kkpkr Privacy Policy

This Privacy Policy applies to all personal data collected and processed by kkpkr in connection with the operation of the kkpkr online gaming platform at kkpkr.net, including all associated sub-domains, mobile applications (where applicable), and any other digital services operated by kkpkr.

For the purposes of applicable data protection legislation, kkpkr — the internationally licensed operating entity behind kkpkr.net — acts as the data controller in respect of all personal data collected directly from members and prospective members through the Platform. Where kkpkr engages third-party processors (such as payment providers or KYC verification platforms), those parties act as data processors under contractual instruction from kkpkr.

This Policy applies to all persons who access or use the kkpkr Platform, whether as registered members, visitors browsing without an account, or former members whose data is retained for legal or regulatory purposes following account closure.

kkpkr collects the following categories of personal data from members and Platform users:

kkpkr does not collect full payment card numbers, CVV codes, or bank account PINs at any point. Payment processing is handled by PCI-DSS compliant third-party payment gateways. kkpkr receives only a transaction reference and masked payment identifier from those gateways.

kkpkr collects personal data through the following mechanisms:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, setting responsible gaming limits, or contacting support.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs, collected via server logs and first-party cookies.
• Third-party sources: Where KYC verification requires cross-referencing against external databases (for example, CNIC validation), data may be received from licensed identity verification service providers engaged by kkpkr. kkpkr does not purchase or obtain personal data from data brokers or marketing data aggregators.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners, limited to what is necessary to credit or debit your kkpkr wallet.

kkpkr processes personal data only where a lawful basis exists for doing so. The principal legal bases on which kkpkr relies are as follows:

• Contractual necessity: Processing required to fulfil the contract between kkpkr and its members — including account management, payment processing, game provision, and withdrawal handling — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with kkpkr's international gaming licence obligations, including KYC verification, anti-money laundering monitoring, and responsible gaming record-keeping, is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, IT infrastructure management, and improving the quality of kkpkr's services is conducted on the basis of kkpkr's legitimate business interests, where those interests are not overridden by members' privacy rights.
• Consent: Where kkpkr processes data for optional purposes — such as sending promotional communications by email or SMS — this is done only with your prior consent, which you may withdraw at any time through your account settings or by contacting support.

kkpkr uses the personal data it holds for the following specific purposes:

1. Account creation and management: Creating and maintaining your kkpkr member account, authenticating your identity at login, managing your PKR wallet, and communicating account-related notifications.
2. KYC and regulatory compliance: Verifying your identity and age in fulfilment of kkpkr's licence obligations, conducting anti-money laundering checks, and maintaining records required by kkpkr's licence authority.
3. Payment processing: Processing deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported channels, and processing withdrawals to your verified payment account.
4. Game provision: Delivering casino games, live dealer tables, slots, cricket sportsbook, Dragon Tiger, Keno, and other gaming services through the Platform.
5. Fraud prevention and security: Monitoring for suspicious account activity, detecting and preventing multi-accounting, identifying unauthorised access attempts, and protecting the integrity of the Platform.
6. Responsible gaming: Administering deposit limits, session controls, cool-off periods, and self-exclusion requests, and monitoring gaming patterns where required by kkpkr's responsible gaming obligations.
7. Customer support: Responding to your support queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
8. Service improvement: Analysing anonymised and aggregated usage data to improve Platform performance, game selection, payment processing efficiency, and user experience.
9. Marketing communications (with consent only): Sending promotional offers, bonus announcements, and platform updates by email or SMS, where you have provided prior consent. You may opt out at any time.

kkpkr does not sell, rent, or trade personal data. Data is shared with third parties only in the following circumstances and only to the minimum extent necessary:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment partners receive transaction data strictly as required to process deposits and withdrawals. These providers operate under their own data protection obligations and are selected by kkpkr in part on the basis of their security standards.
• KYC and identity verification providers: Licensed third-party identity verification platforms receive the identity documents and selfies you submit for KYC, for the sole purpose of verifying their authenticity. These providers are contractually bound to use this data exclusively for the verification service and to delete it after the defined processing window.
• Game providers: Certified game providers such as Evolution and Pragmatic Play receive session data necessary to deliver games within the kkpkr Platform. These providers are bound by their licensing terms and kkpkr's data processing agreements to restrict use of this data to game delivery only.
• Licensing and regulatory authorities: kkpkr may be required to disclose member data to its licensing authority or to lawful regulatory or law enforcement requests. kkpkr will comply with valid legal process and, where lawfully permitted to do so, will notify affected members of any such disclosure.
• IT and infrastructure providers: Cloud infrastructure and hosting providers that support kkpkr's technical operations process data under strict data processing agreements that prohibit any independent use of member data.

As an internationally operated platform, kkpkr may transfer personal data to countries outside Pakistan for processing. This may occur when data is processed by cloud infrastructure providers, game studios, or KYC verification platforms located in other jurisdictions.

Where such transfers occur, kkpkr takes steps to ensure that your data receives an equivalent level of protection to that described in this policy. These steps include entering into standard contractual clauses with data recipients, selecting processors operating under recognised data protection frameworks, and conducting due diligence on the data protection standards of any jurisdiction to which data is transferred.

kkpkr does not transfer personal data to jurisdictions that kkpkr considers to present an unacceptably high risk to the privacy or security of that data, based on an ongoing assessment of applicable international standards.

kkpkr implements a layered set of technical and organisational security measures to protect member data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your browser or device and kkpkr's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock indicator in your browser confirms this encryption is active during your session.
• Encryption at rest: Personal data and financial records stored in kkpkr's databases are encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are accessible only to authorised security personnel.
• Access controls: Access to member data within kkpkr's internal systems is governed by role-based access controls. Staff access to personal data is limited to roles that genuinely require it, and all access is logged and subject to periodic review.
• Two-factor authentication: Internal systems holding member data require multi-factor authentication for all kkpkr personnel. Members are also encouraged to enable two-factor authentication on their own accounts for an additional layer of protection.
• Regular security testing: kkpkr engages independent security firms to conduct penetration testing and vulnerability assessments on a regular scheduled basis and following any significant infrastructure change.
• Data breach response: kkpkr maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to members' rights, kkpkr will notify affected members and the relevant licensing authority without undue delay.

kkpkr retains personal data for the minimum period necessary for the purposes described in this policy, subject to any longer retention periods required by applicable law or licensing obligations:

Following the expiry of the applicable retention period, personal data is either securely deleted from kkpkr's systems or anonymised in a manner that permanently prevents re-identification of the individual to whom it relates.

As a kkpkr member, you hold the following rights in respect of your personal data. These rights may be subject to certain limitations where legal obligations or legitimate interests require kkpkr to retain or continue processing your data notwithstanding your request.

kkpkr uses cookies and similar technologies to maintain your session, remember your preferences, and support Platform security. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function, including session authentication tokens, security tokens, and load-balancing cookies. These cannot be disabled without preventing your use of the Platform.
• Functional cookies: Store your language preferences, display settings, and responsible gaming tool configurations so that these are preserved across sessions. You may disable these in your browser settings, but doing so may affect your experience.
• Analytics cookies (first-party only): kkpkr uses first-party analytics cookies to understand aggregate Platform usage — for example, which game categories are most popular or where members encounter technical errors. This data is analysed in anonymised, aggregated form only and is never linked to individual member accounts for analytics purposes.

kkpkr does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You will not be tracked across other websites based on your activity on kkpkr. Your browser's cookie management settings allow you to view, restrict, or delete any cookies placed by kkpkr at any time.

The kkpkr Platform is strictly for adults aged 21 and above. kkpkr does not knowingly collect personal data from persons under the age of 21, and any account found to have been registered by a person under the age of 21 will be closed immediately upon discovery.

If you believe that kkpkr may hold personal data relating to a person under the age of 21, please contact the support team immediately. kkpkr will investigate the matter and, where confirmed, delete the relevant data without undue delay in accordance with applicable law.

kkpkr collects and retains data relating to responsible gaming tools — including deposit limits set, self-exclusion requests, cool-off periods, and reality check configurations — for specific and necessary purposes:

• To administer and enforce the tool you have requested, including preventing access during an active self-exclusion period even if you attempt to re-register.
• To fulfil reporting and record-keeping obligations under kkpkr's international gaming licence, which requires licensees to maintain records of responsible gaming interventions.
• To monitor for patterns of gaming behaviour that may indicate a member is experiencing difficulty, where kkpkr's licence obligations or internal responsible gaming policies require such monitoring.

Self-exclusion records are retained permanently to enable kkpkr to enforce exclusions over time, including across any future registration attempts. Other responsible gaming data is retained for the periods set out in the retention table in Section 9 above. This data is handled with particular sensitivity and is accessible only to kkpkr staff whose roles require it.

For full details on the responsible gaming tools available to kkpkr members, please read the Responsible Gaming Policy.

kkpkr may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing activities, or the services we provide. Where changes are material, we will notify registered members by email and/or by a prominent notice on the Platform at least seven (7) days before the updated policy takes effect.

The effective date at the top of this document will always reflect the date on which the current version became operative. We recommend reviewing this policy periodically. Your continued use of the Platform after any update constitutes acceptance of the revised policy.

If you have questions, concerns, or requests relating to this Privacy Policy or kkpkr's handling of your personal data, please contact us through the following channels:

• Live Support (preferred for urgent matters): Available 24/7 via the live chat widget on kkpkr.net. Identify your query as a privacy or data rights matter for priority routing.
• Support Email: [email protected] — mark the subject line with "Privacy Request" or "Data Rights Request" to ensure correct routing to the compliance team.
• Response Time: Acknowledgement within 5 business days; substantive response within 30 calendar days of receipt of a complete and verified request.

kkpkr takes all privacy enquiries seriously. If after contacting us you are not satisfied with our response, you have the right to escalate your concern to kkpkr's licence authority or to the data protection authority in your jurisdiction, if one exists and has jurisdiction over kkpkr's processing activities.