pkr2ea Privacy Policy

1 Introduction

pkr2ea is an online gaming and sports betting platform designed primarily for users based in Pakistan. We understand that Pakistani users – whether based in Karachi, Lahore, Islamabad, Rawalpindi, Peshawar, Faisalabad, or elsewhere in the country – entrust us with sensitive personal and financial information every time they register, deposit, or place a bet on pkr2ea. We take that trust seriously.

This Privacy Policy describes in plain terms what data we collect, why we collect it, how we use it, who else might see it (and under what circumstances), how long we keep it, and what you can do if you want to change or delete it. We have also included a data table in Section 2 to give you a quick reference overview of the data categories we process.

This Privacy Policy forms part of the pkr2ea platform agreement alongside the Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions in matters specifically concerning data protection, this Privacy Policy takes precedence.

2 Data We Collect

pkr2ea collects personal data across the following categories. The table below provides a structured overview:

pkr2ea does not collect biometric data beyond identity document selfies used for KYC verification. We do not collect data from minors – all registrations require confirmation that the user is 18 or over.

3 How We Use Your Data

pkr2ea uses collected personal data for the following purposes:

• Account creation and management: Processing your pkr2ea registration, maintaining your account, and managing pkr2ea login authentication including two-factor authentication via SMS to your Pakistani mobile number.
• Service delivery: Enabling you to place bets on cricket (including PSL fixtures), access pkr2ea Casino live tables, and play Slot titles. All core platform functionality requires your account data to operate.
• Payment processing: Verifying deposits made via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, or USDT TRC-20, and processing withdrawal requests to the same verified methods.
• Identity verification (KYC/AML): Meeting legal and regulatory anti-money laundering (AML) obligations by verifying the identity of account holders, particularly before processing withdrawals above certain thresholds.
• Fraud and abuse prevention: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and cheating on the pkr2ea platform using IP data, device fingerprinting, and transaction pattern analysis.
• Responsible gaming monitoring: Monitoring account activity for patterns that may indicate problem gambling, applying deposit limits and loss limits where set by the user, and enforcing self-exclusion requests.
• Customer support: Responding to support requests and complaints submitted via email or live chat, and maintaining records of those communications for quality assurance and dispute resolution purposes.
• Platform improvement: Using aggregated, anonymised usage data to improve pkr2ea's product, including the cricket betting interface, casino lobby layout, and slot game discovery features.
• Legal compliance: Retaining records as required by applicable legal and regulatory obligations, including transaction records and identity verification documents.

4 Legal Basis for Processing

pkr2ea processes your personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the pkr2ea service you have registered for, including account management, betting, payment processing, and customer support.
• Legal obligation: Processing required to comply with anti-money laundering obligations, age verification requirements, and record-keeping regulations applicable to online gaming operations.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregate platform analytics – where these interests do not override your data protection rights.
• Consent: Where pkr2ea sends you optional marketing communications about pkr2ea promotions, PSL betting offers, or new game announcements, this is based on your explicit consent, which you may withdraw at any time from your account settings.

5 Payment Data & Financial Information

5.1 pkr2ea processes payment data in connection with deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT TRC-20. This includes transaction reference numbers, account identifiers, amounts in PKR, and timestamps.

5.2 Full payment card or bank account credentials are not stored on pkr2ea servers. Payment method verification is conducted to confirm that the payment method belongs to the registered account holder, consistent with our source-of-funds and anti-money laundering obligations.

5.3 All payment transactions to and from pkr2ea are encrypted in transit using TLS. Transaction records are retained for a minimum period in accordance with financial record-keeping obligations.

5.4 Where a withdrawal requires enhanced verification, pkr2ea may request supporting bank statements or JazzCash/Easypaisa transaction history as part of the KYC process. These documents are used solely for identity and source-of-funds verification and are not shared with any third party except where required by law.

6 Cookies & Tracking Technologies

pkr2ea uses the following types of cookies and similar technologies when you access the platform:

• Essential cookies: Required for pkr2ea login session management, account authentication, and basic platform functionality. Without these cookies, the platform cannot function. These cannot be disabled.
• Performance cookies: Used to monitor platform load times, identify technical errors, and measure page performance. Data collected is aggregated and anonymised. These help pkr2ea maintain a reliable experience for users across Pakistan on both mobile and desktop.
• Functional cookies: Store your preferences such as language settings, previously viewed cricket markets, and responsible gaming limit configurations set in your pkr2ea account.
• Security cookies: Support fraud detection and abuse prevention mechanisms, including detecting unusual login patterns and flagging suspicious Account activity for review.

pkr2ea does not use advertising cookies or permit third-party advertising networks to set cookies through the platform. You can manage cookie settings through your browser, but please note that disabling essential cookies will prevent you from logging into your pkr2ea account.

7 Data Sharing & Third Parties

pkr2ea does not sell, rent, or trade your personal data. We may share data with the following categories of recipient only where strictly necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and USDT network infrastructure – to process deposits and withdrawals. These processors handle data under their own privacy policies and applicable financial services regulations.
• Identity verification services: Third-party KYC and AML screening providers used to verify CNIC data and screen for sanctions or politically exposed person (PEP) status where required.
• Game content providers: Casino game and slot providers may receive anonymised session data (e.g., game session tokens) for game delivery and RNG certification purposes. No personally identifiable information is shared with game providers for marketing purposes.
• Legal and regulatory authorities: pkr2ea will disclose personal data to law enforcement, tax authorities, or regulatory bodies where required to do so by applicable law, a court order, or a legally binding governmental request.
• Platform infrastructure providers: Hosting, security, and technical support providers who process data on behalf of pkr2ea under strict data processing agreements and are prohibited from using data for any purpose other than delivering services to pkr2ea.

Any transfer of personal data to service providers located outside Pakistan is subject to appropriate contractual safeguards to ensure a level of data protection equivalent to that described in this policy.

8 Data Retention

8.1 Active Accounts. pkr2ea retains personal data for the duration of your account's existence and for a period after account closure as required by applicable legal and regulatory obligations. Transaction records, bet history, and identity verification documents are retained for a minimum of five years following account closure in compliance with standard financial record-keeping requirements.

8.2 Voluntarily Closed Accounts. Where you voluntarily close your pkr2ea account, your personal data is marked for deletion after the mandatory retention period has elapsed. During the retention period, your data remains protected under the same security standards that applied during the active account period.

8.3 Self-Excluded Accounts. For Accounts subject to self-exclusion, pkr2ea retains identity and contact data for the duration of the exclusion period to prevent re-registration. This retention is necessary to honour the self-exclusion request and is in the user's interest.

8.4 Support Communications. Support emails and chat transcripts are retained for a minimum of two years after the last interaction to support dispute resolution and regulatory audit purposes.

9 Security Measures

pkr2ea implements the following technical and organisational measures to protect your personal data:

• 256-bit SSL/TLS encryption on all data transmitted to and from the pkr2ea platform;
• AES-256 encryption for personal data stored at rest on pkr2ea servers;
• Bcrypt hashing of all Account passwords – plain-text passwords are never stored or accessible;
• Multi-factor authentication available for all pkr2ea Account logins via SMS OTP to registered Pakistani mobile numbers;
• Role-based access controls limiting internal staff access to personal data to those with a legitimate operational need;
• Regular automated security scans and penetration testing of platform infrastructure;
• Incident response procedures for notifying affected users in the event of a confirmed data breach that poses risk to personal data.

Despite these measures, no online platform can guarantee absolute security. You are encouraged to use a strong unique password for your pkr2ea account and to enable two-factor authentication to add an additional layer of protection beyond the platform's own security controls.

10 Your Rights Over Your Data

As a pkr2ea account holder, you have the following rights with respect to your personal data:

• Right of access: You may request a copy of the personal data pkr2ea holds about you at any time by contacting support.
• Right of rectification: If any personal data held by pkr2ea is inaccurate or incomplete, you may request correction. Some changes (such as updating a registered mobile number or email address) can be made directly from your pkr2ea account settings after login.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purpose for which it was collected and where no legal retention obligation applies. Note that legal retention requirements typically prevent full deletion of transaction and identity records for a period following account closure.
• Right to restriction: You may request that pkr2ea restrict processing of your data in certain circumstances, for example while a correction request is being verified.
• Right to data portability: You may request a copy of your account data in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications about pkr2ea promotions), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Opt-out controls are available in your pkr2ea account settings.

To exercise any of the above rights, contact pkr2ea support at [email protected] with "DATA REQUEST" in the subject line. Requests will be acknowledged within 5 working days and completed within 30 days where technically feasible.

11 Children's Privacy

The pkr2ea platform is strictly restricted to users aged 18 years and above. pkr2ea does not knowingly collect personal data from individuals under 18. Age confirmation is required at registration, and pkr2ea uses commercially reasonable verification measures to enforce this restriction. If pkr2ea becomes aware that personal data has been collected from a person under 18, the affected Account will be closed immediately and the data will be deleted in accordance with legal obligations. If you believe a minor has registered on pkr2ea, please contact [email protected] immediately.

12 Policy Updates

pkr2ea reserves the right to update or amend this Privacy Policy at any time. When material changes are made, pkr2ea will notify registered account holders by email to their registered address or via a notice displayed on the pkr2ea platform at login. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the pkr2ea platform following notification of a material change constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13 Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by pkr2ea, please contact us using the details below. All privacy-related enquiries are handled by the pkr2ea data protection team:

• Email: [email protected]
• Subject line for data requests: DATA REQUEST
• Response target: acknowledgement within 5 working days, full response within 30 days
• Support available: 24 hours a day, 7 days a week