pkr50 Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by pkr50 (hereinafter "pkr50", "we", "us" or "our"), the operator of the online gaming information and entertainment platform accessible at pkr50.cam. This Policy describes how pkr50 collects, uses, discloses, stores and protects personal data relating to individuals (hereinafter "Users", "you" or "your") who access or interact with the Platform.

pkr50 serves an adult Pakistani audience and is committed to handling personal data with care, transparency and in accordance with applicable data protection principles. This Policy applies to all personal data processed through the Platform, regardless of whether you are a registered account holder or an unregistered visitor.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. In the event of a conflict between this Policy and any other document, this Policy shall prevail with respect to data protection matters.

For the purposes of this Policy, the following terms carry the meanings set out below:

pkr50 collects Personal Data across the following categories, limited to what is necessary for the stated purposes:

Registration & Account Data

When you create an account, we collect:

KYC & Identity Verification Data

To comply with KYC and AML obligations, we may collect:

Transaction & Financial Data

For payment processing and record-keeping, we collect:

Technical & Usage Data

Automatically collected when you access the Platform:

Personal Data is collected through the following mechanisms:

• Direct Submission: Data you provide when registering, completing KYC, submitting support requests or interacting with any Platform form.
• Automated Collection: Technical data collected automatically through cookies, server logs, analytics scripts and session-tracking technologies as you browse the Platform.
• Third-Party Verification Services: Identity and document verification data processed by authorised KYC and AML service providers on our behalf, acting as Data Processors under contractual obligations.
• Payment Processing: Transaction data received from payment service providers involved in processing your deposits or withdrawals — which may include references to Easypaisa, JazzCash, Raast or relevant banking institutions. These references are operational and do not imply any endorsement of gambling by those providers.
• Fraud Detection Systems: Automated signals from fraud-detection and AML-monitoring tools that analyse transaction patterns for compliance purposes.

pkr50 processes Personal Data only for the following specific, documented purposes:

pkr50 processes Personal Data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract with you (i.e., providing the Platform services, processing transactions, managing your account) under our Terms & Conditions.
• Legal Obligation: Processing necessary to comply with applicable legal and regulatory requirements, including KYC, AML and licensing obligations imposed on the operator.
• Legitimate Interests: Processing necessary for pkr50's legitimate interests — such as fraud prevention, Platform security, abuse detection and improving service quality — where those interests are not overridden by your fundamental rights.
• Consent: Where no other legal basis applies and we seek your explicit consent before processing — for example, for optional marketing communications. You may withdraw consent at any time by contacting us.

pkr50 does not sell your Personal Data. We may share Personal Data only in the following limited circumstances:

• Authorised Data Processors: Third-party service providers engaged to perform functions on our behalf — including KYC/AML verification providers, cloud infrastructure services, payment processors and IT security vendors. All such parties operate under contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
• Legal & Regulatory Authorities: Disclosure required by applicable law, court order, regulatory obligation or licence condition. This includes reporting obligations under anti-money laundering frameworks applicable to the operator's licensing jurisdiction.
• Fraud Prevention & Security: Disclosure to fraud-detection agencies, law enforcement or relevant financial intelligence units where there is a reasonable suspicion of criminal activity, including money laundering or account fraud.
• Corporate Transactions: In the event of a merger, acquisition, restructuring or asset sale involving pkr50, Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

pkr50 uses cookies and similar tracking technologies to operate the Platform effectively and improve the user experience. The following categories of cookies are used:

pkr50 does not use tracking cookies for third-party advertising networks or behavioural profiling for external marketing purposes.

You can control and delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. For guidance on managing cookies in your specific browser (Chrome, Firefox, Safari, Edge, Samsung Internet), please refer to the respective browser's help documentation.

Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Account Data: Retained for the duration of the active account relationship and for a period following account closure as required by the operator's licensing obligations and applicable AML law.
• KYC & Identity Documents: Retained in accordance with AML record-keeping requirements applicable to the operator's licensing jurisdiction — typically a minimum of five (5) years from the date of the last transaction or account closure, whichever is later.
• Transaction Records: Retained for a minimum of five (5) years to support AML monitoring, regulatory reporting and dispute resolution.
• Support Communications: Retained for the duration necessary to resolve the relevant query and maintain a reasonable record of interactions for quality and compliance purposes.
• Technical & Log Data: Typically retained for 12 months from the date of collection, unless required for longer periods by security investigations or legal proceedings.
• Analytics Data: Aggregated and anonymised analytics data may be retained indefinitely as it cannot be used to identify individuals.

On expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to any individual. Requests for early deletion are handled in accordance with the User Rights section of this Policy.

pkr50 implements technical and organisational security measures designed to protect Personal Data from unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• Encryption of all data in transit via HTTPS/TLS protocols.
• Encryption of sensitive data at rest, including KYC documents and payment records.
• Role-based access controls limiting internal access to Personal Data to authorised personnel who require it for specific operational purposes.
• Regular security assessments of Platform infrastructure and third-party Data Processor systems.
• Multi-factor authentication options for user accounts.
• Intrusion detection and 24/7 monitoring of production systems.

In the event of a data security incident that is likely to result in a risk to your rights and freedoms, pkr50 will notify affected Users and relevant supervisory authorities in accordance with applicable obligations and without undue delay.

Subject to applicable law and verification of your identity, you have the following rights in respect of your Personal Data held by pkr50:

To exercise any of the rights listed above, please contact us using the details in Section 15. We will acknowledge your request within a reasonable timeframe and respond substantively within 30 days. Where requests are complex or numerous, this period may be extended with notice provided to you.

Identity verification will be required before any request is processed to prevent unauthorised disclosure of Personal Data to third parties.

The pkr50 Platform is strictly intended for adults aged 18 years and over — or the higher minimum age required by the operator's licensing jurisdiction. We do not knowingly collect Personal Data from individuals under the applicable minimum age.

Age verification controls are applied at registration and as part of the KYC process. If pkr50 discovers that Personal Data has been collected from a person below the minimum eligible age, such data will be deleted immediately and the associated account closed without notice.

If you are a parent or guardian and believe that your child has provided Personal Data to pkr50 without your consent, please contact us immediately using the details in Section 15 so that we may take appropriate action.

pkr50's Platform and associated infrastructure may involve the storage or processing of Personal Data in countries outside Pakistan. Where such international transfers occur, pkr50 ensures that appropriate safeguards are in place to protect your data to a standard consistent with applicable data protection principles.

Safeguards applied to international transfers may include:

• Contractual data processing agreements with third-party Data Processors that impose equivalent data protection obligations.
• Transfer to jurisdictions recognised as providing an adequate level of data protection by the operator's licensing authority.
• Adoption of standard contractual clauses or equivalent instruments approved under applicable international data protection frameworks.

Details of the specific transfer mechanisms used for any international processing may be obtained by contacting us at the address in Section 15.

pkr50 reserves the right to amend, update or replace this Privacy Policy at any time. Material changes that affect the manner in which we process your Personal Data will be communicated to registered Users via the email address associated with your account and/or by a prominent notice displayed on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this document reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of changes constitutes acceptance of the updated Policy.

If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

For any privacy-related queries, to exercise your data rights or to report a suspected data security incident, please contact the pkr50 Data Protection team using the following details:

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the Platform interface, as provided by the operator.
• Email Response Time: Privacy and data-rights requests are acknowledged promptly and addressed substantively within 30 days. Complex requests may take longer, with notification provided.

When submitting a data rights request by email, please include: (1) your full registered name, (2) the email address associated with your account, (3) a description of the specific right you wish to exercise or the concern you are raising. Identity verification will be required before any Personal Data is disclosed or altered.