creating and maintaining your Account, verifying your identity and age, and managing Account settings;
• Transaction Processing: Processing deposits and withdrawals in PKR and other supported currencies, verifying payment methods, and maintaining financial records;
• KYC & AML Compliance: Conducting required identity verification, ongoing transaction monitoring, and filing of required regulatory reports;
• Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, account takeover attempts and abuse of the Platform;
• Responsible Gambling: Monitoring gameplay patterns for indicators of potential harm, enforcing limits and exclusions you have set, and proactively reaching out where concerning patterns are identified;
• Customer Support: Responding to enquiries, resolving complaints and maintaining records of support interactions;
• Platform Improvement: Analysing aggregated usage data to improve the Platform's design, performance and user experience; and
• Marketing Communications: Sending promotional emails, offers and notifications where you have opted in. You can opt out at any time by contacting support.

Data Sharing & Disclosure

pkr68 does not sell, rent or trade personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Payment Processors: To facilitate deposits and withdrawals, we share necessary financial data with payment processing partners. This includes providers handling familiar Pakistani payment rails such as Easypaisa, JazzCash, Raast-connected systems, and bank transfers through institutions such as HBL, UBL, Meezan Bank and Bank Alfalah. Payment rail names are referenced for contextual accuracy only — pkr68 does not imply endorsement by or affiliation with these providers;
• KYC & Identity Verification Providers: Identity documents and verification data are shared with third-party KYC providers engaged under contractual data processing agreements;
• Fraud Prevention & Security Services: Technical and transactional data is shared with fraud prevention platforms to detect and prevent illegitimate activity;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order or regulatory direction, pkr68 will disclose personal data to competent authorities. This includes AML reporting obligations where applicable;
• Corporate Transactions: In the event of a merger, acquisition or sale of substantially all assets, personal data may be transferred to the successor entity, subject to equivalent data protection obligations; and
• Professional Advisers: Legal counsel, auditors and compliance consultants engaged under confidentiality obligations where necessary for legal or regulatory purposes.

All third-party service providers with whom pkr68 shares personal data are contractually required to process data only as instructed, maintain appropriate security measures and not use it for any purpose beyond the specific service they are providing.

Cookies & Tracking Technologies

pkr68 uses cookies and similar tracking technologies to operate the Platform effectively and, where you have consented, to enhance your experience. A cookie is a small text file placed on your device by a website you visit.

pkr68 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable Account login, session management and security features. They cannot be disabled without disabling the Platform itself;
• Functional Cookies: Remember your preferences, such as language settings and responsible gambling limit configurations, to improve your experience across sessions;
• Analytical Cookies: Collect aggregated data about how users interact with the Platform, used to identify and address usability issues and performance bottlenecks. These require consent; and
• Marketing Cookies: Where you have consented, these cookies support personalised promotional content. They are not used to build profiles for third-party advertising purposes.

You can manage your cookie preferences through your browser settings. Disabling analytical and marketing cookies will not affect your ability to use the Platform's core features. Disabling strictly necessary cookies may impair functionality.

Data Security

pkr68 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These include:

• TLS/SSL encryption on all data transmitted between your device and the Platform;
• Encrypted storage of sensitive data including KYC documents and financial records;
• Access controls restricting internal data access to authorised personnel only, on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Two-factor authentication available for Account holders to protect against unauthorised login; and
• Incident response procedures to detect, contain and report data breaches in accordance with applicable obligations.

You also have a role in keeping your data secure. Use a strong, unique password for your pkr68 Account, do not share your login credentials with anyone, and contact our support team immediately if you suspect your Account has been compromised.

Data Retention

pkr68 retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law, regulatory obligation or the operator's licensing conditions. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of the Account relationship and for a minimum period following Account closure as required by AML and licensing regulations — typically five (5) years from the date of Account closure or last transaction, whichever is later;
• KYC Documentation: Retained in accordance with applicable AML requirements, generally for a minimum of five (5) years following the end of the customer relationship;
• Transaction Records: Retained for a minimum of five (5) years following each transaction for AML compliance and audit purposes;
• Support Communications: Retained for three (3) years following resolution of the support interaction, or longer where required for ongoing disputes or regulatory inquiries; and
• Marketing Preferences and Consent Records: Retained for the duration of the Account relationship and for a period following Account closure sufficient to demonstrate consent history.

Upon expiry of the applicable retention period, data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

International Data Transfers

pkr68 operates internationally. Your personal data may be transferred to, stored in or processed by servers or service providers located outside Pakistan. Where such transfers occur, pkr68 takes steps to ensure that an appropriate level of data protection is maintained, including by:

• Transferring data only to countries or organisations that provide an adequate level of data protection, or where appropriate contractual safeguards have been put in place;
• Requiring all data processors receiving data from pkr68 to adhere to data protection standards consistent with this Policy and applicable international frameworks; and
• Minimising the personal data transferred internationally to only what is necessary for the specific processing purpose.

By using the Platform, you acknowledge that your personal data may be transferred and processed internationally as described in this section. If you have concerns about international transfers, please contact our support team.

Your Data Rights

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data held by pkr68:

To exercise any of the above rights, please submit a written request to our support team at [email protected]. We will respond within a reasonable timeframe and may need to verify your identity before processing the request. We will not charge a fee for genuine rights requests unless requests are manifestly unfounded or excessive.

Where we are unable to fulfil a rights request due to a legal or regulatory obligation — such as an AML retention requirement — we will explain the basis for the limitation in our response.

Children's Privacy

The pkr68 Platform is strictly intended for adults aged 18 and over — or the higher minimum age required by the applicable operator/license jurisdiction. We do not knowingly collect, process or store personal data from individuals under the age of 18.

Age verification is conducted as part of the KYC process. Where pkr68 becomes aware that personal data has been collected from a minor without appropriate consent, the Account will be immediately closed, all data will be securely deleted or retained only to the minimum extent required by law, and any funds associated with the Account will be handled in accordance with applicable operator policy and legal requirements.

Amendments to This Policy

pkr68 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as changes to the types of data collected, new third-party recipients or significant changes to retention periods — pkr68 will provide advance notice via the email address registered to your Account or via a prominent notice on the Platform, generally at least seven (7) days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. The current version of this Policy is always available at pkr68.cam/privacy-policy, with the "Last Updated" date clearly indicated at the top of the document.

For minor or clarificatory changes that do not materially affect your rights or our obligations, we may update the Policy without advance notice beyond updating the "Last Updated" date.

Contact Us

For all privacy-related enquiries, data subject rights requests, complaints or questions about this Policy, please contact the pkr68 support team using the details below. We aim to respond to all privacy-related enquiries within a reasonable timeframe and to resolve substantive complaints within 30 days of receipt.

Email: [email protected]

Support is available in English and, where available, Urdu. When contacting us about a data rights request, please include your full name as registered on your Account, your registered email address, and a clear description of the request or concern. For identity verification purposes, we may ask for a copy of a government-issued ID (such as your CNIC) before processing your request.

pkr68 serves users across Pakistan including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. All privacy communications are handled centrally regardless of your city of residence.