pkr9 Privacy Policy

1. Who We Are

pkr9 ("we", "us", "our", "the Platform") operates the online casino and sportsbook accessible at pkr9.app. pkr9 is the data controller responsible for the personal data of registered users ("you", "User", "Player") collected through the Platform.

For data-related enquiries, you may contact our Data Protection contact via the details provided in Section 14 of this Policy. All data-related communications are handled in English and pkr9 commits to responding within thirty (30) days of receipt.

2. Personal Data We Collect

pkr9 collects the following categories of personal data:

pkr9 does not intentionally collect or process sensitive personal data (such as health data, racial or ethnic origin, or political opinions) except where strictly necessary for responsible gaming assessments conducted at your request.

3. How We Collect Your Data

pkr9 collects personal data through the following means:

• Direct Interactions: Data you provide when creating an Account, completing KYC, making deposits or withdrawals, contacting support, or setting responsible gaming preferences;
• Automated Technologies: Cookies, log files, and similar technologies that record technical and usage data as you navigate the Platform;
• Payment Processors: Confirmation data from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT networks regarding transaction status;
• Game Providers: Session and wagering data transmitted by third-party game providers whose titles are integrated into the pkr9 Platform;
• Identity Verification Services: Data returned by third-party KYC and age verification services used to fulfil our compliance obligations.

4. Purpose & Legal Basis for Processing

Where processing is based on consent (for example, optional marketing communications), you may withdraw that consent at any time by updating your Account notification preferences or by contacting pkr9 support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies & Tracking Technologies

pkr9 uses cookies and similar technologies to operate the Platform effectively. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for account login sessions, security functions, and core Platform functionality. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings and game lobby layout choices. Disabling these does not prevent access but may reduce personalisation.
• Analytics Cookies: Collect aggregated, anonymised data about how the Platform is used — pages visited, session duration, feature usage. This data is used to improve the Platform and is not linked to individual identity.
• Security Cookies: Used to detect and prevent fraudulent account activity, unusual login patterns, and automated bot access.

pkr9 does not use third-party advertising or retargeting cookies that track your activity across external websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent normal Platform use.

6. Data Sharing & Disclosure

pkr9 does not sell your personal data to third parties. We share data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT network operators — to process deposits and withdrawals;
• Game Providers: Licensed third-party game studios whose titles are integrated into pkr9 — data shared is limited to session identifiers and wager values necessary to operate game rounds;
• Identity & KYC Verification Services: Third-party verification providers used to confirm identity, age, and payment method ownership in compliance with applicable obligations;
• Regulatory & Law Enforcement Authorities: Where required by applicable law, court order, or regulatory demand — including anti-money laundering reports where legally mandated;
• Professional Advisers: Legal counsel, auditors, and compliance advisers acting under obligations of confidentiality;
• Business Successors: In the event of a merger, acquisition, or sale of all or part of pkr9's business, your data may be transferred to a successor entity subject to equivalent privacy protections.

All third parties with whom pkr9 shares data are required to process it securely, in accordance with applicable data protection standards, and only for the specific purpose for which it was shared.

7. International Data Transfers

pkr9 operates an international platform. Your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, pkr9 takes steps to ensure that appropriate safeguards are in place — including contractual protections — to provide a level of data protection consistent with the standards described in this Policy.

Where data is transferred to third-party game providers or payment processors operating internationally, pkr9 requires those parties to maintain data processing standards consistent with applicable international norms through contractual data processing agreements.

8. Data Retention

pkr9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfaction of legal, regulatory, accounting, and reporting requirements. General retention guidelines are as follows:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping obligations;
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction;
• KYC Documents: Retained for a minimum of five (5) years from Account closure or the date of document submission, whichever is later;
• Support Communications: Retained for three (3) years from the date of the communication;
• Technical and Usage Data: Retained for up to twenty-four (24) months in identifiable form; thereafter used only in anonymised, aggregated form.

Upon expiry of the applicable retention period, data is securely deleted or anonymised. Where a legal hold applies (for example, pending litigation or regulatory investigation), data will be retained until the hold is lifted.

9. Your Data Rights

Subject to applicable law, you hold the following rights in respect of your personal data held by pkr9:

• Right of Access: Request a copy of the personal data pkr9 holds about you;
• Right to Rectification: Request correction of inaccurate or incomplete personal data;
• Right to Erasure: Request deletion of your personal data where no overriding legal basis for retention applies;
• Right to Restriction: Request that processing of your data be restricted in certain circumstances;
• Right to Data Portability: Request that data you provided on the basis of consent or contract be provided to you in a structured, commonly used format;
• Right to Object: Object to processing based on legitimate interest, including direct marketing;
• Right to Withdraw Consent: Withdraw consent for any processing activity based solely on your consent, at any time without penalty.

To exercise any of these rights, contact pkr9 via the details in Section 14. pkr9 will respond within thirty (30) days. Requests may require identity verification before processing. Note that some rights are subject to legal exceptions — for example, the right to erasure does not apply where retention is required by anti-money laundering legislation.

10. Security Measures

pkr9 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption across all data transmissions between your browser and the Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls ensuring only authorised personnel can access personal data, limited to the scope required for their function;
• Regular security testing, including penetration testing of Platform infrastructure;
• Two-factor authentication available for all user accounts and required for administrative access;
• Automated anomaly detection systems monitoring for unusual account access patterns.

In the event of a personal data breach that poses a risk to your rights and freedoms, pkr9 will notify affected Users without undue delay and will take immediate steps to contain and remediate the breach. pkr9 will also notify relevant regulatory authorities where required by applicable law.

11. Minors

The pkr9 Platform is strictly restricted to persons aged 18 and above. pkr9 does not knowingly collect personal data from persons under the age of 18. If pkr9 becomes aware that personal data has been collected from a minor, that data will be immediately deleted and the associated Account permanently closed.

If you believe that a minor has registered an Account or provided personal data to pkr9, please contact us immediately via the details in Section 14 so that we may investigate and take appropriate action without delay.

12. Third-Party Content

The pkr9 Platform integrates game content from licensed third-party providers. While pkr9 selects providers that maintain strong data protection standards and requires contractual compliance with applicable data protection obligations, pkr9 is not responsible for the independent privacy practices of those providers. Any data processed by a game provider within their own infrastructure is subject to that provider's privacy policy.

pkr9 does not include third-party advertising networks, social media trackers, or external retargeting scripts on the Platform.

13. Updates to This Policy

pkr9 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance. Where changes are material, pkr9 will notify registered Users by email or via a prominent in-Platform notification prior to the changes taking effect.

The current version of this Policy is always accessible at pkr9.app/privacy-policy. The date at the top of this page reflects when the Policy was last reviewed. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact Us & Complaints

For any privacy-related enquiries, data rights requests, or complaints regarding pkr9's handling of your personal data, please contact us through the following channels:

• Live Chat Support: Available 24/7 via the pkr9 Platform after logging in — fastest response for urgent data concerns
• Email: [email protected]

pkr9 commits to acknowledging data rights requests within seventy-two (72) hours and to providing a substantive response within thirty (30) days. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days with prior notification and explanation.

If you are not satisfied with pkr9's response to a privacy complaint, you have the right to escalate the complaint to the relevant data protection supervisory authority in your jurisdiction.