92kr Privacy Policy

This Privacy Policy ("Policy") describes how 92kr ("we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player", "the User") who access, register on, or use the 92kr online gaming platform, including all associated features, games, promotions, and customer support services.

This Policy applies to all personal data collected through the 92kr website and any mobile-compatible interface offered by 92kr. It applies equally to users registering for the first time, existing registered players, and visitors who browse the Platform without registering.

By accessing or using the 92kr Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform. This Policy is to be read alongside the 92kr Terms & Conditions and Responsible Gaming Policy.

For the purposes of applicable data protection legislation, 92kr acts as the data controller in respect of personal data processed through the Platform. As data controller, 92kr determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

All data-related enquiries, access requests, and complaints should be directed to the 92kr data team via the contact details provided in Section 15 of this Policy.

92kr collects several categories of personal data in the course of providing its services to players in Pakistan and other eligible jurisdictions. The categories of data collected include:

92kr does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

92kr collects personal data through the following channels and methods:

• Direct Registration: Information you provide when creating a 92kr account, including your name, date of birth, CNIC number, email address, and mobile number.
• Account Activity: Data generated through your use of the Platform, including betting transactions, game sessions, deposit and withdrawal requests, and customer support interactions.
• KYC Submission: Documents you upload during the identity verification process, including CNIC copies and address proof.
• Automated Technologies: Technical data collected automatically through cookies, session logs, IP address tracking, and browser fingerprinting when you access the Platform. See Section 10 for full cookie details.
• Payment Processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment partners when you make a deposit or withdrawal.
• Third-Party Verification Services: Identity and fraud-check data received from KYC verification partners where we engage such services to meet our regulatory obligations.

92kr processes your personal data only for specific, legitimate purposes and on the basis of one or more lawful grounds under applicable data protection law. The following table sets out the primary purposes of processing and their corresponding legal basis:

• Contract Performance: Processing necessary to register your account, facilitate deposits and withdrawals, settle bets, and deliver the gaming services you have contracted to receive from 92kr.
• Legal Obligation: Processing necessary to comply with anti-money-laundering (AML) regulations, Know Your Customer (KYC) requirements, and reporting obligations to licensing or regulatory authorities.
• Legitimate Interest: Processing for fraud prevention, Platform security monitoring, responsible gaming enforcement, and the detection of prohibited conduct such as multi-accounting and bonus abuse.
• Consent: Processing for optional marketing communications, including promotional emails and SMS notifications regarding new 92kr offers, PSL season promotions, or bonus updates — only where you have affirmatively opted in.

92kr does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared with the following categories of recipients only where strictly necessary and proportionate:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment processors receive transactional data necessary to process deposits and withdrawals on your behalf.
• KYC & Identity Verification Partners: Third-party identity verification services may process your CNIC and supporting documents to fulfil our AML and KYC compliance obligations.
• Fraud Prevention Services: Data including IP addresses, device identifiers, and betting patterns may be shared with fraud detection platforms to protect the integrity of the 92kr Platform.
• Regulatory & Licensing Authorities: 92kr may be required to disclose player data to relevant licensing or regulatory bodies in response to lawful orders, audits, or investigations.
• Technical Service Providers: Hosting, cloud infrastructure, and customer support platform providers who process data on our behalf under binding data processing agreements.
• Law Enforcement Agencies: Where required by law, court order, or where disclosure is necessary to prevent or detect crime.

All third parties with whom 92kr shares personal data are required to handle that data securely and in accordance with applicable data protection standards. 92kr does not permit third-party processors to use your data for their own independent purposes.

As an internationally-oriented gaming platform, some of the personal data 92kr collects may be stored or processed on servers located outside Pakistan. Where personal data is transferred to countries that may not provide an equivalent level of data protection to that available in your jurisdiction, 92kr will implement appropriate safeguards to protect that data, which may include:

• Standard contractual clauses approved under relevant data protection frameworks.
• Data processing agreements with receiving parties that impose data protection obligations consistent with international standards.
• Ensuring that any receiving jurisdiction has been assessed as providing adequate data protection in the context of the specific transfer.

By using the 92kr Platform, you acknowledge that your data may be transferred and processed internationally as described in this section.

92kr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfaction of legal, accounting, and regulatory obligations. In general:

• Active Account Data: Retained throughout the period your 92kr account remains open and active.
• Post-Closure Data: Following account closure, personal data including KYC documents, transaction records, and betting history is typically retained for a minimum of five (5) years to comply with anti-money-laundering regulations and potential legal proceedings.
• Self-Excluded Accounts: Data relating to self-excluded accounts is retained for the duration of the self-exclusion period and for a reasonable period thereafter to prevent re-registration.
• Marketing Data: Where you have consented to marketing communications, your marketing preferences and contact details are retained until you withdraw that consent.
• Technical Logs: Session logs and IP address records are retained for security monitoring purposes for a period of up to twelve (12) months.

When personal data is no longer required, 92kr will delete or anonymise it securely in a manner that prevents recovery or reconstruction.

92kr implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the 92kr Platform is encrypted using industry-standard TLS/SSL protocols.
• Access Controls: Personal data is accessible only to 92kr personnel and authorised third parties on a strict need-to-know basis, with role-based access controls enforced internally.
• Secure Data Storage: Data is stored on secured servers with physical and logical access controls, regular security patches, and monitored intrusion detection systems.
• Two-Factor Authentication: Optional 2FA is available on your 92kr account to add an additional layer of identity verification beyond your password.
• Regular Security Audits: 92kr conducts periodic internal reviews of data security practices and responds promptly to identified vulnerabilities.

While 92kr takes all reasonable steps to protect your personal data, no electronic system is entirely immune from risk. In the event of a personal data breach that poses a risk to your rights, 92kr will notify affected users and relevant authorities in accordance with applicable law.

92kr uses cookies and similar tracking technologies to operate the Platform efficiently, analyse user behaviour, and improve the player experience. The following types of cookies may be set when you access 92kr:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session management, security tokens, and login state. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings, responsible gaming limit configurations, and previously used game categories.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and device types — to help us improve 92kr's functionality.
• Security Cookies: Used to detect unusual login patterns and protect accounts against unauthorised access attempts.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to access and use the 92kr Platform. 92kr does not use third-party advertising cookies or behavioural tracking cookies for external advertising purposes.

Subject to applicable data protection law, you hold the following rights in respect of the personal data 92kr holds about you. To exercise any of these rights, contact our support team as described in Section 15.

Please note that certain rights may be limited where 92kr has a legal obligation to retain or process data — for example, where retention is required for AML compliance. 92kr will respond to all data rights requests within 30 days of receipt.

The 92kr Platform is strictly intended for adults aged 21 years and above. 92kr does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the 92kr registration and KYC process.

If 92kr becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account, with any balance forfeited in accordance with the Terms & Conditions.

If you believe a minor has accessed the Platform using your account details or has otherwise registered on 92kr, please contact our support team immediately. Visit our Responsible Gaming page for further guidance on protecting minors from accessing gambling services.

The 92kr Platform may integrate with or reference third-party services in the course of delivering its gaming products — including game studios, payment gateways, and customer support tools. These third parties have their own privacy policies and data processing practices that are independent of this Policy.

92kr is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your 92kr account, particularly your chosen payment method provider (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank).

All third-party processors engaged by 92kr are subject to binding data processing agreements that require them to process your data only in accordance with 92kr's instructions and applicable data protection standards.

92kr reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the 92kr Platform following publication of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how 92kr handles your personal data.

For all privacy-related enquiries, data rights requests, or complaints regarding how 92kr processes your personal data, please contact our support team through the live chat feature available on the Platform, or in writing via the email address below.

If you are not satisfied with our response to your privacy complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. 92kr takes all privacy complaints seriously and will cooperate fully with any investigation by a competent regulatory authority.