Privacy Policy — How wpkr Handles Your Personal Data

wpkr ("we," "us," "our," or "wpkr") operates the online gaming platform at wpkr.app, serving Players primarily based in Pakistan and internationally. As a data controller, wpkr determines the purposes and means by which your personal data is processed in connection with your account and gaming activity on our platform.

This Privacy Policy ("Policy") sets out in clear terms the categories of personal data we collect from you, the legal bases on which we rely to process that data, the purposes for which it is used, how long it is retained, who it may be shared with, and the rights you hold as a data subject. We are committed to handling your personal data responsibly, securely, and in accordance with applicable data protection principles.

This Policy applies to all wpkr Players, prospective Players who visit wpkr.app without registering, and any individual who contacts wpkr via our customer support channels. It does not apply to third-party websites, payment processors, or game providers whose own privacy practices are governed by their respective privacy policies.

wpkr collects personal data that is necessary to provide you with a safe, compliant, and personalised gaming experience. The categories of personal data we collect are set out below.

wpkr does not collect special category data (such as health data, religious beliefs, or biometric data) unless you voluntarily disclose such information in a support communication, in which case it is handled with heightened care and deleted once the relevant support matter is resolved.

wpkr collects personal data through the following means:

Direct Collection

You provide data directly to wpkr when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, set responsible gaming limits, or respond to any survey or promotional communication from wpkr.

Automated Collection

When you access wpkr.app, our servers and analytics systems automatically collect technical data including your IP address, device identifiers, browser characteristics, and behavioural data such as pages visited, time spent on each page, and navigation patterns. This collection occurs via cookies, web beacons, and server logs as described in Section 08 of this Policy.

Third-Party Sources

wpkr may receive data about you from third-party identity verification providers (for KYC purposes), payment processors (for transaction verification), fraud prevention databases, and our licensed game providers. Data received from third-party sources is used solely for the purposes described in this Policy and is handled in accordance with the same data protection standards applied to directly collected data.

wpkr processes your personal data on the following legal bases and for the following purposes:

Where wpkr relies on consent as the legal basis for processing (for example, for marketing communications or personalised promotional offers), you may withdraw that consent at any time by contacting [email protected] or updating your communication preferences in your account dashboard. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

wpkr does not sell your personal data to third parties. We do not share your data with advertisers, data brokers, or unaffiliated commercial entities for their own marketing purposes. We share your personal data only in the following circumstances:

Service Providers

wpkr engages carefully selected third-party service providers who process personal data on our behalf as data processors. These include KYC and identity verification providers, payment processors (including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast network operators), fraud detection and AML screening services, cloud hosting and infrastructure providers, customer support platform providers, and email delivery services. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to wpkr.

Licensed Game Providers

Where you access games provided by third-party studios on the wpkr platform — including live dealer tables, slot titles, and crash or fishing game providers — certain technical and gameplay data may be shared with those providers for the purpose of delivering the game experience, resolving game disputes, and maintaining RNG certification compliance. Game providers are prohibited from using this data for independent marketing or profiling purposes.

Regulatory and Legal Disclosure

wpkr may disclose your personal data to its gaming licence authority, financial intelligence units, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so — for example, in connection with an AML report, a court order, or a regulatory investigation. wpkr will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that wpkr undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices that will apply to your data going forward.

wpkr operates under an international gaming licence and engages service providers located in various jurisdictions globally. As a result, your personal data may be transferred to, stored in, and processed in countries outside of Pakistan, including jurisdictions that may not have data protection laws equivalent to those in your home country.

Where such international transfers occur, wpkr implements appropriate safeguards to ensure that your personal data continues to receive an adequate level of protection. These safeguards include contractual protections with data processors through standard data processing agreements, technical security measures as described in Section 09, and access controls that restrict who within wpkr's organisation and supply chain can access your data.

By registering an account with wpkr and using our platform, you acknowledge and consent to the transfer of your personal data to wpkr's international infrastructure and service providers on the basis described above.

wpkr retains your personal data for as long as your account remains active and for a period following account closure as required by our gaming licence obligations, applicable AML regulations, and financial record-keeping requirements.

Upon expiry of the applicable retention period, wpkr will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Anonymised and aggregated data (from which individual identity has been irreversibly removed) may be retained indefinitely for statistical and platform improvement purposes.

wpkr uses cookies and similar tracking technologies on the wpkr.app platform to maintain session continuity, ensure platform security, analyse usage patterns, and deliver a personalised experience to registered Players.

Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, CSRF protection tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how Players interact with wpkr.app — pages visited, session duration, error events. This data is used to improve platform performance and user experience.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limit displays.
• Security Cookies: Support fraud detection and device fingerprinting systems that protect your account and PKR balance from unauthorised access.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the wpkr platform, including the ability to maintain an authenticated session. wpkr does not use advertising or cross-site tracking cookies for third-party ad targeting purposes.

wpkr implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• Transport Security: All data transmitted between your browser or device and wpkr.app is encrypted using TLS 1.3 with AES-256 cipher suites. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Data-at-Rest Encryption: Personal data stored in wpkr's databases is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management service with rotation policies in place.
• Access Controls: Access to personal data within wpkr's systems is restricted on a strict need-to-know basis. Employee access is governed by role-based access controls, and all access to personal data is logged and audited.
• Two-Factor Authentication: wpkr supports and recommends two-factor authentication (2FA) for all Player accounts. Internal system access by wpkr staff requires mandatory 2FA.
• Penetration Testing: wpkr's platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: wpkr maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, wpkr will notify affected Players without undue delay and in accordance with applicable regulatory notification requirements.

While wpkr implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying wpkr immediately at [email protected] if you suspect any unauthorised access to your account.

As a wpkr Player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact wpkr's support team at [email protected] with the subject line "Data Rights Request." wpkr will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that wpkr holds about you, together with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data that wpkr holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Note that changes to KYC-verified identity data require re-submission of supporting documentation.
• Right to Erasure: You may request that wpkr delete your personal data. This right is subject to limitations where retention is required by legal obligation — for example, AML record-keeping requirements mean that financial and identity records must be retained for five years post account closure regardless of an erasure request.
• Right to Restrict Processing: In certain circumstances, you may request that wpkr restrict the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request that wpkr provide your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it may be transferred to another service provider.
• Right to Object: Where wpkr processes your data on the basis of legitimate interest (for example, for fraud prevention analytics or marketing), you have the right to object to that processing. wpkr will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

The wpkr platform is strictly restricted to individuals aged 21 years or older. wpkr does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the wpkr KYC process, and accounts where the account holder is found to be under 21 years of age will be immediately suspended, all pending withdrawals withheld pending investigation, and all bonus balances forfeited.

If wpkr becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the wpkr platform, please notify us immediately at [email protected].

wpkr recommends that parents and guardians in Pakistani households utilise parental control software to restrict access to online gambling platforms by minors. Resources on child safety and gambling harm prevention are available through international responsible gaming organisations.

The wpkr platform integrates with a number of third-party services in order to deliver its core functionality. These include payment processors, identity verification providers, and licensed game studios. Each of these third parties operates under its own privacy policy, and wpkr is not responsible for their independent data practices beyond the contractual obligations imposed through our data processing agreements.

wpkr does not display third-party advertising on the wpkr.app platform, and no advertising network cookies or tracking pixels are deployed for the purpose of third-party retargeting. Any links on the wpkr platform that direct you to external sites (such as the licensing authority's website or responsible gaming resources) are provided for informational purposes only. wpkr has no control over the content or privacy practices of those external sites and encourages you to review their privacy policies independently.

wpkr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where updates are material — meaning they significantly affect your rights or how your personal data is used — wpkr will provide notice to active Players via email to the registered account address and/or via a prominent notice on wpkr.app prior to the changes taking effect.

Your continued use of the wpkr platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept a material update to this Policy, you may request account closure in accordance with the Terms & Conditions. The effective date at the top of this document reflects the most recent revision. Prior versions of this Policy are available upon written request to [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or wpkr's data processing practices, please contact our customer support team. All privacy-related correspondence should be directed to the email address below with an appropriate subject line to ensure prompt routing.

If you are not satisfied with wpkr's response to a privacy concern, you have the right to escalate the matter to the data protection supervisory authority relevant to wpkr's licensing jurisdiction, or to the dispute resolution body designated under our international gaming licence. Details of the applicable supervisory authority are available upon request.