PKR89 Privacy Policy

This Privacy Policy ("Policy") describes how PKR89 ("we", "us", "our", "pkr89", "the Platform") collects, uses, stores, discloses and otherwise processes personal data relating to users ("you", "your", "User") of the pkr89 website accessible at pkr89.cam and any associated mobile-optimised pages or features.

PKR89 is an English-language online gaming information platform serving the Pakistan market. We are committed to processing personal data in a lawful, fair and transparent manner, and to respecting the privacy rights of every user who interacts with our platform — whether they are based in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar or anywhere else.

By accessing or using the pkr89 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data as described in this Policy, you should not use the platform.

The following terms carry the meanings set out below throughout this Policy:

PKR89 acts as the Data Controller in respect of all personal data collected from users through the pkr89 platform. As Data Controller, we are responsible for ensuring that your personal data is processed in accordance with applicable data protection law and the commitments set out in this Policy.

Where we engage third-party service providers to process personal data on our behalf — such as payment processors, identity verification services or cloud infrastructure providers — those parties act as Data Processors and are bound by contractual obligations consistent with this Policy.

PKR89 may collect and process the following categories of personal data, depending on how you interact with the platform:

4.1 Identity & Account Data

• Full legal name
• Date of birth
• Username and encrypted password
• Gender (where provided during registration)
• Copies of government-issued identity documents provided during KYC verification (e.g., CNIC, passport)

4.2 Contact Data

• Email address
• Mobile phone number
• City and country of residence (e.g., Karachi, Lahore, Islamabad)
• Correspondence records from support interactions

4.3 Financial Data

• Transaction history (deposits, withdrawals, wager amounts)
• Payment method identifiers (e.g., masked card numbers, mobile wallet account references)
• Bank account details provided for withdrawal processing
• PKR account balances and bonus credit history

4.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system and browser version
• Pages visited, time spent on pages, clickstream data
• Login timestamps and session duration
• Error logs and platform performance data

4.5 Responsible Gambling Data

• Deposit limits, loss limits and session time limits set by the user
• Self-exclusion status and cooling-off period records
• Responsible gambling tool activation history

We collect personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, submitting a support request, setting responsible gambling limits, or updating your account profile.
• Automated collection: Technical data collected automatically as you browse and use the platform, including via cookies, log files and analytics tools.
• Payment providers: Confirmation data returned by payment processors when you make deposits or withdrawals. Payment providers referenced on this platform — including contextual references to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are mentioned for informational purposes only. We do not represent that any such provider endorses or supports gambling transactions.
• Identity verification services: Where KYC is required, third-party identity verification partners may return data confirming the validity of documents submitted.
• Fraud prevention and security tools: Risk management systems may generate data flags based on behavioural analysis and device fingerprinting.

The table below sets out the purposes for which we process personal data, together with the applicable legal basis for each processing activity:

Where we rely on consent as the legal basis for processing — particularly for marketing communications — you may withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

PKR89 does not sell your personal data. We may share personal data with the following categories of recipient only to the extent necessary for the stated purpose:

• Payment processors: To facilitate deposit and withdrawal transactions. These parties receive only the data required to complete the relevant transaction.
• Identity verification and KYC providers: To validate identity documents submitted during the account verification process.
• Fraud prevention and risk management services: To detect and prevent fraudulent account activity, money laundering and other prohibited conduct.
• IT and cloud infrastructure providers: Who host, maintain and support the platform's technical infrastructure. These parties act as Data Processors under contractual data processing agreements.
• Customer support platforms: Tools used to manage and record support ticket correspondence.
• Legal authorities and regulators: Where required by applicable law, court order or regulatory requirement. PKR89 will disclose only the minimum data required to satisfy a lawful request.
• Corporate transactions: In the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the successor entity subject to the same privacy protections.

The operation of an online platform necessarily involves data flows across international borders. Personal data collected from users — including those based in Pakistan — may be transferred to and processed in countries outside Pakistan, including countries where data protection standards may differ from those applicable in Pakistan.

Where personal data is transferred internationally, PKR89 applies appropriate safeguards to protect the data, including contractual data protection clauses with receiving parties. If you have questions about the specific safeguards applied to international transfers of your data, please contact us using the details in Section 16.

PKR89 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal and regulatory retention obligations. The following general retention principles apply:

• Active accounts: Personal data is retained for the duration of your account relationship with pkr89.
• Closed accounts: Following account closure, core identity, transaction and KYC data is typically retained for a minimum period to satisfy anti-money-laundering obligations, regulatory requirements and the applicable limitation period for legal claims. This period is commonly five to seven years from the date of closure, depending on the governing jurisdiction.
• Marketing data: If you have consented to marketing communications, your contact data for marketing purposes will be retained until you withdraw consent or opt out, at which point it will be suppressed or deleted.
• Technical and usage data: Aggregated or anonymised analytics data may be retained for longer periods as it no longer constitutes personal data once fully anonymised.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.

PKR89 uses cookies and similar tracking technologies on the platform. Cookies are small text files stored on your device that help us deliver a functional, secure and personalised experience. The following categories of cookies may be active on the platform:

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of your account or the platform experience. For detailed information on specific cookies in use, please contact our support team.

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by PKR89. To exercise any of these rights, please contact us using the details in Section 16. We will respond to all valid requests within a reasonable timeframe.

The pkr89 platform is strictly for adults aged 18 years and over — or the higher minimum age required by the applicable operator license jurisdiction. PKR89 does not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account or submitted personal data to pkr89, please contact us immediately using the details in Section 16.

PKR89 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• Encryption of data in transit using TLS protocols.
• Encryption of sensitive data at rest, including passwords and financial identifiers.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring of platform infrastructure.
• Two-factor authentication options for user accounts.
• Activity logging and anomaly detection systems to identify potential security incidents.

While we apply robust security standards, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users in accordance with applicable notification obligations.

You also bear responsibility for the security of your own account. Use a strong, unique password, enable two-factor authentication where available, and do not share your credentials with any third party. If you suspect your account has been compromised, contact support immediately.

The pkr89 platform may contain references to or integrations with third-party services, including payment providers, game content partners and data feed providers. This Privacy Policy applies solely to data processed by PKR89 in connection with the platform. It does not govern the data practices of any third-party service.

When you use a third-party payment service referenced on pkr89 — such as Easypaisa, JazzCash, Raast or any bank transfer service — your interaction with that provider is governed by the provider's own privacy policy. PKR89 is not responsible for and has no control over how those third parties collect, use or store your personal data. We strongly recommend reviewing the privacy policy of any third-party service before providing your personal information.

PKR89 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will post the updated Policy on this page with a revised effective date. We may also notify registered users of significant changes via email or an in-platform notification, where practicable.

Your continued use of the pkr89 platform after publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how we protect your personal data.

For any questions, concerns or formal requests relating to this Privacy Policy or the processing of your personal data, please contact our team. All privacy-related correspondence is handled by staff with appropriate data protection responsibilities.

Support is available 24 hours a day, 7 days a week, operating on Pakistan Standard Time (PKT, UTC+5). We respond to all enquiries in English; Urdu assistance is available on request.

When submitting a data subject rights request, please include: your full name as registered on the account, the email address associated with your account, a clear description of your request and, where relevant, any account or transaction references. This enables us to locate your data accurately and respond within the required timeframe.

If you are not satisfied with our response to a privacy concern, you may have the right to lodge a complaint with a relevant supervisory authority, depending on the data protection laws applicable in your jurisdiction.