92pkr Privacy Policy

This Privacy Policy ("Policy") is published by 92pkr ("92pkr", "we", "us", "our") and applies to all personal data processed in connection with the 92pkr online gaming platform accessible at 92pkr.bio, including its sports betting, casino, live dealer, slot, and all other related services (collectively, the "Services").

This Policy applies to all registered users of the 92pkr platform ("Users", "you", "your"), all visitors to the 92pkr website, and all individuals who interact with 92pkr through any channel including live chat support and email correspondence. It covers personal data collected from Pakistani users — including players based in Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, and all other cities across Pakistan — as well as all other users of the platform regardless of geographic location.

92pkr is committed to processing personal data in a transparent, fair, and lawful manner consistent with the data protection obligations imposed by the international gaming licence under which the platform operates. We collect only the data that is necessary for the purposes described in this Policy and do not process personal data in any manner incompatible with those purposes.

For the purposes of applicable data protection law, the Data Controller responsible for the personal data collected through the 92pkr platform is the legal entity that holds the international gaming licence under which 92pkr operates. The platform is operated at 92pkr.bio and all data protection enquiries should be directed to 92pkr through the contact channels specified in Section 17 of this Policy.

As Data Controller, 92pkr determines the purposes for which personal data is collected and the means by which that data is processed. Where 92pkr engages third-party service providers to process data on its behalf, those third parties act as Data Processors and are bound by contractual data processing agreements that restrict their use of your data to the specific purposes authorised by 92pkr.

92pkr collects the following categories of personal data from Users. The specific data points collected may vary depending on the nature of the User's interaction with the platform and the Services used.

3.1 Identity Data

Identity data is collected as part of the mandatory Know Your Customer (KYC) verification process. This data is required before any real-money transaction can be processed on your account. 92pkr verifies identity data against government-issued documentation — in Pakistan, this is the CNIC issued by NADRA.

3.2 Contact Data

Your Pakistani mobile number is a primary identifier on the 92pkr platform and is used for account login, two-factor authentication OTP delivery, transaction notifications, and support communications. Your email address is used for account-related correspondence including verification emails, promotional communications (where opted into), and regulatory notices.

3.3 Financial Data

Financial data is collected to process deposits and withdrawals, to fulfil anti-money laundering (AML) monitoring obligations, and to verify that payment methods are registered in the account holder's own name. 92pkr does not store full payment card numbers. Where card processing is involved, card data is handled entirely by the relevant payment processor under PCI-DSS standards.

3.4 Gaming Activity Data

Gaming activity data is used for account management, dispute resolution, responsible gaming monitoring, regulatory compliance, and platform improvement. This data forms the authoritative record of all gaming activity conducted through your account and is retained in accordance with the data retention schedule in Section 9.

3.5 Technical Data

Technical data is collected automatically when you access the 92pkr platform. It is used for fraud detection, security monitoring, geographic restriction enforcement, platform optimisation, and login anomaly alerting. IP addresses are not permanently stored beyond the period necessary for security and compliance purposes.

3.6 Communications Data

Records of communications between you and 92pkr — including live chat transcripts, email correspondence, and any other written communications — may be retained for quality assurance, dispute resolution, and regulatory audit purposes. You will be notified at the outset of any interaction that may be recorded for these purposes.

92pkr collects personal data through the following channels and methods:

92pkr does not purchase personal data from data brokers or acquire User data from unaffiliated third parties for marketing purposes. Data received from third-party service providers (such as KYC verification results from a licensed identity verification service) is used solely for the purpose for which it was obtained.

92pkr processes personal data only where a lawful basis for doing so exists under applicable data protection law. The following lawful bases apply to the processing activities described in this Policy:

• Performance of a Contract: Processing necessary to provide the Services you have registered for, including account management, processing bets, executing deposits and withdrawals, and settling game outcomes. Without this processing, 92pkr cannot provide the Services to you.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements imposed by our gaming licence, and mandatory regulatory reporting to our licensing authority.
• Legitimate Interests: Processing necessary for the legitimate interests pursued by 92pkr, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of the platform's products and services — provided those interests are not overridden by your interests or fundamental rights.
• Consent: Where processing is based on consent — for example, the sending of promotional communications beyond those directly related to your account — you may withdraw that consent at any time by contacting 92pkr support or using the unsubscribe function in any marketing communication.

92pkr processes personal data for the following specific and disclosed purposes. No personal data is processed for any purpose that is incompatible with those stated here.

92pkr shares personal data only where necessary and only with the categories of recipient listed below. We do not sell, rent, or otherwise transfer personal data to unaffiliated third parties for their own independent use or for marketing purposes.

7.1 Payment Service Providers

Financial data and identity data is shared with licensed payment service providers solely for the purpose of processing your deposit and withdrawal transactions. In Pakistan, this includes JazzCash, EasyPaisa, Habib Bank Limited (HBL), United Bank Limited (UBL), and Meezan Bank. These providers process your data as Data Processors under contractual obligations that restrict their use of your information to the specific payment processing purpose.

7.2 KYC & Identity Verification Services

Identity data is shared with licensed third-party KYC verification service providers for the purpose of verifying your identity against government records — including NADRA CNIC data for Pakistani users — as required under our gaming licence. KYC providers are bound by strict data processing agreements.

7.3 Game Studio Partners

Where you play games provided by third-party studio partners on the 92pkr platform (including MG Live and other certified studios), limited account and session data may be shared with those studios for the purpose of providing and settling the game. Studio partners are required to handle your data in accordance with the data protection obligations in our contractual agreements.

7.4 Regulatory Authorities

92pkr is required by law and by the terms of its gaming licence to disclose personal data to regulatory and law enforcement authorities upon lawful demand. Such disclosures are made only to the extent required by the specific legal obligation, consistent with applicable data protection law.

7.5 Fraud Prevention Services

Technical data and limited identity data may be shared with fraud prevention services and industry databases operated for the purpose of detecting and preventing fraudulent activity and financial crime in the online gaming industry.

92pkr operates as an international platform. Some of the personal data that 92pkr collects may be transferred to and processed in countries outside of Pakistan — for example, to servers or data centres operated by 92pkr's infrastructure providers, or to game studio partners operating in other jurisdictions.

Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable under the laws of the account holder's country of residence, 92pkr ensures that appropriate safeguards are in place to protect your data. Such safeguards include:

• Standard contractual clauses approved by competent data protection authorities
• Binding corporate rules where applicable
• Transfers to jurisdictions that have received an adequacy decision from a competent authority
• Other legally recognised transfer mechanisms as appropriate

You may request information about the specific safeguards applicable to any international data transfer by contacting 92pkr support via the channels in Section 17.

92pkr retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or for such longer periods as are required by applicable law, our gaming licence, or legitimate business needs. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders it permanently impossible to re-identify any individual from the remaining data. Requests for early deletion are assessed on a case-by-case basis and granted where the retention of the data is not required by law or our licensing framework — see Section 12 regarding your right to erasure.

92pkr employs a layered set of technical and organisational security measures designed to protect personal data from unauthorised access, disclosure, alteration, destruction, or loss. These measures are maintained and updated in response to emerging threats and as part of our ongoing licensing obligations.

10.1 Technical Security Controls

• TLS Encryption: All data transmitted between your device and the 92pkr platform is encrypted via Transport Layer Security (TLS). This includes login sessions, deposit and withdrawal transactions, and all other platform interactions.
• Password Hashing: User passwords are stored using industry-standard one-way cryptographic hashing algorithms. 92pkr does not store readable versions of your password at any point.
• Two-Factor Authentication: Two-factor authentication (2FA) via SMS OTP is available to all Users and is strongly recommended. 2FA adds a second layer of security to your account login beyond the password alone.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis using role-based permissions. Staff members with access to personal data are subject to confidentiality obligations.
• Intrusion Detection: The 92pkr platform employs automated monitoring for login anomalies, unusual account activity, and potential security incidents. Detected anomalies trigger alerts and, where appropriate, automatic protective measures such as session invalidation.

10.2 Organisational Security Controls

• Regular security training for all staff with access to personal data
• Third-party security audits conducted under the requirements of our gaming licence
• Data breach response procedures with defined escalation paths and regulatory notification timelines
• Vendor due diligence processes applied to all third-party data processors before engagement

92pkr uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyse platform usage. A cookie is a small text file placed on your device when you visit a website. Cookies cannot execute programs or deliver viruses to your device.

11.1 Categories of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your login state, security tokens used to protect against cross-site request forgery, and cookies that remember your preferred platform language. These cannot be disabled without fundamentally impairing platform functionality.
• Functional Cookies: Used to remember your preferences such as preferred deposit method, game filter settings, and notification preferences. These improve your experience but are not essential to core platform operation.
• Analytics Cookies: Used to collect aggregate, anonymised data about how Users interact with the 92pkr platform. This data is used to improve the platform's design and content. Analytics cookies do not identify individual users.
• Security and Fraud Prevention Cookies: Used to identify unusual or potentially fraudulent login behaviour by detecting changes in device fingerprint, browser characteristics, or usage patterns.

11.2 Cookie Management

You may configure your browser to refuse or delete cookies. Please note that disabling Strictly Necessary Cookies will impair your ability to log in to and use the 92pkr platform. Instructions for managing cookies are available in the settings section of your browser's help documentation. Your cookie preferences for non-essential cookies can also be updated through the platform's cookie preference centre.

Subject to applicable law and the data retention requirements described in Section 9, you have the following rights in relation to your personal data held by 92pkr. To exercise any of these rights, contact us using the channels described in Section 17.

• Right of Access: You have the right to request a copy of the personal data that 92pkr holds about you, together with information about how that data is being used. 92pkr will respond to access requests within 30 calendar days of receipt.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that 92pkr holds about you. Account profile information can be updated directly through your account settings; supporting documentation may be required for changes to identity data.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances you may request the deletion of your personal data. This right is subject to overriding legal obligations — particularly our AML and gaming licence retention requirements — which may prevent immediate or complete erasure. We will assess each erasure request individually and inform you of what data can be deleted and what must be retained.
• Right to Restrict Processing: You have the right to request that 92pkr restricts the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you object to processing and wish us to pause while your objection is assessed.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and processing is carried out by automated means, you have the right to receive the personal data you have provided to 92pkr in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where 92pkr relies on legitimate interests as the lawful basis. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time, with no need to provide justification.
• Rights Related to Automated Decision-Making: Where 92pkr makes decisions about your account using solely automated processes that produce legal or similarly significant effects — such as automated fraud detection resulting in account restriction — you have the right to request human review of that decision.

The 92pkr platform is strictly for adults aged 21 years or above. 92pkr does not knowingly collect personal data from any person under the age of 21. Age verification through CNIC-based KYC is mandatory before any real-money activity is permitted, and this requirement serves as the primary mechanism for preventing underage access.

If 92pkr becomes aware that an account has been created by or for a person under the age of 21, the account will be immediately closed, all personal data associated with that account will be securely deleted in accordance with applicable law, and any deposited funds will be returned to the originating payment method.

92pkr collects and processes data specifically in support of its responsible gaming obligations. This includes data relating to:

• Player-set deposit limits, loss limits, wager limits, and session time limits
• Self-exclusion requests and their duration and status
• Responsible gaming interactions with support staff
• Automated responsible gaming monitoring flags generated by the platform's player protection systems

Responsible gaming data is treated with the highest level of sensitivity within 92pkr. Access to this data is restricted to staff with a direct responsibility for player protection and is never used for marketing or promotional purposes. This data is retained for the full duration prescribed in the retention schedule in Section 9, even where all other account data has been deleted, as it may be required to enforce self-exclusion and protect the player.

Where a User has applied a self-exclusion, 92pkr will retain sufficient data to ensure that the self-excluded individual cannot create a new account during the exclusion period. This is a legitimate and necessary processing activity that cannot be restricted upon the individual's request during the active exclusion period. For more information about responsible gaming tools and resources, please visit our Responsible Gaming page.

The 92pkr platform does not contain links to third-party websites for general browsing purposes. Where third-party content is integrated into the platform — such as game titles provided by studio partners or payment processing interfaces provided by JazzCash or EasyPaisa — those integrations are governed by the contractual data processing agreements 92pkr holds with those partners, as described in Section 7.

92pkr is not responsible for the privacy practices of any website or service that is not operated by 92pkr. If you access any external website through a link you encounter elsewhere, we recommend that you review the privacy policy of that site independently before submitting any personal information to it.

92pkr reserves the right to update or amend this Privacy Policy at any time. Material changes — meaning changes that significantly alter how your personal data is collected, used, or shared — will be communicated to registered account holders via their registered contact details, with a minimum notice period of 14 calendar days before the amended Policy takes effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of the Policy, may be made without advance notice and will take effect upon publication. The effective date and version number at the top of this document will be updated to reflect any change.

Continued use of the 92pkr platform following the effective date of an updated Privacy Policy constitutes acceptance of the updated Policy. If you do not accept the updated Policy, you should close your account and withdraw your balance before the effective date of the change.

For any query, concern, or request relating to this Privacy Policy or to the personal data that 92pkr holds about you, please contact us through one of the following channels:

• Live Chat: Available 24/7 within the 92pkr platform to logged-in account holders. This is the fastest channel for all account-related privacy queries.
• Email: [email protected] — plain text, not a clickable link. Response within 24 hours on business days.

All support and data protection queries operate on Pakistan Standard Time (UTC+5). When contacting 92pkr regarding a data subject rights request, please include your account username and a brief description of your request so that we can direct it to the appropriate team without delay.

17.1 Complaints

If you are dissatisfied with how 92pkr has handled your personal data or has responded to a data rights request, you have the right to lodge a complaint with the supervisory authority competent under your local data protection law, or with the data protection oversight body designated by the licensing authority under which 92pkr operates. Details of the relevant supervisory body are available upon request from the 92pkr support team.

92pkr requests that you contact us directly in the first instance, as we are committed to resolving all data protection concerns promptly and transparently. We aim to acknowledge all formal data protection complaints within 5 business days and to provide a substantive response within 30 calendar days.