npkr Privacy Policy — How We Handle Your Personal Data

01 Introduction

npkr Casino is committed to protecting the privacy and personal data of every Pakistani player who uses our platform. We recognise that when you create an npkr account, you are entrusting us with personal information — your name, your mobile number, your financial transaction data, and your gaming history. We take that responsibility seriously.

This Policy is written in plain English to be genuinely readable — not to obscure what we do with your data behind walls of impenetrable legal language. At the same time, it constitutes a legally binding statement of npkr's data processing practices, and where applicable, aligns with internationally recognised data protection principles including those found in the GDPR framework adopted by our licensing jurisdiction.

This Policy should be read in conjunction with npkr's Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. Together, these documents form the complete legal and operational framework governing your npkr account.

02 Data Controller

For the purposes of applicable data protection law, npkr Casino, operating the website npkr.bid under an international gaming licence, is the Data Controller in respect of the personal data collected from and processed in connection with registered players on the npkr platform.

As Data Controller, npkr is responsible for determining the purposes and means by which your personal data is processed. npkr is registered with the relevant data protection authority in our licensing jurisdiction, and complies with all applicable data protection obligations imposed by that registration and by the conditions of our international gaming licence.

Any questions regarding npkr's role as Data Controller, or any requests to exercise your data subject rights, should be directed to npkr's support team using the contact details provided at the end of this Policy.

03 Categories of Personal Data We Collect

npkr collects personal data from players across several categories, all of which are collected for specific, legitimate purposes related to the operation of a licensed online casino and sports betting platform. The categories of personal data npkr collects are as follows:

npkr does not collect sensitive personal data (including data relating to racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by our licensing jurisdiction's regulatory framework for identity verification purposes, and only with your explicit consent where legally required.

04 How We Collect Your Data

npkr collects personal data through the following means:

• Direct collection: Information you provide directly when registering an npkr account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account preferences.
• Automated collection: Technical data such as IP address, device identifiers, and session information that is automatically recorded when you access and use the npkr platform, including through cookies and similar tracking technologies.
• Third-party collection: Identity and payment verification data received from KYC service providers, payment processors (including JazzCash and EasyPaisa), and fraud prevention services engaged by npkr to fulfil our licensing and AML obligations.
• Publicly available sources: Information from publicly available sources that npkr may use to supplement its KYC processes, including sanctions lists and politically exposed persons databases, as required by anti-money laundering regulations.

05 Legal Basis for Processing

npkr processes your personal data on the following legal bases, which apply to different categories of processing activity:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered npkr player, including account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, anti-money laundering obligations, responsible gaming requirements, and reporting obligations to our licensing authority.
• Legitimate interests: Processing conducted for the legitimate business interests of npkr, including fraud prevention, platform security, technical performance monitoring, and improvement of our services — where those interests are not overridden by your data protection rights.
• Consent: Processing for which you have given explicit, informed consent, including the sending of marketing communications where applicable. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Purposes of Data Processing

npkr processes your personal data for the following specific purposes:

• Creating, verifying, and managing your npkr Casino account throughout its active lifecycle.
• Verifying your identity and age (21+) as required by our international gaming licence and anti-money laundering obligations.
• Processing deposits and withdrawals in Pakistani Rupees via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, and other forms of platform misuse.
• Monitoring gaming activity to identify indicators of problem gambling and to administer the responsible gaming tools available to all npkr players.
• Providing customer support, resolving disputes, and maintaining records of communications for quality assurance purposes.
• Delivering bonuses, promotional credits, and loyalty programme rewards in accordance with the applicable bonus terms.
• Complying with all applicable reporting, audit, and record-keeping obligations imposed by our licensing authority.
• Sending you service communications (account notifications, security alerts, transaction confirmations) and, where separately consented, promotional communications about npkr offers.
• Analysing aggregated, anonymised gaming behaviour data to improve the npkr platform, user experience, and game selection for Pakistani players.

07 Data Sharing & Disclosure

npkr shares your personal data with the following categories of recipient, each under binding data processing agreements that impose equivalent data protection standards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard network processors, and USDT blockchain service providers — to the extent required to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services engaged by npkr to confirm your identity, age, and address as required by our licensing and AML compliance obligations.
• Game providers: Licensed casino game suppliers whose games are hosted on the npkr platform. These providers may receive anonymised session tokens for game launch purposes; they do not receive your full identity data unless specifically required for progressive jackpot prize processing.
• Fraud prevention and security services: Third-party providers engaged to detect and prevent fraudulent activity on the npkr platform, including IP intelligence providers and device fingerprinting services.
• Regulatory and licensing authorities: Our international gaming licensing authority and any other regulatory body to which disclosure is legally mandated, including law enforcement agencies where required by court order or applicable law.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by npkr in connection with legitimate business operations, subject to professional confidentiality obligations.

In the event of a sale, merger, or acquisition of npkr or its parent entity, your personal data may be transferred to the acquiring entity as part of the transaction, subject to the same data protection standards described in this Policy.

08 International Data Transfers

As an internationally licensed online gaming platform serving Pakistani players, npkr's data processing operations may involve the transfer of personal data to countries outside Pakistan and outside the jurisdiction in which our gaming licence is held. Such transfers are made only where:

• The receiving country has been determined to provide an adequate level of data protection by the relevant regulatory authority;
• Appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or equivalent mechanisms that provide enforceable data subject rights and effective legal remedies; or
• The transfer is necessary for the performance of our contractual obligations to you (for example, processing a JazzCash withdrawal).

Where data is transferred internationally, npkr ensures that the receiving party is subject to data processing terms that are substantively equivalent to those described in this Policy, and that your personal data is afforded the same level of protection regardless of where it is processed.

09 Data Retention

npkr retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and licensing regulations. The following retention periods apply to the principal categories of personal data held by npkr:

• Account and identity data: Retained for the duration of your active npkr account and for a minimum of 5 years following account closure, as required by anti-money laundering and gaming licensing regulations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with AML and regulatory reporting requirements applicable to licensed gaming operators.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each gaming session, for responsible gaming monitoring, regulatory reporting, and dispute resolution purposes.
• Customer support communications: Retained for 2 years from the date of each communication, for quality assurance and dispute resolution purposes.
• Technical and security logs: Retained for 12 months from the date of generation, for security monitoring and fraud prevention purposes.
• Marketing consent records: Retained for the duration of your active consent and for 3 years following withdrawal of consent, as evidence of consent management compliance.

Upon expiry of the applicable retention period, npkr will securely delete or irreversibly anonymise your personal data such that it can no longer be attributed to you as an identifiable individual.

10 Security Measures

npkr implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and the npkr platform.
• AES-256 encryption at rest for all sensitive personal data stored on npkr's servers and database infrastructure.
• Role-based access controls ensuring that npkr staff members can access only the personal data strictly necessary for the performance of their job function.
• Two-factor authentication available for all player accounts and mandatory for all administrative system access by npkr staff.
• Regular penetration testing and security audits conducted by independent third-party security professionals as required by our licensing framework.
• Comprehensive audit logging of all access to systems that process personal data, retained and monitored for anomalous activity.
• Data breach response procedures including notification protocols aligned with applicable regulatory requirements and our licensing authority's breach reporting obligations.

While npkr takes extensive steps to protect your data, no internet-based platform can guarantee absolute security. You also play an important role in protecting your data: keeping your npkr account password confidential, enabling two-factor authentication, and notifying npkr immediately of any suspected unauthorised access to your account are all important steps you can take.

11 Cookies & Tracking Technologies

npkr uses cookies and similar tracking technologies on the npkr.bid website to provide, secure, and improve the platform experience. The following categories of cookies are used by npkr:

• Essential cookies: Strictly necessary for the npkr platform to function correctly — including session management, login state, security tokens, and load balancing. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional cookies: Used to remember your preferences on the npkr platform, including language settings, display preferences, and responsible gaming limit configurations you have set in your account.
• Analytics cookies: Used by npkr to understand how Pakistani players interact with our platform — including which pages are visited most frequently, how long sessions last, and where players encounter navigation difficulties. All analytics data is aggregated and anonymised before analysis. npkr does not deploy third-party advertising analytics platforms.
• Security cookies: Used to detect and prevent fraudulent access attempts, bot traffic, and other malicious activity directed at the npkr platform.

npkr does not use third-party advertising cookies or cross-site tracking cookies. Your browsing activity on external websites is not tracked by npkr. You may manage cookie preferences through your browser settings; however, disabling essential cookies will impair your ability to use the npkr platform. For a complete list of cookies deployed on npkr.bid, please contact our support team.

12 Your Data Subject Rights

Subject to applicable data protection law and the conditions of our licensing framework, you hold the following rights in respect of your personal data held by npkr:

13 Children's Privacy — 21+ Only

npkr enforces age verification as a mandatory component of the account registration and KYC process. If npkr becomes aware or has reasonable grounds to suspect that an account has been registered by an individual under the age of 21, the account will be immediately suspended, all personal data associated with the account will be deleted (subject to any mandatory retention obligations for fraud prevention purposes), and any funds held in the account will be returned to the originating payment method after verification.

If you are the parent or guardian of a minor and believe that your child has created an npkr account, please contact us immediately using the details in Section 17. npkr will investigate and act on verified reports of underage account registration with the utmost urgency.

14 Marketing Communications

npkr may send you promotional communications about bonuses, new games, sports betting markets, and other npkr features where you have given your explicit consent to receive such communications during or after account registration. All marketing communications from npkr are sent to your registered Pakistani mobile number or email address.

You may withdraw your consent to receive marketing communications from npkr at any time by updating your notification preferences in your account settings, or by contacting npkr support directly. Withdrawal of marketing consent will not affect the delivery of essential service communications such as transaction confirmations, security alerts, and account management notifications, which are sent regardless of marketing preferences.

npkr does not share your contact information with third parties for marketing purposes, and does not purchase or use third-party marketing lists in connection with npkr's promotional activities.

15 Third-Party Services & Links

The npkr platform may contain links to third-party websites or services — for example, game provider demo environments or payment processor portals accessed during deposit or withdrawal flows. These third-party services are operated by independent organisations, each with their own privacy policies and data handling practices. npkr is not responsible for the privacy practices of any third-party service, and this Policy does not apply to data collected by third parties.

When you are redirected from the npkr platform to a third-party service, we recommend that you review the privacy policy of that service before providing any personal information. npkr only engages third-party service providers that have been assessed for data protection compliance as part of our vendor management process.

16 Updates to This Privacy Policy

npkr reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the conditions of our gaming licence. Where changes are material, npkr will provide advance notice to registered players via email to the registered address or via an on-platform notification displayed upon login, with the effective date of the revised Policy clearly stated.

Your continued use of the npkr platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy. The current effective version of this Privacy Policy will always be accessible at npkr.bid/privacy-policy. npkr recommends that all Pakistani players review this Policy periodically to remain informed of how their personal data is being handled.

17 Contact & Data Protection Enquiries

For all privacy-related enquiries, data subject rights requests, or concerns about npkr's handling of your personal data, please contact our support team using the details below. All privacy enquiries will be handled with the appropriate level of urgency and confidentiality.

If you are not satisfied with npkr's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in our licensing jurisdiction, or to the dispute resolution mechanism specified under our gaming licence.

This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions of the npkr Casino Privacy Policy. npkr Casino — npkr.bid. © 2026 npkr. All rights reserved.