pkrapin Privacy Policy

1. Introduction and Scope

1.1 This Privacy Policy ("Policy") describes how pkrapin ("pkrapin," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "user," or "data subject") who access or use the pkrapin platform, including the website at pkrapin.net, the pkrapin Casino, sports betting services, slot games, and all related account management features including the pkrapin login system.

1.2 This Policy applies to all personal data processed by pkrapin in connection with the provision of its online gaming and betting services to players in Pakistan and other jurisdictions served by the platform. It covers data collected through the website, account registration forms, payment processing flows, customer support interactions, and technical platform usage.

1.3 pkrapin is committed to handling your personal data in a manner that is transparent, lawful, fair, and consistent with the data protection principles observed under its international gaming licence. We recognise that Pakistani players entrust us with sensitive personal and financial information, and we treat that trust with the utmost seriousness.

1.4 This Policy should be read alongside pkrapin's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to how pkrapin manages your account and personal information.

2. Data Controller Information

2.1 pkrapin acts as the data controller in respect of the personal data it collects and processes from registered users. As data controller, pkrapin determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully and in accordance with this Policy.

2.2 pkrapin operates under an international gaming licence. For all privacy-related queries, data access requests, or complaints, you may contact the pkrapin Data Protection team at [email protected], clearly marking your correspondence "Data Privacy Request" in the subject line.

2.3 Where pkrapin engages third-party service providers to process personal data on its behalf — such as KYC verification providers, payment processors, and fraud detection services — those providers act as data processors and are contractually bound to process personal data only in accordance with pkrapin's documented instructions and applicable data protection standards.

3. Data We Collect and How

3.1 Data You Provide Directly

pkrapin collects the following categories of personal data directly from you at various stages of the account lifecycle:

• At Registration: Full legal name, date of birth, CNIC (Computerised National Identity Card) number, email address, mobile phone number, city and province of residence, and a chosen username and password for your pkrapin login.
• During KYC Verification: Scanned copies or photographs of government-issued identity documents (CNIC front and back), proof of residential address (utility bill or bank statement), and proof of ownership of your registered payment method (JazzCash, EasyPaisa, or bank account).
• During Financial Transactions: Payment method identifiers (JazzCash mobile number, EasyPaisa number, HBL/UBL/Meezan account reference), transaction amounts in PKR, and source-of-funds documentation where requested for AML compliance.
• When Contacting Support: The content of your communications, including chat messages, emails, and any attachments you voluntarily provide when raising a support query or dispute.
• When Updating Your Profile: Any changes you make to your registered contact details, communication preferences, responsible gaming settings, or account security options.

3.2 Data Collected Automatically

When you access the pkrapin platform, certain technical data is collected automatically by our systems:

• IP address and approximate geolocation derived from IP (used for fraud prevention and geographic eligibility verification).
• Device information including device type, operating system version, browser type and version, and screen resolution.
• Session data including login timestamps, session duration, pages visited, game titles accessed, and features used within the pkrapin Casino and sports betting sections.
• Cookies and similar tracking technologies as described in Section 9 of this Policy.
• Betting and gaming activity logs including wager amounts, odds accepted, game outcomes, and PKR wallet balance changes.

3.3 Data from Third Parties

pkrapin may receive limited personal data about you from authorised third-party sources in the following circumstances:

• From KYC and identity verification service providers, to whom we submit your identity documents for verification against official databases.
• From fraud detection and AML screening services, which may flag your details against sanctions lists or known fraud databases.
• From payment processors, in relation to transaction status updates, chargeback notifications, or payment method verification outcomes.

4. How We Use Your Personal Data

4.1 pkrapin uses the personal data it collects for the following specific purposes:

• Account Management: Creating and maintaining your pkrapin account, processing your pkrapin login, updating your profile, and managing your PKR wallet balance.
• Identity and Age Verification: Verifying that you are who you say you are and that you meet the minimum age requirement of 21 years before allowing access to real-money gaming features.
• Payment Processing: Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment methods. Maintaining transaction records for regulatory and reconciliation purposes.
• Service Delivery: Operating the pkrapin Casino, sports betting markets (including PSL cricket betting), slot games, live dealer tables, and all other platform features you access.
• Customer Support: Responding to your queries, resolving disputes, investigating complaints, and maintaining records of support interactions for quality assurance.
• Legal and Regulatory Compliance: Meeting our obligations under our international gaming licence, including AML reporting, suspicious transaction monitoring, responsible gaming obligations, and record-keeping requirements.
• Fraud Prevention and Security: Detecting and preventing fraudulent account activity, unauthorised access, bonus abuse, match-fixing involvement, and other prohibited conduct described in the pkrapin Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators, applying account-level limits where required, and managing self-exclusion requests in accordance with our Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve platform performance, and enhance the player experience for Pakistani users.
• Marketing Communications: Sending you information about pkrapin promotions, PSL betting offers, casino bonuses, and platform updates — but only where you have provided explicit consent to receive such communications and have not subsequently withdrawn that consent.

5. Legal Bases for Processing

5.1 pkrapin processes your personal data only where it has a valid legal basis for doing so. The legal bases relied upon are as follows:

• Contract Performance: Processing necessary to create and manage your pkrapin account, operate the gaming services you have signed up to use, and process your financial transactions in PKR.
• Legal Obligation: Processing necessary to comply with pkrapin's obligations under its international gaming licence, including KYC verification, AML monitoring, responsible gaming requirements, and regulatory record-keeping.
• Legitimate Interests: Processing carried out for pkrapin's legitimate business interests, including fraud prevention, platform security, technical data analysis for service improvement, and limited direct marketing to existing customers — always balanced against your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — in particular for marketing communications and for any optional data collection not strictly required for account operation. You may withdraw consent at any time by contacting [email protected].

6. Sharing Your Personal Data

6.1 pkrapin does not sell, rent, or share your personal data with third parties for their own marketing purposes. Personal data is shared only in the following limited, controlled circumstances:

• KYC and Identity Verification Providers: Licensed third-party providers contracted by pkrapin to verify identity documents and screen against sanctions and fraud databases. These providers act under strict data processing agreements and may only use your data for the verification services they provide to pkrapin.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks receive the transaction data necessary to process your deposits and withdrawals. Each processor is subject to its own privacy policies and applicable financial regulations in Pakistan.
• Fraud Detection and AML Services: Specialist third-party services contracted by pkrapin to monitor transactions for suspicious activity, screen against sanctions lists, and provide risk scoring. These services process only the data necessary for their contracted function.
• Regulatory and Law Enforcement Authorities: pkrapin may be required to disclose personal data to its licensing regulator, financial intelligence units, tax authorities, or law enforcement agencies where legally compelled to do so. pkrapin will notify you of any such disclosure where it is legally permitted to do so.
• Technology and Infrastructure Providers: Cloud hosting, database, and platform infrastructure providers who process data on pkrapin's behalf under contractual data processing agreements. These providers do not have independent access to your personal data beyond what is necessary for their infrastructure function.
• Professional Advisors: Legal, accounting, and compliance advisors engaged by pkrapin may have access to personal data where strictly necessary for the advisory services they provide, subject to professional confidentiality obligations.

6.2 In the event that pkrapin undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring or successor entity as part of that transaction. You will be notified of any such transfer via your registered email address in advance.

7. International Data Transfers

7.1 pkrapin's platform serves Pakistani users and its primary data processing is conducted in connection with its international gaming licence. Some of pkrapin's contracted service providers — including KYC verification and cloud infrastructure providers — may process personal data outside of Pakistan.

7.2 Where personal data is transferred to service providers located in jurisdictions outside Pakistan, pkrapin ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under pkrapin's licensing obligations. These safeguards include contractual data processing agreements incorporating standard protective clauses, and limiting data access to only what is necessary for the contracted service.

7.3 For more information about the specific safeguards applicable to any international data transfer involving your personal data, please contact [email protected] with the subject "International Transfer Query."

8. Data Retention

8.1 pkrapin retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by pkrapin's legal and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your registered pkrapin account, plus a minimum post-closure retention period as described below.
• Post-Account-Closure Retention: Following account closure — whether initiated by you or by pkrapin — personal data including identity documents, transaction records, and gaming history is retained for a minimum of 5 years to comply with anti-money laundering record-keeping obligations under pkrapin's gaming licence.
• Support Communications: Retained for 3 years from the date of the last communication in a support thread, or longer where the communication relates to an unresolved dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of any period during which you have provided consent to receive marketing communications from pkrapin, plus 2 years thereafter as evidence of consent.
• Technical and Session Data: Retained for 12 months from collection for fraud detection and platform security purposes, after which it is anonymised or deleted.

8.2 Where retention is no longer necessary for any legitimate purpose, pkrapin will securely delete or anonymise your personal data. Anonymised data — which cannot be used to re-identify you — may be retained indefinitely for statistical and analytical purposes.

9. Cookies and Tracking Technologies

9.1 The pkrapin platform uses cookies and similar tracking technologies to operate the site, maintain your session after pkrapin login, prevent fraud, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the pkrapin platform to function. These include session authentication cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your platform preferences such as language settings, preferred sports markets, and responsible gaming display settings. Disabling these cookies may reduce your personalised platform experience.
• Analytics Cookies: Used by pkrapin's internal analytics systems to understand how players navigate the platform, which features are most used, and where technical issues may be occurring. Data collected via analytics cookies is aggregated and anonymised.
• Security and Fraud Prevention Cookies: Assist pkrapin's fraud detection systems in identifying unusual or suspicious login patterns and account activity, including detection of simultaneous logins from different geographic locations.

9.2 You can manage your cookie preferences through your browser settings. Blocking all cookies may prevent you from completing the pkrapin login or using certain platform features. pkrapin does not use third-party advertising cookies or share cookie data with external advertising networks.

10. Your Data Protection Rights

10.1 As a registered pkrapin user, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request." pkrapin will respond within 30 days of receiving a valid request:

• Right of Access: You have the right to request a copy of all personal data pkrapin holds about you, including your account profile, transaction history, gaming activity records, and any KYC documents submitted.
• Right to Rectification: If any personal data pkrapin holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections — such as name or date of birth changes — may require re-verification of identity documents.
• Right to Erasure: In certain circumstances you may request deletion of your personal data. This right is subject to overriding legal and regulatory retention obligations — for example, pkrapin cannot delete transaction records required under AML regulations regardless of an erasure request.
• Right to Restriction: You may request that pkrapin restricts processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that pkrapin provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on pkrapin's legitimate interests. pkrapin will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — including for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

10.2 pkrapin will not charge a fee for processing a data rights request unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied. pkrapin reserves the right to request proof of identity before processing any data rights request to ensure that data is not disclosed to an unauthorised third party.

11. Children and Minors

11.1 The pkrapin platform is strictly for adults aged 21 years and above. pkrapin does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the pkrapin account registration process, and KYC verification confirms age before any real-money gaming activity is permitted.

11.2 If pkrapin discovers or reasonably suspects that an account belongs to a person under the age of 21, the account will be suspended immediately, all personal data associated with the account will be reviewed, deposits will be returned to the depositing payment method, and the account will be permanently closed. Any winnings generated during the period of underage access will be forfeited.

11.3 If you have reason to believe that a minor has registered a pkrapin account, please contact [email protected] immediately so that pkrapin can take prompt action.

12. Marketing Communications

12.1 pkrapin may send you marketing communications about pkrapin promotions, PSL cricket betting offers, casino bonuses, and platform updates, but only where you have provided explicit consent to receive such communications during account registration or subsequently through your account preferences.

12.2 You may unsubscribe from pkrapin marketing emails at any time by clicking the unsubscribe link included in every marketing email, by updating your communication preferences in your account settings, or by contacting [email protected].

12.3 Unsubscribing from marketing communications does not affect transactional communications, which pkrapin must send regardless of your marketing preferences. Transactional communications include deposit confirmations, withdrawal processing updates, KYC document requests, account security alerts, responsible gaming notifications, and these Policy updates.

12.4 pkrapin does not send marketing communications to users who have activated a self-exclusion period on their account. Marketing communications are automatically suppressed for the full duration of any active self-exclusion.

13. Security Measures

13.1 pkrapin implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pkrapin's servers.
• AES-256 encryption for sensitive data stored in pkrapin's database systems, including identity documents and financial account references.
• Multi-factor authentication options for pkrapin login access, including SMS-based verification codes.
• Role-based access controls ensuring that pkrapin staff can only access personal data to the extent required for their specific job function.
• Regular security assessments and penetration testing of the pkrapin platform infrastructure.
• Automated fraud detection and anomaly monitoring systems that flag unusual account activity for human review.
• Secure destruction protocols for physical documents containing personal data.

13.2 While pkrapin takes all reasonable precautions, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own pkrapin login credentials and for notifying pkrapin immediately if you suspect any unauthorised access to your account.

14. Changes to This Policy

14.1 pkrapin may update this Privacy Policy from time to time to reflect changes in our data practices, updates to our platform features, changes in applicable regulations, or other operational requirements. The effective date at the top of this page reflects when the current version came into force.

14.2 Where changes to this Policy are material — meaning they significantly affect how your personal data is processed or your rights in relation to it — pkrapin will provide advance notice via your registered email address and will display a prominent notice on the pkrapin platform upon your next login.

14.3 Minor, non-material updates may be made without advance notice. It is your responsibility to review this Policy periodically. The most current version is always available at this URL.

14.4 Continued use of the pkrapin platform following the effective date of any Policy update constitutes your acknowledgment of the revised Policy. If you do not accept any material change, you may close your account by contacting [email protected] before the change takes effect.

15. Contact and Complaints

15.1 For all privacy-related queries, data rights requests, consent withdrawal requests, or concerns about how pkrapin handles your personal data, please contact the pkrapin Data Protection team:

• Email: [email protected] — please use the subject "Data Privacy Request" or "Privacy Complaint" as appropriate
• Response Time: pkrapin will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days
• Supported Languages: English. Support is available during Pakistan Standard Time business hours.

15.2 If you are not satisfied with pkrapin's response to a privacy complaint, you may escalate the matter to the dispute resolution body designated under pkrapin's international gaming licence. Details of the applicable escalation process are available upon request from the support team.

15.3 pkrapin takes all privacy complaints seriously and will conduct a fair, documented investigation of every complaint received. We are committed to resolving privacy concerns promptly and transparently.