At badpkr, your personal information is handled with the same care and attention we give to every aspect of our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how we use it, and what rights you hold as a Pakistani player on our platform.
This Privacy Policy ("Policy") describes how badpkr ("badpkr", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the badpkr online gaming platform accessible at https://badpkr.net ("the Platform"), including all associated services, features, promotions, and communications.
badpkr is an internationally licensed online gaming platform offering casino games, sports betting (including PSL and international cricket), live dealer games, fishing games, slots, and related entertainment services. Our primary player base is located across Pakistan — in cities like Karachi, Lahore, Islamabad, Faisalabad, Multan, and beyond — and all player account transactions are conducted in Pakistani Rupees (PKR) via local payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast.
We take the privacy and security of your personal data seriously. This Policy is designed to be transparent and easy to understand. We encourage you to read it in full. By registering a Player account, depositing funds, or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the data practices described herein.
This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.
Plain Language Summary: We collect the data we need to run your account, process your payments, verify your identity, keep your account secure, and comply with our licensing obligations. We do not sell your personal data to third parties for marketing. You have the right to access, correct, and delete your data, subject to our legal and regulatory obligations.
For the purposes of applicable data protection legislation, badpkr acts as the data controller in respect of the personal data of Players collected and processed through the Platform. As data controller, badpkr determines the purposes and means by which your personal data is processed.
All data protection queries, access requests, deletion requests, and formal privacy complaints should be directed to badpkr's support team using the contact details provided in Section 15 of this Policy. badpkr commits to acknowledging all privacy-related requests within 5 business days and providing a substantive response within 28 days of receipt, in accordance with the timeframes required under applicable data protection standards.
Data Protection Contact: For all privacy-related matters, including Subject Access Requests and data deletion requests, please contact us at [email protected] with the subject line "Privacy Request — [Your Account Reference]". We will handle all such requests with strict confidentiality.
badpkr collects personal data across several categories depending on your level of interaction with the Platform. The categories of personal data we collect are set out in the table below.
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC or passport number, CNIC front and back images | At registration and during KYC verification |
| Contact Data | Email address, Pakistani mobile number (for JazzCash/EasyPaisa OTP), city of residence | At registration and account updates |
| Financial Data | JazzCash/EasyPaisa account numbers, bank account details (HBL, UBL, Meezan, Raast), deposit and withdrawal history, transaction amounts in PKR | At first deposit and ongoing transaction processing |
| Gaming Activity Data | Bet history, game session logs, win/loss records, wagering activity, session duration and frequency | During all gaming and betting activity on the Platform |
| Technical Data | IP address, device type and model, operating system, browser type and version, time zone, screen resolution | On every visit to the Platform |
| Usage Data | Pages visited, features used, navigation paths, click behaviour, session start and end times | On every visit to the Platform |
| Communications Data | Records of live chat interactions, support emails, complaint correspondence | When you contact our support team |
| Marketing Preferences | Promotional opt-in or opt-out choices, bonus claim history, preferred game categories | At registration and via account settings |
badpkr does not intentionally collect special category personal data (such as health data, biometric data, racial or ethnic origin, or religious beliefs) as part of its standard registration or verification processes. If you voluntarily disclose special category information — for example, when contacting our responsible gaming team regarding a gambling-related health concern — such information will be treated with the highest level of confidentiality and used solely for the purpose of providing the support you have requested.
Where the provision of personal data is a contractual or regulatory requirement for the use of the Platform (such as identity verification data required under our KYC obligations), failure to provide such data may mean we are unable to open, maintain, or continue your Player account or process withdrawal requests.
badpkr collects personal data through the following channels and mechanisms:
The majority of the personal data we hold about you is data you provide to us directly, including information submitted during account registration, identity verification (KYC), deposit and withdrawal requests, promotional sign-ups, support interactions, and account settings updates.
When you access and navigate the Platform, we automatically collect Technical Data and Usage Data through the use of cookies, web beacons, server logs, and similar tracking technologies. This data is collected on every visit regardless of whether you are logged into your Player account. Please refer to Section 10 of this Policy for a detailed description of our cookie practices.
We may receive data about you from third-party service providers engaged by badpkr in connection with the operation of the Platform. These include identity verification and KYC service providers, payment processors (including the operators of JazzCash, EasyPaisa, and partnered banks), fraud detection and anti-money laundering screening services, and analytics providers. Data received from these third parties is subject to the same protections described in this Policy.
In connection with our anti-money laundering and fraud prevention obligations, badpkr may consult publicly available sources, including public records, sanction screening lists, and politically exposed persons (PEP) databases, to supplement information you provide to us during the KYC verification process.
badpkr uses the personal data we collect for the specific purposes described below. We will not use your personal data for any purpose that is incompatible with those stated here without first notifying you and, where required by applicable law, obtaining your consent.
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity Data, Contact Data |
| Identity and age verification (KYC) | Identity Data, Financial Data |
| Processing deposits and withdrawals in PKR | Identity Data, Financial Data, Contact Data |
| Delivering gaming and betting services | Identity Data, Gaming Activity Data, Technical Data |
| Fraud prevention and security monitoring | Technical Data, Financial Data, Gaming Activity Data |
| Anti-money laundering (AML) compliance | Identity Data, Financial Data, Gaming Activity Data |
| Responsible gaming monitoring and tool delivery | Gaming Activity Data, Identity Data |
| Customer support and complaint handling | Communications Data, Identity Data, Gaming Activity Data |
| Sending promotional communications (where consented) | Contact Data, Marketing Preferences, Gaming Activity Data |
| Platform analytics and performance improvement | Technical Data, Usage Data |
| Compliance with legal and regulatory obligations | All categories as required |
⚠️ No Data Selling: badpkr does not sell, rent, or trade your personal data to any third party for that third party's own marketing or commercial purposes. Any sharing of data with third parties is limited to what is strictly necessary for the operational and legal purposes described in this Policy.
badpkr processes your personal data on the following legal bases:
badpkr shares personal data with third parties only in the limited circumstances described below. All third parties with whom we share data are contractually required to protect your personal data and to process it only for the specific purposes for which it was shared.
We engage third-party service providers to support the operation of the Platform. These include identity verification and KYC providers, payment processors and banking partners (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast), game content providers and studios, fraud detection and cybersecurity services, IT infrastructure and cloud hosting providers, and customer support platform operators. These providers act as data processors on behalf of badpkr and may only use your data for the purpose of providing their contracted services to us.
badpkr may be required to disclose personal data to regulatory authorities, law enforcement agencies, courts, or other government bodies where such disclosure is required by law, court order, or the requirements of our international gaming licence. In particular, badpkr is obligated to report suspected money laundering or terrorist financing activity to the relevant competent authorities. Player accounts subject to such reports will be handled in strict accordance with applicable legal requirements.
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of badpkr's assets, your personal data may be transferred to the acquiring entity as part of that transaction. badpkr will endeavour to provide reasonable notice of any such transfer and will ensure that any successor entity is bound by data protection obligations no less protective than those described in this Policy.
badpkr may share your personal data with additional third parties in circumstances not described above where you have provided your explicit prior consent to such sharing. You may withdraw such consent at any time by contacting our support team, though withdrawal of consent will not affect the lawfulness of any processing carried out prior to withdrawal.
badpkr retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The retention periods applicable to different categories of personal data are guided by the following principles:
Where personal data is no longer required for any of the purposes described above, badpkr will securely delete, anonymise, or dispose of it in accordance with its internal data disposal procedures.
badpkr implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
⚠️ Your Responsibilities: While badpkr takes extensive measures to protect your data, no digital system is completely immune from security threats. You are responsible for maintaining the confidentiality of your account credentials and for ensuring that your device is protected by up-to-date security software. Never share your badpkr password, OTP codes, or account details with any third party.
badpkr uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow us to recognise your device on subsequent visits, maintain your session, remember your preferences, and collect usage analytics.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Essential for Platform operation — maintaining your login session, security tokens, and user authentication state | No — required for Platform to function |
| Functional | Remembering your preferences such as language, display settings, and responsible gaming tool configurations | No — reasonable legitimate interest |
| Analytics | Collecting anonymised usage data to understand how Players navigate the Platform and to identify areas for improvement | Yes — consent required |
| Marketing | Tracking engagement with badpkr promotional content to measure the effectiveness of marketing campaigns | Yes — consent required |
You can manage your cookie preferences through the cookie consent tool displayed when you first access the Platform. You may also control cookie settings through your browser settings, though please be aware that disabling strictly necessary cookies may affect the functionality of your Player account. Changing your cookie preferences will not affect cookies already placed on your device prior to the change.
Subject to applicable data protection legislation and the limitations described below, you hold the following rights in respect of your personal data processed by badpkr:
To exercise any of the above rights, please contact badpkr's support team at [email protected] with the subject line "Privacy Request — [Your Account Reference]". We may request proof of identity before processing your request in order to prevent unauthorised access to another person's data.
Response Timeframe: badpkr will acknowledge all data rights requests within 5 business days and provide a full substantive response within 28 days. In cases of complexity or a high volume of requests, we may extend this period by a further 28 days, with notice to you explaining the reason for the extension.
The badpkr Platform is strictly intended for adults aged 21 years and over. badpkr does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the KYC process for all Player accounts and is conducted prior to any real-money gaming activity or withdrawal being permitted.
If badpkr discovers or has reasonable grounds to believe that personal data has been collected from a Player under the age of 21, the relevant account will be suspended immediately, all gaming activity will be voided, and any deposits will be returned to the original payment method following verification. All personal data associated with the underage account will be deleted except to the extent that retention is required for legal or regulatory purposes.
If you are a parent or guardian and believe that your child may have registered an account on the badpkr Platform, please contact our support team immediately at [email protected]. We will treat all such reports with urgency and strict confidentiality.
⚠️ 21+ Only: badpkr enforces a strict minimum age of 21 for all Platform users. Parental control tools are available through major Pakistani internet service providers to help restrict access to online gaming platforms for minors. badpkr also supports the use of third-party parental control software and encourages parents and guardians to make use of these tools.
As an internationally licensed online gaming platform, badpkr may transfer personal data to service providers and partners located in countries other than Pakistan. Where such international transfers occur, badpkr takes steps to ensure that your personal data is afforded a level of protection equivalent to the standards described in this Policy.
Safeguards used for international data transfers may include contractual data processing agreements incorporating standard data protection clauses, transfers to jurisdictions that have been assessed as providing adequate data protection standards, and other legally recognised transfer mechanisms. If you would like further information about the specific safeguards applied to any particular international transfer of your personal data, please contact our support team.
badpkr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. The date of the most recent revision to this Policy is displayed at the top of this page.
Where a material change is made to this Policy — particularly any change that affects the purposes for which your personal data is processed or the rights available to you — badpkr will provide reasonable advance notice by displaying a prominent notice on the Platform and, where practicable, by sending a notification to the email address registered to your account.
Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure in accordance with the provisions of our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or to badpkr's handling of your personal data, please contact our support team using the details below. Our Pakistan-based support team is available seven days a week and is trained to handle all privacy-related enquiries with care and confidentiality.
Formal Privacy Complaints: If you are dissatisfied with badpkr's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution body specified under our international gaming licence. badpkr encourages Players to contact us directly in the first instance, as the majority of privacy concerns can be resolved quickly through direct dialogue.
Six core commitments that define how we handle your personal data on Pakistan's premier online gaming platform.
Every byte of data exchanged between your device and badpkr travels through 256-bit SSL/TLS encryption — the same protocol trusted by HBL, UBL, and Meezan Bank for online banking. Your financial and personal data is never transmitted in plain text.
badpkr does not sell, rent, or trade your personal information to third-party marketers — full stop. Any data shared with our service providers is strictly limited to what is required for them to deliver their contracted service on our behalf.
Our KYC process is built around Pakistan's CNIC system, making it straightforward for local players to verify their identity quickly. KYC data is handled with the highest level of security and retained only for the minimum period required under our licensing obligations.
Access your data, correct it, restrict its processing, or request its deletion — all through a simple email to our support team. We respond to all Subject Access Requests within 28 days, with an acknowledgement sent within 5 business days of receipt.
Our cookie consent tool gives you clear, granular control over which categories of cookies are placed on your device. Strictly necessary cookies keep your account session running; analytics and marketing cookies require your explicit opt-in consent before activation.
Data you share when using badpkr's responsible gaming tools — deposit limits, self-exclusion requests, or support conversations about gambling behaviour — is treated with the strictest confidentiality and is never used for marketing profiling.
Your privacy is protected at every step. Explore Pakistan's premier online gaming platform — cricket betting, live casino, slots, and instant PKR payments, all secured by industry-leading encryption.
⚠️ 21+ Only. Please gamble responsibly. badpkr is an internationally licensed gaming platform.