Privacy Policy

01Introduction

pkr887 ("pkr887", "we", "us", "our") operates the online gaming platform accessible at pkr887.cam ("Platform"). As the data controller for personal data processed in connection with the Platform, pkr887 is committed to protecting the privacy and security of all Users ("you", "your") who access our services.

This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure and protection of personal data. It has been prepared with reference to widely recognised data protection principles, including those embodied in the General Data Protection Regulation (GDPR) and equivalent international frameworks, to the extent applicable under our licensing jurisdiction.

By registering an Account, making a deposit or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

pkr887 does not claim any affiliation with, authorisation from, or endorsement by the Government of Pakistan, the Pakistan Telecommunication Authority (PTA), the State Bank of Pakistan, or any provincial authority. This Policy does not constitute legal advice under Pakistani law. Users in Pakistan remain solely responsible for understanding how applicable local laws — including the Prevention of Gambling Act, 1977 and the Pakistan Electronic Crimes Act, 2016 — may apply to their use of this Platform.

02Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, email address, CNIC number, IP address, device identifier and financial account information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this context, pkr887.
• "Data Processor" means any third party that processes Personal Data on behalf of pkr887 under a written data processing agreement.
• "Data Subject" means the individual to whom the Personal Data relates — in this context, you, the User.
• "KYC" means Know Your Customer — the identity and document verification process required by our licensing obligations and AML controls.
• "Cookies" means small text files stored on your device by the Platform to enable session management, analytics and personalisation functions.
• "Sensitive Data" means Personal Data that warrants heightened protection, including government-issued identity documents, financial account details and health-related information (e.g., responsible gambling assessments).

03Data We Collect

pkr887 collects the following categories of Personal Data in connection with your use of the Platform:

Where you provide Personal Data relating to third parties (for example, in a referral), you confirm that you have their permission to share their data with us and that they have been informed of this Policy.

04How We Collect Data

We collect Personal Data through the following channels:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact Support, respond to a survey or participate in a promotion.
• Automatically — through Cookies, web beacons, log files and similar tracking technologies when you access and navigate the Platform. This includes your IP address, device identifiers and browsing behaviour within the Platform.
• From third-party service providers — including identity verification agencies, payment processors, fraud detection services and analytics providers, which may supply data in connection with their services to us.
• From publicly available sources — where permitted by applicable law, for the purposes of fraud prevention, AML screening or KYC enhancement (for example, sanctions lists or politically exposed persons databases).

05Data Processing & Legal Basis

pkr887 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pkr887 — including account management, payment processing, game delivery and customer support.
• Legal obligation: Processing required to comply with applicable licensing conditions, AML obligations, KYC requirements and any lawful requests from regulatory authorities in our licensing jurisdiction.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, service improvement and business analytics — where such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent — for example, for certain marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent does not affect processing carried out on other legal bases.

06How We Use Your Data

pkr887 uses the Personal Data we collect for the following purposes:

• Creating and managing your Account, including authentication and account security.
• Processing deposits, withdrawals and bonus transactions, including PKR-denominated payments where applicable.
• Completing KYC and AML verification, including identity document review and sanctions screening.
• Delivering gaming and sportsbook services, including live cricket betting, PSL and ICC markets, live dealer games, slots and esports.
• Providing customer support via live chat and email ([email protected]), including in English and Urdu during Pakistan peak hours.
• Administering bonuses, promotions, loyalty programmes and VIP benefits.
• Detecting, investigating and preventing fraud, cheating, money laundering and other prohibited activities.
• Enforcing our Terms & Conditions and all associated policies.
• Monitoring and enforcing responsible gambling limits, processing self-exclusion requests and conducting gambling harm assessments.
• Improving the Platform through usage analytics, A/B testing and product development.
• Sending service communications — such as account notifications, security alerts and regulatory updates — which are non-promotional and cannot be opted out of while your Account remains active.
• Sending marketing communications where you have provided consent or where permitted by applicable law. You may unsubscribe from marketing communications at any time.

07Data Sharing & Disclosure

pkr887 does not sell, rent or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients only to the extent necessary and on a need-to-know basis:

• Payment service providers and processors — to facilitate deposits and withdrawals. Payment references familiar to Pakistani users (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are mentioned for educational context only. pkr887 does not claim that any of these services endorse or support gambling transactions.
• Identity verification and KYC providers — to complete document verification, liveness checks and AML screening as required by our licensing obligations.
• Fraud prevention and risk management services — to detect and prevent fraudulent transactions, account takeovers and other security threats.
• Game and technology providers — who supply the slot studios, live dealer infrastructure, sports data feeds and other software components that power the Platform.
• Regulatory and licensing authorities — in our licensing jurisdiction, where disclosure is required by law or regulatory direction.
• Professional advisers — including lawyers, auditors and accountants, bound by professional confidentiality obligations.
• Successors in business — in the event of a merger, acquisition or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party Data Processors engaged by pkr887 are required to process Personal Data strictly in accordance with our instructions, under written data processing agreements that impose confidentiality and security obligations at least equivalent to those described in this Policy.

08Cookies & Tracking Technologies

The pkr887 Platform uses Cookies and similar technologies to enable core Platform functionality, improve performance and analyse usage. The following categories of Cookies are used:

• Strictly necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security Cookies and load-balancing identifiers. These cannot be disabled without impairing Platform functionality.
• Performance and analytics Cookies: Used to collect anonymised or pseudonymised data about how Users interact with the Platform — such as page views, session duration and feature usage — to help us improve the user experience.
• Functional Cookies: Used to remember your preferences, such as language settings, game lobbies visited and responsible gambling tool configurations.
• Marketing Cookies: Used to deliver relevant promotional content. These are only deployed where you have consented to marketing communications.

You may manage Cookie preferences through your browser settings. Disabling non-essential Cookies will not prevent you from using the Platform but may affect certain features. Please note that Cookie controls in your browser operate at the device level and may not fully reflect our Consent management configuration.

09Data Retention

pkr887 retains your Personal Data only for as long as is necessary to fulfil the purposes described in this Policy, comply with legal and licensing obligations, resolve disputes and enforce our agreements.

• Account and transaction data is retained for a minimum of five (5) years following Account closure, in accordance with AML and licensing record-keeping requirements. This period may be extended where required by applicable law or ongoing regulatory investigation.
• KYC documentation is retained for at least five (5) years following the end of the customer relationship, or longer where required by law.
• Communication records (support transcripts, email correspondence) are retained for up to three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or compliance purposes.
• Responsible gambling data — including self-exclusion records — is retained for the full duration of the exclusion period plus a minimum of five (5) years thereafter, to prevent re-registration during the exclusion period and to support harm-prevention obligations.
• Marketing consent records are retained for the duration of the consent plus a reasonable period thereafter to demonstrate compliance.

At the end of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data disposal procedures.

10Data Security

pkr887 implements technical and organisational security measures appropriate to the risk associated with processing your Personal Data. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of Sensitive Data — including KYC documents and financial account details — at rest.
• Role-based access controls restricting access to Personal Data to authorised personnel only, on a strict need-to-know basis.
• Multi-factor authentication for internal systems handling Personal Data.
• Regular penetration testing, vulnerability scanning and security audits.
• Incident response procedures, including breach notification protocols where required by applicable law.

While pkr887 takes all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pkr887 will notify affected Users and relevant authorities in accordance with applicable legal obligations.

11International Data Transfers

pkr887 operates internationally and your Personal Data may be transferred to, and processed in, countries other than your country of residence — including the jurisdiction in which pkr887 holds its operating licence. Where Personal Data is transferred outside the European Economic Area (EEA) or equivalent jurisdictions with recognised data protection frameworks, pkr887 ensures that appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by relevant supervisory authorities.
• Binding Corporate Rules where applicable within our group of companies.
• Transfers to countries recognised as providing an adequate level of data protection.

Details of the specific safeguards applied to any international transfer of your Personal Data are available upon written request to [email protected].

12Your Rights

Subject to applicable law and our licensing obligations, you have the following rights with respect to your Personal Data held by pkr887:

• Right of Access: You may request a copy of the Personal Data pkr887 holds about you, together with information about how it is processed ("Subject Access Request").
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our overriding legal and regulatory retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Where you object to direct marketing, pkr887 will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please submit your request in writing to [email protected] with the subject line "Data Rights Request". Include your registered Account username to help us locate your records. We will respond within 30 days of receipt of a valid request. We may require proof of identity before processing your request to prevent unauthorised access to your data.

Please note that certain rights may be limited or overridden by our AML, KYC and licensing obligations. Where we are unable to comply with a request in full, we will explain the reasons and inform you of any applicable exemptions.

13Minors

The pkr887 Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required under the operator's licensing jurisdiction. pkr887 does not knowingly collect or process Personal Data from individuals under the applicable minimum age. Age verification is enforced as part of the mandatory KYC process.

If pkr887 becomes aware that Personal Data has been collected from a minor, we will immediately suspend the relevant Account, delete the associated data to the extent not required for regulatory compliance, and take such further steps as are appropriate under our licensing obligations.

If you are a parent or guardian and believe that a minor in your care has registered an Account with pkr887, please contact us immediately at [email protected].

14Third-Party Services

The pkr887 Platform integrates third-party technology components — including game studios, sports data providers, payment gateways, analytics tools and identity verification services. Each of these providers operates under its own privacy policy and terms of service. pkr887 is not responsible for the privacy practices of third-party services that operate independently of the Platform.

Where pkr887 shares Personal Data with third-party Data Processors, it does so under written agreements that require those processors to handle data in accordance with applicable data protection standards and to use it solely for the purposes specified by pkr887. We do not authorise third-party processors to use your data for their own purposes without your separate consent.

15Policy Amendments

pkr887 reserves the right to amend, update or replace this Privacy Policy at any time. Where changes are material — for example, where we introduce new categories of processing or change the legal basis on which we rely — we will provide reasonable advance notice to registered Users via the email address associated with their Account, or through a prominent notice on the Platform.

The "Last Updated" date at the top of this document reflects the date on which the most recent version of this Policy came into effect. Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with any amendment, you should cease using the Platform and may request Account closure.

16Contact Us

For any queries relating to this Privacy Policy, the exercise of your data rights, or any concerns about how your Personal Data is being handled, please contact the pkr887 Data Protection team through the following channels:

• Email: [email protected] — use the subject line "Privacy / Data Rights Enquiry" and include your registered username.
• Live Chat: Available 24/7 via the support icon on the Platform. For initial privacy queries, our support team can direct your request to the appropriate team.

pkr887 aims to respond to all data rights requests and privacy enquiries within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reasons for it.

For general account and platform queries, please refer to our FAQ page. For a full understanding of your rights and obligations as a Platform user, please read our Terms & Conditions.