pkr7 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

pkr7 ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform at pkr7.bid. This Privacy Policy describes how pkr7 collects, processes, stores, shares, and protects personal information in connection with the operation of its online casino and sports betting services.

This Policy applies to all individuals who access the pkr7 Platform, including registered members, prospective members who browse the site without registering, and individuals who contact pkr7's customer support team. It applies regardless of the device or method used to access the Platform — whether by mobile phone, tablet, or desktop browser.

This Privacy Policy should be read alongside pkr7's Terms & Conditions and any game-specific or promotion-specific terms published on the Platform. By accessing or using the pkr7 Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of this Privacy Policy, the data controller responsible for the processing of your personal information is the operator of the pkr7 Platform, operating under its international gaming licence. The Platform is accessible at pkr7.bid and serves members across Pakistan — including in Karachi, Lahore, Islamabad, Faisalabad, and all other cities and regions throughout the country — as well as internationally.

All data protection enquiries, rights requests, and formal privacy complaints should be directed to pkr7's data protection contact as described in Section 16 of this Policy. pkr7 takes its role as data controller seriously and maintains comprehensive internal data governance procedures to ensure ongoing compliance with its obligations.

pkr7 collects and processes the following categories of personal data, depending on your relationship with the Platform and the specific services you use:

pkr7 does not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) unless this is directly relevant to a specific compliance obligation — for example, health information provided voluntarily in connection with a responsible gaming self-exclusion request.

pkr7 collects personal data through the following primary channels:

• Direct Collection: Information you provide directly to pkr7 when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated Technical Collection: Technical data collected automatically when you access the pkr7 Platform, including IP address, device identifiers, browser type, and session logs collected via standard web server logging and analytics tools.
• Cookies and Tracking Technologies: Data collected via cookies, local storage, and similar tracking technologies as described in Section 8 of this Policy.
• Third-Party Verification Providers: Identity and document verification data received from KYC service providers used by pkr7 to validate member identities and payment method ownership in compliance with AML obligations.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment processors when deposits or withdrawals are initiated.
• Fraud Prevention Partners: Risk and fraud assessment data received from specialised fraud detection services used by pkr7 to protect the integrity of the Platform and its members.

pkr7 processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil pkr7's obligations under its Terms & Conditions — including account management, payment processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with pkr7's international gaming licence conditions, anti-money laundering (AML) regulations, KYC obligations, and any other applicable legal requirements.
• Legitimate Interests: Processing undertaken in furtherance of pkr7's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, particularly in relation to direct marketing communications. Consent-based processing can be withdrawn by you at any time without affecting the lawfulness of prior processing.

pkr7 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your pkr7 Account, verify your identity, maintain your account details, and manage your ongoing membership relationship with pkr7.
• Gaming Service Provision: To provide access to all pkr7 gaming products including casino games, live dealer tables, slots, fish hunting games, roulette, and sports betting markets including PSL cricket and UFC.
• Payment Processing: To process deposits from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other accepted payment methods, and to process withdrawal requests to your verified payment accounts in PKR.
• KYC and AML Compliance: To verify member identity, assess financial risk, conduct ongoing monitoring of account activity for signs of money laundering or fraud, and comply with reporting obligations to relevant authorities.
• Responsible Gaming: To monitor gaming activity patterns for indicators of problem gambling behaviour, administer self-exclusion and deposit limit requests, and fulfill pkr7's obligations under its licensing conditions related to responsible gaming.
• Customer Support: To respond to your enquiries, resolve complaints, manage disputes relating to game outcomes or payments, and improve the quality of pkr7's support services based on interaction history.
• Security and Fraud Prevention: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other forms of Platform misuse.
• Platform Improvement: To analyse aggregated and anonymised usage data to improve game selection, platform performance, user interface design, and overall member experience on pkr7.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory or law enforcement authorities.

pkr7 does not sell your personal data. We share personal data with third parties only in the following specific, limited circumstances:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other integrated payment processors receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.
• KYC and Identity Verification Providers: Third-party identity verification services receive the documents and personal details necessary to conduct required KYC checks on behalf of pkr7.
• Gaming Software Providers: Game providers whose software operates within the pkr7 Platform may process certain technical and gaming activity data in connection with game session delivery. Data shared is limited to what is technically necessary for game operation.
• Fraud Prevention and Security Partners: Specialist fraud detection and security service providers may receive technical data and account behaviour information for the purposes of risk assessment and fraud prevention.
• Regulatory and Legal Authorities: pkr7 may disclose personal data to gaming regulators, law enforcement agencies, financial intelligence units, courts, or other government bodies where required by law, court order, or its licensing obligations — including for AML reporting purposes.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by pkr7 may access personal data on a confidential, need-to-know basis in connection with the provision of professional services.

All third parties with whom pkr7 shares personal data are required to process that data in accordance with applicable data protection standards and pkr7's contractual requirements. pkr7 maintains data processing agreements with all relevant third-party processors.

pkr7 uses cookies and similar tracking technologies on its Platform. Cookies are small text files stored on your device that help pkr7 provide a better experience, maintain session security, and understand how the Platform is used.

You may control cookie settings through your browser's privacy settings. Please note that disabling essential cookies will prevent certain core Platform functions — including login and game access — from working correctly. pkr7 does not use third-party advertising cookies or cross-site tracking cookies that follow you across other websites.

pkr7 retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account its legal, regulatory, and business retention obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your pkr7 Account membership and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements applicable under pkr7's international gaming licence.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the date of the relevant transaction, in compliance with AML and counter-terrorism financing regulatory obligations.
• Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, for financial audit and regulatory compliance purposes.
• Customer Support Correspondence: Retained for up to three (3) years following the resolution of the relevant support interaction, except where the correspondence is relevant to an ongoing investigation or dispute.
• Technical Logs: Retained for up to twelve (12) months, except where specific events within those logs are relevant to an ongoing security investigation or regulatory inquiry.
• Self-Exclusion Records: Retained permanently where a permanent self-exclusion is in place, and for a minimum of five (5) years following the expiry of any time-limited self-exclusion period, to prevent re-registration during the exclusion period.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with pkr7's data destruction procedures.

pkr7's operations involve the processing of personal data in multiple jurisdictions, including in connection with its server infrastructure, KYC providers, gaming software partners, and payment processing networks. As a result, your personal data may be transferred to and processed in countries outside Pakistan.

Where pkr7 transfers personal data internationally, it applies appropriate safeguards to ensure that your data receives a level of protection consistent with the principles set out in this Privacy Policy, including:

• Entering into data processing agreements with international recipients that incorporate appropriate data protection clauses and security obligations.
• Restricting data transfers to jurisdictions or processors that maintain adequate data protection standards as assessed by pkr7's compliance team.
• Applying technical and organisational security measures, including encryption, to all internationally transferred data.

pkr7 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and pkr7's servers is encrypted using industry-standard SSL/TLS protocols. This applies to the login process, all account interactions, payment processing, and customer support communications.
• Password Security: pkr7 stores member passwords using one-way cryptographic hashing. Account passwords are never stored in plaintext and cannot be read by pkr7 staff.
• Two-Factor Authentication: Optional 2FA is available to all pkr7 members, providing an additional layer of login security via mobile verification code.
• Access Controls: Access to personal data within pkr7's internal systems is restricted on a strict need-to-know basis, with role-based access controls, audit logging of data access events, and regular access reviews.
• Server Security: pkr7's data infrastructure is hosted on enterprise-grade servers with firewall protection, intrusion detection systems, regular vulnerability assessments, and penetration testing conducted by qualified security professionals.
• Incident Response: pkr7 maintains a documented data breach incident response plan. In the event of a security incident, the plan prescribes clear steps for containment, investigation, notification, and remediation.

Despite pkr7's comprehensive security measures, no internet transmission or digital storage system is guaranteed to be 100% secure. Members are encouraged to protect their own accounts by using a strong, unique password and enabling two-factor authentication.

pkr7 recognises and respects the following data protection rights in relation to the personal information it holds about you. These rights may be exercised by contacting pkr7 using the details in Section 16:

• Right of Access: You have the right to request a copy of the personal data pkr7 holds about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data pkr7 holds about you.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — including where the data is no longer necessary for the purposes for which it was collected. This right is subject to pkr7's legal retention obligations.
• Right to Restrict Processing: You have the right to request that pkr7 restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is under dispute.
• Right to Data Portability: You have the right to receive a structured, machine-readable copy of personal data you have provided to pkr7, where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing of your personal data where pkr7 relies on legitimate interests as its legal basis, and where you believe your rights and freedoms override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

pkr7 will respond to all exercised data rights within 30 calendar days of receiving a valid request. In complex cases, this period may be extended by a further 60 days, in which case pkr7 will notify you of the extension and the reasons for it. pkr7 reserves the right to verify your identity before fulfilling any data rights request.

The pkr7 Platform is strictly for adults aged 21 and over. pkr7 does not knowingly collect or process personal data from persons under the age of 21. The registration process requires confirmation of minimum age, and pkr7 conducts age verification as part of its KYC process.

If pkr7 discovers that personal data has been collected from a person under the age of 21, that account will be closed immediately, all associated data will be deleted to the extent not required to be retained for regulatory compliance purposes, and any funds deposited will be returned following appropriate verification.

Any person who believes that pkr7 may have inadvertently collected data from a minor is encouraged to contact pkr7 immediately at the contact details provided in Section 16.

With your consent, pkr7 may send you marketing communications about pkr7's promotions, new game launches, seasonal offers, VIP programme updates, and other information about the Platform and its services. These communications may be delivered via email or in-platform notifications.

You may opt out of receiving marketing communications from pkr7 at any time by:

• Updating your communication preferences in your pkr7 Account settings.
• Using the unsubscribe link included in any marketing email sent by pkr7.
• Contacting pkr7's customer support team and requesting removal from marketing communications.

Opting out of marketing communications does not affect the delivery of transactional messages — including account security notifications, deposit confirmations, withdrawal confirmations, or mandatory regulatory communications — which pkr7 will continue to send as necessary.

pkr7 may update this Privacy Policy from time to time to reflect changes in its data processing practices, regulatory requirements, or operational structure. The updated Policy will always be published on this page with a revised effective date clearly stated at the top of the document.

Where changes to this Policy are material — meaning they significantly affect your rights or how pkr7 processes your personal data — pkr7 will notify registered members via email to their registered address and/or via a prominent notice on the Platform, at least 14 days before the updated Policy takes effect.

Your continued use of the pkr7 Platform following the effective date of any updated Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the updated Policy, you should close your Account before the effective date of the changes.

For all enquiries, requests, or complaints relating to this Privacy Policy, the processing of your personal data, or the exercise of your data protection rights, please contact pkr7 through the following channels:

• Email: [email protected] — Mark the subject line as "Privacy / Data Rights Request" for priority routing to pkr7's data protection team. Written requests receive a substantive response within 30 calendar days.
• Live Chat: Available 24/7 from within your pkr7 Account. Live chat agents can assist with general privacy queries and can escalate formal data rights requests to the relevant internal team.
• Language: Privacy enquiries are handled in both English and Urdu. Members from across Pakistan — whether in Karachi, Lahore, Islamabad, Faisalabad, or elsewhere — may communicate in whichever language they are most comfortable with.

pkr7 is committed to resolving privacy concerns fairly and promptly. If you are not satisfied with pkr7's response to a privacy complaint, you may escalate your concern to the data protection supervisory authority in your jurisdiction, or to the regulatory body that oversees pkr7's international gaming licence.