pkr300 Privacy Policy

1 Introduction & Scope

1.1 This Privacy Policy describes how pkr300 ("pkr300", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals who use the pkr300 online gaming platform accessible at pkr300.org (the "Platform").

1.2 This Policy applies to:

• All registered members of the pkr300 Platform, regardless of location;
• Individuals who visit pkr300.org without registering an account;
• Individuals who contact pkr300 customer support;
• Individuals who subscribe to pkr300 marketing communications.

1.3 pkr300 is committed to handling all personal data in accordance with the data protection principles embedded in its international gaming licence requirements and applicable privacy regulations. These principles include data minimisation, purpose limitation, storage limitation, and the obligation to implement appropriate technical and organisational security measures.

1.4 This Policy should be read alongside the pkr300 Terms & Conditions and Responsible Gaming Policy, both of which reference privacy obligations relevant to their respective subject matter.

2 Data Controller

2.1 For the purposes of applicable data protection law, pkr300 is the data controller in respect of personal data collected through the Platform. The data controller is responsible for deciding the purposes for which personal data is processed and the manner in which it is processed.

2.2 pkr300 operates under an international gaming licence. Full details of the operating entity, including its registered address and licensing authority, are published on the About Us page. That information is incorporated into this Privacy Policy by reference.

2.3 Where pkr300 engages third-party service providers to process personal data on its behalf — for example, payment processors or identity verification providers — those parties act as data processors and are bound by data processing agreements that restrict their use of your data to the specific purposes for which it was shared.

3 Data We Collect

3.1 pkr300 collects personal data through several channels, including account registration, platform usage, payment transactions, customer support interactions, and cookies. The categories of personal data we collect are set out in the table below.

3.2 pkr300 does not collect or process special category data (such as health data, racial or ethnic origin data, or political opinions) except where directly relevant to a responsible gaming intervention and only with the Member's explicit consent or as required by our gaming licence obligations.

3.3 Where you choose not to provide mandatory personal data — for example, identity documents required for KYC — pkr300 may be unable to process withdrawal requests or maintain your account in accordance with its regulatory obligations. We will notify you clearly when data provision is mandatory versus optional.

4 How We Use Your Data

4.1 pkr300 uses personal data collected from Members and platform visitors for the following purposes:

• Account Management: Creating, maintaining, and securing your pkr300 account; verifying your identity at registration and during KYC checks; processing login requests and enforcing account security measures.
• Payment Processing: Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and bank transfer; verifying that payment accounts are held in your registered name; detecting and preventing fraudulent transactions.
• Regulatory Compliance: Meeting pkr300's obligations under its international gaming licence, including age verification, anti-money laundering (AML) checks, responsible gaming monitoring, and reporting to the relevant licensing authority where required.
• Platform Security: Detecting and investigating suspicious activity, account takeover attempts, bonus abuse, collusion, and other breaches of the pkr300 Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling; enforcing deposit limits, session limits, and self-exclusions; contacting Members where we have welfare concerns.
• Customer Support: Responding to support queries, complaints, and dispute resolution requests submitted via live chat or email.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game offerings, platform performance, and user experience for players across Karachi, Lahore, Islamabad, Faisalabad, and beyond.
• Marketing Communications: Sending promotional emails and SMS notifications to Members who have given their explicit consent to receive them. You may withdraw this consent at any time.

4.2 pkr300 does not use personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by our AML obligations and subject to the safeguards described in Section 5.

5 Legal Basis for Processing

5.1 pkr300 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between pkr300 and the Member — including account management, game participation, and payment processing.
• Legal Obligation: Processing required to comply with pkr300's gaming licence conditions, AML regulations, and applicable law — including KYC identity verification, age verification, and suspicious transaction reporting.
• Legitimate Interests: Processing for purposes that are in pkr300's legitimate interests and do not override the Member's privacy rights — including fraud detection, platform security, responsible gaming monitoring, and analytics for platform improvement.
• Consent: Processing for optional purposes where you have given your explicit consent — including marketing communications and optional analytics cookies. Consent may be withdrawn at any time without affecting prior processing.

6 Data Sharing & Disclosure

6.1 pkr300 does not sell, rent, or trade personal data to any third party for commercial purposes. Personal data is shared with third parties only in the circumstances described below, and only to the minimum extent necessary.

6.1 Payment Processors

To process deposits and withdrawals, pkr300 shares relevant transactional and identity data with its payment processing partners, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK. These providers process your data solely to facilitate the requested transaction and are bound by their own privacy and data security obligations.

6.2 Identity Verification Providers

pkr300 uses third-party KYC providers to verify the identity and age of new Members. These providers receive the identity documents and personal data you submit during KYC and process them only for the purposes of identity verification. Results are returned to pkr300 and the underlying data is not retained by the provider beyond the period required for their own regulatory obligations.

6.3 Regulatory & Law Enforcement Authorities

pkr300 may be required by its international gaming licence conditions or by applicable law to disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities. Such disclosures are made only to the extent required by the applicable legal obligation and, where permissible, we will notify you of any such request.

6.4 Group Companies & Business Transfers

pkr300 may share personal data with other entities within its corporate group for internal administrative purposes, including fraud prevention and platform operations. In the event of a merger, acquisition, or sale of all or part of pkr300's business, personal data held by pkr300 may be transferred to the acquiring entity, subject to confidentiality protections consistent with this Policy.

6.5 Professional Advisers

pkr300 may share personal data with its legal advisers, auditors, and insurers on a confidential basis where necessary for the provision of professional services to pkr300.

7 International Data Transfers

7.1 pkr300 operates under an international gaming licence and, as a result, some personal data may be stored or processed in jurisdictions outside Pakistan. Where personal data is transferred internationally, pkr300 ensures that adequate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

7.2 Such safeguards may include contractual protections between pkr300 and the receiving party, verified security certifications held by the receiving party, or transfers to jurisdictions recognised as providing an adequate level of data protection.

7.3 Members may request further information about international transfer safeguards applicable to their data by contacting the pkr300 support team.

8 Data Retention

8.1 pkr300 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by pkr300's gaming licence and applicable law. The key retention periods are as follows:

8.2 Upon expiry of the applicable retention period, pkr300 will securely delete or anonymise personal data so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

9.1 pkr300 uses cookies and similar tracking technologies on the Platform to ensure correct operation, maintain session security, and improve the user experience. The categories of cookies used are described below.

• Strictly Necessary Cookies: Required for the Platform to function. These cookies maintain your login session, remember your language preference, and ensure Platform security. They cannot be disabled without disabling core Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Members interact with the Platform, including pages visited and time spent, to help pkr300 improve performance and content. These cookies are only set with your consent.
• Functionality Cookies: Used to remember choices you make on the Platform, such as game preferences and display settings, to provide a more personalised experience.

9.2 You may manage your cookie preferences at any time through the cookie settings panel accessible from the footer of the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

9.3 pkr300 does not use third-party advertising cookies or permit third-party advertisers to place cookies on the Platform.

10 Your Data Rights

10.1 As a pkr300 Member, you have the following rights in respect of your personal data. These rights are subject to applicable legal limitations, including data retention obligations under pkr300's gaming licence.

10.2 To exercise any of these rights, please contact the pkr300 support team via live chat or by emailing [email protected]. We will verify your identity before processing any data rights request. We will respond to all verified requests within 30 calendar days, or notify you of any extension where a complex request requires additional time.

11 Security Measures

11.1 pkr300 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data exchanged between your device and the pkr300 Platform is encrypted using TLS 1.3, the current industry standard for secure web communications.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form in access-controlled database environments.
• Access Controls: Access to personal data by pkr300 staff is restricted on a strict need-to-know basis, with role-based access controls and activity logging for all systems containing personal data.
• Penetration Testing: pkr300's platform and supporting infrastructure are subject to regular independent security assessments and penetration testing.
• Incident Response: pkr300 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to Members, pkr300 will notify affected Members and the relevant supervisory authority in accordance with applicable notification timelines.

11.2 While pkr300 takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be 100% secure. Members are encouraged to use strong, unique passwords and to enable two-factor authentication in their account settings as an additional layer of protection.

12 Children & Minors

12.1 The pkr300 Platform is strictly for individuals aged 21 years or older. pkr300 does not knowingly collect or process personal data relating to individuals under the age of 21.

12.2 Age verification is performed during the registration process and may be repeated as part of ongoing KYC obligations. Where pkr300 discovers that personal data has been collected from an individual under 21, it will immediately close the relevant account, void all associated bets, return any deposited funds to the originating payment method, and delete the personal data associated with the underage account from its systems, subject only to any mandatory regulatory retention requirements.

12.3 If you believe that pkr300 may have inadvertently collected personal data from a minor, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 Marketing Communications

13.1 pkr300 sends promotional emails and SMS notifications only to Members who have given their explicit consent to receive them. Consent is obtained during the registration process and can be managed at any time through Account Settings.

13.2 Every marketing communication sent by pkr300 includes an unsubscribe option. You may also withdraw your marketing consent at any time by:

• Updating your communication preferences in Account Settings;
• Clicking the unsubscribe link in any pkr300 promotional email;
• Contacting pkr300 support via live chat or email and requesting removal from marketing lists.

13.3 Withdrawal of marketing consent does not affect your ability to use the pkr300 Platform or receive service-critical communications such as account security alerts, withdrawal confirmations, or KYC request notifications.

13.4 pkr300 does not engage in cold marketing to individuals who have not consented to receive communications. We do not purchase or use third-party marketing lists.

14 Changes to This Privacy Policy

14.1 pkr300 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, our gaming licence requirements, platform features, or data processing practices. All changes will be published on this page with an updated effective date.

14.2 Where changes are material — meaning they significantly affect the way pkr300 processes your personal data or the rights available to you — pkr300 will notify registered Members by email at least 14 days before the revised Policy takes effect.

14.3 Continued use of the pkr300 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the revised Policy, you should close your account and withdraw any remaining balance before the revision takes effect.

15 Contact & Complaints

15.1 If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about the way pkr300 has handled your personal data, please contact us through the following channels:

• Live Chat: Available directly on the pkr300 Platform, 24 hours a day, 7 days a week. For privacy-related queries, please indicate "Privacy Request" at the start of your message so that your query is routed to the appropriate team.
• Email: [email protected] — for written privacy requests, data subject access requests, erasure requests, and formal complaints. We aim to respond to all privacy-related emails within 5 business days and to complete all data rights requests within 30 calendar days.
• Postal Address: The registered address of the pkr300 operating entity is published on the About Us page.

15.2 If you are not satisfied with pkr300's response to a privacy complaint, you have the right to escalate your complaint to the supervisory authority designated by pkr300's gaming licence jurisdiction. Details of the relevant supervisory authority are available on the About Us page.

15.3 pkr300 takes all privacy complaints seriously and will investigate each complaint thoroughly and impartially. We are committed to resolving privacy concerns fairly and in a timely manner.