pkr998 Privacy Policy —
How We Handle Your
Personal Data

This Privacy Policy applies to all personal data processed by pkr998 in connection with the pkr998 website accessible at pkr998.site and all related gaming, betting, and account management services provided thereon (collectively, the "Platform"). This Policy applies to all users of the Platform regardless of geographic location, including players accessing pkr998 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other locations across Pakistan and internationally.

For the purposes of this Privacy Policy, pkr998 — the operator of pkr998.site — acts as the data controller in respect of personal data collected directly through the Platform. Where pkr998 engages third-party service providers who process data on its behalf, those providers act as data processors subject to contractual obligations consistent with this Policy.

This Policy should be read alongside pkr998's Terms & Conditions, which govern the overall relationship between you and pkr998 and may contain additional data-relevant provisions. In the event of conflict between this Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy shall prevail.

pkr998 collects personal data through several channels. The categories of data collected and the circumstances in which they arise are described below:

2.1 Registration Data. When you create a pkr998 Account, we collect: full legal name; date of birth (for age verification); Pakistani mobile number (used as primary contact and authentication identifier); chosen username; email address (where provided); and account password (stored as a salted cryptographic hash — pkr998 never stores passwords in plain text).

2.2 Identity Verification (KYC) Data. When pkr998 exercises its right to conduct Know Your Customer verification — which may occur at registration, before a first withdrawal, or at any point where regulatory compliance requires it — we collect: a copy of your government-issued identification (such as a Pakistani CNIC), proof of address documentation, and proof of payment method ownership (such as a screenshot of a JazzCash or EasyPaisa account in your name).

2.3 Financial Transaction Data. All deposit and withdrawal transactions on pkr998 generate financial records including: transaction amounts in PKR; payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT); transaction timestamps; payment reference numbers; and transaction status. pkr998 does not store full bank account numbers or mobile wallet PINs — these are handled by the respective payment providers' secure APIs.

2.4 Gaming Activity Data. pkr998 collects records of all gaming activity conducted through your Account, including: game sessions and their duration; bet amounts, outcomes, and game types; sports betting markets wagered on (including PSL cricket markets, UFC events, and other sports); bonus usage and wagering progress; and win/loss history. This data is collected both for operational purposes and as a regulatory requirement under pkr998's gaming licence.

2.5 Technical & Device Data. When you access pkr998 — whether on a mobile browser on Jazz or Zong network, or on a desktop — we automatically collect: IP address; device type and model; operating system and browser version; screen resolution; mobile network carrier (where applicable); and session timing data. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

2.6 Communications Data. If you contact pkr998 support by email or live chat, we retain a record of that communication including the content of messages, timestamps, and the identity of the support agent handling the query. This data is used for quality assurance and dispute resolution.

2.7 Responsible Gaming Data. Where you engage with pkr998's responsible gaming tools — setting deposit limits, initiating a cooling-off period, or requesting self-exclusion — we record those preferences and their parameters. This data is treated with additional sensitivity given its personal nature and is not used for any marketing or commercial purpose.

pkr998 uses the personal data collected for the following purposes:

pkr998 does not use automated decision-making processes (including profiling) in a way that produces legal effects or similarly significantly affects you, without providing the ability to challenge such decisions through our support team.

pkr998 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are:

• Contractual Necessity: Processing your registration data, financial transaction data, and gaming activity data is necessary for pkr998 to perform the contract entered into with you when you registered your Account and accepted the Terms & Conditions. Without this processing, pkr998 cannot provide the services you have requested.
• Legal Obligation: Processing required for Anti-Money Laundering (AML) compliance, Know Your Customer (KYC) identity verification, regulatory reporting to pkr998's licensing authority, and age verification is carried out in fulfilment of legal obligations under pkr998's gaming licence and applicable international regulatory frameworks.
• Legitimate Interests: Processing of technical and device data for fraud prevention, security monitoring, and platform performance optimisation is carried out on the basis of pkr998's legitimate interests in maintaining a secure and reliable platform. pkr998 has conducted assessments concluding that this processing does not override the interests or fundamental rights of users.
• Consent: Sending marketing communications about pkr998 promotions, bonuses, and new game releases is carried out on the basis of your consent where you have opted in to receive such communications. You may withdraw this consent at any time by updating your communication preferences in Account Settings or by contacting support at [email protected].

pkr998 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. The following categories of recipients may receive personal data from pkr998 in the course of platform operations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network operators receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and security standards.
• Game Software Providers: Licensed game providers whose titles are hosted on the pkr998 Platform — such as PG Soft, Pragmatic Play, and Spadegaming — receive session and stake data necessary to deliver game outcomes. These providers are subject to data processing agreements and certified RNG standards under their own gaming licences.
• Identity Verification Services: Where pkr998 uses third-party KYC verification services to authenticate CNIC documents or validate identity, those service providers receive the specific data required for verification only.
• Regulatory Authorities: pkr998 is obligated under its gaming licence to report certain data to its licensing authority upon request. Additionally, Suspicious Activity Reports (SARs) may be filed with relevant financial intelligence authorities where required under AML obligations. pkr998 cannot provide advance notice to affected users where doing so would constitute "tipping off" under applicable law.
• Legal Proceedings: Where required by court order, valid legal process, or to protect the rights, property, or safety of pkr998, its users, or the public, pkr998 may disclose personal data to law enforcement agencies or courts.
• Infrastructure Providers: pkr998 uses cloud hosting and content delivery infrastructure providers who may process data in the course of providing their services. These providers are selected for their security standards and are bound by data processing agreements.

Where pkr998 shares data with third-party processors, it does so under contractual terms that require those processors to handle data in accordance with applicable privacy standards and to use it only for the specific purposes for which it was shared.

pkr998 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your browser when you visit pkr998. Cookies allow pkr998 to recognise returning visitors, maintain session continuity, and analyse how the Platform is used.

pkr998 uses the following categories of cookies:

You may control cookie settings through your browser's privacy settings. Disabling required (essential) cookies will prevent pkr998 from functioning correctly — in particular, disabling session authentication cookies will prevent the pkr998 Login function from working. Disabling optional and analytics cookies does not affect core Platform functionality.

pkr998 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Registration data, gaming history, and financial transaction records are retained for the duration of your active pkr998 Account plus a period of 5 years following Account closure. This extended retention is required under pkr998's gaming licence to satisfy regulatory audit requirements.
• KYC Verification Documents: Identity documents collected during KYC verification are retained for a minimum of 5 years following Account closure, consistent with Anti-Money Laundering record-keeping obligations applicable under international gaming licence conditions.
• Financial Transaction Records: Records of all deposits and withdrawals processed through pkr998 are retained for 7 years following the date of each transaction, consistent with international financial record-keeping standards applicable to regulated gaming operators.
• Support Communications: Customer support chat transcripts and email correspondence are retained for 3 years following the date of the communication for quality assurance and dispute resolution purposes.
• Technical Logs: Security and access logs, IP address logs, and device fingerprint records are retained for 12 months from the date of generation. Aggregated anonymised analytics data may be retained indefinitely as it can no longer be attributed to individual users.
• Self-Exclusion Records: Where a Player has invoked self-exclusion, records of that self-exclusion — including its duration and the circumstances of any reactivation request — are retained permanently to prevent circumvention of responsible gaming protections.

Following the expiry of applicable retention periods, personal data is either securely deleted using methods that prevent recovery, or pseudonymised and aggregated in a manner that removes any reasonable possibility of re-identification.

pkr998 implements a layered security architecture designed to protect personal data from unauthorised access, disclosure, alteration, and destruction. The principal security measures include:

• Encryption in Transit: All data transmitted between your device and pkr998's servers is encrypted using TLS 1.2 or higher (effectively 256-bit SSL). This includes the pkr998 Login page, all account management pages, game sessions, and payment flows.
• Encryption at Rest: Sensitive personal data stored on pkr998's servers — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are stored as bcrypt-salted hashes. pkr998 cannot retrieve your original password — only reset it through the verified mobile number OTP process.
• Role-Based Access Controls: pkr998 staff access to personal data systems is role-based, with access limited to the minimum necessary for each staff member's defined function. Access logs are maintained and reviewed.
• Two-Factor Authentication: pkr998 offers two-factor authentication (2FA) for player accounts. Enabling 2FA in Account Settings is strongly recommended and adds a significant layer of protection against unauthorised access.
• Penetration Testing: pkr998's Platform undergoes periodic security testing by qualified third parties to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated anomaly detection systems monitor account activity, login patterns, and financial transactions in real time to identify potentially fraudulent behaviour.

As a user of the pkr998 Platform, you hold the following rights in relation to your personal data. All requests should be submitted to [email protected]. pkr998 will acknowledge requests within 5 business days and aim to fulfil them within 30 calendar days, unless complexity requires a brief extension (in which case you will be notified).

pkr998 does not knowingly collect, process, or retain personal data from individuals under 21 years of age. Age verification is conducted as part of the registration process and may be reinforced through KYC document verification prior to withdrawal processing. Where pkr998 becomes aware — through any means — that personal data has been collected from a user who is under 21, the following actions will be taken immediately:

1. The Account will be suspended and the pkr998 Login credentials deactivated.
2. All real-money balances will be frozen pending investigation.
3. Any winnings generated on the Account during the period of underage use may be forfeited.
4. All personal data collected from the underage individual will be deleted as swiftly as regulatory obligations permit.
5. Any deposits made will be returned to the verified payment source.

Parents and guardians who believe a person under 21 in their household may have accessed pkr998 should contact pkr998 support immediately at [email protected]. pkr998 will investigate promptly and take appropriate action. pkr998 also recommends that parents and guardians in Pakistani households implement parental control tools available through their internet service provider or device operating system to prevent underage access to online gaming platforms.

As an internationally licensed online gaming platform, pkr998's infrastructure may involve the transfer of personal data across international borders. This arises in the context of cloud hosting services, game software provider integrations, payment processing APIs, and identity verification services — all of which may operate data centres or processing facilities in multiple jurisdictions.

Where personal data is transferred internationally, pkr998 ensures that appropriate safeguards are in place, which may include:

• Transfers to jurisdictions recognised as providing an adequate level of data protection.
• Standard contractual clauses or equivalent contractual protections with the receiving party.
• Reliance on the explicit consent of the data subject where no other mechanism applies.

Pakistani players should be aware that data protection laws vary between jurisdictions and may not in all cases provide the same level of protection as the standards applied by pkr998. However, pkr998 contractually requires all data processors — regardless of location — to maintain security and privacy standards consistent with this Policy and applicable regulatory obligations.

pkr998 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they affect how your personal data is used in a way that may impact your rights — pkr998 will notify registered users by publishing a notice on the Platform and, where practicable, by communicating directly to registered contact information. The "Effective Date" displayed at the top of this Policy will always reflect the date of the most recent version.

Minor amendments — such as correcting typographical errors, updating company contact details, or clarifying existing provisions without changing their substance — may be made without specific notification. We encourage you to review this page periodically.

Your continued use of the pkr998 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using pkr998 and contact support to request Account closure.

For all privacy-related queries, data subject access requests, or concerns regarding pkr998's data practices, please contact the pkr998 Data Team through the following channel:

• Email: [email protected]
• Subject Line: Please include "Privacy Request" or "Data Query" in your subject line for fastest routing to the appropriate team.
• Response Time: pkr998 acknowledges all privacy correspondence within 5 business days and aims to fully resolve requests within 30 calendar days.
• Availability: pkr998 support — including privacy enquiries — is available 24 hours a day, 7 days a week, 365 days a year.