BetPRK Privacy Policy — How We Protect Your Data in Pakistan

Who We Are and How This Policy Applies

BetPRK operates the online betting and live casino platform at betprk.bet, offering sports betting, cricket markets, live casino games, Aviator, virtual sports and related services to Pakistani players. BetPRK is the data controller for all personal data collected through the platform.

This Privacy Policy applies to all Pakistani players who register an account with BetPRK, visit betprk.bet, or use any BetPRK product or service. By creating a BetPRK account, you acknowledge that you have read this policy and understood how your personal data will be processed.

This policy should be read alongside BetPRK's Terms and Conditions and Responsible Gaming policy, both of which contain additional information relevant to your use of the platform.

Personal Data BetPRK Collects

BetPRK collects personal data through different channels — what you provide when registering, what is generated by your activity on the platform, and in some cases what is provided by third-party payment processors during transaction processing.

2.1 Registration and Account Data

When you create a BetPRK account, we collect the information you provide during registration:

• Full legal name as it appears on your CNIC
• Pakistani mobile phone number
• Email address (if provided)
• Date of birth — for age verification purposes
• Username and password (stored in encrypted form only)

2.2 Identity Verification (KYC) Data

When BetPRK requests identity verification — typically before processing withdrawals above a certain threshold or in response to a regulatory obligation — we collect:

• Copy of National Identity Card (CNIC) — front and back
• Proof of payment method ownership (mobile wallet screenshot or card statement)
• Selfie or live photograph in some cases for facial verification

2.3 Transaction and Payment Data

Every deposit and withdrawal on BetPRK generates a transaction record. We collect:

• Mobile wallet identifier (Easypaisa account number, JazzCash number, NayaPay or SadaPay reference)
• Bank account details for IBFT transactions
• Masked card details for Visa/Mastercard transactions (BetPRK never stores full card numbers)
• Transaction amounts, dates, times and status in PKR

2.4 Betting and Gaming Activity

BetPRK retains a record of all bets placed, games played and their outcomes. This includes:

• Cricket and sports bets — event, market, stake, odds, outcome and settlement in PKR
• Live casino sessions — table, game type, round duration, stakes and results
• Aviator and virtual sports activity — round results, cashout values and session history

2.5 Technical and Device Data

When you access BetPRK on your mobile or desktop, we automatically collect certain technical information:

• IP address and approximate geographic location (city level)
• Device type, operating system and browser version
• Session timestamps — login, logout and duration
• Pages visited and features accessed during each session

How BetPRK Uses Your Personal Data

BetPRK uses your personal data for specific, defined purposes. We do not use your data for purposes beyond those listed here without your explicit consent.

3.1 Account Operation

Your registration data is used to create and maintain your BetPRK account, verify your identity when you log in, process your deposits and withdrawals, and communicate with you about account-related matters such as transaction confirmations and security alerts. Without this data, BetPRK cannot provide you with a functional account.

3.2 Payment Processing

Financial data is shared with payment processors — Easypaisa, JazzCash, NayaPay, SadaPay and relevant banking partners — to the extent necessary to execute your deposit and withdrawal instructions. BetPRK does not store your full financial credentials beyond the masked references required to process repeat transactions.

3.3 Fraud Prevention and Security

BetPRK uses transaction data, device data and betting activity to detect and prevent fraudulent activity, money laundering, and violations of our Terms and Conditions. Automated systems flag unusual patterns for manual review by our risk team. This is a legitimate interest purpose that protects both BetPRK and honest players on the platform.

3.4 Regulatory Compliance

BetPRK is required to retain certain player data to comply with applicable anti-money-laundering obligations, including maintaining records of deposits, withdrawals and identity verification for the periods prescribed by applicable regulations. This data may be provided to law enforcement or regulatory authorities where legally required.

3.5 Platform Improvement

Aggregated and anonymised technical and usage data helps BetPRK identify which features are most used, where the platform is slowest, and what improvements would most benefit Pakistani players. This analysis uses data in aggregated form — it does not involve reviewing individual player activity for commercial profiling purposes.

3.6 Customer Support

When you contact BetPRK's support team, your account data, transaction history and communication records are accessed by support agents to diagnose and resolve your query. Support conversations are recorded for quality assurance and training purposes.

3.7 Marketing Communications

If you have opted in to marketing communications, BetPRK may send you promotional messages about bonuses, new games and platform updates via SMS or email. You can opt out at any time — see Section 13 of this policy for full details. BetPRK does not share your contact details with third-party marketers.

Legal Basis for Processing Your Data

BetPRK processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, payment information and betting activity is necessary to fulfil the contract between BetPRK and you — your account agreement. Without this processing, BetPRK cannot provide the service.
• Legal obligation: Retaining identity verification records, transaction histories and KYC documentation is required by applicable anti-money-laundering and financial regulation applicable to BetPRK's operations.
• Legitimate interests: Fraud detection, platform security, and aggregated usage analytics serve BetPRK's legitimate interest in operating a safe, fair platform for all Pakistani players. These interests do not override your fundamental rights.
• Consent: Marketing communications are sent only where you have provided explicit consent. This consent can be withdrawn at any time without affecting your ability to use BetPRK.

Sharing Your Personal Data

BetPRK does not sell your personal data to third parties under any circumstances. Data is shared with external parties only in the specific circumstances described here.

5.1 Payment Processors

To process your PKR deposits and withdrawals, BetPRK shares the minimum necessary financial data with the relevant payment service — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or your card issuer. These processors are bound by their own privacy frameworks and are not permitted to use your data for any purpose other than processing the specific transaction.

5.2 Identity Verification Services

Where BetPRK uses a third-party KYC service to verify your CNIC or other identity documents, your verification data is shared with that service for the sole purpose of completing verification. BetPRK selects KYC partners who comply with data protection standards and who are contractually prohibited from retaining your data beyond the verification purpose.

5.3 Regulatory and Law Enforcement Authorities

BetPRK may disclose your personal data to government bodies, law enforcement agencies or regulatory authorities where required by applicable law, court order or regulatory instruction. Where permitted, BetPRK will notify you of such a disclosure before it occurs.

5.4 Business Continuity

In the event of a merger, acquisition or sale of part of BetPRK's business, player data may be transferred to the successor entity as part of that transaction. In such circumstances, BetPRK will inform affected players before their data is transferred and will ensure that equivalent privacy protections apply under the new operator.

Payment Data — Specific Protections

Given the sensitivity of financial data and its particular importance to Pakistani players using mobile wallets, BetPRK applies specific protections to payment data beyond the general security measures described in Section 10.

BetPRK does not store full Easypaisa or JazzCash account credentials on its own servers. Payment processing is handled through encrypted direct integrations with each payment provider. BetPRK's database records only a masked reference sufficient to identify the payment method for withdrawal processing — not the full wallet number or PIN.

For Visa and Mastercard transactions, BetPRK is PCI-compliant. Full card numbers are never stored by BetPRK at any point — card tokenisation is handled entirely by the payment gateway, and BetPRK receives only a non-reversible token reference.

Transaction records — amounts, dates, methods and status — are retained as part of your BetPRK account history and are accessible to you in your account dashboard at all times. These records are also retained for the purposes of regulatory compliance as described in Section 9.

KYC and CNIC Data — How BetPRK Handles Identity Documents

Identity verification is a standard and legally required component of operating a responsible gaming platform. When BetPRK requests your CNIC or other identity documents, this is to confirm your age, prevent fraud and comply with applicable regulations — not for any commercial purpose.

7.1 How CNIC Data Is Stored

CNIC copies submitted to BetPRK are stored in encrypted form on secure servers with access restricted to the BetPRK compliance team. CNIC images are not accessible to customer service agents, the risk team or any other department beyond those directly involved in processing verification requests.

7.2 What BetPRK Does Not Do with CNIC Data

BetPRK does not use your CNIC data for any purpose other than verifying your identity. We do not share CNIC copies with third parties except for the specific purpose of identity verification via our KYC partner. We do not retain CNIC copies longer than necessary — see Section 9 for retention periods.

7.3 Verification Outcome and Storage

Once identity verification is complete on BetPRK, the outcome is recorded against your account. Verification documents are retained for the regulatory retention period applicable to our platform. After that period has passed, documents are securely deleted from BetPRK's systems.

Cookies and Tracking Technologies

BetPRK uses cookies and similar tracking technologies on betprk.bet. A cookie is a small file stored in your browser that helps the platform remember your session and preferences.

8.1 Essential Cookies

These are required for BetPRK to function. They maintain your login session, remember your preferred language and currency display settings, and enable secure payment processing. You cannot disable essential cookies without preventing BetPRK from working correctly.

8.2 Analytics Cookies

BetPRK uses analytics cookies to understand how Pakistani players use the platform — which pages are most visited, where players exit, and how long sessions last on different game types. This data is collected in aggregated, anonymised form. Analytics data is used exclusively to improve BetPRK's platform and does not identify individual players.

8.3 Functional Cookies

Functional cookies remember your preferences — such as your chosen odds format, your favourite game shortcuts, and your preferred deposit method — so you don't have to reconfigure them on each visit to BetPRK.

8.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies beyond the essential category may affect the functionality of certain BetPRK features. BetPRK does not use third-party advertising cookies and does not enable cross-site tracking for marketing purposes.

Data Retention — How Long BetPRK Keeps Your Data

BetPRK retains your personal data for as long as your account is active and for defined periods after account closure, determined by legal and regulatory requirements.

After the applicable retention period has passed, BetPRK securely deletes or anonymises your personal data so that it can no longer be attributed to you. If you request deletion of your data before these periods have elapsed, BetPRK will delete what it is legally permitted to delete and retain only what is required by applicable regulation — explaining clearly what is being retained and why.

Security Measures — How BetPRK Protects Your Data

BetPRK implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration and destruction. The following measures are in place across the BetPRK platform:

• TLS Encryption in Transit: All data transmitted between your device and BetPRK's servers — including login credentials, payment data and personal information — is encrypted using TLS. This prevents interception of data in transit.
• Encrypted Data at Rest: Sensitive data stored in BetPRK's databases — including CNIC records, passwords and financial references — is encrypted at rest. Passwords are hashed using a one-way algorithm and cannot be retrieved even by BetPRK's own technical staff.
• Access Controls: Internal access to BetPRK player data is role-restricted. Customer service agents can access account and transaction data necessary to resolve queries. CNIC and KYC documents are accessible only to the compliance team. No BetPRK employee has broad unrestricted access to all player data.
• Two-Factor Authentication: BetPRK offers optional two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA in your account settings to protect your BetPRK account from unauthorised access.
• Penetration Testing: BetPRK's platform undergoes regular security testing to identify and address vulnerabilities before they can be exploited.
• Incident Response: BetPRK maintains an incident response procedure for data security events. In the event of a breach affecting player data, affected players will be notified in accordance with applicable requirements.

Your Data Rights as a BetPRK Player

As a BetPRK player, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting support@betprk.bet. BetPRK will respond to all verified data rights requests within 30 days.

Children's Privacy — Strict 18+ Policy

BetPRK is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and we require date of birth disclosure from all registering players.

If BetPRK becomes aware that an account has been registered by or on behalf of a person under 18, that account will be immediately suspended and any data collected will be reviewed and deleted in accordance with our obligations to protect minors. Any deposits associated with an under-18 account will be handled in accordance with our Terms and Conditions.

If you believe a minor has created a BetPRK account using false information, please notify us immediately at support@betprk.bet. We take underage access extremely seriously and will act on all such reports promptly.

Marketing Communications — Your Opt-Out Rights

BetPRK sends marketing messages — about promotions, bonuses, new games and platform updates — only to players who have opted in to receive them. This consent is obtained at registration and can be withdrawn at any time.

13.1 How to Opt Out

To stop receiving marketing communications from BetPRK, you can:

• Update your communication preferences in your BetPRK account settings under "Notifications"
• Reply STOP to any marketing SMS you receive from BetPRK
• Click the unsubscribe link in any marketing email from BetPRK
• Contact BetPRK support at support@betprk.bet and request removal from marketing lists

Opting out of marketing communications does not affect your receipt of essential account communications — transaction confirmations, security alerts, withdrawal notifications and account status messages are sent regardless of marketing preferences because they are necessary to operate your account.

13.2 What BetPRK Will Not Do

BetPRK will not share your contact details with third-party marketing companies. We do not use your betting history or personal profile to target you with advertising on other websites or social media platforms. BetPRK's marketing communications come only from BetPRK — not from partners or affiliates.

Changes to This Privacy Policy

BetPRK may update this Privacy Policy from time to time to reflect changes in our data practices, new features on the platform, or changes in applicable legal requirements. When material changes are made, BetPRK will notify registered players by email or in-platform notification at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. The current version of this Privacy Policy supersedes all previous versions. Continued use of BetPRK after the effective date of any updates constitutes your acceptance of the revised policy.

We encourage Pakistani BetPRK players to check this page periodically — particularly before submitting any significant personal data such as KYC documents — to ensure you are comfortable with how BetPRK handles your information.

How to Contact BetPRK About Privacy

For any questions about this Privacy Policy, to exercise your data rights, or to report a potential privacy concern related to your BetPRK account, please get in touch through the following channels:

• Email: support@betprk.bet — mark your subject line "Privacy Request" for faster routing to our data protection team.
• Live Chat: Available 24/7 from betprk.bet when logged in. Request to speak to the privacy or compliance team.
• FAQ: betprk.bet/faq — includes answers to the most common privacy-related questions from Pakistani players.

BetPRK aims to respond to all privacy-related queries within 72 hours. For formal data rights requests — access, correction, deletion or portability — we have up to 30 days to respond, though we aim to do so faster in most cases.