39pkr Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is issued by 39pkr (hereinafter referred to as "39pkr," "the Company," "we," "us," or "our") and governs the collection, use, storage, disclosure, and protection of personal data belonging to all individuals ("you," "your," or "the Player") who access or use the 39pkr platform at 39pkr.net.

By registering a 39pkr account or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood how 39pkr processes your personal data as described herein. If you do not agree with any part of this Policy, you must not use the 39pkr platform.

39pkr is committed to processing personal data responsibly and in compliance with applicable data protection laws and international gaming regulatory requirements. This Policy reflects those obligations and the Company's own internal data governance standards, which in several respects exceed minimum legal requirements.

39pkr collects the following categories of personal data from Players, depending on the nature of your interaction with the platform:

2.1 Registration Data

When you create a 39pkr account, we collect: your full legal name, date of birth, gender, residential address, email address, and Pakistani mobile number. This information is mandatory for account creation and cannot be omitted.

2.2 Identity Verification (KYC) Data

To comply with our regulatory obligations and before processing any withdrawal, 39pkr requires: a copy of your valid National Identity Card (CNIC) — both sides — and proof of your registered payment method. In cases requiring enhanced due diligence, we may additionally request: a recent utility bill, bank statement, or a source-of-funds declaration.

2.3 Financial Transaction Data

We collect records of all deposits and withdrawals processed through your 39pkr account, including: transaction amounts in PKR, payment method used (JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank), transaction timestamps, and transaction reference numbers. We do not store full bank account credentials or full mobile wallet PINs.

2.4 Gaming Activity Data

39pkr records all gaming and betting activity associated with your account, including: games played, bets placed, results, win/loss history, bonus usage, and session durations. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory reporting purposes.

2.5 Technical & Device Data

When you access the 39pkr platform, we automatically collect certain technical information: your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited within 39pkr, and session timestamps. This data helps us optimise the platform experience and detect fraudulent or abusive access patterns.

2.6 Communications Data

If you contact 39pkr's support team via live chat or email, we retain records of those communications, including the content of messages exchanged, for a period of up to 3 years. This enables consistent support quality and provides an audit trail in the event of a dispute.

39pkr collects personal data through the following mechanisms:

• Direct submission: Information you actively provide during registration, KYC verification, deposit/withdrawal requests, contact form submissions, and live chat conversations.
• Automated collection: Technical and device data collected automatically when you visit the 39pkr platform, through server logs, session tracking, and standard web technologies.
• Cookies and similar technologies: First-party cookies placed on your device during a session to maintain login state and platform preferences. See Section 7 for full cookie details.
• Third-party payment processors: Transaction confirmation data passed back to 39pkr by JazzCash, EasyPaisa, and banking partners upon successful deposit or withdrawal completion.
• Identity verification partners: Confirmation of identity document authenticity from our regulated KYC verification service provider.
• Fraud detection systems: Behavioural and technical signals processed by 39pkr's automated risk management systems to identify and prevent fraudulent account activity.

39pkr processes your personal data under the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil 39pkr's obligations to you under the Terms & Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing mandated by our regulatory framework, including KYC verification, AML reporting, and gaming activity record-keeping required by the applicable gaming authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and system improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes where you have given explicit, informed consent — specifically for the receipt of marketing communications. Consent may be withdrawn at any time.

39pkr processes your personal data for the following defined purposes:

• Creating, managing, and authenticating your 39pkr account
• Verifying your identity in accordance with KYC and AML obligations
• Processing deposits and withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other supported Pakistani payment channels
• Providing access to and operation of all gaming and sports betting services on the 39pkr platform, including live PSL markets and casino games
• Calculating, crediting, and managing bonus balances and wagering requirements
• Operating our responsible gaming tools — including deposit limit enforcement, session time alerts, and self-exclusion management
• Detecting and preventing fraud, account abuse, multi-accounting, and other prohibited conduct as defined in the Terms & Conditions
• Providing customer support via live chat and email, including resolution of complaints and disputes
• Sending transactional notifications — deposit confirmations, withdrawal updates, account security alerts — which are not marketing communications and cannot be opted out of
• Sending marketing communications about bonuses, new games, and promotions — only to Players who have opted in to receive such communications
• Fulfilling statutory reporting obligations to gaming regulators and financial authorities as required
• Improving the 39pkr platform based on aggregated, anonymised usage data and player feedback

39pkr shares your personal data with the following categories of third parties under strict confidentiality and data processing agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data strictly necessary to process your deposits and withdrawals.
• KYC verification providers: Our regulated identity verification partner receives CNIC document images solely to confirm authenticity. They do not retain your data beyond the verification period specified in their own regulated data retention policies.
• Gaming platform technology providers: Software providers whose games appear on 39pkr receive anonymised session data for game performance monitoring. They do not receive personally identifiable information.
• Fraud prevention and risk management services: Third-party security providers receive technical and behavioural data to assist in detecting fraudulent activity. These providers are bound by strict confidentiality obligations.
• Regulatory authorities: Gaming regulators, financial intelligence units, and law enforcement agencies may receive data where required by law, court order, or regulatory directive. 39pkr will notify you of such disclosures where legally permissible to do so.
• Legal and professional advisors: In the context of legal proceedings or regulatory investigations, 39pkr's legal counsel may access limited personal data strictly for the purpose of providing legal advice.

All third-party data processors engaged by 39pkr are contractually required to maintain the confidentiality and security of your personal data, to process it only for the purposes specified by 39pkr, and to comply with applicable data protection requirements.

The 39pkr platform uses cookies and similar tracking technologies to support platform functionality and improve the player experience. The following categories of cookies are used:

• Essential / Session Cookies: Required for the platform to function. These maintain your logged-in state across pages during an active session. Without these cookies, the 39pkr platform cannot operate correctly. These cookies expire at the end of your browser session or after a defined period of inactivity.
• Preference Cookies: Store your platform preferences — such as preferred language or notification settings — so you do not have to reset them on every visit. These persist across sessions until cleared.
• Security Cookies: Support fraud detection and account security by flagging unusual access patterns. These are essential cookies and cannot be opted out of.
• Analytics Cookies: Aggregate, anonymised data about how players navigate the 39pkr platform — which sections are most visited, where sessions typically end, and how features are used. This data never contains personally identifiable information and is used solely to improve the platform.

39pkr retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period mandated by applicable law or regulatory requirement. The retention schedule applicable to each category of personal data is set out in the table in Section 2 of this Policy.

Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymised in accordance with 39pkr's data destruction procedures. Anonymised data — which can no longer be linked back to any individual — may be retained indefinitely for statistical and product improvement purposes.

Where you request deletion of your personal data before the expiry of the applicable retention period, 39pkr will assess that request against our legal and regulatory obligations. In many cases, particularly where financial transaction records are concerned, we are legally required to retain the data for the mandatory period notwithstanding a deletion request. We will communicate the outcome of your request within 30 days.

39pkr implements a multi-layered security framework to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Transit encryption: All data transmitted between your device and 39pkr's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Pakistan's leading financial institutions.
• At-rest encryption: Sensitive personal data stored within 39pkr's systems — including KYC documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members can only access the data categories required for their specific role. All internal data access is logged and audited.
• Network security: 39pkr's infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing conducted by independent security assessors.
• Two-factor authentication: Optional 2FA is available to all Players on their 39pkr accounts, and is strongly recommended as an additional protection layer against unauthorised account access.
• Incident response: 39pkr maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, you will be notified within 72 hours of the breach being identified, in accordance with our regulatory obligations.

While 39pkr takes all reasonable technical and organisational measures to protect your data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You also play a role in your own data security — please keep your 39pkr account password confidential and enable two-factor authentication.

As a data subject, you hold the following rights in respect of your personal data held by 39pkr. All rights requests should be submitted in writing to [email protected] with the subject line "Data Rights Request" and must include sufficient information to verify your identity before the request can be processed.

39pkr will acknowledge all data rights requests within 5 business days and will complete the request within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

Where 39pkr becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a person under the age of 21, the associated account will be immediately suspended, all collected data will be reviewed, and data belonging to a verified minor will be deleted as soon as practicable. Any deposits made by a verified minor will be returned to the originating payment method where traceable.

Parents and guardians who believe a minor may have created a 39pkr account are encouraged to contact our support team immediately via live chat or at [email protected]. We take these reports seriously and will act on them with urgency.

The 39pkr platform does not contain links to external third-party websites beyond the payment and verification partners integrated directly into the platform's operational infrastructure. In the event that any third-party link appears on the platform, 39pkr is not responsible for the privacy practices or data handling of those external sites. You should review the privacy policy of any third-party site you visit independently of the 39pkr platform.

39pkr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes to this Policy — particularly changes that affect your rights or how we use your data — will be communicated to registered Players via the email address associated with their account, and by way of a prominent notice on the 39pkr platform, no less than 14 days before the updated Policy takes effect.

The "Last Reviewed" date displayed at the top of this Policy will always reflect the date of the most recent substantive update. We encourage you to review this page periodically so you remain informed about how 39pkr protects your privacy. Your continued use of the platform following any update to this Policy constitutes your acknowledgment of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 39pkr has handled your personal data, please contact us through the following channels:

• Email: [email protected] — Subject line: "Privacy / Data Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the 39pkr platform
• Response commitment: We will acknowledge all privacy-related requests within 5 business days and complete them within 30 calendar days

This Privacy Policy was last reviewed in January 2026. It supersedes all previously published versions of the 39pkr Privacy Policy.