PKR99 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy explains how pkr99, operating the website at pkr99.best ("pkr99", "we", "us" or "our"), collects, processes, stores and shares the personal information of players and visitors who use the pkr99 platform.

pkr99 is the data controller for all personal information collected through pkr99.best, associated mobile interfaces and all connected services including casino games, sports betting, virtual sports and promotional tools.

This policy is addressed to Pakistani players and written in plain language so that every pkr99 user understands exactly how their data is handled. We do not believe in privacy policies that are deliberately difficult to read. If any section is unclear, contact us at support@pkr99.best and we will explain it directly.

pkr99 collects the minimum data necessary to operate the platform, fulfil our legal obligations and provide you with a safe, personalised experience. The categories of personal data we collect are described below.

pkr99 does not collect sensitive personal data such as biometric data, medical records or religious beliefs. We do not collect data beyond what is necessary for the purposes described in this policy.

pkr99 collects personal data through several channels, all of which are disclosed here:

• Directly from you: When you register a pkr99 account, make a deposit or withdrawal, contact our support team or respond to a survey or promotion, you provide us with personal data directly.
• Automatically during use: When you visit pkr99.best or use any pkr99 product, we automatically collect technical and usage data through cookies, server logs and similar tracking technologies. This happens whether or not you are logged in.
• From payment providers: When you make a deposit or withdrawal via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT or card, your payment provider shares transaction confirmation data with pkr99 to process your transaction.
• From identity verification services: Where pkr99 uses a third-party KYC provider to verify your identity documents, that provider returns verification results and may share document data with pkr99 for storage.
• From fraud prevention systems: pkr99 uses fraud monitoring tools that may collect and analyse transaction patterns, device fingerprints and behavioural signals to identify suspicious activity.

pkr99 uses your personal data for the following purposes. Against each purpose, we have identified the legal basis that justifies the processing (see Section 5).

• Account creation and operation: To register your pkr99 account, verify your identity, maintain your account settings, process your bets and transactions, and provide customer support.
• Payment processing: To process deposits and withdrawals through your chosen payment method in Pakistani rupees, verify payment ownership, and maintain transaction records.
• Legal and regulatory compliance: To carry out anti-money laundering (AML) checks, know your customer (KYC) verification, and comply with all applicable legal obligations, including preserving records for audit and investigation purposes.
• Fraud prevention and platform security: To detect, investigate and prevent fraudulent transactions, account takeovers, bonus abuse, prohibited conduct and other security threats to the pkr99 platform and its players.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusions and deposit limits, and provide the tools described in the pkr99 Responsible Gaming section.
• Platform improvement: To analyse usage patterns, game performance, payment conversion rates and user journeys so that pkr99 can improve its products and services over time.
• Marketing communications: To send promotional offers, bonus notifications and news about pkr99 products to players who have opted in to marketing. See Section 12 for your opt-out rights.

pkr99 processes your personal data based on the following legal grounds depending on the purpose:

• Contractual necessity: Processing your identity, contact and financial data is necessary to fulfil the contract between you and pkr99 — your account agreement. Without this processing, pkr99 cannot provide the service.
• Legal obligation: AML checks, KYC verification and record-keeping are required by law. pkr99 must process and retain certain data regardless of your preferences in order to comply with these obligations.
• Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring and product analytics are carried out on the basis of pkr99's legitimate interest in operating a safe and sustainable platform. These interests do not override your fundamental rights.
• Consent: Marketing communications are sent only with your explicit consent. You can withdraw this consent at any time — see Section 12.

pkr99 does not sell your personal data to any third party. We share data only where necessary and only with categories of recipients described below:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banks processing IBFT transactions and card processors receive the minimum transaction data necessary to complete your deposit or withdrawal. Each payment provider operates under its own privacy policy.
• Game providers: Casino game providers may receive a pseudonymous player identifier, bet amounts and game session data to enable game functionality and resolve technical disputes. They do not receive your name, mobile number or payment details.
• Identity verification providers: If pkr99 uses a third-party KYC service, your identity document and personal details are shared with that provider for verification purposes only. Verification providers are contractually bound to handle your data securely.
• Fraud prevention services: Device fingerprint data, IP addresses and transaction patterns may be shared with fraud monitoring services to detect and prevent prohibited activity on pkr99.
• IT and hosting providers: The pkr99 platform is hosted on secure servers managed by contracted IT providers. These providers process data on pkr99's behalf under strict data processing agreements and do not use your data for their own purposes.
• Legal and regulatory authorities: Where required by law, court order or regulatory instruction, pkr99 will disclose personal data to competent authorities. This includes law enforcement investigations where required.

All third parties with whom pkr99 shares data are required to maintain appropriate technical and organisational security measures and to handle your data only for the specific purpose for which it was shared.

pkr99.best uses cookies and similar technologies to operate core platform functions, remember your preferences and analyse how the site is used. The categories of cookies used by pkr99 are:

• Strictly necessary cookies: These enable you to log in, maintain your session, access your account securely and complete transactions. They cannot be disabled without breaking core functionality.
• Performance cookies: These collect anonymised data about how visitors use pkr99.best — which pages are most visited, where errors occur, how quickly pages load. The data is used to improve the platform and is not linked to your personal account.
• Functional cookies: These remember your language preference, display settings and whether you have dismissed certain notifications. They make your pkr99 experience more consistent across sessions.
• Marketing cookies: Where you have consented to marketing, pkr99 may use cookies to understand which promotions you have seen and to serve relevant offers. You can opt out of marketing cookies via your browser settings or by withdrawing marketing consent in your pkr99 account.

Most browsers allow you to control cookie settings. Blocking strictly necessary cookies will prevent you from using pkr99 normally. For all other cookie types, you can manage preferences through your browser's cookie settings. Changes to cookie settings take effect on your next pkr99 session.

pkr99 retains your personal data for only as long as necessary for the purpose for which it was collected, or as required by law. Retention periods by data type are as follows:

• Account and identity data: Retained for the lifetime of your active pkr99 account and for a minimum period of five years after account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five years from the date of each transaction, and longer if required by a specific legal or regulatory obligation or ongoing investigation.
• Gaming records: Bet history, game logs and session data are retained for a minimum of three years from the date of each session.
• Support and communication data: Support tickets, live chat transcripts and email correspondence are retained for two years unless the content is relevant to an ongoing dispute or legal proceeding, in which case it is retained until the matter is resolved.
• Marketing data: Marketing preferences and communication logs are retained until you withdraw consent or request deletion, after which they are removed from marketing systems within 30 days.
• Technical and usage data: Anonymised analytics data is retained indefinitely. Identifiable technical data such as IP logs is retained for 12 months.

When retention periods expire, pkr99 securely deletes or anonymises your personal data so that it can no longer be linked back to you.

pkr99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:

• SSL/TLS encryption: All data transmitted between your device and pkr99.best is encrypted using TLS. You can verify this by the padlock icon in your browser's address bar.
• Encrypted data storage: Sensitive personal data — including identity documents, financial data and passwords — is stored in encrypted form at rest. Passwords are hashed using a one-way algorithm and are never stored in plain text.
• Access controls: Access to personal data within pkr99 is restricted on a need-to-know basis. Staff access to player data is logged, monitored and subject to regular review.
• Two-factor authentication: pkr99 provides optional two-factor authentication for player accounts. Internal pkr99 system access requires two-factor authentication for all staff.
• Fraud monitoring: Real-time transaction monitoring and device fingerprinting detect unusual activity patterns that may indicate a security breach or account compromise.
• Security testing: pkr99's platform infrastructure undergoes regular security assessments including penetration testing to identify and remediate vulnerabilities before they can be exploited.

As a pkr99 player, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@pkr99.best with the subject line "Data Rights Request".

pkr99 is strictly for users aged 18 and over. pkr99 does not knowingly collect personal data from anyone under 18. If pkr99 becomes aware that personal data has been collected from a person under 18, that account will be immediately suspended and all associated personal data deleted, except where retention is required for legal or regulatory reasons relating to the investigation of under-age account access.

If you are a parent or guardian and believe your child has created a pkr99 account, contact us immediately at support@pkr99.best. We will investigate and act within 24 hours of a verified report.

pkr99 will only send you promotional emails, SMS messages or push notifications if you have explicitly opted in to marketing communications during registration or subsequently through your account settings. Marketing communications may include bonus offers, PSL betting promotions, new game announcements and other pkr99 news.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any pkr99 marketing email.
• Updating your communication preferences in your pkr99 account settings under "Notifications".
• Contacting pkr99 support at support@pkr99.best and requesting removal from marketing lists.

Opting out of marketing will not affect transactional communications — pkr99 will still send you confirmation emails for deposits and withdrawals, security alerts, and essential account notifications. These cannot be turned off because they are necessary for the operation of your account.

pkr99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform functionality. When material changes are made, pkr99 will:

• Update the "Last Updated" date at the top of this page.
• Display a notice when you next log in to your pkr99 account.
• Send an email notification to your registered address if the changes significantly affect how your personal data is used.

Continued use of the pkr99 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should close your account before the changes take effect.

All previous versions of the pkr99 Privacy Policy are available on request by contacting support@pkr99.best.

For any questions, concerns or requests relating to this Privacy Policy or how pkr99 handles your personal data, please reach out through any of the following channels:

• Email: support@pkr99.best — mark the subject line "Privacy Enquiry" for routing to the relevant team.
• Data Rights Requests: Use subject line "Data Rights Request" when submitting an access, erasure or portability request by email.
• Live Chat: Available 24/7 on pkr99.best — suitable for general privacy questions.

pkr99 is committed to addressing your privacy concerns promptly and transparently. If after contacting pkr99 you feel your concern has not been adequately addressed, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.