pkr65 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction and Scope

pkr65 ("we", "us", "our") is committed to protecting the personal data of every individual who accesses or uses the pkr65 platform, including visitors who browse the site without registering and registered Players who use our full suite of services. This Privacy Policy applies to all personal data collected through pkr65.org and all associated subdomains and mobile platforms.

This Policy is intended to be read in conjunction with the pkr65 Terms and Conditions and the pkr65 Responsible Gaming policy. Together, these three documents govern the full relationship between pkr65 and its registered Players.

pkr65 processes personal data in accordance with applicable international data protection standards and the requirements of our gaming license. Where this Policy refers to "data protection law", it encompasses the data protection principles applicable under our licensing jurisdiction, which are substantially aligned with internationally recognised frameworks including the General Data Protection Regulation (GDPR).

2. Data Controller Identity

For the purposes of this Privacy Policy, pkr65 is the data controller responsible for the personal data of Players and visitors processed in connection with the pkr65 platform. As data controller, pkr65 determines the purposes and means of processing personal data.

pkr65 operates under an internationally recognised gaming license. The platform is accessible to eligible players in Pakistan and complies with all data handling obligations imposed by its licensing authority. All data rights requests, privacy complaints, and regulatory correspondence concerning data processing should be directed to pkr65's Data Protection function via the contact details provided in Section 16 of this Policy.

3. Categories of Personal Data We Collect

pkr65 collects the following categories of personal data from Players and platform visitors:

4. How pkr65 Collects Your Personal Data

pkr65 collects personal data through the following methods and channels:

• Direct Collection: Information you provide when creating a pkr65 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technical Collection: Technical data collected automatically when you access the pkr65 platform, including IP addresses, device identifiers, browser fingerprints, session cookies, and interaction logs.
• Third-Party Sources: Where permitted by applicable law, pkr65 may receive identity verification data from authorised KYC and identity verification service providers engaged to fulfil licensing compliance obligations.
• Payment Processors: Transaction confirmation data from payment providers including JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank — limited to transaction reference numbers, amounts, timestamps, and account holder names for reconciliation purposes.
• Anti-Fraud and AML Screening: pkr65 may receive risk-flagging information from fraud prevention and anti-money laundering screening services as required under its licensing compliance obligations.

5. Legal Basis for Processing

pkr65 processes personal data on the following legal bases as applicable to each processing purpose:

• Contract Performance: Processing necessary to create and manage your pkr65 account, process deposits and withdrawals, provide gaming services, and fulfil the pkr65 Terms and Conditions.
• Legal Obligation: Processing required to comply with pkr65's gaming license obligations, including KYC identity verification, anti-money laundering screening, responsible gaming record-keeping, and cooperation with regulatory authorities.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, system performance monitoring, and service improvement — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for direct marketing communications, optional personalisation features, and any other processing activities for which pkr65 has obtained your explicit, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. How pkr65 Uses Your Personal Data

pkr65 uses the personal data it collects for the following specific purposes:

• Creating, verifying, and managing your pkr65 player account.
• Processing deposits, withdrawals, and bonus transactions in PKR.
• Complying with KYC, anti-money laundering (AML), and counter-terrorism financing (CTF) obligations under our gaming license.
• Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in the pkr65 Terms and Conditions.
• Providing 24/7 customer support in Pakistan Standard Time and maintaining records of support interactions for quality assurance purposes.
• Fulfilling responsible gaming obligations including monitoring for indicators of problem gambling and enforcing self-exclusion requests.
• Sending account-related transactional communications including deposit confirmations, withdrawal notifications, and security alerts.
• Sending marketing communications about pkr65 promotions, new features, and sports events — subject to your communication preferences and consent status.
• Improving the pkr65 platform through aggregated, anonymised analytics of player behaviour, game performance, and navigation patterns.
• Complying with any order, demand, or request from a competent regulatory authority, law enforcement body, or court of competent jurisdiction.

7. Sharing of Personal Data with Third Parties

pkr65 does not sell, rent, or trade personal data to third parties for commercial purposes. pkr65 may share personal data with carefully selected third parties only in the following limited circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the minimum personal data necessary to process transactions. These processors operate under their own privacy frameworks and are bound by applicable Pakistani financial regulations.
• Identity Verification Partners: Accredited KYC and identity verification service providers receive identity documents as necessary to fulfil licensing obligations. All such partners are contractually bound to data confidentiality obligations.
• Fraud Prevention Services: Anti-fraud and AML screening service providers may receive limited data points for risk assessment purposes in compliance with pkr65's licensing requirements.
• Game Software Providers: Game software providers may receive anonymised or pseudonymised gaming session data for technical support and game performance purposes. Raw personal data is not shared with game providers.
• Legal and Regulatory Authorities: pkr65 will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required by applicable law, a valid legal order, or our gaming license obligations — without prior notice to the Player where legally prohibited.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of pkr65 or its assets, personal data may be transferred to the acquiring entity subject to the same privacy protections as set out in this Policy.

8. Payment Data and Financial Information

pkr65 takes a particularly careful approach to financial and payment data given the sensitivity of this category of information:

• pkr65 does not store raw payment credentials — including full JazzCash PINs, EasyPaisa mPIN codes, or bank account passwords — on its servers. Payment authentication is handled entirely by the relevant payment provider's own secure infrastructure.
• Transaction records maintained by pkr65 consist of reference numbers, amounts, timestamps, and account holder names for reconciliation and regulatory record-keeping purposes only.
• All deposit and withdrawal transactions are logged and retained for the period required by pkr65's gaming license (minimum 5 years) for audit and AML compliance purposes.
• In accordance with pkr65's Terms and Conditions, all payment accounts used on pkr65 must be registered in the Player's own name. pkr65 verifies this during KYC as a security and AML measure.

9. Cookies and Tracking Technologies

pkr65 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential Cookies: Strictly necessary for the pkr65 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without preventing access to core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations to provide a personalised experience across pkr65 sessions.
• Analytics Cookies: Aggregated, anonymised data about how Players navigate and use the pkr65 platform. This data helps pkr65 identify and resolve technical issues and improve the overall player experience.
• Security Cookies: Used to detect and prevent fraudulent activity, support device fingerprinting for account security, and identify anomalous login patterns that may indicate unauthorised account access.

pkr65 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core pkr65 platform but may affect the availability of certain preference-based features.

10. Data Retention Periods

pkr65 retains personal data for only as long as necessary for the purposes for which it was collected, subject to the following minimum retention obligations:

• Active Account Data: Retained for the duration of your pkr65 account being active and for a minimum of 5 years following account closure, as required by gaming license obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of verification or from account closure, whichever is later, in compliance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction for financial audit and regulatory compliance purposes.
• Support Communications: Retained for 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for 3 years from the date consent was given or withdrawn, as evidence of compliance with consent-based marketing obligations.
• Technical / Access Logs: Retained for 12 months from the date of collection for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual Player.

11. Data Security Measures

pkr65 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between Players' devices and pkr65 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at Rest: Sensitive data fields stored in pkr65 databases — including identity data and KYC document references — are encrypted at the storage layer.
• Access Controls: Access to personal data within pkr65's organisation is restricted to authorised personnel on a strict need-to-know basis. All internal data access is logged and audited.
• Two-Factor Authentication: All pkr65 staff with administrative access to production systems are required to use multi-factor authentication.
• Penetration Testing: pkr65 engages third-party security specialists to conduct regular penetration testing and vulnerability assessments of its platform and data infrastructure.
• Incident Response: pkr65 maintains a documented data breach incident response plan. In the event of a breach affecting Player personal data, pkr65 will notify affected Players and relevant regulatory authorities within the timeframes required by applicable law.

12. Exercising Your Data Rights

To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, objection, portability, or restriction of processing — please contact pkr65 through the following channels:

• Live Chat: Available 24/7 on the pkr65 website — the fastest way to initiate a data rights request.
• Email: [email protected] — please include "Data Rights Request" in the subject line and provide your registered account details for identity verification.

pkr65 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, pkr65 may extend this period by a further 30 days — in which case pkr65 will notify you of the extension before the initial 30-day period expires.

Identity verification is required before any data rights request can be processed. pkr65 will not process data rights requests received from unverified parties, as this measure protects Players from third parties attempting to access their data.

13. Children's Privacy and the 21+ Policy

The pkr65 platform is strictly intended for adults aged 21 years and above. pkr65 does not knowingly collect personal data from individuals under the age of 21. The 21+ age threshold is enforced through mandatory KYC identity verification using CNIC documentation, which confirms the account holder's date of birth.

If pkr65 becomes aware that personal data has been collected from a person under the age of 21, all such data will be deleted immediately, the associated account will be permanently closed, and any funds will be handled in accordance with pkr65's Terms and Conditions and applicable law.

If you believe that a person under 21 has registered a pkr65 account or is using an account registered in another person's name, please contact pkr65 support immediately via live chat or email. All such reports are investigated with the highest priority.

14. Third-Party Platforms and External Links

The pkr65 platform may contain references or links to third-party services such as game software providers, payment processor portals, or regulatory authority websites. pkr65 is not responsible for the privacy practices, data handling, or content of any third-party platform or service.

When you interact with a third-party service accessible from pkr65 — such as a JazzCash payment portal — you leave the pkr65 platform and enter an environment governed by that third party's own privacy policy. pkr65 strongly recommends reviewing the privacy policies of any third-party service before providing personal data.

Game software providers whose titles appear in the pkr65 lobby operate their own game servers and may collect anonymised gaming session data for technical purposes in accordance with their own data processing agreements with pkr65. Such providers do not receive personally identifiable Player data from pkr65 without a separate legal basis.

15. Changes to This Privacy Policy

pkr65 reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, regulatory requirements, or operational developments. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where material changes are made — meaning changes that affect the nature, purpose, or legal basis of data processing in a way that could significantly affect Player rights — pkr65 will provide advance notice via the registered email address on file and/or via a prominent notification displayed on the pkr65 platform, with a minimum of 14 days' advance notice before the updated Policy takes effect.

For non-material clarifications or corrections, the updated Policy will be published on this page with an updated "Last Updated" date. Continued use of the pkr65 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

16. Contact pkr65 on Privacy Matters

For all privacy-related enquiries, data rights requests, consent withdrawals, and privacy complaints, please contact pkr65 through the following channels:

• Live Chat: Available 24/7 on the pkr65 website — recommended for urgent or time-sensitive privacy matters.
• Email: [email protected] — for formal data rights requests, please include your full registered name and account reference in your message.
• Support Hours: 24 hours per day, 7 days per week, in Pakistan Standard Time (PST).

If you are not satisfied with pkr65's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority under pkr65's licensing jurisdiction. pkr65 will provide details of the appropriate authority upon request via the support channels above.