pkr888aa Privacy Policy — Your Data, Your Rights, Our Commitment

1Who We Are — The Data Controller

pkr888aa ("the Platform", "we", "us", "our") is the data controller responsible for the personal information you provide when using our website and services. As data controller, pkr888aa determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the pkr888aa website at pkr888aa.app, including all sub-pages, account registration flows, payment interfaces, live game environments, and any promotional mechanics (such as the Refer a Friend programme or VIP Club enrolment).

If you have any questions about how pkr888aa handles your data, or if you wish to exercise any of the rights described in Section 8, you can contact our dedicated privacy team at privacy@pkr888aa.app. We respond to all privacy enquiries within 72 hours.

2Personal Data We Collect

pkr888aa collects personal data in three broad categories: information you provide directly, information generated by your use of the platform, and information received from third parties (such as payment processors) in connection with your account. Here is a complete breakdown:

pkr888aa does not collect or store sensitive personal data categories such as health information, religious beliefs, political opinions, or biometric data. CNIC numbers are collected solely for identity verification and are stored in encrypted form.

3How We Collect Your Data

pkr888aa collects your personal data through the following mechanisms:

• Direct submission — when you complete the registration form, submit identity verification documents, make a deposit, request a withdrawal, or contact our support team.
• Automated collection — as you browse and use the platform, our servers automatically log technical data including your IP address, device identifiers, browser information, and session activity. This happens on every visit, whether or not you are logged in to your account.
• Cookies and tracking technologies — pkr888aa uses cookies, pixel tags, and similar technologies to enhance platform functionality and analyse usage patterns. See Section 7 for full details.
• Third-party payment processors — when you make a deposit or withdrawal, our payment partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT providers, Visa/Mastercard processors) share transaction confirmation data with pkr888aa. This data is used exclusively to verify and process your payment.
• Refer a Friend — if another pkr888aa player refers you using the Refer a Friend programme, we receive your email address or phone number from the referrer. We use this only to set up your account and apply the referral bonus — we do not use it for any other purpose without your consent.

4Why We Use Your Personal Data

Every piece of personal data pkr888aa processes has a specific, documented purpose. We do not use data for purposes that haven't been identified below. The legal basis for each processing activity is noted in brackets:

• Account creation and management — processing your registration details to create and maintain your pkr888aa account. [Contract performance]
• Payment processing — using your payment method details to process deposits and withdrawals accurately and securely. [Contract performance]
• Identity verification and KYC — verifying your identity using CNIC data in compliance with our licensing obligations and anti-money laundering (AML) requirements. This is not optional — it is a regulatory requirement. [Legal obligation]
• Fraud prevention and security — analysing account activity, IP addresses, and device data to detect and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited conduct. [Legitimate interests]
• Customer support — using your account history and communications data to resolve your queries and complaints effectively. [Contract performance / Legitimate interests]
• Responsible gaming — monitoring gameplay patterns to identify potential problem gambling indicators and ensure that the responsible gaming tools available to you are effective. [Legal obligation / Legitimate interests]
• Platform improvement — using aggregated, anonymised usage data to understand how players use pkr888aa and improve the platform experience. Individual players cannot be identified from this data. [Legitimate interests]
• Marketing communications — sending you information about promotions, new games, and platform updates. This is always opt-in for new players and opt-out is available at any time. [Consent]
• Legal compliance — retaining transaction and account records to fulfil reporting obligations to our licensing authority and, where required, to law enforcement agencies. [Legal obligation]

5Who We Share Your Data With

pkr888aa shares personal data with third parties only where it is strictly necessary. The categories of recipients are:

• Payment processors — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, and Visa/Mastercard network processors receive the minimum data required to process your transaction. These processors are contractually bound to handle your data securely and use it only for payment processing.
• Identity verification providers — where pkr888aa uses a third-party KYC service to verify CNIC authenticity, your identity documents are shared with that provider for the verification process only. Documents are not retained by the provider beyond the verification period.
• Game providers — third-party game studios (such as Spribe for Aviator, Pragmatic Play for Spaceman) receive your account identifier and bet data to deliver gameplay and settle results. They do not receive your full personal details, payment information, or identity documents.
• IT and hosting infrastructure — pkr888aa's platform operates on secure cloud infrastructure. Our hosting and IT service providers have access to server logs and technical data as part of infrastructure management. They are bound by strict data processing agreements.
• Regulatory and legal authorities — pkr888aa will disclose personal data to our licensing authority, financial intelligence units, or law enforcement agencies where required by law or where we are legally compelled to do so. We will notify you of such disclosure where we are legally permitted to.
• Professional advisors — our lawyers, accountants, and auditors may access relevant account or transaction data as part of their professional services. All are bound by professional confidentiality obligations.

pkr888aa does not sell, rent, lease, or otherwise commercially transfer your personal data to any third party. We do not share your data with advertising networks, data brokers, or marketing agencies.

6How Long We Keep Your Data

pkr888aa retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as we are legally required to retain it. The key retention periods are:

• Account data (active accounts) — retained for the lifetime of the account plus 5 years after account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records — all deposit and withdrawal records are retained for 7 years following the transaction date. This is a standard financial record-keeping period.
• Identity verification documents — CNIC copies and associated KYC records are retained for 5 years after account closure.
• Support communications — chat transcripts and email correspondence are retained for 3 years, after which they are deleted unless they relate to an unresolved legal matter.
• Marketing consent records — records of your marketing opt-in or opt-out status are retained indefinitely to ensure compliance with your stated preferences.
• Technical logs (IP, device data) — retained for 13 months for fraud detection and security monitoring purposes, then deleted.

When data is no longer required and the retention period has expired, pkr888aa deletes it securely using industry-standard data destruction methods. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics.

7Cookies & Tracking Technologies

pkr888aa uses cookies and similar technologies to make the platform work correctly and to understand how players use it. A cookie is a small text file stored on your device when you visit a website. Here's what we use and why:

You can manage or delete cookies through your browser settings at any time. Disabling essential or security cookies will affect your ability to use the pkr888aa platform correctly. pkr888aa does not use third-party advertising cookies or share browsing data with ad networks.

8Your Rights Over Your Personal Data

As a pkr888aa account holder, you have the following rights over the personal data we hold about you. These rights can be exercised by contacting privacy@pkr888aa.app from your registered email address:

9Children's Privacy

pkr888aa is strictly an 18-and-over platform. We do not knowingly collect personal data from anyone under 18 years of age. The registration process includes age declaration and pkr888aa conducts age verification checks — including CNIC verification — before processing withdrawals.

If pkr888aa discovers or is notified that an account belongs to a person under 18, all data associated with that account will be permanently deleted, the account will be closed, and any balance forfeited in accordance with our Terms and Conditions. If you believe a minor has registered at pkr888aa, please notify us immediately at privacy@pkr888aa.app.

10Security Measures We Have in Place

pkr888aa takes data security seriously and has implemented a comprehensive set of technical and organisational measures to protect your personal information:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• At-rest encryption for all sensitive stored data, including identity documents and payment method details.
• PCI-DSS compliant payment processing — card data never touches pkr888aa's own servers.
• Two-factor authentication (2FA) available for all accounts — strongly recommended and required for Diamond VIP tier.
• Regular penetration testing by independent security firms to identify and remediate vulnerabilities before they can be exploited.
• Strict internal access controls — pkr888aa staff access to player data is role-restricted and fully logged. No staff member has access to more data than is required for their specific function.
• Automated fraud detection monitoring account activity in real time for suspicious patterns — protecting both the platform and individual players.
• Incident response procedures — in the event of a data breach that affects your personal data, pkr888aa will notify affected players and relevant authorities within 72 hours of becoming aware of the breach.

11International Data Transfers

pkr888aa's primary servers and data storage are located in secure data centres covered by our licensing jurisdiction. Some of our third-party service providers — such as cloud infrastructure partners and certain game providers — may process data in different jurisdictions.

Where personal data is transferred internationally, pkr888aa ensures that appropriate safeguards are in place before any transfer takes place. These safeguards include contractual data processing agreements that require the recipient to protect your data to a standard equivalent to how pkr888aa protects it, and adherence to internationally recognised data protection frameworks.

pkr888aa does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual or technical safeguards. If you would like more information about the specific safeguards in place for international transfers of your data, please contact privacy@pkr888aa.app.

12Changes to This Privacy Policy

pkr888aa reviews this Privacy Policy regularly and updates it whenever our data practices change, or when legal and regulatory requirements dictate a revision. The "Last Updated" date at the top of this page reflects the most recent revision.

For material changes — such as new categories of data being collected, new third-party sharing arrangements, or significant changes to your rights — pkr888aa will notify all active players by email to their registered address at least 14 days before the changes take effect. Minor clarifications and corrections may be made without prior notice.

Continued use of the pkr888aa platform after any Privacy Policy update constitutes your acceptance of the revised policy. If you do not accept the changes, you should stop using the platform and contact us to close your account and arrange return of any withdrawable balance.

13Contact Us & How to Complain

For any privacy-related questions, data access requests, or concerns about how pkr888aa handles your personal information, please contact our privacy team:

• Privacy Email: privacy@pkr888aa.app — dedicated privacy team, responses within 72 hours
• General Support: support@pkr888aa.app — for account questions that touch on privacy matters
• Live Chat: available within your pkr888aa account at all times

When contacting us about a privacy matter, please include your registered username and email address, the specific data or processing activity you are enquiring about, and — if exercising a formal right — a clear statement of which right you are invoking. This helps us handle your request efficiently.

How to make a complaint: If you believe pkr888aa has not handled your personal data correctly, you can make a formal complaint by emailing privacy@pkr888aa.app with the subject line "Formal Privacy Complaint". We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days. If you remain dissatisfied with our response, you have the right to escalate the matter to our licensing authority's data protection oversight function — details available on request.