Privacy Policy — pkrsin

This Privacy Policy (the "Policy") describes how pkrsin ("we", "us", "our", "the Platform") collects, processes, stores, shares and protects personal data relating to registered users and visitors ("you", "your") of the website accessible at pkrsin.cam and all associated subdomains and mobile-accessible versions thereof.

pkrsin is an English-language online gaming information and platform site designed for adult players in Pakistan. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. By accessing the Platform or registering an Account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which collectively form the complete agreement governing your use of the Platform.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Account" means the individual registered user profile created on pkrsin, associated with a unique username and password.
• "Controller" means the entity that determines the purposes and means of processing personal data — in this context, pkrsin.
• "Data Subject" means the identified or identifiable natural person to whom personal data relates — in this context, you, the User.
• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, IP address, device identifiers and payment details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Processor" means any third party that processes personal data on behalf of pkrsin under a data processing agreement.
• "Sensitive Data" means a special category of personal data warranting heightened protection, including but not limited to financial account details, government-issued identity document data and health information submitted in connection with responsible gambling self-assessments.
• "KYC" (Know Your Customer) means the identity and address verification process required before withdrawals are authorised on the Platform.

pkrsin collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification)
• Email address
• Residential address
• Mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (National Identity Card, passport or driving licence)
• Proof of address documentation (utility bill, bank statement or official correspondence dated within three months)
• Proof of payment method ownership where required

3.3 Financial Data

• Deposit and withdrawal transaction records including amounts, timestamps and payment method references
• Payment method identifiers (partial account numbers, wallet IDs) — full payment credentials are handled exclusively by the relevant payment processor and are not stored by pkrsin
• Account balance history and wagering activity records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system and browser version
• Session timestamps, pages visited and features used
• Cookie identifiers and similar tracking data (see Section 10)
• Error logs and crash reports

3.5 Communications Data

• Content of support tickets, live chat transcripts and email correspondence with pkrsin
• Survey responses and feedback submissions where voluntarily provided
• Records of marketing consent preferences

3.6 Responsible Gambling Data

• Self-exclusion requests and active exclusion periods
• Deposit, loss and session time limits set by the User
• Voluntary self-assessment responses relating to gambling behaviour, where submitted

Your personal data is collected through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or respond to an in-platform survey.
• Automatically: When you browse or use the Platform, technical and usage data is collected automatically via server logs, cookies and similar technologies embedded in the Platform.
• From third-party verification providers: During the KYC process, we may receive data from identity verification and anti-fraud service providers to confirm the accuracy of information you have submitted.
• From payment processors: When you initiate a transaction, our payment processors communicate transaction status and reference data back to the Platform. Full payment credentials remain with the processor.
• From our responsible gambling tools: Limit-setting and self-exclusion requests generate records that are stored and acted upon immediately by our responsible gambling system.

The following table summarises the primary purposes for which pkrsin processes your personal data, along with the categories of data involved:

pkrsin does not use your personal data for automated decision-making that produces significant legal or financial effects without human review, except where required by our fraud-prevention systems, in which case you have the right to request a manual review of any automated decision that affects your Account.

pkrsin processes your personal data on one or more of the following legal bases, depending on the purpose:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions to which you have agreed — including account management, payment processing and KYC verification.
• Legitimate interests: Processing necessary for the purposes of our legitimate interests, including fraud prevention, security monitoring, platform improvement and responsible gambling compliance, provided those interests are not overridden by your data protection rights.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including anti-money laundering obligations, mandatory data retention rules and responses to lawful requests from competent authorities.
• Consent: Processing based on your freely given, specific, informed and unambiguous consent — primarily for the sending of direct marketing communications. You may withdraw consent at any time by updating your preferences in your Account settings or contacting our support team.

pkrsin does not sell, rent or trade your personal data to third parties for their own marketing purposes. Data is shared only in the following controlled circumstances:

7.1 Service Providers (Processors)

We engage carefully selected third-party processors to help deliver Platform services. These include:

• Payment processors: To facilitate deposit and withdrawal transactions. Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited for user familiarity only; none of these providers endorses or affiliates with pkrsin or any gambling transaction.
• KYC and identity verification providers: To verify the identity and age of Account holders.
• Fraud detection and AML screening services: To identify suspicious financial activity and meet anti-money-laundering obligations.
• Cloud hosting and infrastructure providers: To store and serve Platform data securely.
• Customer support platform providers: To manage live chat and ticketing communications.
• Analytics providers: To process anonymised or pseudonymised platform usage data for performance improvement.

All processors are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

pkrsin may disclose personal data to law enforcement agencies, regulatory authorities or courts where required by a valid legal obligation, court order or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale or corporate restructuring affecting pkrsin, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material changes to data handling practices that may result.

pkrsin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention guidelines apply:

• Account and registration data: Retained for the duration of the active Account and for a period of five (5) years following Account closure, to meet anti-money-laundering and fraud-prevention obligations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process, in line with standard AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of each transaction.
• Support communications: Retained for three (3) years following resolution of the relevant support case, unless the communication forms part of a dispute record subject to a longer retention period.
• Technical and usage data: Anonymised or deleted within twelve (12) months of collection, except where specific records are required in connection with a fraud or security investigation.
• Responsible gambling records: Retained for the duration of any active self-exclusion period and for a minimum of five (5) years thereafter, to support any future re-registration review.
• Marketing consent records: Retained until consent is withdrawn, plus three (3) years thereafter as evidence of the consent history.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

pkrsin takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and the Platform is encrypted using current TLS standards.
• Encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using industry-standard symmetric encryption.
• Access controls: Access to personal data is restricted to authorised personnel who require it to perform their job functions. Role-based access controls and the principle of least privilege are enforced across all internal systems.
• Two-factor authentication (2FA): Available and strongly recommended for all User Accounts. Internal staff access to production data systems requires 2FA.
• Penetration testing and vulnerability management: Regular security assessments are conducted to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures: pkrsin maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected Users in accordance with applicable legal requirements.

pkrsin uses cookies and similar technologies (including local storage objects and session tokens) to enable core platform functionality, enhance user experience and gather anonymised analytics. The following cookie categories are in use:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies and load-balancing cookies. These cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences, such as language settings, odds format, and whether you have acknowledged certain in-platform notices. Disabling these will not prevent access but may reduce personalisation.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how users navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve Platform performance and is not linked to individual identities where avoidable.
• Fraud-detection and security cookies: Used to identify potentially fraudulent sessions, detect multi-accounting and protect the integrity of the Platform. These operate in the background and are not linked to marketing activity.

pkrsin does not use advertising or tracking cookies that report your behaviour to third-party advertising networks. You can manage your cookie preferences via the consent management panel accessible from the Platform footer. Note that withdrawing consent for non-essential cookies will not affect the lawfulness of prior processing.

Subject to applicable law and certain conditions, you have the following rights in respect of the personal data pkrsin holds about you:

• Right of access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within the timeframe required by applicable law.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For Account-level data such as your name or address, you may update this directly in your Account settings or contact support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis), or where processing is unlawful. This right is subject to overriding legal retention obligations — for example, we cannot delete AML-required transaction records during their mandatory retention period.
• Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of data is disputed or while an objection is considered.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we transfer certain of your personal data to you or to another controller in a machine-readable format.
• Right to object: You may object at any time to processing based on our legitimate interests, including profiling for fraud-prevention purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, direct marketing), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Rights relating to automated decision-making: You have the right to request human review of any automated decision that produces a significant effect on your Account — for example, an automated fraud-detection suspension.

pkrsin is strictly an adults-only platform. The Services are available only to persons who are at least 18 years of age, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect personal data from minors.

Age verification is a mandatory step during the KYC process. Any Account found to belong to a person below the eligible age will be immediately suspended, all associated funds will be frozen and the matter may be reported to relevant authorities in accordance with applicable child-protection obligations.

If you believe that a minor has registered an Account or that personal data of a minor has been collected by the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

pkrsin operates an international platform. In order to deliver our Services, your personal data may be transferred to and processed in countries outside your country of residence, including countries where data protection laws may differ from those applicable in your jurisdiction.

Where personal data is transferred internationally, pkrsin takes steps to ensure that appropriate safeguards are in place, which may include:

• Transferring data only to processors located in jurisdictions that provide an adequate level of data protection as assessed by relevant regulators;
• Implementing contractual data transfer mechanisms (such as standard contractual clauses) with recipient processors where required;
• Applying additional technical safeguards such as encryption and pseudonymisation to data in transit.

By using the Platform and providing your personal data, you acknowledge that your data may be transferred internationally as described in this section.

The pkrsin Platform may reference or integrate with third-party services — including game software providers, live streaming feeds, odds data suppliers and payment processors — in order to deliver the full range of Services to Users.

Each third-party service provider operates under its own privacy policy and data handling practices. pkrsin is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of any third-party service with which you interact, particularly in relation to payment processing.

Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are referenced for user familiarity only. These providers do not endorse, affiliate with or support pkrsin or any gambling transaction. Your interactions with these payment providers are governed by their own terms and privacy policies.

pkrsin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. The most current version of this Policy will always be accessible at pkrsin.cam/privacy-policy and will bear the date on which it was last revised, shown at the top of this page.

Where changes are material — that is, where they significantly affect your rights or how your personal data is processed — pkrsin will provide reasonable advance notice via the email address associated with your Account or via a prominent in-Platform notification prior to the changes taking effect.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

If you have any questions, concerns or requests relating to this Privacy Policy or the way pkrsin handles your personal data, please contact our support team. We aim to respond to all data-related enquiries within two (2) working days.

When contacting us about a data rights request, please include your registered email address and a description of your request so we can verify your identity and respond efficiently. Do not include sensitive documents such as your full identity number or payment credentials in your initial message — our support team will guide you through any secure verification steps required.

Please note: pkrsin support staff will never ask for your Account password. If you receive a communication purporting to be from pkrsin that requests your password, treat it as fraudulent and report it to us immediately.