Privacy Policy
pkr10 Platform

1Introduction

This Privacy Policy ("Policy") is issued by pkr10 ("we", "us", "our", "the Platform"). pkr10 is an online betting and casino information platform operated under an international operator license. The Platform serves English-speaking users in Pakistan and internationally.

This Policy describes how pkr10 collects, uses, stores, shares and protects personal data relating to individuals who access or register on the Platform ("Users", "you", "your"). It also explains the rights available to you in respect of your personal data and how to exercise those rights.

By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not use the Platform.

2Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, contact details, financial data and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure and deletion.
• "Data Controller" means pkr10, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of pkr10 pursuant to a data processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process required for regulatory compliance.
• "Cookie" means a small text file placed on your device by the Platform for purposes of session management, functionality and analytics.
• "Account" means the registered user profile created on the Platform.
• "AML" means Anti-Money Laundering — the legal framework and compliance obligations relating to the detection and prevention of financial crime.

3Data We Collect

pkr10 collects Personal Data from the following sources and in the following categories:

3.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, email address, residential address, phone number and password hash.
• KYC documents: Government-issued photo identification (e.g., CNIC, passport, driving licence) and proof of residential address.
• Payment data: Payment method details submitted for deposit and withdrawal processing (see Section 10 for payment data specifics).
• Support communications: The content of messages, queries and complaints submitted to our support team.
• Preference settings: Responsible gambling limit configurations, notification preferences and communication settings.

3.2 Data Collected Automatically

• Device and browser data: IP address, browser type and version, operating system, device identifiers and screen resolution.
• Session data: Login timestamps, session duration, page visits, navigation paths and feature interaction logs.
• Betting and gaming activity: Markets accessed, bets placed, wager amounts, outcomes, casino game sessions and bonus usage history.
• Cookie data: Data collected via first-party cookies and analytics cookies (see Section 8).
• Geolocation data: Approximate geographic location derived from IP address, used to enforce geographic access restrictions.

4How We Use Your Data (Data Processing)

pkr10 processes your Personal Data for the following purposes:

5Legal Basis for Processing

pkr10 processes Personal Data on the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you — including account management, payment processing and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including AML obligations, age verification requirements and regulatory reporting duties imposed by our operator license jurisdiction.
• Legitimate Interest: Processing where pkr10 has a legitimate business interest that is not overridden by your privacy rights — including fraud prevention, platform security and analytics. Where we rely on legitimate interest, we apply a balancing test to ensure proportionality.
• Consent: Processing based on your freely given, informed agreement — including marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing & Third Parties

pkr10 does not sell, rent or otherwise commercially exploit your Personal Data. We share Personal Data with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage carefully selected third-party service providers to assist in delivering Platform services. These include payment processors, KYC and identity verification services, cloud infrastructure providers, fraud prevention services and customer support platforms. All Data Processors are bound by data processing agreements that restrict their use of your Personal Data to the specific services they perform on our behalf.

6.2 Regulatory and Law Enforcement Disclosure

pkr10 may disclose Personal Data to regulatory authorities, law enforcement agencies or courts where required to do so by applicable law, court order or regulatory direction. We will use reasonable efforts to notify you of such disclosures where legally permitted to do so.

6.3 Corporate Transactions

In the event of a merger, acquisition, corporate restructuring or sale of assets involving pkr10, Personal Data held by the Platform may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity maintaining at least equivalent data protection standards.

6.4 With Your Consent

pkr10 will not share your Personal Data with any third party for purposes not described in this Policy without your explicit prior consent.

7Data Retention

pkr10 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Accounts: Personal Data is retained for the duration of your Account and for a minimum period of five (5) years following Account closure, as required by standard AML retention obligations.
• KYC Documents: Identity documents are retained for the period required under applicable AML legislation in the operator's license jurisdiction, typically five (5) years from the date of account closure or the last transaction, whichever is later.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Customer support records are retained for two (2) years from the date of resolution, unless related to a legal claim in which case they are retained for the duration of that claim.
• Marketing Data: Email addresses and marketing preferences are retained until you opt out, at which point they are suppressed from future communications and deleted from active marketing lists within 30 days.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

8Cookies & Tracking Technologies

pkr10 uses the following categories of cookies and tracking technologies:

You can control cookie preferences through your browser settings. Most browsers allow you to block all cookies, block third-party cookies only, or delete cookies already stored on your device. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

9KYC, Age Verification & AML Compliance

pkr10 is required to verify the identity and age of all Account holders as a condition of its operator license. This requirement is based on:

• Anti-money laundering obligations applicable in the operator's license jurisdiction.
• Age verification obligations to prevent access by persons under the minimum age threshold (18 years, or higher where required by the operator or license jurisdiction).
• Fraud prevention and know-your-customer standards.

KYC documents are processed by our KYC service provider under a data processing agreement. Documents are reviewed by trained verification staff and are not used for any purpose other than identity confirmation and regulatory compliance. Verified documents are stored in encrypted form for the retention period described in Section 7.

10Payment Data

Payment transactions on pkr10 are processed by regulated third-party payment service providers. pkr10 does not store full card numbers, full bank account details or sensitive payment authentication data (such as CVV codes or full IBAN numbers) on its own servers.

Payment method data stored by pkr10 is limited to:

• Payment method type (e.g., bank transfer, digital wallet).
• Partially masked identifiers (e.g., last four digits of a card, partial wallet address) used for transaction matching and withdrawal method verification.
• Transaction history records (amounts, dates, statuses) retained for AML and financial record-keeping purposes.

Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as familiar payment context for Pakistani users only. These references do not constitute a representation that any named provider supports, endorses or permits gambling-related transactions. Users must independently verify whether their chosen payment provider permits such transactions under that provider's own terms.

11Your Data Rights

Subject to applicable law and regulatory limitations, you have the following rights in respect of your Personal Data held by pkr10:

To exercise any of the above rights, contact our Data Protection team at [email protected]. Please include your registered Account username and a clear description of your request. We will respond within 30 calendar days. In cases of complex or multiple requests, this period may be extended by a further 60 days with notification to you.

12Security Measures

pkr10 implements technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• TLS 1.2+ encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest in our databases.
• Role-based access controls limiting staff access to Personal Data to those with a verified operational need.
• Multi-factor authentication for all administrative access to systems holding Personal Data.
• Regular penetration testing and security audits conducted by independent third parties.
• Incident response and data breach notification procedures, including timely notification to affected users where required by law.

While we apply robust security standards, no online system can guarantee absolute security. You are advised to maintain strong, unique passwords for your Account and to report any suspected security breach immediately to [email protected].

13Minors & Age Restrictions

The pkr10 Platform is strictly intended for adults aged 18 years or over (or the higher minimum age required by the operator or its license jurisdiction). pkr10 does not knowingly collect or process Personal Data relating to persons under the applicable minimum age threshold. Age verification is a mandatory element of the Account registration and KYC process.

If pkr10 becomes aware that Personal Data has been collected from a person below the applicable minimum age, that Account will be immediately suspended, any associated winnings will be voided, and all relevant Personal Data will be deleted or returned to the deposit source in accordance with our underage account procedure.

14International Data Transfers

pkr10 operates under an international operator license and uses service providers located in various jurisdictions. As a result, your Personal Data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, pkr10 ensures that appropriate safeguards are in place, including contractual data protection obligations imposed on receiving parties that meet the standards required by applicable data protection law.

Users in Pakistan should note that data protection legislation in Pakistan is evolving. pkr10 applies its own data protection standards consistently across all jurisdictions in which it operates, regardless of whether equivalent local legislation is in force.

15Changes to This Policy

pkr10 reserves the right to update or revise this Privacy Policy at any time. Material changes to the Policy — particularly changes that affect how we use your Personal Data or your data rights — will be communicated to registered Account holders via email notification to the address on file, or by displaying a prominent notice on the Platform at least 14 days before the changes take effect.

Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to material changes to this Policy, you should close your Account prior to the effective date of those changes. The "Last reviewed" date at the top of this page will be updated on each revision.

16Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your Personal Data, please contact us using the details below. We take all privacy enquiries seriously and aim to respond promptly and thoroughly.

You may also review our Terms & Conditions and our Responsible Gambling policy for additional information about your rights and obligations on the Platform.