a2pkr Privacy Policy

1 Who We Are

a2pkr is an online gaming and sports betting platform accessible at a2pkr.pro. We operate under an internationally recognised gaming licence and offer services including cricket betting, PSL markets, live casino, slots, the Nine card game, and lottery draws to eligible players across Pakistan and other permitted jurisdictions.

For the purposes of this Policy, a2pkr acts as the data controller in respect of all personal data collected from players through the platform. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party processors to handle data on our behalf — such as payment providers or KYC verification services — those parties act as data processors under our instruction and are bound by contractual data protection obligations.

If you have any questions about how a2pkr processes your personal data, or wish to exercise any of your rights described in this Policy, please contact our data team through the in-platform live chat support or via the email address provided in Section 14.

2 Data We Collect

a2pkr collects personal data through a number of channels, including account registration, identity verification, payment processing, platform usage, and communications with our support team. The categories of data we collect are described in the table below:

We do not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond CNIC photo verification), or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request. Such disclosures are treated with the highest level of confidentiality.

3 How We Use Your Data

a2pkr processes your personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent or notifying you via a Policy update.

• Account Management: Creating, maintaining, and operating your a2pkr player account, including authentication and security verification on each login.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with our licensing obligations and anti-money laundering (AML) requirements before processing withdrawals.
• Payment Processing: Facilitating deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and maintaining accurate transaction records.
• Service Delivery: Providing access to sports betting markets (including cricket and PSL), live casino, slots, lottery, and the Nine card game.
• Fraud Prevention & AML Compliance: Monitoring account activity to detect and prevent fraud, money laundering, match-fixing, and other prohibited conduct as described in our Terms and Conditions.
• Responsible Gaming: Administering deposit limits, loss limits, self-exclusion requests, and other player protection measures. Identifying patterns of play that may indicate problem gambling and taking appropriate protective action.
• Customer Support: Responding to queries, complaints, and support requests submitted via live chat or email.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, fix bugs, and develop new features.
• Legal & Regulatory Compliance: Fulfilling obligations imposed by our gaming licence, applicable law, and requests from authorised regulatory or law enforcement bodies.
• Marketing Communications (with consent only): Sending promotional emails, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw consent at any time via your account settings.

4 Legal Basis for Processing

Every instance of personal data processing at a2pkr is grounded in one of the following recognised legal bases. Where we rely on legitimate interests, we have conducted a balancing assessment to ensure those interests do not override your rights and freedoms.

• Performance of a Contract: Processing your identity, contact, and financial data is necessary to create and operate your a2pkr account and to deliver the services you have requested.
• Legal Obligation: KYC verification, AML monitoring, transaction record-keeping, and cooperation with regulatory authorities are required by our licensing obligations and applicable law.
• Legitimate Interests: Fraud detection, platform security, abuse prevention, and aggregated analytics are processed on the basis of our legitimate interests as a gaming operator, provided those interests are not overridden by your privacy rights.
• Consent: Marketing communications and the use of non-essential cookies are processed only where you have given clear, freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting any prior processing.
• Vital Interests: In exceptional circumstances — such as where a player discloses risk of serious harm to themselves — we may process data to protect vital interests.

5 Cookies & Tracking Technologies

a2pkr uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit our website. Cookies help us keep you logged in, remember your preferences, maintain session security, and understand how players use the platform.

The categories of cookies used by a2pkr are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your authenticated state, and protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. They improve your experience but are not essential.
• Analytics Cookies: These collect anonymised, aggregated data about how players navigate the platform — which pages are visited most, where users drop off, and how features are used. This data helps us improve the platform. Analytics cookies are only placed with your consent.
• Security Cookies: Used for fraud detection, bot prevention, and anomalous activity monitoring. These are part of our legitimate security infrastructure.

You can manage your cookie preferences through the cookie settings panel accessible from the footer of the a2pkr platform. Withdrawing consent for non-essential cookies will not affect your ability to use the platform's core features.

6 Data Sharing & Disclosure

a2pkr does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: Accredited third-party services that assist in verifying your CNIC, age, and identity documents as required by our licensing obligations. These providers are contractually bound to process your data solely for verification purposes.
• Payment Processors: Partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and cryptocurrency processing services that facilitate deposits and withdrawals. They receive only the transaction data necessary to process each payment.
• Fraud Prevention & AML Services: Specialist providers that help us detect and prevent money laundering, fraud, and account abuse. Data shared is limited to what is required for risk scoring and transaction monitoring.
• Gaming Software Providers: Third-party game studios and live casino operators whose products are offered on the a2pkr platform. These providers may receive anonymised session data necessary to deliver their games.
• Regulatory & Law Enforcement Authorities: Where required by our licensing authority, applicable law, court order, or a legitimate request from a law enforcement body, a2pkr will disclose personal data as required. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and compliance consultants who are bound by confidentiality obligations and assist a2pkr in meeting its legal and regulatory obligations.

7 International Data Transfers

a2pkr is operated under an international gaming licence and some of our service providers and data processors are located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than your country of residence.

Where personal data is transferred internationally, a2pkr ensures that appropriate safeguards are in place to protect your data to an equivalent standard as that described in this Policy. These safeguards include:

• Contractual data protection clauses incorporated into agreements with all international processors.
• Transfers to jurisdictions that maintain adequate data protection standards as assessed by our licensing authority.
• Technical measures including encryption in transit and at rest, regardless of the jurisdiction in which data is processed.

You may request further information about the specific safeguards applied to international transfers by contacting our data team via the support channel described in Section 14.

8 Data Retention

a2pkr retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by our licensing obligations or applicable law. The general retention framework is as follows:

• Account Data: Retained for the duration of your active account relationship with a2pkr, plus a minimum of 5 years following account closure, as required by our AML and gaming licence obligations.
• Transaction Records: Financial transaction data is retained for a minimum of 7 years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC Documentation: Identity verification documents are retained for a minimum of 5 years following account closure or the completion of the most recent KYC review, whichever is later.
• Support & Communications Records: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, unless they relate to an unresolved dispute or complaint, in which case they are retained until final resolution plus 12 months.
• Responsible Gaming Records: Self-exclusion records and problem gambling flags are retained for the duration of any active exclusion period, plus 5 years, to prevent re-registration during an exclusion period.
• Analytics Data: Anonymised, aggregated analytics data that cannot be linked back to an individual may be retained indefinitely for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using industry-standard data destruction methods.

9 Your Rights

As a data subject, you hold a number of rights in respect of the personal data that a2pkr processes about you. These rights are described below. To exercise any of these rights, please contact our data team via the in-platform live chat or the email address in Section 14. We will respond to all valid requests within 30 days.

10 Children & Minors

a2pkr is strictly an adult gaming platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process requires players to confirm they are aged 21 or above, and all accounts are subject to CNIC-based age verification before withdrawals are processed.

If a2pkr becomes aware that personal data has been collected from a person under the age of 21 — whether through misrepresentation during registration or any other means — we will immediately:

• Permanently suspend and close the associated account.
• Void all pending bets and forfeit all account balances in accordance with our Terms and Conditions.
• Delete the personal data of the minor from our systems as promptly as our legal retention obligations permit.
• Notify the relevant regulatory authority where required by our licensing obligations.

If you are a parent or guardian and believe your child has registered on a2pkr, please contact us immediately via the support email in Section 14 so we can take swift action.

11 Security Measures

a2pkr implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and a2pkr is encrypted in transit using current-generation TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on a2pkr servers is encrypted at rest using AES-256 or equivalent standards.
• Password Security: Account passwords are stored using bcrypt or equivalent one-way hashing with per-record salts. Plain-text passwords are never stored.
• Access Controls: Personal data is accessible only to a2pkr staff and authorised processors on a strict need-to-know basis. Role-based access controls are enforced across all internal systems.
• Anomaly Detection: Automated systems monitor for unusual login patterns, large or atypical transactions, and other anomalous account activity that may indicate a security compromise.
• Regular Security Audits: a2pkr's infrastructure and data handling practices are subject to periodic internal review and independent security assessment.
• Incident Response: In the event of a personal data breach that poses a risk to affected players, a2pkr will notify the relevant regulatory authority and affected users within the timeframe required by our licensing obligations.

While a2pkr employs industry-standard security measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure by using a strong, unique password and enabling two-factor authentication on your a2pkr account.

12 Third-Party Links

The a2pkr platform may contain links or references to third-party websites, payment providers, or other online services. These references are provided for convenience and operational necessity (for example, links to payment provider portals during a deposit flow). a2pkr is not responsible for the privacy practices or content of any third-party site or service.

We strongly recommend that you review the privacy policies of any third-party service you access from or in connection with a2pkr, particularly payment providers you use to fund your account. a2pkr has no control over and accepts no responsibility for how third parties collect, use, or protect your personal data once you leave the a2pkr platform environment.

13 Changes to This Policy

a2pkr may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to our platform, changes in applicable law or our licensing obligations, or other operational developments. When we make changes, the revised Policy will be published at a2pkr.pro/privacy-policy with the updated effective date clearly displayed at the top.

Where changes are material — meaning they significantly affect your rights or how your data is processed — we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect. We encourage you to review this Policy periodically to stay informed about how a2pkr protects your data.

Your continued use of a2pkr following the publication of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you must discontinue use of the platform and may request account closure in accordance with our Terms and Conditions.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 9, or want to raise a concern about how a2pkr has handled your personal data, please contact our data team through the following channels:

We will acknowledge all data-related requests within 5 business days and aim to provide a full written response within 30 days. For complex requests, we may require up to an additional 30 days, in which case we will notify you of the extension and the reason for it.

If you are dissatisfied with our response to a privacy concern, you have the right to escalate your complaint to the data protection supervisory authority in your jurisdiction, or to the relevant dispute resolution body under a2pkr's gaming licence. Details of the appropriate escalation body will be provided in our response to your initial complaint.