Privacy Policy — pkraah Data Handling & Your Rights

This Privacy Policy (hereinafter "Policy") describes how pkraah (hereinafter "pkraah", "we", "us", "our"), operator of the website located at https://pkraah.cam, collects, processes, stores, shares and protects the personal data of users (hereinafter "you", "your", "User") who access or use the platform.

pkraah is an English-language online sports betting and live casino information platform designed for Pakistani users. We take your privacy seriously and are committed to handling personal data responsibly, transparently and in accordance with applicable data protection principles.

This Policy applies to all personal data collected through the pkraah website, any associated registration or account management interfaces, customer support interactions, email communications and any other touchpoints through which you interact with the platform.

By accessing or using the pkraah platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

For the purpose of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — Any information that identifies or could reasonably identify a natural person, directly or indirectly. This includes names, email addresses, CNIC numbers, IP addresses and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, deletion or any combination thereof.
• "Data Subject" — The identified or identifiable natural person to whom the personal data relates. In the context of this platform, this is you, the user.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. pkraah acts as Data Controller for the data collected through this platform.
• "Third Party" — Any entity other than you and pkraah, including payment service providers, analytics services and compliance partners.
• "KYC" — Know Your Customer — the identity verification process requiring submission of identity documents such as a CNIC or passport.
• "Cookies" — Small text files stored on your device by the platform that help maintain session state, preferences and analytics data.
• "Consent" — A freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.

pkraah operates as the Data Controller for personal data collected through the https://pkraah.cam platform. As Data Controller, pkraah determines the purposes for which personal data is processed and the means by which that processing takes place.

For data protection enquiries, access requests, correction requests or deletion requests, you may contact the pkraah Data Protection team using the contact details provided in Section 17 of this Policy. All data-related requests will be acknowledged and addressed within applicable timeframes.

pkraah is committed to handling all personal data in accordance with applicable data protection law and the principles outlined in this Privacy Policy. Where data processing is conducted by third-party service providers acting as Data Processors on our behalf, appropriate data processing agreements are maintained to ensure data is handled to the same standard.

pkraah collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the main categories of data collected:

pkraah does not intentionally collect special categories of personal data (such as health data, biometric data beyond liveness verification, racial or ethnic origin, political opinions or religious beliefs) unless specifically required for compliance purposes and with your explicit consent.

pkraah collects personal data through the following methods:

• Direct collection: Data you provide when creating an account, completing the KYC process, making deposits or withdrawals, contacting support or updating your account settings.
• Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, browser metadata and session information via cookies and similar technologies.
• Third-party providers: Identity verification data confirmed through KYC processing partners; payment data confirmed through payment service providers such as those facilitating bank transfers (HBL, UBL, Meezan Bank, Bank Alfalah), mobile wallets (Easypaisa, JazzCash) or Raast transfers where applicable. The mention of these providers does not imply their endorsement of gambling or any formal partnership with pkraah.
• Analytics services: Aggregated and anonymised usage data collected via standard analytics tools to understand platform performance and user behaviour patterns.

pkraah processes personal data only where a valid legal basis exists. The principal legal bases relied upon are as follows:

• Contractual necessity: Processing required to perform the contract between pkraah and you as a registered user — including account creation, KYC, deposit processing and withdrawal handling.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including Anti-Money Laundering (AML) obligations, age verification mandates and identity verification requirements.
• Legitimate interests: Processing necessary for the legitimate interests of pkraah or third parties, including fraud prevention, platform security, improving platform performance and communicating about material service changes, where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific and informed consent — for example, for marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

pkraah uses personal data collected from users for the following specific purposes:

• Account management: To create, maintain and manage your registered account, including processing login sessions and account settings updates.
• Identity verification (KYC): To confirm your identity, verify your age (18+ requirement or the higher minimum required by the applicable operator jurisdiction), and comply with AML and fraud prevention obligations.
• Transaction processing: To process deposits and withdrawals in PKR, confirm payment method ownership and maintain accurate financial records.
• Customer support: To respond to your queries, complaints, KYC escalations and responsible gambling requests. Support is provided in English, with Urdu available on request.
• Platform improvement: To analyse usage patterns, identify technical issues, optimise platform performance and improve the user experience for Pakistani players across Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.
• Security and fraud prevention: To detect, investigate and prevent fraudulent activity, multi-accounting, bonus abuse and other prohibited conduct.
• Marketing communications: To send you relevant promotions, platform updates and responsible gambling reminders where you have provided consent. You can opt out at any time via your account settings.
• Regulatory compliance: To meet applicable legal obligations, respond to lawful authority requests and maintain records required by law.

pkraah does not sell, rent or trade your personal data to third parties for any commercial purpose. Data is shared with third parties only in the following limited circumstances:

• Identity verification providers: KYC document data is shared with our identity verification processing partner solely for the purpose of confirming identity and age. These providers act as Data Processors under contractual data processing agreements.
• Payment service providers: Financial transaction data is shared with payment processors as necessary to complete deposit and withdrawal requests. These processors are bound by their own applicable regulatory and privacy obligations.
• Analytics providers: Anonymised or aggregated technical and usage data may be shared with analytics service providers to support platform performance analysis. No personally identifiable information is shared for analytics purposes.
• Legal and regulatory authorities: Personal data may be disclosed to law enforcement, regulatory bodies or courts where required by applicable law, court order or legal process, without prior notice to you where legally required.
• Business transfers: In the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

pkraah retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory or contractual obligations.

General retention guidelines applied by pkraah:

• Account data: Retained for the duration of your active account relationship plus a defined period following account closure, as required by applicable AML and record-keeping obligations.
• KYC and identity documents: Retained for the period required by the operator's applicable regulatory obligations, typically five years from account closure or the date of the last transaction, whichever is later.
• Transaction records: Retained in accordance with financial record-keeping requirements under applicable law, typically a minimum of five years.
• Support communications: Retained for a period sufficient to resolve ongoing disputes and for quality assurance purposes, typically up to two years after case closure.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent history.
• Technical and log data: Retained for a rolling period of up to twelve months for security and platform optimisation purposes.

When data is no longer required and the retention period has elapsed, it is securely deleted or anonymised in accordance with data minimisation principles.

pkraah uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session state and to understand how users interact with the platform. Cookies are small text files placed on your device when you access the site.

The categories of cookies used on pkraah are as follows:

• Essential cookies: Strictly necessary for the platform to function. They maintain your login session, remember your settings during a session and ensure secure navigation. These cannot be disabled without disrupting platform functionality.
• Analytics cookies: Used to understand how users navigate the platform — which pages are visited most frequently, how long users stay on specific sections and what content is most useful. Data collected is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences to improve your experience on return visits, such as language settings and display preferences.
• Security cookies: Help detect and prevent fraudulent activity, bot access and other security threats to the platform and your account.

You can manage cookie preferences for non-essential cookies through your browser settings. Most browsers allow you to block, delete or be notified about cookies. Note that blocking essential cookies will affect your ability to use core platform features.

pkraah implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction.

Security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pkraah platform, including login sessions, KYC document uploads and payment transactions
• Encrypted data storage for sensitive personal data fields including identity document information and financial data
• Access controls ensuring that internal access to personal data is restricted on a strict need-to-know basis with role-based permissions
• Two-factor authentication (2FA) available for user accounts as an additional layer of protection
• Regular security assessments and monitoring of the platform infrastructure for vulnerabilities and suspicious activity
• Incident response procedures for detecting, reporting and managing personal data breaches, including notification to affected users where required

While pkraah takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials. If you suspect your account has been compromised, contact our support team immediately.

As a user of the pkraah platform, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the details in Section 17. We will respond within a reasonable timeframe, typically within 30 days.

The pkraah platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator licence jurisdiction. We do not knowingly collect personal data from individuals under the age of 18.

Age verification is a mandatory step in our KYC process. If we discover or reasonably suspect that a registered account belongs to an individual under the minimum age requirement, the account will be immediately suspended, all data will be reviewed, and any balances or winnings will be voided and returned where applicable.

Parents and guardians are encouraged to use parental control tools and internet filtering software to prevent minors from accessing gambling-related content. If you believe a minor has registered on pkraah, contact our support team immediately with relevant details.

The pkraah platform may contain references to third-party services, payment providers or sports organisations for contextual and informational purposes. These references do not constitute endorsement, partnership or affiliation.

pkraah is not responsible for the privacy practices, data handling or content of any third-party services or websites. If you access third-party services through or in connection with the pkraah platform, we strongly encourage you to review the privacy policies of those services independently before providing any personal data.

Payment method references on this platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are included as familiar Pakistani payment context only. These providers operate under their own terms of service and privacy policies. pkraah does not control how these providers handle data shared with them during transaction processing.

pkraah may process or store personal data on servers or through service providers located outside Pakistan. Where personal data is transferred internationally, we take appropriate steps to ensure that it receives an equivalent level of protection to that afforded within the platform's operating jurisdiction.

Appropriate safeguards for international data transfers may include contractual data processing agreements with service providers, ensuring that only the minimum necessary data is transferred and that recipients are subject to equivalent confidentiality and security obligations.

By using the pkraah platform, you acknowledge that your data may be transferred, stored and processed in jurisdictions outside Pakistan. We take reasonable steps to ensure that such transfers are conducted responsibly and in compliance with applicable data protection principles.

pkraah reserves the right to update, modify or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or platform functionality. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — we will notify you through one or more of the following channels: a prominent notice on the platform homepage, an in-platform notification or a communication to your registered email address.

Your continued use of the pkraah platform following notification of changes constitutes acceptance of the revised Policy. If you do not agree with any changes, you must discontinue use of the platform and may contact us to exercise your data rights as described in Section 12.

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact the pkraah Data Protection team. All data requests will be acknowledged promptly and addressed within the applicable response timeframe, typically within 30 days.

Support email (plain text — not a clickable link):

[email protected]

When contacting us about a data rights request, please include: your full registered name, the email address associated with your account, the specific right you wish to exercise and a clear description of your request. We may need to verify your identity before processing the request to ensure data security.

Live chat support is available 24 hours a day, 7 days a week as stated by the operator, accessible through the Help icon in your account dashboard. Email response times are typically within 24 to 48 hours on working days. Formal data rights requests may require additional processing time of up to 30 days.