pkrok Privacy Policy

1Introduction

pkrok ("we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses or uses the pkrok Platform ("Platform"), located at pkrok.org. This Privacy Policy ("Policy") sets out in detail the types of personal information pkrok collects, the purposes for which that information is used, the parties with whom it may be shared, the safeguards we apply to protect it, and the rights available to you in relation to your personal data.

This Policy applies to all current and former pkrok account holders, visitors to the pkrok website who have not registered an account, and any individual who contacts pkrok through any communication channel including live chat or email.

By registering a pkrok account, using any feature of the Platform, or otherwise providing your personal information to pkrok, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data in the manner described herein. This Policy should be read in conjunction with pkrok's Terms & Conditions and Responsible Gaming Policy.

2Who We Are

pkrok is operated by its licensed entity, which holds an international gaming licence authorising the provision of online sports betting, live casino, and slot game services. pkrok operates the Platform under that licence and is the data controller responsible for personal information collected through the Platform.

pkrok's primary market is Pakistan. The Platform is designed and operated for English-speaking Pakistani players, with all financial transactions conducted in Pakistani Rupees (PKR) and all primary payment methods — including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank — selected for their relevance to Pakistani players in cities including Karachi, Lahore, Islamabad, and Faisalabad.

For all privacy-related enquiries, contact pkrok's data protection point of contact at [email protected], marking your correspondence "Privacy Enquiry".

3Personal Data We Collect

pkrok collects the following categories of personal information. Not all categories apply equally to every individual — the specific data collected depends on the nature and extent of your interaction with the Platform.

3.1 Identity & Contact Data

• Full legal name (as per CNIC)
• Date of birth
• CNIC number (for identity and age verification)
• Pakistani mobile phone number
• Email address
• Residential address (city and country)

3.2 Account & Transaction Data

• pkrok account username and encrypted password
• Account registration date and history
• Deposit history, withdrawal history, and PKR account balance
• Betting history, game history, and wagering activity
• Bonus and promotional credit history
• Customer support communication records

3.3 Payment Method Data

• JazzCash or EasyPaisa mobile wallet number
• Bank account details (account title, IBAN, bank name) where bank transfer is used
• Transaction reference numbers

pkrok does not store full card numbers. Where card-based payment processing is facilitated, card data is handled exclusively by the relevant PCI-DSS-compliant payment processor.

3.4 Technical & Usage Data

• IP address and approximate geographic location at the time of login or transaction
• Device type, operating system, and browser
• Session duration and Platform navigation activity
• Login timestamps and authentication logs
• Referral source (how you arrived at pkrok.org)

3.5 Responsible Gaming Data

Where a Player activates responsible gaming tools — including deposit limits, loss limits, session timers, reality check settings, or self-exclusion — pkrok records and stores those settings as part of the account record. This data is used exclusively to enforce the Player's chosen restrictions and is never used for marketing purposes.

4How We Collect Your Data

pkrok collects personal data through the following channels:

• Direct registration: Information you provide when creating your pkrok account, including name, CNIC, mobile number, and email address.
• Identity verification: Documents submitted in response to pkrok's KYC (Know Your Customer) verification requests, including CNIC copies, selfies, and proof of address.
• Platform activity: Data generated automatically as you use the pkrok Platform, including betting and gaming activity, login history, and navigation data.
• Payment processing: Transaction data arising from deposits and withdrawals via JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, or other supported methods.
• Customer support interactions: Records of live chat sessions, email correspondence, and support ticket submissions.
• Cookies and tracking technologies: Technical data collected automatically when you visit pkrok.org, as described in Section 9 of this Policy.

5How We Use Your Personal Data

pkrok uses the personal data it collects for the following purposes:

1. Account creation and management — to register your pkrok account, verify your identity and age, maintain your account profile, and administer your PKR balance.
2. Transaction processing — to process PKR deposits and withdrawals via your chosen payment method, including JazzCash, EasyPaisa, and bank transfer.
3. Service delivery — to provide access to the pkrok sportsbook, live casino, and slot games; to settle bets; to credit winnings; and to administer promotional offers.
4. Identity verification and fraud prevention — to verify that each account holder is a real, unique individual aged 21 or over; to detect and prevent duplicate accounts, fraudulent transactions, money laundering, and other prohibited conduct.
5. Regulatory and licence compliance — to meet the Know Your Customer (KYC), Anti-Money Laundering (AML), and responsible gaming obligations required under pkrok's international gaming licence.
6. Customer support — to respond to account queries, resolve disputes, and maintain support records.
7. Security and platform integrity — to monitor for suspicious activity, protect accounts from unauthorised access, and maintain the technical integrity of the Platform.
8. Marketing communications — to send promotional offers, new game announcements, and PKR bonus alerts to Players who have opted in to receive such communications. Players may opt out at any time.
9. Platform improvement — to analyse usage patterns and improve the pkrok user experience for Pakistani players.

6Legal Basis for Processing

pkrok processes personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity — processing required to fulfil pkrok's contractual obligations to you as a registered account holder, including account management, transaction processing, and service delivery.
• Legal obligation — processing required to comply with applicable laws and regulatory obligations, including KYC, AML, and responsible gaming requirements under pkrok's gaming licence.
• Legitimate interests — processing carried out in pkrok's legitimate interests, including fraud prevention, Platform security, dispute resolution, and business analytics, where those interests are not overridden by your rights and interests.
• Consent — processing carried out on the basis of your freely given, specific consent, including the sending of marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7Sharing Your Personal Data

pkrok does not share your personal data with third parties except in the circumstances described below. In all cases, data sharing is limited to the minimum necessary for the stated purpose.

7.1 Service Providers

pkrok engages third-party service providers to assist in delivering the Platform. These include payment processors (JazzCash, EasyPaisa, and banking partners), identity verification providers, game content studios, live dealer platform providers, customer support software providers, and Platform hosting and infrastructure providers. Service providers are contractually required to process data only on pkrok's instructions and to maintain appropriate data security standards.

7.2 Regulatory and Legal Disclosure

pkrok may disclose personal data to regulatory authorities, law enforcement agencies, tax authorities, or courts where required by law, court order, or under the terms of pkrok's gaming licence. This includes disclosure to sports integrity bodies investigating match-fixing or betting corruption where pkrok is required or authorised to report suspicious betting activity.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of pkrok's business, personal data held by pkrok may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any resulting change to this Policy.

8Payment Data & Financial Information

All financial transactions on the pkrok Platform are conducted in Pakistani Rupees (PKR). pkrok collects and processes payment data to the extent necessary to facilitate your deposits and withdrawals via your chosen method.

pkrok does not store sensitive authentication data for JazzCash, EasyPaisa, or bank accounts beyond what is required to identify your registered payment method and process transactions. Full mobile wallet PINs and full bank account passwords are never collected or stored by pkrok.

Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained as part of your account record for the period specified in Section 11 of this Policy, in order to fulfil pkrok's AML and regulatory record-keeping obligations.

9Cookies & Tracking Technologies

pkrok uses cookies and similar tracking technologies on the pkrok.org website. Cookies are small text files stored on your device that help pkrok operate the Platform efficiently, maintain your session state, and understand how Players interact with the site.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that protect your account. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings and display preferences to improve your experience on repeat visits.
• Analytics cookies: Collect anonymised data about how visitors use pkrok.org — such as pages visited and time spent — to help pkrok improve the Platform. This data does not identify individual users.
• Marketing cookies: Used only where you have given consent, to track visit sources and measure the effectiveness of pkrok's promotional campaigns.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Disabling all cookies may affect Platform functionality, including the ability to stay logged in. Strictly necessary cookies cannot be disabled through browser settings without impairing the Platform's core functions.

10Data Security

pkrok implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and pkrok's servers;
• Encrypted storage of sensitive account data, including passwords (stored as salted cryptographic hashes — never in plain text);
• Two-factor authentication (2FA) available to all account holders;
• Automated suspicious activity detection and account lockout mechanisms;
• Role-based access controls limiting pkrok staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure.

While pkrok takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your pkrok account and to enable 2FA from your account security settings.

11Data Retention

pkrok retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with the retention obligations imposed by pkrok's gaming licence and applicable anti-money laundering regulations.

As a general guide, the following retention periods apply:

• Active account data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure.
• Customer support records: Retained for a minimum of three (3) years following the closure of each support interaction.
• Marketing preference records: Retained until opt-out, plus a reasonable period to demonstrate compliance.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

12Your Data Rights

As a pkrok account holder, you have the following rights in relation to your personal data, subject to applicable legal limitations and the conditions of pkrok's gaming licence obligations:

• Right of access: You may request a copy of the personal data pkrok holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data, subject to pkrok's legal and regulatory retention obligations. Where deletion is not possible due to mandatory retention requirements, pkrok will restrict further processing of your data.
• Right to restrict processing: You may request that pkrok restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to data portability: Where processing is carried out on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact pkrok at [email protected], marking your request "Data Rights Request". pkrok will respond within thirty (30) days of receipt of a valid request.

13Children & Minors

pkrok uses CNIC-based age verification to enforce its 21+ age policy. If pkrok discovers that it has inadvertently collected personal data from an individual under the age of 21, it will delete that data immediately and close the associated account.

If you are a parent or guardian and believe that a minor may have registered a pkrok account using false age information, please contact pkrok immediately at [email protected]. pkrok will investigate and take appropriate action, including account closure and secure data deletion, without delay.

14Responsible Gaming Data

Personal data associated with a Player's responsible gaming settings — including deposit limit amounts, loss limit thresholds, session time restrictions, reality check intervals, and self-exclusion status — is treated with a heightened level of confidentiality within pkrok's systems.

This category of data is:

• Used exclusively to enforce the relevant restriction set by the Player;
• Never used for marketing, profiling, or commercial analysis;
• Accessible only to the limited pkrok staff responsible for responsible gaming compliance and account security;
• Retained for the duration of the account relationship plus five (5) years, to enable pkrok to demonstrate responsible gaming compliance under its licence obligations.

Self-exclusion requests are processed immediately upon receipt and result in the Player's account being locked for the selected exclusion period. For further information on pkrok's responsible gaming tools and commitments, please visit the Responsible Gaming page.

15Third-Party Links

The pkrok Platform may contain links to third-party websites or services — for example, payment gateway interfaces operated by JazzCash or EasyPaisa. This Privacy Policy applies only to the pkrok Platform and does not govern the data practices of any third-party website or service.

pkrok is not responsible for the privacy practices of third-party services. Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their pkrok account activity.

16Amendments to This Policy

pkrok reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they meaningfully change how pkrok collects, uses, or shares your personal data — pkrok will notify registered Players via email to their registered address, or via an on-screen notification upon next login to the Platform.

The "Last Updated" date at the top of this page will be revised on each amendment. Continued use of the Platform following notification of an amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

17Contact Us

For all privacy-related enquiries, data rights requests, or concerns about how pkrok handles your personal data, please contact pkrok using the following details:

• Email: [email protected] — subject line: "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 via the pkrok Platform
• Response Time: Within 2 hours by email; under 2 minutes via live chat

pkrok will acknowledge your privacy enquiry within two (2) business days and provide a substantive response within thirty (30) days, in accordance with applicable data protection obligations.