npkr Privacy
Policy

1 Who We Are

npkr ("we", "our", "us") operates the online cricket betting and casino platform accessible at npkr.bet (the "Platform"). npkr is Pakistan's premier destination for PSL live odds, slot games, live dealer tables, and PKR-native payments. References to "npkr", "we", "us", or "our" in this Privacy Policy refer to the entity responsible for processing your personal data in connection with your use of the Platform.

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data belonging to all registered players, visitors, and prospective users of the npkr Platform ("you", "your", "Player"). By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

2 Data We Collect

npkr collects personal data that is necessary to operate a licensed online gaming platform, verify player identity, process payments, and comply with applicable regulatory requirements. The categories of personal data we collect are described below:

3 How We Collect Your Data

npkr collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting our support team, or filling in any form on the Platform.
• Automated Technologies: Technical and behavioural data collected automatically as you interact with the npkr Platform, including through cookies, web beacons, server logs, and similar tracking technologies described in Section 8 of this Policy.
• Third-Party Sources: Identity and fraud-risk data received from identity verification partners, payment processors (such as JazzCash and EasyPaisa), and financial intelligence databases where npkr is legally required to conduct enhanced due diligence on a Player.
• Publicly Available Sources: In limited circumstances, npkr may verify information you have provided against publicly available records — for example, to confirm a residential address or to support AML screening.

4 How We Use Your Data

npkr uses the personal data we collect for the following purposes, all of which are necessary to deliver a safe, compliant, and high-quality gaming experience for players across Karachi, Lahore, Islamabad, Faisalabad, and the rest of Pakistan:

• To create, maintain, and administer your npkr player account.
• To verify your identity and confirm that you meet the minimum age requirement of 21 years before permitting you to deposit or play.
• To process PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20.
• To detect and prevent fraud, money laundering, identity theft, and other financial crimes in accordance with our AML obligations.
• To personalise your experience on the Platform, including game recommendations, PSL betting market suggestions, and relevant promotional offers.
• To monitor your gaming behaviour for responsible gaming purposes and to implement self-exclusion, cooling-off periods, or deposit limits where triggered by our responsible gaming algorithms or by your own request.
• To send you transactional communications — including account confirmations, deposit receipts, withdrawal notifications, and security alerts — via SMS and email to your registered Pakistani mobile number and email address.
• To send you promotional and marketing communications about npkr bonuses, PSL promotions, and new product launches, subject to your marketing consent preferences described in Section 12 of this Policy.
• To comply with our legal and regulatory obligations, including reporting to relevant financial intelligence authorities where required by law.
• To operate, maintain, and improve the npkr Platform through internal analytics and performance monitoring.
• To resolve disputes and enforce our Terms & Conditions.

5 Legal Basis for Processing

npkr processes your personal data on the following legal grounds, each of which applies to one or more of the processing purposes described in Section 4:

• Performance of a Contract: Processing necessary to open your account, provide gaming services, and process PKR financial transactions represents the primary legal basis for the majority of npkr's data processing activities.
• Legal Obligation: npkr is required by applicable gaming regulation and financial law to conduct KYC verification, perform AML screening, retain transaction records, and report certain activities to regulatory authorities. Processing for these purposes is legally mandated and cannot be refused by the Player.
• Legitimate Interests: npkr processes certain technical and behavioural data on the basis of our legitimate interests in maintaining Platform security, preventing fraud, improving our service, and conducting internal analytics. We conduct balancing tests to ensure these interests do not override your fundamental privacy rights.
• Consent: Where npkr relies on your consent to process data — for example, in connection with direct marketing communications or non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

npkr does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Allied Bank, Meezan Bank, SadaPay, and USDT TRC20 gateway operators, solely to process your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and AML service providers engaged to verify your CNIC, confirm your age, and screen your identity against financial crime databases.
• Game Studio Partners: Licensed third-party game studios whose games are integrated into the npkr Casino. These partners may receive your Player ID and session data to render games and record results, but do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: npkr will disclose personal data to relevant regulatory bodies, financial intelligence units, and law enforcement agencies where legally required to do so — for example, in connection with AML reporting, fraud investigations, or court orders. No prior notice to the Player will be given in such cases where the law prohibits it.
• IT and Security Service Providers: Cloud hosting providers, cybersecurity vendors, and Platform infrastructure suppliers who process data on our behalf under strict data processing agreements.
• Professional Advisers: Legal counsel, accountants, and auditors where required for the management of the npkr business or the resolution of a legal dispute.

7 International Data Transfers

npkr's primary data processing infrastructure is located within secure data centres subject to the oversight of the jurisdiction under which we hold our gaming licence. In some cases, data may be transferred to or accessed from locations outside Pakistan — for example, when using internationally operated KYC verification services or cloud infrastructure providers.

Where personal data is transferred internationally, npkr ensures that adequate safeguards are in place, including:

• Standard contractual clauses or equivalent data transfer agreements with the receiving entity.
• Transfers only to jurisdictions that provide an adequate level of data protection as recognised by the applicable regulatory framework.
• Binding operational security requirements applied to all data processing partners regardless of their geographic location.

8 Cookies & Tracking Technologies

npkr uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) on the Platform. These technologies serve the following purposes:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your npkr account and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and recently visited game categories. These cookies improve the convenience of your npkr experience.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how visitors interact with the npkr Platform — including which pages are visited most, where users drop off in registration flows, and how betting markets are navigated. This information helps npkr improve the Platform over time.
• Marketing Cookies: Where you have given consent, marketing cookies may be used to serve you relevant npkr promotional content, including PSL season campaign banners. You may withdraw your consent to marketing cookies at any time through your browser settings.

You can control and manage cookies through your browser settings. Please be aware that disabling strictly necessary cookies will affect your ability to use the npkr Platform. Detailed instructions for managing cookies are available in the help documentation of your browser.

9 Data Retention

npkr retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The following indicative retention periods apply:

Where retention beyond these periods is required by a specific legal obligation or active legal proceeding, npkr will retain the relevant data for as long as that obligation or proceeding remains ongoing.

10 Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by npkr:

• Right of Access: You may request a copy of the personal data npkr holds about you. We will provide this information in a structured format within 30 days of a verified request.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update many data fields directly within your npkr account settings, or contact support for assistance.
• Right to Erasure: You may request deletion of your personal data where npkr no longer has a legal basis to retain it. Please note that npkr may be required to retain certain data to comply with AML and financial regulatory obligations even after your account is closed.
• Right to Restriction: You may request that npkr restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to deletion.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that npkr provide your personal data in a machine-readable format for transfer to another data controller.
• Right to Object: You may object to processing based on npkr's legitimate interests, including profiling, where you believe your interests or fundamental rights override those legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the npkr data team via the support channels listed in Section 15. npkr will respond to all verified data rights requests within 30 calendar days. We may require you to verify your identity before processing a data rights request.

11 Children & Minors

The npkr Platform is strictly intended for users aged 21 years and above. npkr does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step during account registration, and npkr reserves the right to request documentary proof of age (such as a CNIC) at any point during a Player's account lifecycle.

If npkr discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the account, delete or anonymise the collected data to the extent legally permissible, forfeit any associated balance, and — where required by law — report the matter to the relevant regulatory authority.

12 Marketing Communications

npkr will only send you direct marketing communications — including PSL season promotions, bonus offers, and new product announcements — where you have provided your consent to receive such communications during registration or subsequently via your account settings.

You may withdraw your marketing consent and opt out of all promotional communications at any time by:

• Updating your notification preferences in the npkr account settings dashboard.
• Clicking the unsubscribe link included in every npkr marketing email.
• Contacting the npkr support team directly to request removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of essential transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — which npkr is required to send regardless of your marketing preferences.

13 Security Measures

npkr takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the npkr Platform.
• Encryption of sensitive data fields — including financial details and identity documents — at rest within our database systems.
• Role-based access controls ensuring that only authorised npkr personnel with a defined operational need can access Player personal data.
• Two-factor authentication (2FA) via Pakistani mobile OTP available to all registered Players and mandatory for all npkr staff with access to Player data systems.
• Regular independent security audits and penetration testing of the npkr Platform infrastructure.
• Incident response procedures that include prompt containment, investigation, and — where applicable — notification of affected Players and regulatory authorities in the event of a confirmed data breach.

14 Changes to This Policy

npkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The "Effective Date" at the top of this page will be updated accordingly upon each revision.

Where changes are material — meaning they significantly affect the way we collect, use, or share your personal data — npkr will notify registered Players via the email address associated with their account or by a prominent notice on the Platform, with no less than seven (7) days' advance notice before the updated Policy takes effect.

Non-material changes, such as typographical corrections and minor clarifications that do not alter your rights or our processing practices, may be made without advance notice. Your continued use of the npkr Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

15 Contact & Complaints

If you have any questions, concerns, or formal requests regarding this Privacy Policy or the way npkr processes your personal data, please contact our data team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the npkr Platform interface once logged in.
• Support Page: npkr.bet/support

npkr aims to respond to all formal data protection queries within five (5) business days. For urgent matters — such as suspected unauthorised access to your account — please use the 24/7 live chat channel for the fastest response.

If you are not satisfied with npkr's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.