PKR99 Privacy Policy – How We Protect Your Personal Data

This Privacy Policy ("Policy") describes how PKR99, operating at pkr99.im ("we", "us", "our", "the Platform"), collects, uses, stores and protects the personal information of individuals who register for and use the PKR99 platform ("you", "the Member").

PKR99 is an online betting and gaming platform designed specifically for Pakistani players. We understand that trust is foundational to any relationship between a player and their chosen platform — and that trust depends heavily on how the platform handles personal data. This Policy exists to give you complete transparency about our data practices.

This Policy applies to all personal data collected through the PKR99 website, mobile interface, customer support channels and any other service point operated by PKR99. It should be read alongside the Terms and Conditions and the Responsible Gaming Policy.

If you are under 18, you must not use PKR99 or provide any personal information to us. See Section 10 for our children's privacy policy.

PKR99 collects personal information through several channels. The categories of information we collect are outlined below, along with how they are gathered:

Information you provide directly:

• Full name as it appears on your CNIC or other official identity document.
• Date of birth — used to verify you are 18 or older at registration.
• Mobile phone number — used for account access, transaction alerts and two-factor authentication.
• Email address — used for account communications, promotional messages (if opted in) and account recovery.
• Payment details — the mobile wallet number (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details or card information associated with deposits and withdrawals. Payment credentials are processed by certified payment processors and PKR99 does not store complete card numbers.
• Identity documents — CNIC copies or other documents submitted during KYC verification.
• Communication records — the content of any messages you send to PKR99 support, whether by email, live chat or other channels.

Information collected automatically:

• IP address and approximate geographic location derived from it.
• Device type, operating system version and browser type.
• Session data — pages visited, time spent on each section, links clicked and navigation patterns within the platform.
• Betting and gaming activity — all bets placed, stakes, markets, outcomes and transaction history associated with your PKR99 account.
• Cookie and tracking data — see Section 5 for full details on cookies used by PKR99.

Every piece of information PKR99 collects is used for a specific, legitimate purpose. The table below maps data categories to their uses:

PKR99 does not use automated decision-making that produces significant legal effects about you without human review. Where automated systems flag an account for review — for example, in fraud or responsible gaming monitoring — a qualified member of the PKR99 team reviews the case before any action is taken.

PKR99 processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing your registration information, managing your account, processing bets and handling deposits and withdrawals is necessary to deliver the services you have contracted for when you create a PKR99 account.
• Legal obligation: Identity verification, transaction records and certain data retention obligations are required by anti-money laundering regulations and other applicable legal requirements. PKR99 cannot operate lawfully without meeting these obligations.
• Legitimate interests: Fraud detection, platform security, duplicate account identification and analysis of betting patterns to improve the product are carried out on the basis of PKR99's legitimate business interests, balanced against your right to privacy.
• Consent: Sending you promotional emails, SMS offers and push notifications is done on the basis of consent you give when opting in to marketing communications. You may withdraw this consent at any time — see Section 11.

PKR99 uses cookies and similar tracking technologies to provide a functional, personalised experience on the platform. A cookie is a small text file placed on your device when you visit a website. PKR99 uses the following categories of cookies:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens that prevent cross-site request forgery attacks, and cookies that store your odds format and language preferences. Essential cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: PKR99 uses analytics tools to understand how members navigate the platform — which pages are most visited, how long sessions last, and where members encounter difficulty. This data is aggregated and anonymised. It is used solely to improve the platform experience for Pakistani users.
• Fraud detection cookies: Persistent device fingerprinting identifiers that help PKR99 identify suspicious activity such as multiple accounts operating from the same device. These are a security measure and not used for advertising purposes.
• Marketing cookies (consent-based): If you have opted in to marketing communications, PKR99 may use cookies to personalise the promotional content you see within the platform based on your betting and gaming activity history. You can withdraw consent for marketing cookies from your account settings at any time.

You can manage cookie settings through your browser. Note that disabling essential cookies will affect your ability to use core PKR99 features including account login. PKR99 does not use third-party advertising networks that place tracking cookies across external websites.

PKR99 does not sell, rent or trade your personal information. We share data with third parties only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: Your payment details are shared with certified payment processors (including Easypaisa, JazzCash and card payment gateways) solely to process transactions. These processors operate under their own privacy frameworks and are bound by contractual data protection obligations with PKR99.
• Identity verification services: KYC document verification may be conducted with the assistance of third-party identity verification providers. These providers process your documents under strict confidentiality agreements and do not retain your data beyond the verification process.
• Fraud prevention services: Anonymised device and behaviour signals may be shared with fraud detection partners to identify and prevent fraudulent activity. No personally identifiable information is shared in this context beyond what is strictly necessary.
• Legal and regulatory authorities: PKR99 will disclose personal information to law enforcement agencies, regulatory bodies or other authorities when required by law or where we have a good-faith belief that disclosure is necessary to investigate illegal activity, prevent harm or comply with a legal process. We will notify affected members of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition or sale of PKR99's business assets, member data may be transferred to the acquiring entity. You will be notified by email at least 30 days before any such transfer occurs, and you will have the right to request deletion of your data at that stage.

PKR99 applies multiple layers of technical and organisational security measures to protect your personal information. These include:

• TLS encryption: All data transmitted between your device and PKR99 servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This applies to every page of the platform, not just payment pages.
• Encrypted data storage: Sensitive fields including payment details, identity document references and authentication credentials are stored in encrypted form. Database access is restricted to authorised personnel only.
• Two-factor authentication (2FA): PKR99 offers 2FA for account login via SMS OTP. We strongly recommend enabling this from your account security settings to prevent unauthorised access.
• Access controls: Internal access to member data is restricted by role — customer support staff can see account and transaction data relevant to their function, but not payment credentials. A small number of authorised senior staff have broader access, and all such access is logged.
• Regular security assessments: PKR99 conducts periodic security reviews of its infrastructure and application code to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. If you believe your PKR99 account has been compromised, change your password immediately and contact support@pkr99.im. PKR99 will investigate and act within 24 hours of a credible security report.

PKR99 holds your personal data for as long as your account is active and for such periods as are required by applicable law and legitimate business necessity. The specific retention periods we apply are:

• Active account data: Retained for the full duration of your account membership. You can request deletion at any time — see Section 9.
• Transaction records: Financial transaction records (deposits, withdrawals, bets) are retained for a minimum of five years from the date of the transaction. This is required by anti-money laundering regulations applicable to financial services platforms operating for Pakistani users.
• KYC documents: Identity verification documents are retained for five years from the date of submission or the date of account closure, whichever is later.
• Support communications: Records of customer support interactions are retained for three years and then deleted unless they are material to an ongoing dispute or legal matter.
• Marketing data: Marketing preferences and consent records are retained until you withdraw consent or close your account, plus one year thereafter for audit purposes.

After the applicable retention period, personal data is securely deleted or anonymised so it can no longer be linked to you as an individual. PKR99 conducts periodic data audits to ensure retention schedules are being followed correctly.

As a PKR99 member, you have the following rights in relation to your personal data. These rights can be exercised by contacting support@pkr99.im:

PKR99 will acknowledge all privacy rights requests within 5 business days and complete them within 30 days. Where a request cannot be fulfilled in full due to legal obligations, we will explain clearly what we can and cannot do and why.

PKR99 is strictly an adults-only platform. No person under the age of 18 may register, access or use any part of the PKR99 platform. We do not knowingly collect personal data from individuals under 18.

If you are a parent or guardian and believe that a minor has created a PKR99 account using false information about their age, please contact us immediately at support@pkr99.im. We will investigate and close any such account as a priority, returning any real-money balance to the payment method used for deposits and deleting the associated personal data.

PKR99 uses date-of-birth verification at registration as a first-line check. Accounts where age verification cannot be confirmed during KYC review are suspended until documentation is provided. The platform also operates spending and session monitoring that may flag unusual patterns consistent with underage use, triggering a manual review.

PKR99 sends promotional communications — including bonus offers, new game announcements, PSL season promotions and VIP Club updates — via email, SMS and push notification. These communications are only sent to members who have opted in at registration or subsequently updated their preferences to allow them.

You can manage your marketing preferences at any time:

• Email: Use the unsubscribe link in any PKR99 marketing email, or update your notification settings from your account preferences page.
• SMS: Reply STOP to any PKR99 promotional SMS, or disable SMS marketing in your account notification settings.
• Push notifications: Disable in your device's notification settings for the PKR99 app, or from within the app's notification preferences.

Opting out of marketing communications does not affect transactional messages. You will continue to receive SMS alerts for login verification, deposit confirmations, withdrawal notifications and important account security messages — these are essential to protecting your account and cannot be disabled.

PKR99 will process opt-out requests within 48 hours. If you continue to receive marketing communications after this period, please contact support@pkr99.im.

PKR99 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When we make material changes — those that affect your rights as a member — we will notify all registered members by email at least 14 days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. We recommend reviewing this page periodically. The version of the Policy that applies to you is the version in force at the time of the activity in question.

If you disagree with a change to this Policy, you may close your account before the effective date and request deletion of your data under the terms of the current Policy. Continuing to use PKR99 after the effective date of an updated Policy constitutes acceptance of the changes.

If you have any questions about this Privacy Policy, want to exercise a data right, or wish to raise a complaint about how PKR99 has handled your personal information, please get in touch:

• Email: support@pkr99.im (mark your email "Privacy Enquiry" or "Data Request" in the subject line)
• Response time: Standard privacy enquiries within 5 business days; formal data subject requests within 30 days
• Languages: English and Urdu support available

If you raise a privacy complaint with PKR99 and are not satisfied with our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. PKR99 will cooperate fully with any such investigation.

We take all privacy complaints seriously. Every formal complaint is logged, reviewed by a senior team member and resolved in writing. We aim to resolve all complaints within 14 days of receiving the complete details of the issue.