pkr222 Privacy Policy — How We Protect Your Personal Data

1.1  This Privacy Policy sets out the principles and practices by which pkr222 collects, stores, processes, uses, and protects personal data in connection with the operation of the pkr222 online casino and sports betting platform, in compliance with our international gaming license requirements and applicable data protection standards.

1.2  This Policy applies to all personal data collected through the pkr222 website (pkr222.one), any associated mobile-optimised browser interface, and all interactions with pkr222 customer support and marketing communications.

1.3  This Policy applies to all pkr222 players worldwide, including Pakistani-resident players accessing the platform via mobile browser. Where local Pakistani data protection laws impose additional or stricter requirements, pkr222 will comply with those requirements to the extent applicable.

1.4  pkr222 is committed to handling personal data in a manner that is lawful, fair, transparent, purpose-limited, accurate, storage-limited, secure, and accountable — these are the core data protection principles we apply across all processing activities.

2.1  For the purposes of this Privacy Policy, pkr222 acts as the data controller in respect of all personal data collected from players using the pkr222 platform. As data controller, pkr222 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with this Policy and applicable data protection law.

2.2  pkr222 operates under international gaming license oversight. Our data processing activities are subject to audit under the terms of our gaming license, providing an additional layer of accountability beyond this Policy.

2.3  Where pkr222 engages third-party service providers who process personal data on our behalf, those providers act as data processors and are contractually bound to process data solely on pkr222's instructions and in accordance with appropriate data protection standards.

• Full legal name (as per CNIC);
• Date of birth (for mandatory 21+ age verification);
• CNIC number and CNIC document copy (front and back);
• Residential address;
• Pakistani mobile number (for OTP verification and 2FA);
• Email address;
• Username and encrypted password (password is never stored in plaintext).

• JazzCash or EasyPaisa account number linked to your pkr222 account;
• Bank account details (account title, IBAN) where bank transfer is used;
• Transaction history: deposit amounts, dates, withdrawal amounts, dates;
• Bonus credits issued, wagering activity, and win/loss records;
• PKR wallet balance snapshots (retained for audit purposes).

Note: pkr222 does not store complete credit or debit card numbers. Where card payments are processed, card data is handled directly by PCI-DSS certified payment processor partners and is not retained on pkr222's own systems.

• Game session logs: games played, session duration, bet sizes, outcomes;
• Sports bet records: events wagered on, market selections, stakes, settlement;
• Bonus activations, wagering progress, and bonus expiry records;
• Responsible gaming tool usage (deposit limits set, self-exclusion events).

• IP address at login and session level;
• Device type, operating system version, and browser version;
• Mobile network operator (where identifiable, e.g. Jazz, Zong, Telenor, Ufone);
• Geolocation data (country/city level, derived from IP address);
• Session timestamps and login/logout event logs.

• Records of live chat conversations with pkr222 support;
• Emails sent to and received from pkr222 support;
• SMS messages sent by pkr222 (OTPs, notifications, promotional messages where opted in);
• Formal complaint submissions and their resolution records.

4.1  Directly from you: The majority of personal data pkr222 holds is provided directly by you during account registration, KYC verification, payment processing, support interactions, and when using responsible gaming tools. This is the primary source of personal data on the pkr222 platform.

4.2  Automatically during platform use: pkr222's systems automatically collect certain technical data when you access the platform — including IP addresses, device identifiers, session duration, page navigation paths, game interaction logs, and browser information — through server logs and session tracking mechanisms.

4.3  Cookies and similar technologies: pkr222 uses cookies and similar tracking technologies to maintain session state, enhance platform performance, and analyse aggregate usage patterns. See Section 8 for full details of cookie types and your opt-out options.

4.4  Third-party verification services: Where required for KYC and age verification purposes, pkr222 may receive confirmation of identity details from NADRA-linked identity verification services or internationally recognised identity verification providers. pkr222 does not receive raw biometric data through these checks.

4.5  Payment processors: Payment service providers (including JazzCash, EasyPaisa, and banking partners) may share transaction confirmation data with pkr222 to reconcile deposit and withdrawal records. pkr222 receives only what is necessary for payment reconciliation — typically a masked account reference and transaction status.

5.1  pkr222 processes personal data only where a valid legal basis exists for such processing. The legal bases on which pkr222 relies are as follows:

• Contractual necessity: Processing required to fulfil our obligations to you under the pkr222 User Agreement — including account management, payment processing, game delivery, and withdrawal processing;
• Legal obligation: Processing required to comply with mandatory obligations under our international gaming license — including KYC, age verification, AML monitoring, transaction reporting, and record-keeping requirements;
• Legitimate interests: Processing for fraud prevention, account security, platform improvement, and responsible gaming monitoring, where pkr222's legitimate interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in during registration or account settings. Consent may be withdrawn at any time.

6.1  pkr222 uses the personal data we hold about you for the following purposes, strictly aligned with the legal bases described in Section 5:

• Account creation and management: Setting up your pkr222 account, verifying your identity, processing your CNIC verification, and maintaining your account throughout its active lifecycle;
• Age verification: Confirming that you meet the mandatory 21-year minimum age requirement before access to real-money gaming features is granted;
• Payment processing: Processing deposits to your pkr222 wallet via JazzCash, EasyPaisa, or bank transfer, and processing withdrawal requests to your verified payment method in PKR;
• Game delivery: Providing access to the pkr222 game lobby, recording game results, and calculating and crediting winnings to your wallet;
• Bonus and promotion administration: Tracking bonus eligibility, wagering progress, bonus expiry, and promotional entitlements;
• Fraud prevention and security: Detecting, preventing, and investigating fraudulent activity, account takeover attempts, multi-accounting, and bonus abuse;
• Regulatory compliance: Meeting mandatory AML, KYC, age verification, and record-keeping requirements under our gaming license;
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling and providing appropriate responsible gaming interventions, tool activations, and support referrals;
• Customer support: Responding to your queries, resolving complaints, and maintaining records of support interactions;
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience;
• Direct marketing: Sending promotional offers, bonus communications, and pkr222 platform news — only where you have opted in to receive such communications.

7.1  pkr222 shares personal data with third parties only in the following strictly defined circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors, solely for the purpose of processing deposits and withdrawals on your behalf;
• Identity verification providers: Third-party KYC and age verification services used to validate your CNIC and confirm your age — these providers are bound by strict data processing agreements and may not use your data for any purpose other than verification on pkr222's instruction;
• Game software providers: Licensed game studios and platform technology providers who supply the games available on pkr222 may receive anonymised session data for RNG audit and game performance purposes — they do not receive personally identifiable information;
• Regulatory and law enforcement authorities: pkr222 may be legally required to disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where compelled by law or under the terms of our gaming license;
• Professional advisers: Legal counsel, auditors, and accountants engaged by pkr222 may have access to personal data on a need-to-know basis, subject to professional confidentiality obligations.

7.2  All third-party data processors engaged by pkr222 are subject to formal data processing agreements requiring them to: (a) process data only on pkr222's documented instructions; (b) maintain appropriate technical and organisational security measures; (c) notify pkr222 of any personal data breach without undue delay; (d) delete or return data upon termination of the service relationship.

8.1  pkr222 uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and analyse platform usage. The table below details the categories of cookies pkr222 uses:

8.2  pkr222 does not use advertising cookies or allow third-party advertising networks to place cookies on the pkr222 platform. Analytics data collected through cookies is aggregated and anonymised before being reviewed by the pkr222 product team — individual session data is not reviewed at user level without a specific fraud or security investigation justification.

8.3  Most browsers allow you to control cookie acceptance through browser settings. Disabling strictly necessary or security cookies will impair or entirely prevent your ability to log in and use the pkr222 platform.

9.1  pkr222 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• AES-256 encryption for all personally identifiable data at rest;
• TLS 1.3 encryption for all data in transit between your browser and pkr222's servers;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication required for all pkr222 internal system access by staff;
• Regular third-party penetration testing of the pkr222 platform infrastructure;
• Automated intrusion detection systems monitoring for anomalous access patterns;
• Secure, geographically redundant data backup with encryption;
• Formal incident response procedures for personal data breach scenarios.

9.2  In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pkr222 will notify affected players without undue delay — and in any case within seventy-two (72) hours of becoming aware of the breach — providing details of the nature of the breach, the categories of data affected, and the steps pkr222 is taking to address it.

9.3  Despite our extensive security measures, no internet-based transmission or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own pkr222 account credentials. pkr222 strongly recommends enabling two-factor authentication (2FA) on your account.

10.1  pkr222 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, and in compliance with mandatory retention obligations under our gaming license. Specific retention periods are as follows:

• Account registration data (identity & KYC documents): Five (5) years from the date of account closure;
• Transaction and financial records: Seven (7) years from the transaction date, as required under standard financial record-keeping obligations;
• Gaming session logs and bet records: Five (5) years from the date of the gaming session;
• Customer support communication records: Three (3) years from the date of the final communication in the thread;
• Marketing opt-in records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements;
• Cookie analytics data: Maximum twenty-four (24) months, after which anonymised aggregate statistics only are retained.

10.2  Upon expiry of the applicable retention period, pkr222 will securely and permanently delete or anonymise your personal data from all active systems. Anonymised data may be retained indefinitely for statistical purposes only.

11.1  As a pkr222 account holder, you have the following privacy rights in respect of your personal data:

11.2  pkr222 will respond to all verified privacy rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, pkr222 may extend this period by a further two months, with written notification to you of the extension and the reasons for it.

11.3  pkr222 will not charge a fee for handling your privacy rights request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, a reasonable administrative fee may apply. pkr222 will notify you of any applicable fee before processing the request.

12.1  pkr222 stores and processes personal data on servers located in jurisdictions covered by our international gaming license. These jurisdictions maintain data protection standards appropriate for the processing of online gaming player data.

12.2  Where personal data is transferred outside of the primary hosting jurisdiction — for example, to a KYC verification provider or payment processor located in a different country — pkr222 ensures that appropriate safeguards are in place, including contractual data transfer mechanisms and assessment of the adequacy of data protection in the receiving jurisdiction.

12.3  pkr222 does not transfer your personal data to any jurisdiction without first assessing whether adequate data protection standards apply in that jurisdiction. If you have questions about where your data is stored or transferred, contact pkr222 support for specific information.

13.1  pkr222 employs mandatory CNIC-based age verification at registration to prevent underage access. Despite these measures, if you are a parent or guardian and believe that a person under 21 in your care has registered a pkr222 account, please contact pkr222 support immediately at [email protected] for urgent account investigation and closure.

14.1  pkr222 sends promotional communications — including bonus offers, reload promotions, free spins notifications, and platform news — only to players who have opted in to receive such communications during registration or via account settings.

14.2  Marketing communications may be delivered via email, SMS to your registered Pakistani mobile number, or push notification through the pkr222 browser interface. You may opt out of each channel independently through your account communication preferences.

14.3  You may withdraw marketing consent at any time by: (a) updating your communication preferences in account settings; (b) clicking the unsubscribe link in any pkr222 marketing email; (c) replying STOP to any pkr222 marketing SMS; or (d) contacting pkr222 support directly. Opt-out requests will be processed within seventy-two (72) hours.

14.4  Note that withdrawing marketing consent does not affect transactional communications — pkr222 will continue to send you essential account notifications (deposit confirmations, withdrawal updates, security alerts, responsible gaming reminders) regardless of your marketing consent status, as these are necessary for account management.

14.5  Players who have activated a self-exclusion will automatically be removed from all marketing communication lists immediately. pkr222 does not send any promotional content to self-excluded players under any circumstances.

15.1  pkr222 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or business operations.

15.2  Where amendments are material — meaning they affect how your data is used or your privacy rights — pkr222 will notify registered players via email or on-platform notification at least seven (7) days before the updated Policy takes effect. The updated Policy will be published on this page with a revised Effective Date.

15.3  Your continued use of the pkr222 platform after the Effective Date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with any amendment, please contact pkr222 support to discuss account closure before the amendment takes effect.

15.4  The most current version of this Privacy Policy is always available at pkr222.one/privacy-policy. Previous versions are available on request by contacting pkr222 support.

16.1  For any queries, requests, or concerns relating to this Privacy Policy or the processing of your personal data by pkr222, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 on the pkr222 platform — fastest channel for urgent data requests;
• Email: [email protected] — please mark your subject line as "Privacy Request" for correct routing;

16.2  pkr222 will acknowledge all privacy queries within forty-eight (48) hours and will provide a substantive response within thirty (30) calendar days. Complex requests may take up to ninety (90) days in total, with notification of any extension provided to you within the initial thirty-day period.

16.3  If you are not satisfied with pkr222's handling of your privacy complaint, you may escalate the matter to the independent data protection supervisory authority in the relevant jurisdiction, or to the dispute resolution mechanism provided under pkr222's gaming license conditions.