Privacy Policy

Introduction

PKR100 ("PKR100", "we", "us", "our") is committed to protecting the privacy and personal data of every user ("you", "your") who accesses or uses the PKR100 platform, website, mobile interface and all associated services (collectively, the "Platform").

This Privacy Policy ("Policy") describes how we collect, use, store, share and protect your personal data in connection with your use of the Platform. It also explains the rights available to you regarding your personal data and how to exercise them.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform and are incorporated by reference. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

If you have questions about how we handle your data, contact our support team at [email protected] at any time.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or indirectly — including name, email address, CNIC number, IP address and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration or deletion.
• "Data Controller" means PKR100, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of PKR100 under contractual instruction.
• "KYC" means Know Your Customer — the identity verification process required to confirm account eligibility and satisfy anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to store preference and session information.
• "Sensitive Data" means a subset of personal data warranting heightened protection, such as government-issued identity document numbers and financial account details.

Data We Collect

We collect personal data through various interactions with the Platform. The categories of data we may collect include:

Registration Data — When you open an account, we collect your full legal name, date of birth, email address, residential address (including city — for example Karachi, Lahore, Islamabad, Rawalpindi or Peshawar), mobile phone number and chosen username.

Identity Verification (KYC) Data — To comply with anti-money laundering obligations, we collect copies of government-issued identity documents such as your NADRA CNIC, valid passport or other accepted photo identification, together with proof-of-address documents such as recent utility bills or bank statements.

Financial Data — We collect records of deposits, withdrawals and transaction history on the Platform. Payment method references — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear in your transaction records as contextual identifiers. We do not store full card numbers on our servers.

Usage & Technical Data — We automatically collect device type, operating system, browser type, IP address, pages visited, session duration, clickstream data, game history and betting activity when you use the Platform.

Communication Data — If you contact our support team, we retain records of that correspondence, including emails sent to or received from [email protected].

Marketing Preferences — Where you have opted in to marketing communications, we retain your preferences and interaction history with those communications.

Lawful Basis for Processing

PKR100 processes your personal data only where a valid lawful basis exists. The primary bases on which we rely are:

Where we rely on consent as our lawful basis, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

We use your personal data for the following purposes:

• Account Administration: Creating, maintaining and managing your PKR100 account, including processing login authentication and account security alerts.
• Identity Verification: Conducting KYC checks to confirm your age, identity and eligibility to use the Platform in accordance with our Terms & Conditions.
• Transaction Processing: Processing deposits, settling bets and winnings, and facilitating withdrawals via available payment methods.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling, enforcing deposit and loss limits, and processing self-exclusion requests promptly.
• Fraud Prevention & Security: Detecting and investigating suspicious activity, preventing multi-accounting, identifying bonus abuse and maintaining Platform integrity.
• Customer Support: Responding to your enquiries, resolving complaints and providing assistance via our support channels.
• Legal Compliance: Meeting our obligations under applicable AML regulations, responding to lawful requests from competent authorities, and maintaining required records.
• Platform Improvement: Analysing usage patterns to improve product features, fix technical issues and enhance the overall user experience.
• Marketing Communications: Sending promotional offers and platform updates where you have opted in. You may opt out at any time by contacting [email protected] or updating your account preferences.

Data Sharing & Third Parties

PKR100 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

All third-party data processors engaged by PKR100 are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

Cookies & Tracking Technologies

PKR100 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences and analyse usage patterns. The categories of cookies we use are as follows:

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies or set alerts when cookies are placed. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

Data Retention

PKR100 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active account and for a minimum of five years following account closure, in line with standard AML regulatory requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission or from account closure, whichever is later, in accordance with applicable anti-money laundering legislation.
• Transaction Records: Retained for a minimum of five years from the date of each transaction to support financial audit trails and regulatory compliance.
• Support Communications: Retained for three years from the date of the last interaction, unless a longer period is required for an ongoing dispute or regulatory matter.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymised within 30 days.
• Technical & Usage Logs: Typically retained for 12 months from collection, subject to ongoing security or fraud investigation requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

Security Measures

PKR100 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data stored on our servers — including identity document data and financial records — is encrypted at rest.
• Access Controls: Access to personal data is restricted to PKR100 staff and authorised data processors who have a legitimate operational need. Access is governed by role-based permissions and subject to regular review.
• Two-Factor Authentication: We encourage all users to enable two-factor authentication on their accounts as an additional layer of protection.
• Security Audits: Our systems are subject to periodic security assessments and vulnerability testing.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and, where required, the relevant supervisory authority within applicable timeframes.

Your Rights

Subject to applicable data protection law and certain exemptions, you have the following rights in respect of your personal data held by PKR100:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data. You can update certain account details directly in your account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to override where we are required to retain data to comply with legal obligations — for example, mandatory AML retention periods.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days of receiving a valid request. We may require you to verify your identity before processing any rights request.

International Data Transfers

PKR100 operates internationally and your personal data may be transferred to and processed in countries outside Pakistan and outside the jurisdiction in which you reside. This includes transfers to our operating entity's home jurisdiction and to the jurisdictions of our third-party service providers.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, which may include:

• Transferring data only to jurisdictions recognised as providing an adequate level of data protection by the relevant supervisory authority;
• Implementing contractual clauses that bind the recipient to equivalent data protection standards; or
• Applying other legally recognised transfer mechanisms as required by applicable law.

Pakistani data protection law, including any applicable provisions of the Personal Data Protection Bill or equivalent legislation, applies where relevant. Users in Pakistan should be aware that data transferred internationally may be subject to the laws of the destination country, which may differ from Pakistani law.

Minors & Age Verification

The PKR100 Platform is strictly for adults. You must be at least 18 years of age — or the higher minimum required by the operator's license jurisdiction — to register and use the Platform. We do not knowingly collect personal data from individuals under the applicable minimum age.

As part of the KYC process, we verify the age of all registered users. Where we discover that a user is below the minimum age, the account will be immediately closed, all gameplay will be declared void, and any funds deposited will be returned to the source payment method.

If you believe that a minor has registered on the Platform using false information, please contact us immediately at [email protected]. We take underage access extremely seriously and will investigate all reports promptly.

Policy Amendments

PKR100 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices or Platform features. The effective date at the top of this page reflects when the current version came into force.

Where changes are material — for example, where we introduce a new category of data processing or a new third-party data sharing arrangement — we will provide reasonable advance notice via email to your registered address or via a prominent notification on the Platform.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to stay informed of how we protect your data.

Contact Us

If you have any questions, concerns or complaints about this Privacy Policy or about how PKR100 processes your personal data, please contact our support team using the details below. All privacy-related queries are handled with strict confidentiality.