patpkr Privacy Policy

patpkr operates the online casino and sports betting platform accessible at patpkr.org. For the purposes of this Privacy Policy, patpkr acts as the Data Controller — meaning we determine the purposes and means by which your personal data is processed on this platform.

patpkr is licensed under an international gaming licence and operates in compliance with applicable data protection standards as required under our licensing framework. Our operations are designed to serve English-speaking Pakistani users who choose to engage with our platform for recreational online gaming and sports wagering, including PSL cricket betting, live casino games, and digital slots.

All data processing described in this Privacy Policy is carried out by patpkr or by carefully selected third-party processors who operate strictly under our instruction and under binding data processing agreements. When you create a patpkr account, you are entering into a data relationship with patpkr as the controlling entity.

patpkr collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with our platform, and from third parties such as payment processors and identity verification services. The categories of personal data we collect are as follows:

patpkr does not collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data used for identification purposes) unless specifically required to fulfil a legal obligation under our licensing framework, in which case you will be separately notified.

We do not collect or store full payment credentials such as full bank account numbers, full JazzCash wallet PINs, or EasyPaisa passwords. Payment authentication is handled directly by the respective payment service provider on their own secure infrastructure. patpkr only receives transaction confirmation references and masked identifiers.

patpkr uses the personal data we collect for clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which your data is used are:

• Account Creation and Management: To register your patpkr account, authenticate your identity at login, manage your player profile, and communicate account-related notifications to you.
• Transaction Processing: To process deposits received via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20, and to execute withdrawal requests to your registered PKR payment method.
• KYC and Age Verification: To verify that you meet the mandatory 21+ age requirement and to confirm your identity as required under our licensing obligations and anti-money laundering compliance framework.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This includes automated risk-scoring systems and pattern analysis on transaction and gameplay data.
• Regulatory Compliance: To fulfil our legal and regulatory obligations under our international gaming licence, including maintaining accurate player records, submitting required reports to licensing authorities, and cooperating with lawful law enforcement requests.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to administer player-requested responsible gaming tools including deposit limits, loss limits, and self-exclusion.
• Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes through our 24/7 live chat and email support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of patpkr.org.
• Marketing Communications: To send you promotional offers, bonus notifications, and PSL cricket betting alerts where you have opted in to marketing communications. You may withdraw this consent at any time from your account settings.

patpkr does not use your personal data for automated individual decision-making that produces significant legal effects, except as part of mandatory regulatory screening processes such as sanctions list checks, which are required under our licensing obligations.

Every instance of personal data processing at patpkr is grounded in at least one of the following recognised legal bases. We do not process data arbitrarily — each processing activity maps to a specific, documented legal justification:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to perform the contract between you and patpkr — specifically, to operate your player account, process your deposits and withdrawals, and deliver the games and betting services you access.
• Legal Obligation: KYC identity verification, age verification (21+), anti-money laundering record-keeping, and cooperation with lawful regulatory requests are all processing activities we are legally required to carry out under our international gaming licence. These cannot be opted out of by players.
• Legitimate Interests: Fraud detection, security monitoring, platform analytics, and responsible gaming monitoring are carried out on the basis of patpkr's legitimate interests in operating a safe, fair, and secure gaming platform. These interests have been balanced against your privacy interests; you may object to this processing in specific circumstances (see Your Rights, Clause 9).
• Consent: Marketing communications, personalised promotional offers, and non-essential cookies are processed solely on the basis of your freely given, specific, and withdrawable consent. You may withdraw marketing consent at any time from your patpkr account settings dashboard.

patpkr uses cookies and similar tracking technologies on patpkr.org to ensure the platform functions correctly, to maintain your session security, and — with your consent — to personalise your experience and deliver relevant promotional content.

You can manage your cookie preferences at any time through the Cookie Preferences panel accessible from the footer of patpkr.org. Declining non-essential cookies will not affect your ability to log in, deposit, play games, or withdraw winnings. Strictly necessary cookies cannot be declined as they are required for the platform to function.

patpkr does not use cross-site tracking cookies to follow your activity on other websites outside of patpkr.org. Our cookies are scoped to the patpkr.org domain only.

patpkr shares personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and our USDT TRC20 processing partner solely to execute your deposit and withdrawal instructions. Each processor is bound by their own regulatory obligations and handles only the data necessary to process the specific transaction.
• Identity Verification Partners: During KYC processing, relevant identity documents and data points may be shared with our third-party identity verification service provider, which operates under a binding data processing agreement with patpkr and processes data solely for verification purposes.
• Game Software Providers: Game session data (player ID, session token, wager amounts) is shared with our licensed game software providers to deliver game content. These providers do not receive your name, CNIC, contact details, or financial account information.
• Regulatory and Law Enforcement Authorities: patpkr will disclose personal data to licensing authorities, financial intelligence units, or law enforcement agencies where required to do so by a lawful order, warrant, or regulatory obligation. We will notify you of such disclosure where permitted to do so by law.
• Fraud Prevention Agencies: Where fraud or money laundering is suspected, relevant data may be shared with industry fraud prevention networks and financial crime agencies as required under our licensing obligations.
• Corporate Transactions: In the event of a merger, acquisition, or sale of patpkr's business, player data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

All third parties who receive personal data from patpkr are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond what is described above.

patpkr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our licensing and legal obligations. Our standard retention periods are as follows:

After the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Self-exclusion records are retained indefinitely to prevent re-registration in breach of a self-exclusion order.

patpkr takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and patpkr.org is encrypted using TLS 1.2 or higher. This applies to all platform interactions including login, deposits, withdrawals, and game sessions.
• Encryption at Rest: Sensitive personal data stored in patpkr's databases — including identity documents, KYC records, and financial transaction data — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data within patpkr's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged, audited, and governed by role-based access control policies.
• Two-Factor Authentication: patpkr's internal administrative systems require multi-factor authentication for all staff access. Players are also encouraged to enable two-factor authentication on their patpkr accounts from the account security settings.
• Fraud Monitoring: Automated systems continuously monitor account activity for anomalous patterns indicative of account takeover, fraudulent transactions, or money laundering. Suspicious activity triggers immediate review by our security team.
• Security Testing: patpkr conducts regular penetration testing and vulnerability assessments on its platform infrastructure. Critical vulnerabilities are remediated on a priority basis.

As a patpkr player, you hold a set of rights with respect to your personal data. patpkr is committed to facilitating the exercise of these rights promptly and without undue restriction. Your rights include:

• Right of Access: You may request a copy of all personal data patpkr holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Basic account details such as email address and phone number can be updated directly from your account settings dashboard.
• Right to Erasure: You may request the deletion of your personal data in circumstances where: (a) it is no longer necessary for the purpose collected; (b) you withdraw consent and no other legal basis applies; or (c) you object to processing and patpkr has no overriding legitimate interests. Note that this right is limited by our legal obligations — we cannot delete data we are required by law or licensing obligation to retain.
• Right to Restriction: You may request that patpkr restricts the processing of your data in specific circumstances, such as while a rectification request is being reviewed or where you have contested the lawfulness of processing.
• Right to Data Portability: For data you have provided to patpkr on the basis of consent or contract, you may request a copy in a structured, machine-readable format (CSV or JSON) to enable transfer to another service.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, patpkr will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time from your account settings or by contacting our support team.

To exercise any of these rights, contact our Data Protection team via live chat or by writing to [email protected] (plain text — not a clickable link). We will verify your identity before processing any rights request to protect against unauthorised disclosure. Requests are processed within 30 calendar days; complex requests may be extended by a further 60 days with notification.

patpkr employs multiple layers of age verification to prevent underage access:

• Date of birth is required at registration and validated against the stated 21+ minimum age threshold.
• Full KYC identity verification — including submission of a valid government-issued identity document — is required before withdrawals are processed and may be triggered at any point during the account lifecycle.
• Automated risk signals during onboarding are reviewed by the compliance team where age cannot be conclusively confirmed from submitted documentation.

If patpkr becomes aware or reasonably suspects that personal data has been collected from a person under the age of 21, we will take immediate action to suspend the account, delete the personal data collected, and return any real money balance to the payment method from which it was deposited, subject to identity verification of the true account owner.

Parents and guardians who believe that a minor in their household has registered a patpkr account are strongly encouraged to contact our support team via live chat immediately so that corrective action can be taken without delay. patpkr also recommends the use of parental control software to restrict access to online gambling sites on shared or family devices.

patpkr's platform integrates certain third-party services that are necessary for its operation, including game software providers, payment gateway APIs, and identity verification tools. When your personal data is processed by these third-party services as part of your patpkr experience, this is carried out under binding data processing agreements and strictly in accordance with the instructions of patpkr.

patpkr does not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that would share your personal data with unrelated companies without your knowledge.

Where patpkr.org links to any external website (such as a responsible gambling resource made available through our support content), please be aware that those external sites operate under their own privacy policies. patpkr is not responsible for the privacy practices of any third-party website. We recommend reviewing the privacy policy of any external site you visit.

The payment providers integrated with patpkr — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and our USDT TRC20 processor — are independent data controllers in respect of their own customer data. Their collection and use of your data during payment processing is governed by their own published privacy notices, separate from this Policy.

patpkr reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, applicable laws, or licensing requirements. All updates will be published at patpkr.org/privacy-policy with an updated effective date and version number clearly displayed at the top of the document.

Where a proposed change to this Privacy Policy is material — meaning it affects the basis on which we process your personal data, the categories of data we collect, or your rights as a data subject — patpkr will notify registered players via email or in-platform notification at least 14 calendar days before the updated Policy takes effect. Your continued use of patpkr after the effective date of an updated Policy constitutes acceptance of the revised terms.

If you do not agree with a proposed material change, you may close your patpkr account before the updated Policy takes effect by contacting our 24/7 support team via live chat. Closure requests received before the effective date will be processed under the previous version of this Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or patpkr's data processing practices, please contact our Data Protection team in the first instance:

• Live Chat: Available 24/7 directly on patpkr.org — the fastest way to reach our support and compliance team.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide your registered patpkr username to help us locate your account securely.

We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days. Complex matters, including formal data subject access requests and erasure requests, may take up to 90 days in total where permitted by applicable law, with progress updates provided to you throughout.

If you are unsatisfied with patpkr's handling of a privacy complaint after following our internal resolution process, you have the right to escalate the matter to the supervisory authority designated under our international gaming licence. Details of the relevant supervisory authority and escalation pathway will be provided to you upon request by our Data Protection team.