pkr86 Privacy Policy

This Privacy Policy ("Policy") describes how pkr86 ("pkr86", "we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "User") who access and use the pkr86 online gaming platform available at pkr86.net.

This Policy applies to all personal data collected through: the pkr86 website and all subdomains; the pkr86 account registration and login processes; all gaming transactions including cricket betting, live casino, slots, Mine, and Fruit Shop; payment processing via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast; customer support interactions; and marketing communications where you have provided consent.

By registering a pkr86 Account and using the pkr86 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you must not use the pkr86 platform.

pkr86 is the data controller responsible for the personal data processed under this Policy. As data controller, pkr86 determines the purposes for which personal data is collected and the means by which it is processed. pkr86 is responsible for ensuring that all data processing activities comply with applicable data protection standards under its operating framework.

For all data-related enquiries, requests, or complaints, the designated point of contact is the pkr86 Data & Privacy team, reachable via [email protected] with the subject line "Privacy Request." All privacy requests are acknowledged within 3 business days and resolved within 15 business days unless additional complexity requires a formal extension, which will be communicated to you.

pkr86 collects personal data through several categories of collection. The following table summarises what we collect, at which point, and why:

3.1 Data We Do Not Collect

pkr86 does not collect full bank card numbers or card security codes. pkr86 does not collect sensitive personal data beyond what is necessary for CNIC-based age and identity verification. pkr86 does not use facial recognition technology beyond basic selfie-to-CNIC photo matching for KYC purposes.

pkr86 processes your personal data exclusively for the following purposes:

4.1 Account Management & Service Delivery

To create and maintain your pkr86 Account, verify your identity and age (21+) via CNIC, provide access to all Gaming Products, process your PKR deposits and withdrawals, and deliver customer support via live chat and email. This processing is necessary for the performance of your contract with pkr86.

4.2 Identity Verification (KYC)

To comply with pkr86's operating standards, all Accounts must undergo CNIC-based KYC verification. CNIC data is processed to confirm your full legal name, date of birth (confirming 21+ eligibility), and Pakistani identity. CNIC images are stored in encrypted form and are not used for any purpose beyond identity verification and fraud prevention.

4.3 Payment Processing

To facilitate PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast; to process withdrawal requests to your registered payment methods; and to maintain complete transaction records for fraud prevention and financial audit purposes.

4.4 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity, multiple-account violations, money laundering, underage access, and other misuse of the pkr86 platform. Technical data including IP addresses and device fingerprints are processed for this purpose. Suspicious activity flags may be shared with relevant authorities where legally required.

4.5 Responsible Gaming

To monitor gameplay patterns for indicators of problem gambling behaviour, administer self-imposed limits and cooling-off periods, process self-exclusion requests, and ensure that players who have self-excluded do not receive promotional communications. This processing is carried out in the interests of player welfare.

4.6 Platform Improvement & Analytics

To analyse aggregated, anonymised platform usage data to improve the pkr86 user experience, optimise game loading performance for Pakistani 4G networks, and develop new gaming features. Analytics data used for this purpose is anonymised and cannot be traced back to individual accounts.

4.7 Marketing Communications

To send promotional offers, bonus notifications, and platform updates to registered Account holders who have not opted out of such communications. You may opt out of marketing communications at any time by contacting [email protected] with the subject "Unsubscribe." Opt-out requests are processed within 5 business days.

pkr86 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the pkr86 Account agreement with you — including account creation, game access, and payment processing;
• Legitimate Interests: Processing carried out for pkr86's legitimate business interests where these do not override your fundamental rights — including fraud prevention, platform security, and aggregate analytics;
• Legal Obligation: Processing required to comply with pkr86's applicable operating standards, including KYC obligations, transaction record-keeping, and cooperation with regulatory or law enforcement requests;
• Consent: Processing for marketing communications, where your consent has been obtained at registration and may be withdrawn at any time without affecting your right to use the pkr86 platform.

pkr86 does not sell or rent your personal data. We share personal data only with the following categories of recipients, strictly on a need-to-know basis:

6.1 Payment Processors

JazzCash, EasyPaisa, and partner banking institutions receive the minimum data required to process your PKR deposit or withdrawal request. This typically includes your registered mobile number or bank account reference and transaction amount. Payment processors are subject to their own data protection obligations and pkr86's contractual data protection requirements.

6.2 Identity Verification Service Providers

Third-party KYC service providers may assist in processing CNIC verification. These providers operate under strict data processing agreements with pkr86 and are prohibited from using your identity data for any purpose beyond verification. CNIC data is not retained by third-party KYC providers beyond the verification process.

6.3 Game Content Providers

Certified game studios and live casino providers whose products are available on pkr86 may receive anonymised session data (e.g. game round IDs, bet amounts) for game integrity and certification purposes. These providers do not receive your personal identity data.

6.4 Legal & Regulatory Authorities

pkr86 may disclose personal data to law enforcement, regulatory authorities, or courts of competent jurisdiction where required to do so by applicable law, or where such disclosure is necessary to protect the legal rights of pkr86 or prevent serious harm.

pkr86 uses cookies and similar tracking technologies to operate the platform. The following categories of cookies are used:

• Essential Cookies: Required for platform operation, session management, and security (including CSRF protection and login state). These cannot be disabled without disabling core platform functionality;
• Performance Cookies: Anonymised analytics data used to understand how Users interact with pkr86 — page load times, navigation paths, feature usage. This data is aggregated and does not identify individual Users;
• Functional Cookies: Cookies that remember your preferences, such as language settings and display preferences, to improve your pkr86 experience;
• Security Cookies: Used to detect and prevent fraudulent activity, including multi-account detection and bot identification.

pkr86 does not deploy third-party advertising cookies or social media tracking pixels. You can manage cookies through your browser settings. Disabling non-essential cookies does not affect your ability to access or use pkr86's Gaming Products.

pkr86 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of the account relationship and for a period of 5 years following account closure, to satisfy financial record-keeping and anti-money-laundering obligations;
• KYC / Identity Data: Retained for a minimum of 5 years from the date of verification, in accordance with applicable identity verification standards;
• Transaction Records: All PKR deposit and withdrawal records are retained for a minimum of 7 years for financial audit and fraud investigation purposes;
• Bet and Gaming Records: Retained for 5 years following the relevant gaming activity;
• Support Communications: Live chat transcripts and email correspondence retained for 3 years from the date of interaction;
• Technical / Log Data: Retained for 12 months for security monitoring purposes, then purged or anonymised.

At the end of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

pkr86 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and pkr86 servers;
• AES-256 encryption for personal and financial data stored at rest;
• OTP-based two-factor authentication for Account access, with optional 2FA setup for additional security;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Automated intrusion detection and real-time security monitoring of platform infrastructure;
• Regular security audits and penetration testing by independent security specialists;
• Data breach response procedures with a commitment to notify affected Users within 72 hours of discovery where legally required.

Subject to applicable legal limitations and retention obligations, you have the following rights in relation to your personal data held by pkr86:

• Right of Access: You may request a copy of all personal data pkr86 holds about you. We will provide this in a structured, commonly used, machine-readable format within 15 business days;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Account details can be updated directly via your Account settings or by contacting support;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right in specific circumstances (e.g. transaction records required for financial compliance);
• Right to Restrict Processing: You may request that pkr86 restrict processing of your personal data in certain circumstances — for example, where you contest its accuracy pending verification;
• Right to Data Portability: You may request that pkr86 provide your personal data in a portable format for transfer to another service provider, where technically feasible;
• Right to Object: You may object to processing of your personal data based on legitimate interests, including direct marketing. Marketing opt-outs take effect within 5 business days;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact pkr86's Data & Privacy team at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 3 business days and respond within 15 business days.

Parents and guardians who believe that a person under 21 in their household may have accessed pkr86 are urged to contact [email protected] immediately. We take underage access seriously and will act promptly on any such report.

The pkr86 platform does not contain links to external third-party websites for advertising or promotional purposes. Where any third-party integration exists (for example, payment processor interfaces), those third parties operate under their own privacy policies in respect of data they collect directly from you. pkr86 is not responsible for the privacy practices of third-party services accessed outside the pkr86.net domain.

pkr86 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable legal requirements, or platform features. Material changes to this Policy will be communicated to registered Account holders via OTP notification to their registered Pakistani mobile number and/or by prominent notice on the pkr86 platform, with a minimum of 7 days notice before the amended Policy takes effect.

Your continued use of pkr86 following the effective date of any amended Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically. The "Last Revised" date at the top of this document will always reflect the most recent update.

For all data protection and privacy enquiries, data rights requests, or complaints regarding pkr86's handling of your personal data, please contact our Data & Privacy team:

• Email: [email protected] — Subject line: "Privacy Request" or "Data Rights Request"
• Live Chat: Available 24/7 from any pkr86 page — first response under 3 minutes
• Response Commitment: Acknowledgement within 3 business days; full resolution within 15 business days

If you are dissatisfied with pkr86's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority applicable under the laws of pkr86's operating jurisdiction. Details of the applicable authority will be provided upon request.

pkr86 is committed to resolving privacy concerns directly and transparently. We encourage Users to contact us first before escalating to a supervisory authority, as the majority of privacy concerns can be resolved through direct communication with our Data & Privacy team.