1. Who We Are and How This Policy Applies
This Privacy Policy applies to pkr99, accessible at pkr99.click ("pkr99", "we", "us", "our"). pkr99 operates as an online betting and gaming platform serving members in Pakistan. We act as the data controller for all personal data collected through our platform, meaning we determine the purposes and means by which your personal data is processed.
This Privacy Policy governs the collection, use, storage and sharing of personal data from all individuals who register an account, visit the pkr99 website, use our mobile-optimised platform, contact our support team, or otherwise interact with pkr99 in any way. By creating a pkr99 account or using our platform, you confirm that you have read and understood this Privacy Policy.
Relationship with Terms and Conditions: This Privacy Policy should be read alongside the pkr99 Terms and Conditions. Together, these two documents govern your relationship with pkr99. In the event of any conflict between them on privacy matters, this Privacy Policy takes precedence.
pkr99 respects the privacy of every member and takes its data protection responsibilities seriously. Our approach to personal data is built on three principles: we collect only what we actually need, we use it only for the purposes stated in this Policy, and we protect it with appropriate technical and organisational measures. These are not aspirational statements – they reflect real operational decisions made by the pkr99 team every day.
2. Personal Data We Collect from Members
pkr99 collects personal data from members through several channels: registration forms, identity verification processes, payment transactions, platform usage and direct communications with our support team. The specific data we collect falls into the following categories.
Registration and Account Data
- Full name as it appears on your identity document
- Mobile phone number used to register the account
- Date of birth (for age verification purposes)
- Email address if provided
- Account username and encrypted password
- City and province of residence
Identity Verification Data (KYC)
- CNIC number and copies of CNIC front and back
- Passport or driving licence where provided as an alternative
- Selfie or live photo for identity matching where required
- Proof of payment method ownership (e.g., screenshot of Easypaisa wallet)
Financial and Transaction Data
- Deposit amounts, dates and payment methods used
- Withdrawal requests, amounts and destination accounts
- Transaction reference numbers from Easypaisa, JazzCash, IBFT and card processors
- Betting history, casino game history and associated wagering records
- Bonus and promotional credit history
Technical and Usage Data
- IP address at the time of login and transaction
- Device type, operating system and browser version
- Session duration and pages visited on pkr99
- Clickstream data and feature usage patterns
- Geolocation data derived from IP address (not GPS location)
Communication Data
- Live chat transcripts with pkr99 support
- Email correspondence sent to support@pkr99.click
- Feedback and survey responses where submitted
Sensitive Data: pkr99 does not collect sensitive personal data such as ethnic origin, religious beliefs, political opinions or health information unless it is directly relevant to a responsible gaming assessment you have requested. Such data, where provided voluntarily by a member in the context of a responsible gaming conversation, is treated with the highest level of confidentiality.
3. Why pkr99 Collects Your Personal Data
Every category of data that pkr99 collects has a specific, documented purpose. We do not collect data speculatively or "just in case it might be useful later". The purposes for which pkr99 processes your personal data are as follows.
- Account creation and management: Registration data is needed to create and maintain your pkr99 account, identify you when you log in and provide you with access to all platform features.
- Identity and age verification: KYC data is collected to verify that you are who you claim to be, that you are at least 18 years old, and to comply with anti-money-laundering requirements.
- Processing deposits and withdrawals: Financial data is needed to process the PKR payments you make and receive through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card providers.
- Fraud prevention and security: Technical and transaction data is analysed to detect and prevent fraudulent activity, including multiple account creation, bonus abuse and money laundering.
- Responsible gaming monitoring: Betting and transaction history is used to identify patterns consistent with problem gambling, enabling pkr99 to implement responsible gaming interventions where appropriate.
- Customer support: Communication data is retained to ensure continuity of support, resolve disputes accurately and improve the quality of the pkr99 support service.
- Platform improvement: Usage and technical data is analysed in aggregate to understand how members use pkr99 and to prioritise product improvements. This analysis uses anonymised or aggregated data wherever possible.
- Marketing communications: Where you have opted in to marketing, we use your contact details to send promotional offers, bonus alerts and platform updates. You can opt out at any time.
- Legal compliance: Certain data is retained to comply with legal obligations including record-keeping requirements applicable to financial services operations.
4. Legal Basis for Processing Your Data
pkr99 processes your personal data on one or more of the following legal bases depending on the specific processing activity involved.
- Contract performance: Processing your registration data, payment data and account activity records is necessary to fulfil the contract between you and pkr99 as set out in the Terms and Conditions.
- Legitimate interests: pkr99 has a legitimate interest in preventing fraud, improving the platform, maintaining platform security and conducting responsible gaming monitoring. These interests do not override your fundamental privacy rights.
- Legal obligation: Identity verification, transaction record-keeping and certain disclosures to regulatory or law enforcement authorities are required by law and represent processing on the basis of legal obligation.
- Consent: Marketing communications are sent only on the basis of your explicit consent given at registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the processing carried out before withdrawal.
Where pkr99 relies on legitimate interests as a legal basis, we have conducted a balancing test to confirm that our legitimate interest is not overridden by your privacy rights. The results of these assessments are available on request from the pkr99 privacy team.
5. How pkr99 Uses Your Personal Data
Beyond the collection purposes listed in Section 3, here is a plain-language explanation of the day-to-day ways in which pkr99 uses your personal data as a Pakistani member of the platform.
When you log in to pkr99, your credentials are verified against the stored account data to authenticate you. When you place a bet, your account balance, bonus status and bet history are updated in real time. When you request a withdrawal, your payment method details and verification status are checked before processing. None of this requires pkr99 staff to read your personal data manually – it is processed automatically by the pkr99 platform systems.
pkr99's fraud detection systems analyse patterns in transaction data and usage data continuously. If unusual patterns are detected – for example, a large number of deposits from different payment methods in quick succession, or betting activity that suggests arbitrage abuse – the account may be flagged for review. This review may involve a pkr99 team member examining the flagged transactions. Where fraud is confirmed, pkr99 shares relevant data with payment processors and, where legally required, with law enforcement authorities.
For responsible gaming purposes, pkr99 maintains a profile of each member's betting behaviour. If patterns emerge that are consistent with problem gambling – such as rapid escalation of deposit amounts, very frequent session activity or large numbers of chasing bets after losses – pkr99's responsible gaming system may generate an alert. The pkr99 team may then reach out to the member proactively to offer responsible gaming tools or information.
Automated Decision Making: pkr99 uses automated systems for fraud detection and responsible gaming monitoring. Where an automated decision has a significant impact on you – such as an account suspension – you have the right to request human review of that decision. Contact pkr99 support to exercise this right.
pkr99 does not use your personal data to make decisions about credit, employment, insurance or any other matter outside the context of the pkr99 platform itself. Your data is used exclusively to operate, maintain and improve the pkr99 service for you.
6. When and How pkr99 Shares Your Data
pkr99 does not sell your personal data to third parties for any purpose. The only situations in which pkr99 shares personal data with external parties are listed below.
- Payment processors: When you deposit or withdraw, pkr99 shares necessary transaction data with payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT systems and Visa/Mastercard networks. These processors receive only the data needed to complete the payment transaction.
- Identity verification providers: KYC verification may be performed using third-party identity verification services. These providers receive your identity document images and personal details solely for the purpose of verification and are bound by strict data processing agreements with pkr99.
- Casino game providers: Online casino and live casino games are supplied by third-party software providers. These providers may receive session identifiers and game interaction data needed to operate the game. They do not receive your full personal profile or financial data.
- Fraud prevention networks: pkr99 participates in industry fraud prevention networks. Where fraudulent activity is confirmed, anonymised or pseudonymised fraud indicators may be shared with these networks to protect the broader industry.
- Legal and regulatory disclosure: pkr99 will disclose personal data to law enforcement agencies, regulatory authorities or courts when required to do so by legally enforceable order or applicable law. pkr99 will not make voluntary disclosures beyond what is legally required.
- Business transfers: If pkr99's business is acquired, merged or restructured, your personal data may be transferred to the acquiring entity as part of that transaction. Members will be notified of any such transfer before it takes effect.
All third-party processors used by pkr99 are bound by written data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to pkr99. pkr99 conducts due diligence on all processors before engaging them.
7. Cookies and Tracking Technologies
pkr99 uses cookies and similar tracking technologies on the pkr99 platform. A cookie is a small text file placed on your device when you visit a website. pkr99 uses cookies for the purposes of session management, fraud prevention, platform analytics and, where you have consented, personalised content delivery.
| Cookie Type | Purpose | Duration | Consent Required |
|---|---|---|---|
| Essential | Keep you logged in, maintain session security, process payments | Session | No – essential to platform operation |
| Functional | Remember your preferences (e.g., language, bet slip settings) | 30 days | No – functional to user experience |
| Analytics | Understand how members use the platform in aggregate to improve it | Up to 12 months | Yes – opt-in at first visit |
| Marketing | Deliver relevant promotional content to opted-in members | Up to 90 days | Yes – requires explicit opt-in |
You can control cookies through your browser settings. Blocking essential cookies will prevent pkr99 from functioning correctly and you may not be able to log in or place bets. Blocking analytics or marketing cookies will not affect your ability to use the core platform features.
pkr99 does not use third-party advertising cookies from social media platforms or ad networks. The marketing cookies used on pkr99 are first-party cookies operated by pkr99 itself to deliver relevant promotions to members who have opted in.
8. How pkr99 Keeps Your Data Secure
pkr99 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. Security is treated as a core part of the pkr99 platform – not an afterthought.
The following security measures are in place across the pkr99 platform at all times.
- SSL/TLS Encryption: All data transmitted between your device and the pkr99 platform is encrypted using SSL/TLS. The padlock icon in your browser confirms this encryption is active during your session.
- Password Security: Passwords are never stored in plain text on pkr99 systems. They are hashed using one-way cryptographic algorithms. pkr99 staff cannot retrieve your password – only reset it.
- Access Controls: Access to member personal data within pkr99 is restricted to staff who have a genuine operational need for it. Access is granted on a role-based principle of least privilege and is subject to audit logging.
- Data Segregation: Member funds are held separately from pkr99 operational funds. Financial transaction records are stored in isolated database environments with additional access restrictions.
- Intrusion Detection: pkr99 operates network monitoring and intrusion detection systems that alert the security team to suspicious access patterns in real time.
- Regular Security Review: The pkr99 technical team conducts regular security reviews of the platform infrastructure and updates security configurations in response to emerging threats.
Data Breach Response: In the event of a personal data breach that poses a risk to members, pkr99 will notify affected members without undue delay and take immediate steps to contain and remedy the breach. pkr99 maintains a documented data breach response procedure reviewed annually by the technical and operations teams.
While pkr99 takes all reasonable steps to secure your data, no system connected to the internet can be made entirely risk-free. You also have a role to play in protecting your pkr99 account: do not share your password or OTP with anyone, use a strong unique password for your pkr99 account, and report any suspicious account activity to pkr99 support immediately.
9. How Long pkr99 Retains Your Data
pkr99 retains personal data for as long as it is needed for the purpose it was collected, subject to any legal retention obligations that require longer storage periods. The following retention schedule applies to pkr99 member data.
- Account and registration data: Retained for the lifetime of your pkr99 account plus five years after account closure, to comply with anti-money-laundering record-keeping requirements.
- Identity verification (KYC) documents: Retained for five years after account closure. Original KYC documents are not retained beyond verification – copies sufficient for compliance are stored in encrypted form.
- Financial transaction records: Retained for seven years after the transaction date in compliance with financial record-keeping obligations.
- Betting and gaming history: Retained for the lifetime of your account and five years thereafter. Used for dispute resolution, responsible gaming monitoring and regulatory compliance.
- Support communications: Retained for three years after the conversation closes. Used to ensure continuity of support and for staff training purposes.
- Cookie and usage analytics data: Analytics data is retained in anonymised aggregate form for up to two years. Individual session data is deleted after 90 days.
- Marketing consent records: Retained indefinitely as evidence of consent. The consent record is retained even after you withdraw consent, as proof that the consent was validly obtained.
When retention periods expire, pkr99 securely deletes or anonymises the relevant data. Secure deletion means the data cannot be recovered or reconstructed. Anonymisation means all identifying fields are removed or encrypted such that re-identification is not possible.
10. Your Data Rights as a pkr99 Member
As a member of pkr99, you have specific rights in relation to the personal data we hold about you. These rights are meaningful and pkr99 is committed to honouring them without unnecessary delay or bureaucratic friction.
| Your Right | What It Means for You | How to Exercise It |
|---|---|---|
| Access SAR | Request a copy of all personal data pkr99 holds about you | Email support@pkr99.click – responded within 30 days |
| Correction | Request correction of inaccurate or incomplete personal data | Contact support via live chat or email |
| Deletion | Request deletion of your data, subject to legal retention obligations | Email support@pkr99.click with deletion request |
| Restriction | Request that pkr99 limits processing of your data while a dispute is resolved | Contact support explaining the basis for restriction |
| Portability | Receive your account and transaction data in a machine-readable format | Email support@pkr99.click – CSV format available |
| Objection | Object to processing based on legitimate interests grounds | Email privacy@pkr99.click with specific objection |
| Withdraw Consent | Withdraw consent for marketing communications at any time | Unsubscribe link in any marketing message or contact support |
| Human Review | Request human review of any automated decision affecting your account | Contact support within 30 days of the automated decision |
pkr99 will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, pkr99 may extend this period by a further two months with notice to you of the reason for the extension. pkr99 will not charge a fee for responding to data rights requests unless they are manifestly unfounded or excessive.
Exercising your data rights will not result in any negative consequences for your pkr99 account where the request is made in good faith. pkr99 will not restrict your betting access, delay withdrawals or treat you differently as a result of a data rights request.
11. Children's Privacy
pkr99 is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18 you must not register an account or use the pkr99 platform in any way.
pkr99 uses age verification measures at registration and as part of the KYC process to detect and prevent underage registration. Where pkr99 discovers that an account has been created by a person under 18, the account will be immediately closed, all funds will be returned to the payment method used for deposit, and any winnings generated will be voided.
Parents and Guardians: If you believe that a minor in your household may have registered on pkr99 using false information, please contact pkr99 support immediately at support@pkr99.click. We will investigate and close the account promptly. pkr99 recommends using parental control software on shared devices to prevent minors accessing adult content online.
12. Changes to This Privacy Policy
pkr99 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in the services we offer, changes in applicable law or improvements to our privacy practices based on member feedback or regulatory guidance.
When material changes are made to this Privacy Policy, pkr99 will notify members via the platform interface or via registered contact information before the changes take effect. The updated Privacy Policy will display the revised "Last Updated" date at the top of the page. Minor clarifications that do not affect your rights or how your data is used may be made without formal notification.
Your continued use of the pkr99 platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you may close your account and request the return of your real-money balance by contacting pkr99 support.
pkr99 recommends reviewing this Privacy Policy periodically regardless of whether you receive a notification, as the date at the top of the page will indicate whether any changes have been made since your last review.
13. How to Contact pkr99 About Privacy
If you have any questions about this Privacy Policy, want to exercise any of your data rights, have a concern about how pkr99 has handled your personal data, or want to report a suspected security issue related to your account, please contact the pkr99 team using the details below.
- Privacy queries and data rights requests: support@pkr99.click (subject line: "Privacy Request")
- Live chat support: Available 24/7 through the pkr99 platform – in Urdu and English
- Account security concerns: Contact support immediately via live chat for fastest response
pkr99 targets a 72-hour initial response for all privacy-related email queries. Complex data rights requests are resolved within 30 days. For urgent security concerns such as suspected unauthorised account access, live chat is available around the clock with an average response time of under three minutes.
pkr99 staff will never ask you for your password, OTP or full card number in any communication channel. If you receive a message claiming to be from pkr99 and asking for these details, do not respond and report it to support@pkr99.click immediately.