prk999 Privacy Policy

1. Introduction

prk999 is an online gaming and sports betting platform serving adult players in Pakistan and other permitted jurisdictions. The Platform offers cricket and PSL betting, live casino games, slots, and specialty titles including Space Max and Teen Patti Joker. To operate the Platform legally and safely — and to provide you with a secure, personalised gaming experience — prk999 must collect and process certain categories of personal data about its users.

prk999 takes its data protection responsibilities seriously. We are committed to handling your personal information lawfully, fairly, and transparently. This Policy sets out in plain English exactly what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over your own information. We encourage all players to read this Policy carefully before registering or depositing on the prk999 platform.

This Policy should be read alongside the prk999 Terms & Conditions and Responsible Gaming Policy, both of which contain additional obligations and commitments relevant to your use of the prk999 platform.

2. Data Controller

For the purposes of this Privacy Policy, prk999 is the data controller in respect of personal data collected through the prk999 platform. prk999 operates under an international gaming licence and is responsible for determining the purposes and means of processing personal data collected from its users.

All data protection enquiries, access requests, and complaints should be directed to the prk999 Data Protection contact via the support channels listed in Section 14 of this Policy. prk999 will handle all such communications promptly and in accordance with applicable data protection principles.

3. Categories of Personal Data We Collect

prk999 collects the following categories of personal data from players and visitors to the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, CNIC number, passport number, nationality	Registration & KYC verification
Contact Data	Mobile number, email address, city of residence (e.g. Karachi, Lahore, Islamabad)	Registration
Financial Data	JazzCash / EasyPaisa account reference, HBL / UBL / Meezan Bank account details, USDT wallet address, transaction history	Deposit & withdrawal processing
Gaming Activity Data	Bets placed, games played, session duration, win/loss records, PSL and cricket bet history	During gameplay
Technical Data	IP address, device type, browser type and version, operating system, time zone, session logs	Automatically on site visit or login
Verification Documents	Scanned CNIC, selfie for liveness check, proof of address, source of funds documentation	KYC & AML review process
Communications Data	Live chat transcripts, support ticket records, email correspondence content	When contacting support
Marketing Preferences	Opted-in notification preferences for SMS, email, and in-app promotions	Registration & account settings

prk999 does not intentionally collect sensitive personal data such as health information, religious beliefs, or political opinions. If any such data is incidentally received, it will not be processed beyond what is strictly necessary and will be deleted at the earliest opportunity.

4. How We Collect Your Data

prk999 collects your personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you visit prk999.org or use the Platform, including IP addresses, device identifiers, browser data, session logs, and usage analytics gathered via cookies and similar tracking technologies.
• Third-party identity verification: prk999 may use licensed third-party KYC and identity verification services to validate the documents you submit. These providers return a verification result and risk score to prk999 — they do not retain your data beyond their contractual obligations to prk999.
• Payment processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or USDT, prk999 receives transaction reference data and confirmation of payment status from the relevant payment processor.
• Fraud and AML screening services: prk999 uses licensed third-party services to screen account registrations and financial transactions against sanction lists and fraud databases, as required under its gaming licence obligations.

5. Purpose & Legal Basis for Processing

prk999 processes personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which prk999 processes your personal data and the corresponding legal basis in each case:

Processing Purpose	Legal Basis
Account registration and management	Performance of a contract (the prk999 Terms & Conditions)
Identity verification (KYC) and age verification (21+ check)	Legal obligation under gaming licence conditions
Processing deposits and withdrawals (PKR, USDT)	Performance of a contract
Anti-money laundering (AML) screening and compliance	Legal obligation under gaming licence and applicable law
Fraud prevention and account security monitoring	Legitimate interests of prk999 and protection of users
Providing responsible gaming tools and intervention	Legal obligation and legitimate interests
Customer support and dispute resolution	Performance of a contract and legitimate interests
Sending promotional offers and bonuses (opted-in only)	Consent (which may be withdrawn at any time)
Platform analytics and service improvement	Legitimate interests of prk999
Regulatory reporting to the licensing authority	Legal obligation

Where prk999 relies on your consent as the legal basis for processing — such as sending marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6. Sharing of Personal Data

prk999 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT processing partners receive the minimum data necessary to authenticate and complete financial transactions.
• KYC and identity verification providers: Licensed third-party services that verify identity documents, perform liveness checks, and screen against sanctions lists as required under our gaming licence obligations.
• Fraud prevention and AML services: Specialist providers contracted to assist prk999 in identifying suspicious activity, preventing financial crime, and maintaining compliance with AML obligations.
• Gaming software and platform providers: Third-party game studios and platform technology providers who supply game content and back-end services to prk999. These providers receive session and gameplay data only to the extent necessary to deliver the gaming service.
• Regulatory and licensing authorities: prk999 may be required to disclose player data to its licensing authority or other competent regulatory bodies in response to lawful requests or as part of mandatory reporting obligations under the gaming licence.
• Law enforcement and legal proceedings: prk999 will disclose personal data to law enforcement agencies, courts, or other legal authorities where required to do so by applicable law or valid legal process, or where disclosure is necessary to protect the rights and safety of prk999, its users, or the public.

All third-party service providers engaged by prk999 are bound by contractual data processing agreements that restrict their use of personal data to the specific purposes for which it was shared and require them to implement appropriate security measures.

7. Data Retention

prk999 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, including all applicable legal, regulatory, and contractual retention obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of the account relationship, from registration until account closure.
• Post-closure account and transaction data: Retained for a minimum of 5 years following account closure, as required under anti-money laundering and gaming licence record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission or account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last communication in a support interaction, or longer if related to an ongoing dispute or legal matter.
• Marketing consent records: Retained for 3 years from the date of the last marketing interaction or until consent is withdrawn, whichever occurs first.
• Technical and session logs: Retained for up to 12 months for security monitoring and fraud prevention purposes, subject to any outstanding investigation requirements.

On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual. Where anonymised data is retained for analytical purposes, it is no longer considered personal data under applicable data protection principles.

8. Data Security

prk999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the prk999 platform.
• Encryption at rest for all sensitive personal and financial data stored on prk999 servers.
• Role-based access controls restricting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the prk999 platform infrastructure.
• Two-factor authentication options available to all registered players for account login security.
• Continuous monitoring of platform systems for anomalous activity, intrusion attempts, and data breaches.
• Incident response procedures to contain, investigate, and notify affected parties in the event of a data security incident.

While prk999 takes all reasonable steps to protect your personal data, no system is entirely immune to security threats. You are responsible for maintaining the security of your own prk999 account credentials and for notifying support immediately if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

prk999 uses cookies and similar tracking technologies to operate and improve the Platform, personalise your experience, and gather analytics on how the Platform is used. The following categories of cookies are used on prk999.org:

• Strictly necessary cookies: Essential for the operation of the Platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting the functionality of the Platform.
• Functional cookies: Used to remember your preferences and settings (such as language and display preferences) to provide a more personalised experience during your sessions on prk999.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how visitors navigate and interact with the prk999 platform, enabling us to identify usability issues and improve Platform performance over time.
• Fraud prevention and security cookies: Used to detect suspicious login patterns, bot activity, and other security threats that could affect the integrity of accounts and the Platform.

You can manage your cookie preferences through your browser settings. Disabling or blocking certain categories of cookies may affect the functionality of certain features on the prk999 platform. Strictly necessary cookies cannot be disabled while using the Platform.

10. Exercising Your Data Rights

As a prk999 player, you have the following rights in relation to your personal data, subject to applicable law and the limitations described in this Policy:

• Right of Access: You may request a copy of the personal data prk999 holds about you. prk999 will provide this information within 30 days of receiving a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data held by prk999 is inaccurate or incomplete, you have the right to request that it be corrected. Supporting documentation may be required for corrections to identity-related information.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal obligations, including gaming licence record-keeping requirements, which may prevent deletion until the mandatory retention period has elapsed.
• Right to Restrict Processing: You may request that prk999 restrict the processing of your personal data in certain defined circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where prk999 processes your data on the basis of your consent or for the performance of a contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal data where prk999 relies on legitimate interests as the legal basis. You may also withdraw consent for marketing communications at any time through your account notification settings.

To exercise any of the above rights, please contact the prk999 support team using the contact details in Section 14. prk999 may require you to verify your identity before processing a data rights request. All requests will be handled within 30 days; complex requests may require up to 60 days, in which case you will be notified of the extension within the initial 30-day period.

11. Minors & Age Policy

The prk999 platform is strictly intended for individuals aged 21 years and above. prk999 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the prk999 registration and KYC process, and players are required to provide valid proof of age documentation before deposit and withdrawal privileges are activated on their account.

If prk999 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, any funds deposited will be returned through the original payment method where possible, and all personal data associated with the account will be deleted from prk999 systems as soon as the investigation is concluded and any required regulatory notifications have been made.

If you are a parent or guardian and believe that a minor in your care may have accessed or registered on the prk999 platform, please contact prk999 support immediately. prk999 takes underage gambling prevention extremely seriously and will respond to all such reports as a priority matter.

12. International Data Transfers

prk999 is an internationally operated platform. In the course of providing the Services, your personal data may be transferred to and processed in countries outside Pakistan. Such transfers may occur where prk999's technology infrastructure, third-party service providers, or licensing authority is located in a jurisdiction other than Pakistan.

Where personal data is transferred internationally, prk999 ensures that appropriate safeguards are in place to protect your data to the same standard as described in this Policy. These safeguards include contractual data processing agreements with service providers that include standard data protection clauses, and ensuring that recipient organisations maintain data security standards consistent with prk999's own policies.

By registering an account on the prk999 platform and accepting these Terms, you acknowledge and consent to the international transfer of your personal data on the basis described above.

13. Changes to This Privacy Policy

prk999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, Platform functionality, or data processing practices. The date of the most recent update is displayed at the top of this document.

Where changes to this Policy are material — meaning they significantly affect your rights or how your data is processed — prk999 will provide reasonable prior notice by posting a notice on the Platform and, where appropriate, by contacting registered players via their registered mobile number or email address. Continued use of the prk999 platform following notification of material changes constitutes your acceptance of the revised Policy.

Players who do not agree with any updated version of this Policy may close their prk999 account in accordance with the account closure procedure described in the prk999 Terms & Conditions.

14. Contact & Data Protection Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by prk999, please contact us using the following:

• Live Chat: Available 24/7 from within your prk999 account dashboard. This is the fastest channel for urgent data or account-related queries.
• Email: [email protected]

Please include your registered name, account username, and a clear description of your query or request to enable prk999 to handle your enquiry efficiently. prk999 will acknowledge all written privacy enquiries within 3 business days and provide a substantive response within 30 days.