npkr Privacy Policy

1. Data Controller

npkr ("npkr", "we", "us", "our") is the data controller responsible for the personal information collected and processed through the npkr platform, accessible at npkr.app. This Privacy Policy applies to all users of the npkr platform, including registered players, visitors to the website, and individuals who contact npkr's support team.

By registering an account with npkr or by continuing to use the npkr platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not use the npkr platform or provide any personal information to us.

This Privacy Policy should be read alongside npkr's Terms & Conditions and Responsible Gaming Policy, which together govern your use of the platform.

2. Data We Collect

npkr collects personal data through various means, including during account registration, through your use of the platform, and through communications with our support team. The categories of personal data we collect include:

npkr does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data. If any such data is inadvertently received, it will be deleted promptly.

3. Purpose & Legal Basis for Processing

npkr processes personal data only where a lawful basis exists. The primary purposes for which npkr processes your data, and the corresponding legal bases, are as follows:

• Account creation and management: Processing is necessary to perform the contract between npkr and the user. Without this data, we cannot provide the services.
• Identity and age verification (KYC): Processing is required to comply with legal obligations. npkr is required to verify that all registered users are aged 18 or above.
• Payment processing: Processing is necessary to execute deposit and withdrawal transactions and to maintain accurate financial records as required by applicable regulations.
• Fraud prevention and security: Processing is in the legitimate interests of npkr and its users to detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Responsible gaming monitoring: Processing is in the legitimate interests of npkr to identify patterns of behaviour that may indicate problem gambling and to fulfil our duty of care to users.
• Marketing communications: Where you have provided explicit consent, npkr may contact you with promotional offers and platform updates. You may withdraw consent at any time by updating your account preferences or contacting npkr support.
• Platform improvement and analytics: npkr processes aggregated and anonymised usage data in its legitimate interests to improve platform performance, game selection, and the overall user experience.

npkr will not process your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

4. Sharing of Personal Data

npkr does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, and only to the extent necessary to fulfil the stated purpose:

• Payment service providers: Including JazzCash, Easypaisa, HBL, Meezan Bank, UBL, Bank Alfalah, and USDT TRC20 network processors, for the purpose of executing financial transactions.
• Game providers: Including certified studio partners such as Pragmatic Play, NetEnt, and JILI, who may receive technical session identifiers necessary to run games within the npkr platform.
• Identity verification services: Third-party KYC and AML providers used to verify user identity and age as required by applicable regulations.
• Fraud and security services: Third-party providers engaged to detect and prevent fraudulent activity on the platform.
• Legal and regulatory authorities: npkr may disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or valid legal process.
• IT and hosting providers: Infrastructure providers who host and maintain the npkr platform. These providers operate under strict data processing agreements.

All third-party service providers engaged by npkr are required to process data in accordance with applicable data protection standards and are prohibited from using npkr user data for their own independent purposes.

5. Data Retention

npkr retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of the transaction, as required for financial record-keeping purposes.
• Gaming activity records: Retained for a minimum of three (3) years following the last activity date on the account.
• Support correspondence: Retained for three (3) years from the date of the most recent interaction.
• Marketing consent records: Retained for the duration of the consent or until consent is withdrawn, plus a period of one (1) year thereafter as evidence of the consent given.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

6. Data Security

npkr employs a range of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and npkr's servers;
• Encrypted storage of passwords using industry-standard hashing algorithms; npkr staff cannot access your actual password;
• Access controls ensuring that personal data is accessible only to npkr personnel who require it to perform their functions;
• Regular security audits and vulnerability assessments of the npkr platform and infrastructure;
• Login monitoring and anomaly detection to identify and respond to suspicious account activity;
• Data processor agreements with all third-party service providers requiring equivalent security standards.

While npkr takes security seriously and implements robust measures, no online platform can guarantee absolute security. Users are encouraged to use strong, unique passwords for their npkr account and to exercise caution when accessing the platform on shared or public networks. Pakistani players using public WiFi in Karachi or Lahore should be particularly mindful of this.

7. Cookies & Tracking Technologies

npkr uses cookies and similar tracking technologies to operate the platform, analyse usage patterns, and where applicable, deliver relevant promotional content to registered users. The categories of cookies used by npkr are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting the functionality of the npkr platform.
• Analytical cookies: Used to collect aggregated information about how users interact with the npkr platform. This data is used to improve platform performance and user experience.
• Preference cookies: Store your platform settings and preferences, such as language selection and display options, so that these do not need to be reconfigured on each visit.
• Marketing cookies: Used where you have consented to receive personalised promotional content. These track interactions with npkr's promotional materials.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect your experience on the npkr platform.

8. International Data Transfers

npkr operates as an international online platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, npkr ensures that appropriate safeguards are in place to protect your data, including contractual mechanisms such as standard data protection clauses and requirements that recipient organisations maintain security standards equivalent to those applied by npkr.

npkr will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate supplementary measures.

9. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data held by npkr:

• Right of access: You may request a copy of the personal data npkr holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held by npkr.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that npkr limits the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request that npkr provides your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of these rights, please contact npkr support via live chat or email at [email protected]. npkr will respond to all valid data rights requests within thirty (30) days.

10. Minors

npkr is strictly an 18+ platform. npkr does not knowingly collect or process personal data from individuals under the age of 18. If npkr becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.

If you believe that a minor has registered an account or provided personal data to npkr, please contact the support team immediately via live chat or at [email protected] so that appropriate action can be taken without delay.

11. Third-Party Links & Services

The npkr platform may reference or integrate with third-party services, including payment providers and game studios. These third parties operate under their own privacy policies, and npkr accepts no responsibility for the data practices of such parties beyond the contractual obligations imposed through data processor agreements.

Users are encouraged to review the privacy policies of any third-party service providers with whom they interact directly in connection with their use of the npkr platform.

12. Changes to This Policy

npkr reserves the right to update this Privacy Policy periodically to reflect changes in data processing practices, legal requirements, or platform functionality. Material updates will be communicated to registered users via email or a prominent notice within the npkr platform prior to the changes taking effect.

The "Last updated" date at the top of this document indicates when this Privacy Policy was most recently revised. Continued use of the npkr platform following notification of changes constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or npkr's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the npkr platform for all registered users.
• Email: [email protected]

npkr aims to respond to all privacy-related enquiries within 48 hours and to resolve data rights requests within 30 days of receipt. For urgent data security concerns, live chat is the recommended contact method.