Privacy Policy

9pkr ("we", "us", "our", "Platform") is an English-language online gaming information and entertainment platform accessible at https://9pkr.cam, targeting users in Pakistan and the wider region. This Privacy Policy ("Policy") explains in detail how we collect, use, disclose, store and protect personal data that you provide to us or that we collect when you use the Platform.

This Policy applies to all Users of the 9pkr website, including visitors who browse without registering an account and registered Users who access personalized features and services. It covers data processing activities conducted by 9pkr as data controller and, where applicable, describes our relationships with data processors who act on our behalf.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the 9pkr Platform. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall prevail with respect to data privacy matters.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial information.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. 9pkr acts as Data Controller for data collected through this Platform.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller in accordance with documented instructions.
• "Processing" means any operation performed on personal data, including collection, storage, retrieval, use, disclosure, erasure or destruction.
• "User" means any individual who accesses the 9pkr Platform, whether as a visitor or registered account holder.
• "Cookie" means a small text file placed on a User's device by a web server, used to store preference data, session identifiers and analytics information.
• "KYC" means Know Your Customer — the identity verification process used to confirm a User's identity and comply with applicable anti-money laundering and age verification requirements.
• "Third-Party Service Provider" means any external company or individual engaged to perform services on behalf of 9pkr, including payment processors, analytics providers and security service vendors.

9pkr collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Account Registration Data

• Full name and date of birth (for age verification purposes)
• Email address and chosen username
• Residential address, including city and province (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
• Contact telephone number
• Account password (stored in hashed, non-recoverable form)

3.2 Identity Verification (KYC) Data

• Government-issued photo identity document (National Identity Card (CNIC), passport or driving licence)
• Proof of residential address (utility bill, bank statement or similar document)
• Source of funds documentation, where applicable under applicable compliance requirements

3.3 Financial Transaction Data

• Deposit and withdrawal records, including transaction amounts in PKR and timestamps
• Payment method identifiers (masked card numbers, mobile wallet account references — for contextual methods such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah, which are referenced solely as contextual payment channels)
• Cryptocurrency transaction identifiers (wallet addresses, transaction hashes) where applicable

3.4 Technical and Usage Data

• IP address, device type, operating system and browser version
• Pages visited, session duration, click-path data and search queries within the Platform
• Referring URL and exit page data
• Approximate geographic location derived from IP address (country and city level only)

3.5 Communications Data

• Content of support queries, live chat transcripts and email correspondence
• Feedback and survey responses submitted through the Platform

9pkr collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey or otherwise interact with the Platform's features.
• Automatically: through cookies, web beacons, server logs and similar tracking technologies as you navigate the Platform. See Section 10 for full cookie disclosure.
• From third parties: from identity verification service providers during KYC processing, fraud prevention databases, and analytics platforms that aggregate anonymized usage data.

9pkr processes your personal data on the following legal grounds:

9pkr processes personal data for the following specific purposes:

• To create, maintain and secure your account on the Platform, including authentication and access control.
• To verify your identity and age in accordance with applicable KYC requirements, ensuring compliance with the 18+ adults-only access restriction.
• To process financial transactions, including PKR-denominated deposits and withdrawals, and to maintain accurate transaction records.
• To provide customer support services in English (and Urdu on request), including responding to account queries, payment issues and responsible gambling support requests.
• To detect, investigate and prevent fraudulent activity, money laundering, account sharing and other forms of prohibited conduct identified in our Terms & Conditions.
• To personalize your experience on the Platform, including displaying content relevant to your location (e.g., PSL cricket odds for users in Karachi or Lahore) and preferences.
• To monitor and improve Platform performance, fix technical issues and develop new features based on aggregated usage analytics.
• To send you account-related notifications, including security alerts, transaction confirmations and updates to this Policy or our Terms.
• To send you marketing communications where you have provided explicit consent, including information about promotions, new features and bonus offers. You may withdraw consent at any time.
• To comply with applicable legal, regulatory and reporting obligations.

9pkr does not sell, rent or trade your personal data to third parties for their independent marketing purposes. We may share personal data only in the following circumstances:

7.1 Service Providers and Data Processors

We engage carefully selected third-party service providers to perform functions on our behalf, including payment processing, identity verification, fraud detection, cloud hosting, analytics and customer support technology. These providers process data solely on our documented instructions and are contractually prohibited from using your data for their own purposes.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, courts or other government authorities where required to do so by applicable law, regulation, legal process or enforceable governmental request. We will, to the extent permitted by law, notify affected Users of any such disclosure.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of 9pkr's assets, personal data held by the Platform may be transferred to the acquiring entity. Users will be notified of any such transfer and the privacy implications in advance.

9pkr retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax or accounting obligations. The following general retention principles apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Where deletion is not immediately practicable due to technical constraints, data will be isolated from further active processing.

9pkr implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the Platform.
• Passwords stored using industry-standard one-way hashing algorithms — plaintext passwords are never stored or accessible.
• Access controls ensuring that only authorized personnel can access personal data, on a strict need-to-know basis.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) available to all account holders and mandatory for platform administrators.
• Incident response procedures to detect, contain and notify Users of any data breach affecting their personal data.

9pkr uses cookies and similar technologies to operate the Platform, remember your preferences and analyze how Users interact with our content. By continuing to use the Platform, you consent to the use of cookies as described in this section.

You may configure your browser to refuse all cookies or to indicate when a cookie is being set. Please note that disabling cookies may impair the functionality of certain Platform features, including session persistence and preference retention. For detailed cookie management instructions, refer to your browser's help documentation.

Subject to applicable law and the jurisdiction in which you are located, you may have the following rights regarding your personal data held by 9pkr:

• Right of Access: You may request confirmation of whether 9pkr processes your personal data and, if so, request a copy of that data and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Restrict Processing: You may request that 9pkr suspends processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objection to marketing will result in immediate cessation of marketing communications.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

The 9pkr Platform is strictly for use by adults aged 18 years or older — or the higher minimum age required by the Gaming Operator's license jurisdiction. 9pkr does not knowingly collect personal data from persons under the applicable minimum age.

If we become aware that personal data has been collected from a person under the applicable minimum age without verifiable parental or guardian consent, we will take immediate steps to delete that data from our systems and close the associated account. If you have reason to believe that a minor has created an account on 9pkr, please contact us immediately using the details in Section 16.

9pkr operates globally and may transfer your personal data to countries outside of Pakistan, including to countries where data protection laws may differ from those in your jurisdiction. Where such transfers occur, 9pkr ensures that appropriate safeguards are in place to protect your data, including:

• Standard contractual clauses approved by recognized data protection authorities, incorporated into agreements with recipient entities.
• Transfer to jurisdictions recognized as providing an adequate level of data protection under applicable law.
• Binding corporate rules or other legally approved transfer mechanisms where applicable.

By using the 9pkr Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section.

The 9pkr Platform may contain references to or descriptions of third-party gaming platforms, payment service providers and other external services. This Policy applies solely to data collected and processed by 9pkr. It does not cover the privacy practices of third-party websites or services, which operate under their own independent privacy policies.

References within 9pkr's content to payment channels such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are contextual references only. 9pkr does not process payment data through these providers directly — any financial transactions with these providers are subject to their own privacy policies and terms of service. Users are encouraged to review those policies independently before transacting.

9pkr reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, provide Users with advance notice via the Platform interface or registered email address.

Your continued use of the 9pkr Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you disagree with any amendment, you must cease using the Platform and contact us to request deletion of your account and associated data.

We recommend that you review this Policy periodically. The current version is always accessible at https://9pkr.cam/privacy-policy. Prior versions may be requested by contacting us at the address provided in Section 16.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights set out in Section 11, or wish to make a complaint about how your personal data has been handled, please contact the 9pkr Data Privacy team using the details below.

Where you believe that 9pkr has failed to handle your personal data in accordance with this Policy or applicable law, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. We would, however, welcome the opportunity to address your concerns directly before you approach a supervisory authority, and encourage you to contact us in the first instance.