pakrunmy Privacy Policy — Your Data, Your Rights

This Privacy Policy ("Policy") describes how pakrunmy ("we", "us", "our") collects, processes, stores, and protects personal information in connection with the operation of the pakrunmy online casino and sports betting platform accessible at pakrunmy.net (the "Platform").

This Policy applies to all users who register an account, browse the Platform, make a deposit or withdrawal, place a bet, contact our support team, or otherwise interact with pakrunmy in any capacity. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy in full.

pakrunmy is committed to handling all personal data in accordance with applicable data protection laws and internationally recognised privacy standards. We take particular care with sensitive data categories including identity documents, financial information, and responsible gaming records — all of which are held to a higher standard of protection.

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is the pakrunmy operating entity that holds the international gaming licence under which this Platform is authorised to operate.

All data protection enquiries, subject access requests, erasure requests, and complaints relating to this Policy should be directed to our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

Where pakrunmy engages third-party service providers to process personal data on our behalf (such as payment processors, KYC verification providers, and fraud detection partners), those providers act as data processors under written agreements that require them to handle your data only in accordance with our instructions and applicable law.

3.1 Registration & Account Information

When you create a pakrunmy account, we collect the following personal information:

• Full legal name as it appears on your CNIC
• Date of birth (to verify you are 21 years of age or older)
• Pakistani CNIC number and a copy of your CNIC document
• Email address and mobile phone number
• Residential address (city, province, Pakistan)
• Username and securely hashed account password
• Preferred currency (PKR, BTC, or USDT)

3.2 Financial & Transaction Data

To process your deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Bitcoin, or USDT, we collect and retain:

• Transaction amounts, timestamps, and reference numbers
• JazzCash or EasyPaisa mobile wallet numbers (masked after verification)
• Bank account details for bank transfer methods (account number masked at rest)
• Cryptocurrency wallet addresses used for deposits and withdrawals
• Transaction history, deposit/withdrawal records, and balance snapshots
• Source of funds declarations for large transactions as required by AML obligations

3.3 Gaming & Betting Activity

As part of normal platform operation and our responsible gaming obligations, we collect records of your gaming activity including:

• Bets placed, games played, stakes, wins, and losses
• Session durations, login timestamps, and activity patterns
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion)
• Bonus claims, wagering progress, and promotional participation

3.4 Technical & Device Data

We automatically collect certain technical information when you access pakrunmy, including:

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Referral URL and pages visited within the Platform
• Session identifiers and authentication tokens
• Error logs and performance data used for platform diagnostics

3.5 Customer Support Communications

When you contact pakrunmy support via live chat, email, or any other channel, we retain records of those communications including the content of messages, issue categories, and resolution outcomes. This allows our support team to provide consistent service and assists our quality assurance process.

pakrunmy processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and securing your pakrunmy account, including authentication and session management.
• Payment processing: Facilitating deposits and withdrawals through JazzCash, EasyPaisa, bank transfers, and crypto payment rails.
• Identity verification: Conducting KYC checks as required under our gaming licence, and verifying that all players are 21 years of age or older.
• Legal and regulatory compliance: Meeting our obligations under anti-money laundering (AML) regulations, counter-terrorist financing (CTF) requirements, and the conditions of our international gaming licence.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other platform security threats.
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling, enforcing deposit and loss limits, and administering self-exclusion requests.
• Customer support: Responding to your queries, resolving account issues, and maintaining records of interactions for quality assurance.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the pakrunmy product, fix bugs, and optimise the player experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have explicitly opted in to receive such communications.

pakrunmy does not engage in automated decision-making that produces legal or similarly significant effects on players, except where this is required for fraud prevention or responsible gaming interventions — in which case you retain the right to human review of any such decision.

pakrunmy relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and pakrunmy — i.e., operating your account, processing bets, and paying out winnings.
• Legal obligation: Processing required to comply with AML/CTF regulations, gaming licence conditions, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests in protecting the platform and its players do not override your fundamental rights.
• Consent: Processing for marketing communications and optional data uses — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

pakrunmy does not sell your personal data. We share your information only in the following limited circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and crypto payment processors receive transaction data necessary to complete your deposits and withdrawals. These providers are bound by their own data protection obligations and contractual requirements with pakrunmy.
• KYC verification partners: We engage certified identity verification providers to assist with CNIC validation and AML screening. These providers act under strict data processing agreements and handle your documents solely for verification purposes.
• Fraud prevention services: We share relevant transaction data with fraud detection partners to identify and prevent abuse. Shared data is minimised to what is necessary for this purpose.
• Game content providers: Casino game studios and sports data providers may receive anonymised session data to facilitate game delivery and ensure fair play. These providers do not receive your personally identifiable information.
• Regulatory and law enforcement authorities: pakrunmy will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law or valid legal process. We will notify affected users of any such disclosure where legally permitted to do so.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of pakrunmy's assets, user data may be transferred to the successor entity. Users will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

pakrunmy uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including authentication tokens, session management, and security cookies. These cannot be disabled without preventing you from using pakrunmy.
• Functional cookies: Remember your preferences such as language settings, preferred currency (PKR/BTC/USDT), and game lobby filters. Disabling these cookies will reset your preferences on each visit.
• Analytics cookies: Collect anonymised data about how players navigate the Platform — which pages are visited most, where players encounter issues, and how the casino lobby performs. This data is aggregated and never used to identify individual users.
• Responsible gaming cookies: Track session duration to support session time reminders and enforce session limits set by players in their account settings.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pakrunmy account. pakrunmy does not use third-party advertising or retargeting cookies.

pakrunmy retains personal data only for as long as necessary for the purposes for which it was collected, subject to the following retention standards:

• Active account data: Retained for the duration of your pakrunmy account plus a minimum of five (5) years following account closure, as required by our gaming licence and AML obligations.
• Transaction records: Financial transaction records are retained for a minimum of seven (7) years in accordance with standard AML/CTF record-keeping requirements.
• KYC documents: Identity verification documents (CNIC copies) are retained for a minimum of five (5) years from the date of account closure or last transaction, whichever is later.
• Self-exclusion records: If you permanently self-exclude from pakrunmy, your exclusion record is retained indefinitely to prevent re-registration. This is a player protection measure, not a punitive one.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of your account and for three (3) years following withdrawal of consent.
• Support communications: Customer support interaction records are retained for three (3) years from the date of the last interaction in a given support thread.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to any individual player.

pakrunmy implements a multi-layered security framework to protect your personal data from unauthorised access, loss, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption on all connections between your device and pakrunmy servers
• AES-256 encryption at rest for all stored personal and financial data
• Two-factor authentication (2FA) available on all player accounts
• Role-based access controls ensuring staff access only the data necessary for their specific job function
• Comprehensive audit logging of all access to sensitive player data by internal personnel
• 24/7 automated fraud and anomaly detection monitoring all transactions and login events
• Regular third-party penetration testing of the pakrunmy platform and infrastructure
• Secure, isolated storage environment for KYC documents with restricted access
• Incident response procedures with defined timelines for notifying affected users in the event of a data breach

In the event of a data security incident that is likely to result in a high risk to your rights, pakrunmy will notify affected users without undue delay and will take all reasonable steps to contain and remediate the incident.

As a pakrunmy player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection Officer at the details in Section 14:

• Right of access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request, free of charge for reasonable requests.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold. Many basic details — such as email address and mobile number — can be updated directly within your account settings.
• Right to erasure: You may request deletion of your personal data. We will comply to the maximum extent permitted by our legal obligations to retain certain records under AML regulations and our gaming licence conditions.
• Right to restrict processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while we investigate a disputed accuracy claim.
• Right to data portability: You may request a machine-readable export of the personal data you have provided to us, where technically feasible.
• Right to object: You may object to processing based on our legitimate interests at any time. You may also withdraw consent to marketing communications at any time with immediate effect.
• Rights related to automated decision-making: Where any automated decision has a significant effect on your account, you have the right to request human review of that decision.

We will respond to all rights requests within 30 days. Where a request is complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

pakrunmy supports Bitcoin and USDT deposits and withdrawals, and we recognise that Pakistani crypto users often choose digital currency transactions partly for the privacy benefits they offer. There are, however, important nuances to understand about how blockchain data and privacy interact on the pakrunmy platform.

11.1 Wallet Address Collection

When you deposit or withdraw using Bitcoin or USDT, your cryptocurrency wallet address is collected and stored as part of your transaction record. This is required for AML compliance purposes — specifically to conduct blockchain analytics screening against known illicit wallet addresses as part of our KYC/AML obligations.

11.2 Blockchain Transparency

Please be aware that all Bitcoin and USDT transactions on public blockchains are permanently recorded on-chain and are visible to anyone with access to a blockchain explorer. pakrunmy has no ability to remove or obscure on-chain transaction records. The privacy of your cryptocurrency transactions is therefore determined in part by how you manage your own wallet and transaction practices.

11.3 Crypto Data and AML Screening

pakrunmy uses certified blockchain analytics tools to screen incoming and outgoing crypto transactions for association with sanctioned entities or known illicit activity. This screening is a legal requirement under our gaming licence's AML/CTF obligations. Transaction data submitted to analytics providers is handled under strict data processing agreements.

pakrunmy strictly enforces a 21+ age policy across all of its products and services. The Platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Age verification is conducted as part of the mandatory KYC process for all new registrations.

If pakrunmy becomes aware that it has inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant account, refund any net deposits, and permanently delete all associated personal data. Any winnings generated by an underage account will be forfeited in accordance with our Terms & Conditions.

If you believe that a minor may have registered a pakrunmy account, please report this immediately to our support team at [email protected]. We take all such reports seriously and will investigate and act within 24 hours of receiving a credible report.

pakrunmy may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will notify registered users by email and by displaying a prominent notice on the Platform for a minimum of 30 days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect when the most recent changes were made. We encourage all players to review this Policy periodically. Your continued use of the pakrunmy Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

Where changes to this Policy require new consent from you — for example, if we wish to process your data for a materially new purpose — we will request that consent explicitly and will not process your data for that purpose unless and until you provide it.

For all data protection queries, subject access requests, rectification requests, erasure requests, or complaints relating to this Privacy Policy, please contact the pakrunmy Data Protection Officer:

We aim to acknowledge all data protection enquiries within 48 hours and to resolve them fully within 30 days. For complex or multi-part requests, we may request additional identity verification before processing your request to ensure we are disclosing or modifying data only to the correct account holder.

If you are not satisfied with our response to a data protection complaint, you have the right to escalate your complaint to the relevant supervisory authority or to the licensing body that oversees pakrunmy's gaming operations. Details of the applicable regulator are available on request.