Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how pkrvip ("we", "us", "our", "the Platform") collects, processes, stores, shares and protects the personal data of individuals ("you", "User", "Data Subject") who access or use the pkrvip website at https://pkrvip.cam and all associated services.

pkrvip is an English-language online gaming platform designed for Pakistani players and operated under international licensing where applicable. We respect the privacy of our users and are committed to handling personal data in a transparent, lawful and secure manner.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By using the Platform, you acknowledge that you have read and understood this Policy.

2 Definitions

3 Personal Data We Collect

The categories of Personal Data we collect depend on how you interact with the Platform. The following table summarises the primary data categories and their purpose context:

We do not intentionally collect Sensitive Data beyond what is required for responsible gambling assessments where a User has self-disclosed or been flagged through protective tools. We do not collect biometric data beyond what may be required in specific KYC verification flows.

4 How We Collect Personal Data

We collect Personal Data through the following channels:

• Direct Registration: Information you provide when creating an Account, completing KYC, contacting support or participating in promotions.
• Platform Interaction: Data generated automatically as you navigate, play games, place bets or use the cashier — including technical logs and usage patterns.
• Payment Processing: Transaction reference data shared by payment processors when you make deposits or request withdrawals. Familiar references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are context only — availability must be confirmed in the cashier.
• Cookies and Tracking: Session cookies, analytics tools and fraud-detection scripts that operate within your browser or mobile session — further described in Section 8.
• Third-Party Verification Services: Identity verification and fraud screening providers may share verification outcomes with us as Data Processors under contract.

5 Purposes of Data Processing

pkrvip processes Personal Data for the following specific and documented purposes:

• Creating, managing and maintaining your Account and player profile.
• Verifying your identity and age to comply with KYC and AML regulatory obligations.
• Processing PKR-denominated deposits, withdrawals and internal transfers through the Platform cashier.
• Administering bonuses, promotions and the VIP loyalty programme in accordance with applicable terms.
• Monitoring gameplay and transaction patterns for fraud prevention, responsible gambling assessment and security purposes.
• Communicating with you regarding Account status, transactional updates and, where consent is given, promotional messages.
• Improving Platform performance, user experience and game lobby based on aggregated usage analytics.
• Complying with applicable legal obligations and responding to lawful regulatory or law-enforcement requests.
• Resolving disputes, investigating complaints and maintaining records for litigation purposes where necessary.

6 Legal Basis for Processing

pkrvip processes Personal Data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing required to fulfil the User Agreement — including Account operation, cashier management and bonus administration.
• Legal Obligation: Processing required to comply with applicable AML, KYC, and data protection laws in the Platform's licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gambling assessments and platform improvement, where our interests do not override your fundamental rights.
• Consent: Processing for non-essential marketing communications and non-essential cookies, where you have provided freely given, specific and informed consent. Consent may be withdrawn at any time.

7 Data Sharing & Third Parties

pkrvip does not sell, rent or exchange your Personal Data with third parties for their own commercial purposes. We may share data with the following categories of recipients strictly in connection with Platform operations:

• KYC & Identity Verification Providers: Third-party services contracted to perform identity document verification and age checks on our behalf under data-processing agreements.
• Payment Processors: Transaction reference data shared with payment gateway providers as required to process deposits and withdrawals. This may include references contextually familiar to Pakistani users such as Easypaisa, JazzCash, HBL, UBL or similar — these providers do not endorse pkrvip.
• Analytics & Security Providers: Aggregated or pseudonymised usage data shared with platform performance and fraud-detection tools to maintain Platform security and optimise user experience.
• Regulatory & Law Enforcement Authorities: Personal Data disclosed where required by a valid legal order, regulatory direction or in connection with the investigation of suspected financial crime.
• Corporate Transfers: In the event of a merger, acquisition or sale of all or part of our business, Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party Data Processors are required to handle Personal Data in accordance with contractual obligations that provide at minimum the same level of protection as this Policy.

8 Cookies & Tracking Technologies

pkrvip uses cookies and similar tracking technologies on the Platform. The following categories of cookies may be in use:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly. Non-essential cookies can be declined without affecting core Account access.

9 Data Retention

pkrvip retains Personal Data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory and licensing obligations. Key retention principles are as follows:

• Account Data and KYC documents are retained for a minimum of five years following Account closure, in compliance with AML record-keeping requirements — or longer where required by applicable licensing conditions.
• Transaction records, including PKR deposit and withdrawal history, are retained for a minimum of five years for financial audit and AML purposes.
• Support correspondence is retained for up to three years from resolution of the last relevant query.
• Technical and usage logs are retained for up to twelve months before automated deletion or anonymisation.
• Marketing consent records are retained for as long as the consent is active and for a reasonable period thereafter to evidence compliance.

Following the expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

10 International Data Transfers

As an internationally operated platform, pkrvip may transfer Personal Data to servers, service providers or Data Processors located in jurisdictions outside of Pakistan. Such transfers may occur in connection with KYC verification services, cloud infrastructure, payment processing and analytics tools.

Where Personal Data is transferred internationally, pkrvip takes reasonable steps to ensure that equivalent data protection standards apply, including through contractual data-processing agreements that impose binding data protection obligations on recipient entities. Users in Pakistan should be aware that data protection laws in the destination jurisdiction may differ from those in Pakistan.

11 Your Data Subject Rights

Depending on applicable law, you may have the following rights with respect to your Personal Data held by pkrvip. We will respond to verified requests within a reasonable timeframe — typically 30 days — and will inform you if an extension is required.

To exercise any of these rights, contact our support team via the details in Section 15. We may require identity verification before processing a data-subject request. Requests will not be used to circumvent AML or regulatory record-keeping obligations.

12 Security Measures

pkrvip implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption of data in transit using TLS protocols for all Platform communications.
• Encryption of Personal Data and KYC documents at rest in our storage infrastructure.
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis.
• Audit logging of internal access to User records and KYC documentation.
• Two-factor authentication options for User Accounts to reduce unauthorised access risk.
• Fraud-detection and behavioural monitoring systems operating continuously on Platform sessions.
• Regular review of security procedures and, where applicable, third-party security assessments.

13 Children's Privacy

pkrvip does not knowingly collect Personal Data from minors. Age verification is a mandatory component of the KYC process. If we become aware that Personal Data has been collected from a person below the minimum age, we will take immediate steps to delete that data and close the associated Account.

If you believe a minor has accessed or registered on the Platform using your or another person's credentials, please contact our support team immediately so that we can investigate and take appropriate action.

14 Changes to This Policy

pkrvip reviews this Privacy Policy periodically and updates it when our data practices change, when new services are introduced, or when applicable law requires amendment. The "Last Updated" date at the top of this document will be revised on each substantive change.

Where a change materially affects how we process your Personal Data, we will provide notice via a prominent announcement on the Platform and, where practicable, by email to the address registered on your Account. Continued use of the Platform following notification of a material change constitutes acceptance of the revised Policy.

If you do not agree with a revised Policy, you must cease using the Platform and may request Account closure and withdrawal of any confirmed withdrawable Balance, subject to KYC completion and applicable AML requirements.

15 Contact Us

For privacy-related enquiries, data-subject requests or to raise a concern about how pkrvip handles your Personal Data, please contact us through the following channels. We aim to acknowledge all written privacy enquiries within five business days.

Where your request concerns data processed under a specific regulatory jurisdiction, we may refer you to the appropriate supervisory authority. pkrvip will not use your contact to send unsolicited marketing unless you have provided explicit consent to receive promotional communications.