Your Privacy Matters
at 648pkr

This Privacy Policy ("Policy") describes how 648pkr ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who register an account, access, or use any service offered at https://648pkr.net.

648pkr is committed to maintaining the trust of all our players — from Karachi and Lahore to Faisalabad and Islamabad. We take our data protection obligations seriously and have designed our data practices to be transparent, proportionate, and fully aligned with the regulatory standards applicable to internationally licensed online gaming platforms.

By registering a 648pkr account or using any feature of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the 648pkr platform.

For the purposes of this Privacy Policy, 648pkr acts as the data controller in respect of the personal data it collects from players and website visitors. As data controller, 648pkr determines the purposes for which personal data is processed and the means by which such processing is carried out.

648pkr operates under an international gaming licence and processes data in compliance with the data protection requirements imposed by its licensing authority. Where 648pkr engages third-party service providers who process personal data on its behalf (for example, payment processors, KYC verification providers, and customer support software), those providers act as data processors under agreements that include appropriate data protection safeguards.

For all data-related enquiries, including requests to exercise your data rights, you may contact the 648pkr Data Protection team directly via the contact details provided in Section 15 of this Policy.

648pkr collects personal data from players in the following categories. We only collect data that is necessary for the purposes described in Section 4 of this Policy.

3.1 Data You Provide Directly

The majority of personal data we hold about you is data you have provided directly during registration, account setup, the KYC process, or when contacting our support team. You are under no obligation to provide this data, but without it we cannot open or maintain a 648pkr account for you.

3.2 Data Collected Automatically

When you access the 648pkr platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address (used for fraud prevention and geographic access control), device identifiers, browser type, and session activity. This data does not typically identify you individually but may be linked to your account where security or fraud investigation requires it.

648pkr uses your personal data for the following purposes. We do not use your data for purposes that are incompatible with those listed below without first obtaining your express consent.

• Account Registration and Management: To create, verify, and maintain your 648pkr player account, including processing your login credentials and updating your account details.
• Identity and Age Verification (KYC): To verify that you are who you say you are and that you meet the 21+ age requirement. We are legally obligated to complete this verification under our gaming licence conditions.
• Payment Processing: To process deposits from and withdrawals to your JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or other registered payment accounts. Financial data is used solely for transaction processing and reconciliation.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity and comply with international AML obligations. This may include enhanced due diligence on large transactions or unusual account patterns.
• Platform Personalisation: To personalise your gaming experience, including game recommendations, relevant promotional offers, and responsible gaming notifications based on your gameplay patterns.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance.
• Fraud Prevention and Security: To detect and prevent fraudulent account activity, unauthorised access, bonus abuse, and collusion. Technical data such as IP addresses and device fingerprints are used for this purpose.
• Regulatory Compliance and Reporting: To comply with reporting obligations to our licensing authority, including submission of player data where legally required by a regulator or law enforcement authority.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have provided consent. See Section 13 for opt-out details.

648pkr processes your personal data under the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the player agreement — including account management, payment processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML obligations, and regulatory reporting under our international gaming licence.
• Legitimate Interests: Processing carried out to pursue 648pkr's legitimate business interests, including fraud detection, security monitoring, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.
• Consent: Processing that relies on your freely given consent, including the sending of marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

648pkr does not sell or transfer your personal data to third parties for their independent marketing or commercial use. However, we do share data with carefully selected service partners who process data on our behalf to enable the delivery of 648pkr's services. All such partners are subject to strict contractual data protection obligations.

6.1 Service Providers

We share data with the following categories of third-party service providers who act as data processors under 648pkr's instruction:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive relevant transaction data to process deposits and withdrawals on your behalf.
• KYC and Identity Verification Providers: Specialist third-party providers who process identity documents (CNIC images, proof of address) to verify player identities on 648pkr's behalf.
• Game Software Suppliers: Third-party game studios and RNG providers may receive anonymised game session data for technical support and game integrity purposes.
• Customer Support Software: Our live chat and ticketing platform providers process support communication data for service delivery.
• Fraud Detection Services: Specialist providers who assist with IP analysis, device fingerprinting, and transaction pattern monitoring for fraud prevention.

6.2 Regulatory Disclosure

648pkr may disclose personal data to our licensing authority, law enforcement agencies, or other government bodies where required by law or where we have a good faith belief that disclosure is necessary to prevent fraud, protect the safety of others, or comply with a legal obligation. We will notify you of such disclosures where legally permitted to do so.

648pkr uses cookies and similar tracking technologies on the platform to deliver core functionality, improve user experience, and support security operations. The following types of cookies may be set when you use 648pkr:

• Strictly Necessary Cookies: Essential for the platform to function. These include session management cookies that keep you logged in during your visit and cookies that support payment gateway redirection. These cannot be disabled without breaking core platform features.
• Functional Cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming tool configurations. These persist across sessions to improve your experience.
• Analytics Cookies: Collect anonymised data about how players navigate the platform — which pages are most visited, where users drop off, and how features are used. This data helps 648pkr improve platform performance. Analytics data is aggregated and does not personally identify individual players.
• Security Cookies: Support fraud detection and session integrity by fingerprinting devices and detecting unusual access patterns. These are critical for account protection.

648pkr does not use third-party advertising or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 648pkr platform.

648pkr retains personal data only for as long as is necessary for the purposes described in this Policy, or for as long as required by applicable law or regulatory obligation. The following retention periods apply:

• Account and Identity Data: Retained for the full duration of your account with 648pkr and for a minimum of five years following account closure, in compliance with AML and KYC regulatory requirements.
• Financial and Transaction Data: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations imposed by our licensing authority.
• Gaming History: Retained for five years from the date of each game session. This data supports dispute resolution, regulatory reporting, and responsible gaming monitoring.
• Support Communication Data: Retained for three years from the date of each interaction for quality assurance and dispute resolution purposes.
• Technical and Security Logs: Retained for twelve months on a rolling basis for fraud investigation and security monitoring purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one year following withdrawal of consent, as evidence of your consent status.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

648pkr implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between player devices and 648pkr servers
• AES-256 encryption for sensitive data at rest, including financial records and identity documents
• Strict role-based access controls ensuring that only authorised 648pkr personnel with a documented business need can access player personal data
• Regular internal security audits and penetration testing of platform infrastructure
• Segregated payment environments ensuring that financial transaction data is processed within PCI-DSS compliant infrastructure
• Two-factor authentication required for all internal staff accessing player data management systems
• Automated real-time monitoring for unusual data access patterns, with immediate alerts for potential data incidents

In the event of a data security incident that poses a risk to your rights and freedoms, 648pkr will notify affected players and relevant regulatory authorities within the timeframe required by applicable regulations.

As a player on the 648pkr platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 15. We will respond to all data rights requests within 30 days of receipt.

The 648pkr platform is not intended for use by individuals under the age of 21, and we do not knowingly collect personal data from anyone under this age. Our Terms and Conditions explicitly prohibit account registration by individuals who have not yet reached their 21st birthday.

If 648pkr becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, the data will be deleted from our systems, and any funds deposited will be returned to the source payment method. Parents or guardians who believe their child has provided personal data to 648pkr should contact us immediately so that we can take corrective action.

648pkr operates as an internationally licensed online gaming platform. Personal data collected from players may be transferred to, stored at, and processed in jurisdictions outside of Pakistan where 648pkr's servers, service partners, or regulatory authorities are located.

When 648pkr transfers personal data to third countries, we ensure that appropriate safeguards are in place to protect the data in accordance with this Privacy Policy and applicable data protection regulations. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities
• Transfers to jurisdictions that have been recognised as providing adequate data protection
• Binding corporate rules where data is transferred within the 648pkr group or to approved service providers
• Explicit consent from the player where required by applicable law

Players have the right to request information about the safeguards in place for any specific international transfer of their personal data. Contact us via the details in Section 15 to make such a request.

648pkr may send you marketing communications including promotional offers, bonus notifications, platform updates, and personalised game recommendations via email or SMS where you have provided consent during account registration or through your account communication preferences.

13.1 Opting Out

You may withdraw your consent to receive marketing communications at any time using any of the following methods:

• Click the "Unsubscribe" link at the bottom of any marketing email sent by 648pkr
• Reply "STOP" to any marketing SMS from 648pkr
• Adjust your communication preferences in the Account Settings section of the 648pkr platform
• Contact customer support and request to be removed from all marketing communications

Once you opt out, 648pkr will cease sending marketing communications within five business days. Please note that opting out of marketing does not prevent 648pkr from sending transactional communications (such as deposit confirmations, withdrawal status updates, or security alerts) which are necessary for the operation of your account.

13.2 Targeted Offers

Where you have consented to personalised marketing, 648pkr may use your gaming history and platform activity to deliver promotional offers that are relevant to your preferences. You may opt out of personalised marketing while continuing to receive generic promotional content by adjusting your marketing preferences in account settings.

648pkr reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or platform functionality. When material changes are made that affect how we collect, use, or share your personal data, we will notify you in advance via email to the address registered on your account and by posting a prominent notice on the 648pkr platform.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were published. Your continued use of the 648pkr platform after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the revised Policy, you should discontinue use of the platform and contact customer support to close your account.

Previous versions of this Privacy Policy are available on request for players who wish to review historical data practices.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data protection concern, you may contact the 648pkr Data Protection team using the details below:

We will acknowledge receipt of your enquiry within 48 hours and will provide a substantive response within 30 days. Where your request is complex or voluminous, we may extend this period by a further 60 days with prior notification.

For urgent data security incidents or suspected unauthorised access to your account, please contact our support team immediately via live chat for real-time assistance.