pkrslo Privacy Policy

1. Introduction

pkrslo ("we", "us", "our") operates the online gaming platform accessible at pkrslo.net ("Platform"). We are committed to protecting the personal data of every player who registers and uses our services. This Privacy Policy ("Policy") explains in clear terms what data we collect, the lawful bases on which we process it, how long we keep it, who we share it with, and the rights you hold as a data subject.

This Policy applies to all personal data collected through the pkrslo Platform, including our website, mobile web interface, customer support channels, and any promotional communications we send. It forms part of our broader legal framework alongside the Terms & Conditions and the Responsible Gaming Policy.

By registering an account on the Platform, you acknowledge that you have read this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please do not register an account or continue using the Platform.

2. Data Controller

pkrslo is the data controller responsible for the personal data processed under this Policy. As data controller, pkrslo determines the purposes and means of processing your personal data and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

pkrslo operates under an internationally recognised gaming licence. Our data processing activities are conducted in compliance with the requirements of that licence, which includes data protection obligations applicable to licensed gaming operators. Where third-party processors handle data on our behalf, they do so only under written agreements that impose equivalent data protection standards.

If you have any questions about how pkrslo processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection team at the email address set out in Section 16 of this Policy.

3. Data We Collect

pkrslo collects the following categories of personal data from players. The specific data collected in any given circumstance depends on how you interact with the Platform:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• National Identity Card (CNIC) number or passport number
• Residential address (including city — Karachi, Lahore, Islamabad, Faisalabad, or other)
• Email address and mobile phone number
• Chosen username and encrypted account password

3.2 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (JazzCash account references, EasyPaisa wallet identifiers, bank account numbers for HBL, UBL, and Meezan Bank; masked Visa / Mastercard numbers)
• Account balance history and bonus credit records
• Currency denomination (PKR)

3.3 Gaming and Behavioural Data

• Betting history, game session logs, and wagering patterns
• Sports markets accessed (e.g. PSL cricket, esports, live casino)
• Game preferences, session duration, and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

3.4 Technical and Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Pages visited, navigation paths, and time spent on the Platform

3.5 Communications Data

• Contents of support chat transcripts and email correspondence
• Feedback, complaints, and dispute correspondence
• Records of marketing preferences and opt-in / opt-out choices

4. How We Collect Your Data

pkrslo collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically as you navigate the Platform, including IP address, device identifiers, and cookie data.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard when you make a deposit or withdrawal.
• Identity verification partners: Data returned by KYC and age-verification service providers when we verify your identity against official records.
• Fraud prevention services: Risk signals and device fingerprint data provided by anti-fraud service providers to help us detect and prevent fraudulent account activity.
• Publicly available sources: In limited circumstances, we may verify information against publicly available records, including sanctions lists and politically exposed persons (PEP) databases, as required by our anti-money laundering obligations.

5. Legal Basis for Processing

pkrslo processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

6. How We Use Your Data

pkrslo uses the personal data it collects for the following purposes:

• To create, verify, and maintain your pkrslo player account.
• To process deposits and withdrawals in PKR via your chosen payment method.
• To verify your age (21+) and identity in compliance with our gaming licence obligations.
• To detect, investigate, and prevent fraud, money laundering, and prohibited conduct as defined in our Terms & Conditions.
• To provide customer support, resolve disputes, and respond to your queries.
• To monitor gaming behaviour for responsible gaming purposes and to enforce deposit limits, cooling-off periods, and self-exclusion requests.
• To personalise your experience on the Platform, including displaying relevant game recommendations and offers.
• To send you promotional communications about pkrslo bonuses, new games, and events — where you have given consent to receive such communications.
• To comply with regulatory reporting obligations under our gaming licence.
• To conduct internal analytics to improve Platform performance, game selection, and user experience.

pkrslo will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

7. Data Sharing & Third Parties

7.1 Service Providers

pkrslo shares personal data with carefully selected third-party service providers who process data on our behalf under written data processing agreements. These providers include payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard), KYC and identity verification providers, fraud prevention vendors, cloud hosting providers, and customer support platform operators. All service providers are contractually prohibited from using your data for their own purposes.

7.2 Regulatory and Law Enforcement Authorities

pkrslo may disclose personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where we are legally required or permitted to do so. Such disclosures are made only to the extent necessary to satisfy the applicable legal requirement and are documented internally.

7.3 Business Transfers

In the event that pkrslo is involved in a merger, acquisition, or sale of all or part of its business assets, personal data held by pkrslo may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to this Policy that result from it.

7.4 No Sale of Personal Data

pkrslo does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data is not used for third-party advertising networks or sold to data brokers under any circumstances.

8. Cookies & Tracking Technologies

pkrslo uses cookies and similar tracking technologies on the Platform to ensure its correct functioning, to analyse usage patterns, and — where you have consented — to deliver relevant promotional content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the Platform, which pages are visited most frequently, and where navigation issues occur. This data is used solely for internal Platform improvement.
• Marketing Cookies: Used only where you have given explicit consent. These help pkrslo understand which promotional messages resonate with players and allow personalisation of offers shown to you on the Platform.

You may manage your cookie preferences at any time through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform, though some features may operate with reduced personalisation. Withdrawing consent for marketing cookies will stop personalised promotional content but will not affect your account or gameplay.

9. Data Security

pkrslo takes the security of your personal data seriously. We implement a layered security architecture that includes the following technical and organisational measures:

• Encryption in transit: All data transmitted between your device and the pkrslo Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to pkrslo personnel who require it to perform their specific job functions, on a strict need-to-know basis.
• Password hashing: Account passwords are stored using a one-way cryptographic hash function. pkrslo employees cannot retrieve your plaintext password.
• Intrusion detection: Our systems are monitored continuously for suspicious activity, unauthorised access attempts, and potential data breaches.
• Staff training: All pkrslo personnel who handle personal data receive regular data protection and security awareness training.

In the event of a data breach that poses a risk to your rights and freedoms, pkrslo will notify affected players promptly and will report the breach to the relevant regulatory authority within the timeframe required by our licence conditions.

10. Data Retention Periods

pkrslo retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

11. Exercising Your Rights

To exercise any of the data rights summarised in the feature cards above — including access, rectification, erasure, restriction, portability, or objection — please contact pkrslo's Data Protection team by email at the address listed in Section 16. Your request should include:

• Your full name and registered email address (so we can verify your identity).
• A clear description of the right you wish to exercise and, where relevant, the specific data concerned.
• A copy of a valid government-issued ID if the request relates to erasure or portability of sensitive data.

pkrslo will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

pkrslo will not charge a fee for the first data access request in any 12-month period. Subsequent requests within the same period, or requests that are manifestly unfounded or excessive, may be subject to a reasonable administrative fee or may be declined, with written reasons provided to you.

12. Marketing Communications

pkrslo sends promotional emails, SMS notifications, and on-Platform messages about bonuses, new game launches, PSL and cricket betting promotions, and other pkrslo offers. We will only send marketing communications where you have given your explicit consent at the time of registration or subsequently through your account preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Updating your notification preferences in your pkrslo account settings.
• Contacting pkrslo support directly and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent prior to withdrawal, and it does not affect pkrslo's ability to send you transactional communications — such as deposit confirmations, withdrawal notifications, and responsible gaming alerts — which are sent as part of the service regardless of marketing preferences.

13. Minors and Age Restriction

The pkrslo Platform is strictly restricted to individuals aged 21 years and above. pkrslo does not knowingly collect personal data from anyone under the age of 21. If we become aware that an account has been registered by or on behalf of a minor, we will immediately suspend the account, delete the associated personal data to the extent permitted by our legal obligations, and void any bets or transactions linked to the account.

If you believe that a minor has registered an account on the Platform using false information, please notify pkrslo immediately at the contact address in Section 16. pkrslo cooperates fully with responsible gaming bodies and parental control organisations to prevent underage gambling.

14. Third-Party Links

The pkrslo Platform may contain links to third-party websites or services — for example, links to responsible gaming support organisations or payment provider information pages. pkrslo is not responsible for the privacy practices of any third-party website. This Policy applies solely to personal data collected by pkrslo through the Platform. We encourage you to review the privacy policy of any third-party site you visit via a link on the Platform.

pkrslo does not embed third-party advertising networks, social media tracking pixels, or external analytics platforms that transmit your personal data to third parties without your knowledge. All analytics conducted on the Platform are first-party and are operated directly by pkrslo or by processors acting strictly on our instruction.

15. Changes to This Policy

pkrslo reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — meaning they affect your rights or the way we use your data in a significant way — we will provide advance notice via email to your registered address and via a prominent notice on the Platform, at least 14 days before the changes take effect.

For non-material changes, such as clarifications of existing language or updates to contact details, the revised Policy will be published on the Platform with an updated effective date and will take effect immediately. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

We recommend that you review this Policy periodically. The current version is always available at pkrslo.net/privacy-policy. The date at the top of the Policy indicates when it was last updated.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how pkrslo handles your personal data, please contact our support team. We aim to respond to all data-related enquiries within 5 business days.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. pkrslo reserves the right to update this Policy in accordance with Section 15.