90pkr Privacy Policy

01. About This Privacy Policy

This Privacy Policy applies to all personal data processed by 90pkr in connection with the operation of the 90pkr online gaming platform at 90pkr.net. It covers data collected from players registered in Pakistan and all other eligible jurisdictions where 90pkr accepts players under its international gaming licence.

By registering on 90pkr or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the 90pkr platform and contact our support team to request account closure.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are accessible from the footer of this page. Where any conflict exists between those documents and this Privacy Policy regarding the processing of your personal data, this Privacy Policy shall take precedence.

02. Data Controller

For the purposes of applicable data protection law, 90pkr is the data controller in respect of personal data collected and processed through the 90pkr platform. As data controller, 90pkr determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable laws and the requirements of our international gaming licence.

Where 90pkr engages third-party service providers to process personal data on its behalf (for example, KYC verification providers, payment processors, and fraud detection services), those third parties act as data processors under 90pkr's instructions and are contractually bound by data processing agreements that comply with applicable data protection standards.

03. Personal Data We Collect

90pkr collects the following categories of personal data in connection with the operation of our platform and the provision of gaming services to Pakistani players and other eligible users:

3.1 Registration & Identity Data

• Full legal name (as it appears on your national identity document)
• Date of birth
• Pakistani CNIC number or passport number
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)
• Email address
• Mobile phone number
• Username and password (password stored in hashed format only)
• Gender (optional, for personalisation purposes)

3.2 KYC & Verification Data

• Copies of identity documents (CNIC, passport, or driving licence)
• Proof of address documents (utility bill, bank statement)
• Selfie photographs where required for biometric identity verification
• Proof of payment method ownership (where required)
• Source of funds documentation (where required for AML compliance)

3.3 Financial & Transaction Data

• Deposit and withdrawal history
• Payment method identifiers (JazzCash mobile number, EasyPaisa account reference, bank account IBAN — stored in tokenised format)
• Transaction amounts, dates, and references
• Bonus claims and wagering activity
• PKR Balance history

3.4 Gaming Activity Data

• Game session logs (game type, session start/end times, stakes, outcomes)
• Sports betting selections (matches, markets, odds, wager amounts)
• Bonus wagering progress
• Responsible gaming limit settings and self-exclusion history

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session duration and platform usage patterns
• Cookie identifiers and analytics data (see Section 8)

3.6 Communications Data

• Content of live chat, email, and support ticket communications with 90pkr
• Survey responses and feedback submissions
• Marketing preferences and communication opt-in/opt-out records

04. How We Collect Your Data

90pkr collects personal data through the following channels:

1. Directly from you — when you register an account, complete KYC, make deposits or withdrawals, place bets, contact support, or update your account settings.
2. Automatically — through cookies, server logs, and analytics tools as you use the 90pkr platform (see Section 8 for full details on cookies).
3. From third-party KYC providers — identity verification services that process your identity documents and return a verification result to 90pkr.
4. From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers share transaction confirmation data with 90pkr to reconcile deposits and withdrawals.
5. From fraud prevention and AML screening services — we receive risk-scoring data from specialist compliance providers as part of our regulatory obligations.
6. From sports data providers — for the purposes of settling sports bets, we receive match outcome and statistical data from licensed sports data feeds. This does not involve the sharing of your personal data with those providers.

05. How We Use Your Personal Data

The following table summarises the primary purposes for which 90pkr processes your personal data:

06. Legal Basis for Processing

90pkr processes personal data only where a valid legal basis exists for doing so. The four principal legal bases applicable to our processing activities are:

• Contract performance — processing that is necessary to provide you with your 90pkr account and the gaming services you have requested, including account registration, transaction processing, and game delivery.
• Legal obligation — processing required to comply with our obligations under our international gaming licence, including KYC identity verification, AML transaction monitoring, responsible gaming record-keeping, and regulatory reporting.
• Legitimate interest — processing that serves 90pkr's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud detection, platform security, and platform analytics for service improvement.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent. Marketing communications via email and SMS are processed on this basis. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07. Data Sharing & Third Parties

90pkr does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:

7.1 KYC and Identity Verification Providers

We use accredited third-party identity verification services to conduct KYC checks on new and existing players. These providers process your identity documents solely for the purpose of confirming your identity and age, and are contractually prohibited from using your data for any other purpose.

7.2 Payment Service Providers

Transaction data is shared with payment processors — including JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, and Meezan Bank — solely to the extent required to process your deposit or withdrawal. Each payment provider processes your data under their own privacy policy and applicable financial regulations.

7.3 Regulatory and Law Enforcement Authorities

We may be required to disclose personal data to our licencing authority, financial intelligence units, law enforcement agencies, or courts where we are legally compelled to do so. We will notify you of such disclosures where legally permitted.

7.4 Fraud Prevention and AML Screening Services

We share limited personal data with specialist fraud prevention and AML compliance screening services for the purpose of risk-scoring and sanctions screening. This is a legal obligation under our gaming licence.

7.5 Technical Infrastructure Providers

Our platform is hosted on secure cloud infrastructure provided by licensed technology partners. These providers process data as data processors under 90pkr's instructions and are bound by robust data processing agreements.

08. Cookies & Tracking Technologies

The 90pkr platform uses cookies and similar tracking technologies to ensure correct platform functionality, maintain your login session, prevent fraud, and gather anonymised analytics data to improve the user experience for all Pakistani players.

8.1 Types of Cookies We Use

• Essential cookies — required for the platform to function correctly. These include session authentication cookies, security tokens, and cookies that remember your responsible gaming settings. These cannot be disabled without breaking the platform.
• Analytics cookies — anonymised cookies that help us understand how players navigate 90pkr, which games are most popular, and where players encounter problems. Analytics data is aggregated and does not identify individual players.
• Preference cookies — cookies that remember your interface preferences, such as language settings and notification preferences.

8.2 Managing Cookies

You can control non-essential cookies through the cookie preference centre accessible from the footer of the 90pkr platform. You can also manage cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using the platform.

90pkr does not use third-party advertising cookies or tracking pixels from social media platforms on any page of our platform.

09. Data Retention

90pkr retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including compliance with our legal and regulatory obligations under our international gaming licence.

The following retention periods apply as a general guide:

• Active account data — retained for the duration of your account plus 7 years after account closure (to meet regulatory record-keeping obligations).
• KYC documents — retained for a minimum of 5 years after the termination of the player relationship, in accordance with AML regulations.
• Transaction records — retained for 7 years from the date of each transaction.
• Customer support communications — retained for 3 years from the date of the last communication.
• Marketing consent records — retained until you withdraw consent and for 3 years thereafter as evidence of prior consent.
• Analytics data — retained in anonymised, aggregated form indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.

10. Data Security

90pkr implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 90pkr platform.
• Encryption at rest for all sensitive personal data stored in our databases, including passwords (stored as salted hashes only), CNIC numbers, and payment identifiers.
• Role-based access controls ensuring that only authorised 90pkr personnel with a legitimate business need can access personal data.
• Multi-factor authentication required for all 90pkr internal system access.
• Regular penetration testing and vulnerability assessments conducted by independent third-party security specialists.
• Secure data centres with physical access controls, 24/7 monitoring, and redundant power and connectivity systems.
• Incident response procedures — in the event of a data breach affecting your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

While we take every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. If you suspect that your 90pkr account has been compromised, please contact our support team immediately.

11. International Data Transfers

As 90pkr operates under an international gaming licence, some of your personal data may be processed and stored on servers located outside Pakistan. Where such transfers occur, 90pkr ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with all third-party processors that include standard contractual clauses or equivalent data protection protections.
• Transfer only to jurisdictions that maintain adequate data protection standards as determined by our licencing authority.
• Contractual prohibitions on onward transfer of your data by our third-party processors to sub-processors without our prior written consent.

By using 90pkr, you acknowledge and consent to the transfer of your personal data to secure server environments as described in this section.

12. Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in relation to your personal data held by 90pkr. You may exercise any of these rights by contacting our support team at [email protected] with the subject line "Data Protection Request":

• Right of access — you may request a copy of all personal data we hold about you (a "Subject Access Request"). We will respond within 30 days.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data. Most account data can be updated directly in your account settings.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal data retention obligations.
• Right to restrict processing — you may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being resolved.
• Right to data portability — you may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior lawful processing.
• Right to object — you may object to processing based on legitimate interests where you believe your rights and freedoms override those interests.

13. Children's Privacy & Age Verification

The 90pkr platform is strictly restricted to individuals aged 21 years and over. We do not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of our KYC process.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately close the associated account, void all transactions, refund any deposited funds via the original payment method, and securely delete all personal data associated with that account.

If you believe that a minor is using the 90pkr platform, please report this to our support team immediately at [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.

14. Marketing Communications

With your consent, 90pkr may send you marketing communications about new games, promotions, bonuses, PSL cricket betting specials, and other platform updates via email and SMS. Your consent to marketing communications is separate from your agreement to these Terms and Conditions and can be managed independently.

You may update your marketing preferences at any time by:

• Updating your communication preferences in your 90pkr account settings under "Notifications".
• Clicking the unsubscribe link included in every marketing email we send.
• Contacting our support team at [email protected] with the subject line "Marketing Opt-Out".

Opting out of marketing communications will not affect the delivery of important transactional communications related to your account, such as deposit confirmations, withdrawal notifications, KYC requests, and responsible gaming alerts.

15. Updates to This Privacy Policy

90pkr may update this Privacy Policy from time to time to reflect changes in our data processing practices, our platform services, or applicable regulatory requirements. When we make material changes to this policy, we will notify registered players by email to your registered address and by displaying a prominent notice on the 90pkr platform, no less than 7 days before the changes take effect.

Your continued use of the 90pkr platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Privacy Policy, you may request voluntary account closure as described in our Terms & Conditions.

The current version of this Privacy Policy is always available at 90pkr.net/privacy-policy. The "Last Updated" date at the top of this page indicates when this policy was most recently revised.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need assistance with privacy-related matters concerning your 90pkr account, please contact our support team:

For urgent privacy concerns — such as suspected account compromise or unauthorised access to your data — please use the live chat feature within your 90pkr account for immediate assistance.