pkrbat Privacy Policy — How We Collect, Use and Protect Your Data

This Privacy Policy explains how pkrbat ("we," "us," "our," "the platform") collects, uses, stores, shares, and protects personal data relating to registered players and visitors to the pkrbat website and mobile interface. The term "personal data" means any information that can identify you directly or indirectly — including your name, mobile number, CNIC, financial information, and device identifiers.

pkrbat is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws. We designed our data practices with Pakistani players specifically in mind — the kinds of payment information, identity documents, and communication preferences relevant to users in Pakistan are all part of how we approach data management on pkrbat.

By registering an account on pkrbat and using our services, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree with any part of this policy, you should not use the pkrbat platform.

pkrbat collects personal data through several channels — information you provide directly when registering or contacting support, information generated automatically when you use the platform, and in some cases information obtained from third-party identity verification and fraud prevention services. The specific categories are:

Identity and Verification Data
When you register on pkrbat, you provide your full name, date of birth, and mobile number. When you proceed to identity verification (KYC), you provide a copy of your CNIC or other government-issued identification, and in some cases a selfie photograph for facial matching. This data is essential for verifying your identity, confirming your age, and complying with anti-money laundering regulations.

Contact Data
Your mobile number and, where provided, your email address are used for account access (OTP verification), important account notifications, support communications, and — where you have consented — pkrbat promotional messages. You can update your contact details at any time from your account settings.

Financial Data
pkrbat processes deposits and withdrawals through Pakistani payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT transfers, and Visa/Mastercard. To process these transactions, pkrbat records the payment method identifiers (mobile wallet numbers, bank IBANs) associated with your account. Full card numbers and full bank account numbers are handled exclusively by our certified payment processor partners — pkrbat does not store complete payment credentials on its own servers.

Gaming Activity Data
pkrbat maintains a complete record of all gaming activity on your account — every game session, bet placed, round result, win and loss, tournament entry, and account balance movement. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance. It is retained for a minimum of five years from the date it is generated.

Technical and Device Data
When you access pkrbat, our servers automatically log your IP address, the type of device and browser you are using, your operating system, and general location information derived from your IP address. This data is used for security purposes — detecting unusual login patterns, preventing fraud, and investigating account compromise reports.

Support and Communication Records
If you contact pkrbat's support team by live chat or email, a record of that communication is retained. This record may include the content of your messages, the issue you reported, and the resolution reached. These records are used for quality assurance, agent training, and resolving any future disputes about the same matter.

pkrbat uses your personal data only for specific, defined purposes. We do not use your data for any purpose not described in this policy without first obtaining your explicit consent. The main purposes for which pkrbat processes personal data are:

• Account registration and management — creating and maintaining your pkrbat account, verifying your identity and age, managing your login credentials and account settings.
• Payment processing — processing deposits and withdrawals in PKR through your chosen payment method, reconciling transactions, investigating payment disputes.
• Gaming services — providing access to all pkrbat games, maintaining game history records, processing tournament entries and prize distributions, managing VIP Club progression.
• KYC and anti-money laundering compliance — verifying your identity in accordance with regulatory requirements, screening against sanctions lists, detecting and investigating potentially fraudulent activity.
• Responsible gaming — monitoring gaming behaviour for indicators of problem gambling, applying deposit limits and self-exclusion requests, providing responsible gaming resources.
• Customer support — responding to queries, resolving disputes, maintaining service quality.
• Security — detecting and preventing fraud, protecting player accounts from unauthorised access, investigating security incidents.
• Platform improvement — analysing aggregated usage patterns to improve pkrbat's games, features, and user experience. Analysis for this purpose uses anonymised or aggregated data wherever possible.
• Marketing communications — sending promotional offers and platform updates to players who have not opted out. See Section 11 for full details.

pkrbat processes personal data on the following legal bases, depending on the specific purpose of the processing:

• Contractual necessity — the majority of data processing on pkrbat is necessary to fulfil our contract with you — the Terms and Conditions you accepted when you registered. This includes account management, payment processing, and providing access to games. Without this processing, pkrbat could not provide its services to you.
• Legal obligation — certain data processing is required by law, specifically anti-money laundering regulations, KYC requirements, tax reporting obligations, and regulatory record-keeping requirements. pkrbat must comply with these obligations regardless of your preferences regarding data processing.
• Legitimate interests — pkrbat processes certain data on the basis of legitimate business interests, including fraud prevention, account security, and platform improvement. Where we rely on legitimate interests, we carefully balance our interests against your rights and will not use this basis where the impact on your privacy is disproportionate.
• Consent — where pkrbat relies on your consent for processing — specifically for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

pkrbat does not sell your personal data to any third party. We share your data only in the specific circumstances described below, and only with parties who are bound by appropriate data protection obligations:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, and bank transfer processors receive the transaction data necessary to process your deposits and withdrawals. Each of these processors operates under their own regulatory obligations and data protection frameworks applicable in Pakistan.
• Identity verification services — pkrbat uses accredited third-party identity verification providers to assist with KYC checks. These providers receive the identity documents and data you submit for verification and return a verification result. They are contractually prohibited from using your data for any other purpose.
• Fraud prevention services — pkrbat shares technical data including IP addresses and device identifiers with fraud detection platforms to identify and prevent fraudulent account activity. This processing protects all pkrbat players from fraud-related harm.
• Regulatory and law enforcement authorities — pkrbat will disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a court order, or a binding regulatory obligation. pkrbat will notify you of such disclosures where legally permitted to do so.
• Professional advisers — pkrbat's legal, financial, and security advisers may access limited personal data in the course of providing professional services to the platform, subject to professional confidentiality obligations.

pkrbat implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security programme includes the following measures:

• Transport encryption — all data transmitted between your device and pkrbat's servers is protected by 256-bit TLS/SSL encryption. This applies to login credentials, payment flows, game data, and all support communications.
• Storage encryption — sensitive personal data stored on pkrbat's servers — including identity documents and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Access controls — access to personal data within pkrbat is restricted to staff members who need it to perform their specific job functions. All internal access is logged and audited. Former employees' access is revoked immediately upon departure.
• Two-factor authentication — pkrbat strongly recommends enabling two-factor authentication on your player account. Internal systems require mandatory two-factor authentication for all staff accessing player data.
• Regular security testing — pkrbat conducts regular penetration testing and vulnerability assessments of its platform infrastructure. Critical findings are remediated on a priority basis.
• Incident response — pkrbat maintains a documented data breach response plan. In the event of a breach affecting player data, pkrbat will notify affected players and relevant authorities within the timeframes required by applicable law.

While pkrbat takes every reasonable measure to protect your data, no online platform can guarantee absolute security. You can reduce your personal risk by using a strong, unique password on your pkrbat account, enabling two-factor authentication, and never sharing your login credentials with anyone else.

pkrbat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal and regulatory retention obligations. The key retention periods are as follows:

• Identity and KYC data — retained for a minimum of five years from the date your account is closed, or longer if required by applicable anti-money laundering regulations.
• Financial transaction records — retained for a minimum of five years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming activity records — retained for a minimum of five years from the date each activity was recorded.
• Support communications — retained for three years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Marketing consent records — retained until you withdraw consent, and then for a further period to demonstrate that we respected your preference.
• Cookie and analytics data — retained for a maximum of 13 months from the date of collection.

Once the applicable retention period has expired, personal data is securely deleted or anonymised so that it can no longer be associated with you. Anonymised data may be retained indefinitely for statistical and analytical purposes.

pkrbat uses cookies and similar tracking technologies to operate the platform and improve your experience. A cookie is a small text file stored on your device by your browser when you visit a website. pkrbat uses the following categories of cookies:

• Strictly necessary cookies — these are essential for the platform to function. They maintain your login session, remember your language preference, and ensure the security of your account. You cannot opt out of strictly necessary cookies while using pkrbat.
• Functional cookies — these remember your preferences and settings to personalise your experience — for example, which game lobby filters you last used, or your preferred display settings. These cookies are not essential but improve usability significantly.
• Analytics cookies — pkrbat uses anonymised analytics data to understand how players navigate the platform, which features are used most, and where the user experience can be improved. This data is aggregated and cannot be used to identify individual players.
• Fraud prevention cookies — certain cookies are used by pkrbat's fraud detection system to identify unusual patterns of access that may indicate account compromise or coordinated fraudulent activity.

You can manage or delete cookies through your browser settings. Note that disabling certain cookies may affect the functionality of pkrbat. Strictly necessary cookies cannot be disabled without preventing the platform from working correctly.

pkrbat respects your rights over your personal data. The rights below apply to all registered pkrbat players. To exercise any of these rights, contact pkrbat at support@pkrbat.bet with the subject line "Data Rights Request." pkrbat will respond within 30 days of receiving a valid request.

pkrbat is strictly an adults-only platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification checks, and identity verification documents are reviewed to confirm that all registered players meet the minimum age requirement.

If pkrbat discovers that an account has been registered by a person under 18, that account will be immediately closed, all balances forfeited, and any personal data collected deleted as promptly as legally possible — subject only to any mandatory retention obligations under anti-money laundering or fraud investigation requirements. If you believe a minor has registered on pkrbat, please contact our support team immediately.

pkrbat sends promotional messages — bonus offers, tournament announcements, VIP Club updates, and platform news — to registered players who have not opted out. These communications are sent by SMS to your registered mobile number and by email where you have provided one.

You can opt out of pkrbat marketing communications at any time using any of the following methods:

• Click the unsubscribe link at the bottom of any pkrbat marketing email
• Adjust your communication preferences in your pkrbat account settings
• Send an email to support@pkrbat.bet with the subject line "Unsubscribe Marketing"
• Ask a support agent through live chat to remove you from the marketing list

Opting out of marketing communications has absolutely no effect on your account, your ability to access games, your withdrawal rights, or any other aspect of your pkrbat experience. You will continue to receive essential account communications — such as deposit confirmations, withdrawal notifications, and security alerts — regardless of your marketing preference, as these are necessary for account management rather than marketing.

pkrbat may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make material changes to this policy, we will notify registered players by email and update the "Last Updated" date displayed at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how pkrbat protects your data. Your continued use of pkrbat after a policy change takes effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account and request deletion of your data subject to the retention requirements described in Section 7.

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how pkrbat handles your personal data, please contact us:

• Email: support@pkrbat.bet — use subject line "Privacy Query" or "Data Rights Request" as appropriate
• Live Chat: available 24/7 on the pkrbat platform in both Urdu and English
• FAQ: visit the FAQ page for answers to common questions about your account and data

pkrbat will acknowledge all privacy-related requests within 48 hours and provide a substantive response within 30 days. If you are not satisfied with pkrbat's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in the applicable jurisdiction.