petpkr Privacy Policy – Your Data Rights as a Pakistani Player

This Privacy Policy describes how petpkr collects, stores, uses, and protects the personal information of individuals who register and play on our platform. It applies to all users of the petpkr website and any affiliated mobile browser interface, regardless of the device used to access the platform.

petpkr takes privacy seriously — not because we are required to say that, but because the Pakistani players who use our platform trust us with sensitive personal and financial information, and that trust is not something we take lightly. The practices described in this policy reflect genuine commitments to data minimisation, purpose limitation, and security.

By creating a petpkr account or continuing to use the platform after any update to this policy, you confirm that you have read and understood these practices. This policy should be read alongside our Terms and Conditions, which together with this document form the complete agreement governing your use of petpkr.

petpkr is an online gaming platform serving Pakistani players, operating at petpkr.ws. For the purposes of data protection, petpkr is the data controller responsible for the personal data collected through the platform.

This means petpkr determines the purposes for which your personal data is collected and the means by which it is processed. Where petpkr engages third-party service providers who process data on our behalf — such as payment processors or identity verification partners — those parties act as data processors operating under petpkr's instructions and bound by contractual data protection obligations.

If you have any questions about this policy or about how petpkr handles your data, you can contact our team at support@petpkr.ws or through the 24/7 live chat on the platform.

petpkr collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from trusted third-party verification and payment partners where necessary.

petpkr uses the personal data it collects for specific, defined purposes. We do not use your data for anything not listed below without obtaining your explicit consent first.

• Account creation and management: Setting up and maintaining your petpkr account, verifying your identity to meet our minimum age and anti-fraud requirements, and enabling you to log in securely.
• Payment processing: Facilitating your deposits and withdrawals via your chosen payment method. Transaction records are maintained for accounting, dispute resolution, and regulatory compliance.
• Gaming services: Providing access to our game catalogue, recording game outcomes and wagers, calculating and crediting winnings, and applying bonus terms to your account where applicable.
• Regulatory compliance and anti-money laundering: petpkr is obligated to carry out Know Your Customer (KYC) checks and to monitor account activity for suspicious patterns consistent with money laundering, fraud, or other financial crimes. Personal data including transaction history is used for this purpose.
• Customer support: Responding to your queries, complaints, and requests via live chat, email, or WhatsApp. Support transcripts are retained to improve service quality and to document the resolution of complaints.
• Security and fraud prevention: Detecting and preventing unauthorised account access, duplicate accounts, collusion, and bonus abuse using device fingerprinting, IP analysis, and behavioural monitoring.
• Platform improvement: Using anonymised usage and technical data to understand how players navigate the platform, which features are most used, and where the experience can be improved.
• Marketing communications: Sending you promotional offers, bonus notifications, and product updates via email or SMS, but only where you have given clear consent. See Section 12 for your opt-out options.
• Responsible gaming: Monitoring for patterns of problematic gambling behaviour in order to provide timely interventions, in accordance with our Responsible Gaming programme.

Every instance of personal data processing at petpkr is grounded in one of the following legal bases:

• Contractual necessity: Processing required to perform the contract between petpkr and you — including account management, payment processing, and game operation. Without this processing, petpkr cannot provide the service you signed up for.
• Legal obligation: Processing required for petpkr to comply with applicable law, including KYC verification, anti-money-laundering checks, and regulatory reporting obligations under our gaming licence.
• Legitimate interests: Processing carried out for petpkr's legitimate business interests where those interests are not overridden by your rights. This includes fraud prevention, security monitoring, and platform analytics. petpkr has conducted a balancing test for each processing activity relying on this basis and is satisfied that our interests do not override your fundamental rights and freedoms.
• Consent: Processing that relies on your explicit consent, primarily marketing communications and the use of non-essential cookies. You may withdraw consent at any time and this will not affect the legality of processing carried out before withdrawal.

petpkr uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device that helps petpkr recognise you when you return and maintain your session securely. Here is how petpkr uses cookies:

• Essential cookies: Required for the platform to function. These maintain your logged-in session, store your language and display preferences, and support security features such as CSRF protection. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate the petpkr platform — which pages are visited most, where players drop off, and how long sessions last. This data is used exclusively to improve the platform experience. Analytics cookies are only placed with your consent.
• Fraud prevention cookies: Used to detect unusual patterns consistent with bot activity, account sharing, or multi-account fraud. These are placed on the basis of petpkr's legitimate interest in maintaining platform security and integrity.

You can manage your cookie preferences through the cookie settings panel accessible from the platform. Withdrawing consent for non-essential cookies will not affect your ability to use petpkr's core features.

petpkr shares your personal data only where genuinely necessary and only with parties who are contractually bound to protect it. We do not sell your data. The categories of third party with whom petpkr may share your data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our banking partners for IBFT and card processing. These parties receive only the data needed to execute your requested transaction.
• Identity and age verification providers: Certified KYC partners who verify your CNIC and confirm your identity against official records. These providers operate under strict data processing agreements.
• Game software providers: JILI, JDB, CQ9, Evolution, Pragmatic Play, and other certified gaming suppliers whose games you play on petpkr. These providers receive session and bet data required to operate their games and verify game outcomes.
• Regulatory and law enforcement authorities: petpkr may be legally required to share account, transaction, or identity data with our licensing authority, financial intelligence units, or law enforcement bodies in response to a lawful request or as part of our anti-money-laundering obligations.
• Platform infrastructure and security providers: Cloud hosting, content delivery, and cybersecurity partners who process technical data as part of maintaining and securing petpkr's platform. These partners are bound by strict data processing agreements and may not use petpkr data for any purpose other than providing the contracted service.

petpkr applies a layered security architecture to protect the personal data of all members. The technical and organisational measures in place include:

• Transport security: All data transmitted between your device and petpkr's servers is protected by TLS 1.2 or higher. Connections using older, less secure protocols are rejected.
• Data at rest: Personal and financial data stored on petpkr's systems is encrypted using AES-256 encryption. Database access is restricted to authorised personnel through role-based access controls.
• Access controls: petpkr employees and contractors are granted access to personal data only on a strict need-to-know basis. All access is logged and reviewed. Access rights are revoked immediately upon the end of employment or contract.
• Password security: Account passwords are hashed using a strong one-way hashing algorithm. petpkr staff cannot view your password and will never ask you for it. Two-factor authentication is available and strongly recommended for all accounts.
• Infrastructure security: petpkr's hosting infrastructure is protected by web application firewalls, DDoS mitigation systems, and regular penetration testing conducted by independent security professionals.
• Incident response: petpkr maintains a documented incident response plan. In the event of a suspected security breach, our security team initiates containment procedures immediately and conducts a full investigation. Affected members are notified in accordance with applicable notification requirements.

Despite these measures, no system connected to the internet can be guaranteed absolutely secure. We encourage all petpkr members to use a strong, unique password and to enable two-factor authentication to reduce the risk of unauthorised access to their account.

petpkr retains personal data for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with petpkr plus a minimum of 5 years following account closure, to meet anti-money-laundering record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for 5 years following account closure. Original CNIC scans are stored in encrypted form with restricted access.
• Support communications: Retained for 3 years from the date of the final message in each conversation, to support quality assurance and complaint resolution.
• Technical and usage logs: Retained for 12 months from creation. Anonymised aggregated analytics data may be retained indefinitely as it cannot be linked back to any individual.
• Marketing consent records: Retained for the duration of your consent and for 3 years after withdrawal, to demonstrate compliance with marketing rules.

When data reaches the end of its retention period, petpkr permanently deletes it from live systems and securely destroys any backup copies within 90 days of the retention period expiry.

As a petpkr member, you have a set of rights over your personal data. These rights are not subject to any fee and petpkr will respond to all valid requests within 30 days. In complex cases we may extend this to 60 days, in which case we will notify you of the extension and the reason for it.

petpkr is strictly a platform for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If petpkr discovers that a member is under 18, their account will be suspended immediately, all balances and winnings will be forfeited, and all personal data associated with the account will be deleted in accordance with our Responsible Gaming policy.

We use CNIC-based identity verification as our primary age verification mechanism. If you believe that a minor has created an account on petpkr using false identity documents, please contact us immediately at support@petpkr.ws so we can investigate and take appropriate action.

petpkr sends marketing communications — including bonus offers, new game announcements, and promotional campaign notifications — only to members who have given explicit consent to receive them. Consent is collected during registration through a clear opt-in checkbox that is not pre-ticked.

You can withdraw your marketing consent at any time by:

• Clicking the "unsubscribe" link in any petpkr marketing email.
• Updating your communication preferences in your petpkr account settings under "Notifications".
• Contacting our support team via live chat or at support@petpkr.ws and requesting removal from all marketing lists.

Withdrawal of marketing consent will not affect your ability to use petpkr or to receive essential transactional communications such as deposit confirmations, withdrawal notifications, and security alerts. petpkr will process your opt-out request within 5 working days. Please note that if you have opted out but continue to receive marketing communications after 5 working days, there may be a technical propagation delay — contact us and we will resolve it immediately.

petpkr may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. When material changes are made, we will notify you by email to your registered address and display a prominent notice on the platform for at least 14 days before the updated policy takes effect.

Minor changes — such as clarifications that do not alter the substance of any section, corrections to typographical errors, or updates to contact details — may be made without prior notice and take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect when the most recent revision was published.

Your continued use of petpkr after the effective date of any updated Privacy Policy constitutes your acceptance of the revised practices. If you disagree with any update, you should stop using the platform and may request account closure and data deletion by contacting our support team.

If you have a question about this Privacy Policy, want to exercise your data rights, or believe petpkr has mishandled your personal data in any way, please contact us. We take all privacy concerns seriously and aim to respond substantively to every query within 72 hours.