pakrumm Privacy Policy

pakrumm is Pakistan's premier online casino and sports betting platform, accessible at pakrumm.net and via our downloadable mobile application. We are committed to protecting the personal information of all players across Karachi, Lahore, Islamabad, Faisalabad, and everywhere else in Pakistan where our platform is accessed.

This Policy has been prepared in compliance with internationally recognised data protection standards applicable under pakrumm's gaming licence jurisdiction. It sets out, in plain and transparent language, exactly how we gather, store, use, and protect the personal information you provide to us — and the rights you hold over that information at all times.

Throughout this document, "personal data" or "personal information" refers to any information that identifies you or could reasonably be used to identify you, either alone or in combination with other data. This includes your name, CNIC number, email address, mobile number, payment details, and gaming history.

pakrumm collects personal data in the following categories. We collect only what is necessary for the purposes described in this Policy:

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information except where directly relevant to a responsible gaming assessment and only with your explicit consent.

pakrumm collects personal data through the following channels:

• Direct Registration: When you create an account on pakrumm.net or via the mobile app, you provide Identity Data and Contact Data directly through the registration form.
• KYC Submissions: When you upload identity documents (CNIC, passport, utility bills) as part of the verification process, we collect and store copies securely for regulatory purposes.
• Payment Transactions: When you make a deposit via JazzCash, EasyPaisa, Raast, HBL, UBL, or Meezan Bank, Financial Data is captured and associated with your account.
• Automated Technical Collection: Our servers and analytics tools automatically record Technical Data and Usage Data each time you access the Platform, whether via desktop browser or mobile application.
• Cookies and Tracking Technologies: As described in Section 9, we use cookies and similar technologies to collect session data, preference data, and behavioural data during your visit.
• Support Interactions: When you contact our support team via live chat or email, the content of those interactions is recorded and stored as Communications Data.
• Third-Party Verification Providers: Where we use third-party KYC or AML screening services, those providers may supply additional verification data to confirm the identity or background of a player.

The personal data we hold is used for the following purposes, each of which corresponds to a legal basis described in Section 5:

• Account Management: Creating, maintaining, and operating your registered account, including processing logins, verifying identity, and applying account-level settings such as deposit limits.
• Payment Processing: Receiving your deposits and processing your withdrawal requests through your nominated PKR payment method.
• Regulatory Compliance: Meeting our obligations under the gaming licence under which pakrumm operates, including age verification, KYC, and anti-money laundering (AML) requirements.
• Fraud and Security: Detecting, preventing, and investigating fraudulent activity, multi-accounting, bot usage, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions as required by our licensing obligations.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the functionality, performance, and user experience of pakrumm.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about pakrumm — but only where you have opted in to receive such communications. You may opt out at any time.

pakrumm processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you as a registered player — including account creation, payment processing, and support.
• Legal Obligation: Processing required to comply with applicable laws and our gaming licence conditions — including KYC, AML screening, and age verification.
• Legitimate Interests: Processing undertaken for the purpose of fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your fundamental rights.
• Consent: Processing of data for marketing communications and the use of non-essential cookies, where we rely on your freely given and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pakrumm does not sell your personal data. We share data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive only the financial data strictly necessary to process your deposit or withdrawal transaction.
• KYC & AML Providers: Third-party identity verification and screening services receive identity data for the purpose of verifying your age, identity, and source of funds.
• Gaming Software Providers: Third-party casino game providers and sportsbook data feed suppliers receive anonymised or pseudonymised session data to deliver game content. They do not receive your full identity or payment data.
• Regulatory and Law Enforcement Authorities: pakrumm will disclose personal data to licensing authorities, financial intelligence units, or law enforcement bodies where required to do so by law or valid legal process.
• IT and Hosting Providers: Our infrastructure partners — including server hosting and cloud services — process data on our behalf under strict data processing agreements that prohibit any independent use of your data.

All third-party data processors engaged by pakrumm are subject to contractual obligations that require them to protect your personal data to a standard equivalent to or greater than our own.

pakrumm retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where data has been anonymised, it may be retained indefinitely for statistical and analytical purposes as it can no longer be used to identify any individual.

pakrumm implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Transport Encryption: All data transmitted between your device and pakrumm's servers is encrypted using TLS 1.2 or higher (256-bit SSL), visible through the padlock icon in your browser.
• Data-at-Rest Encryption: Personal and financial data stored on our servers is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within our systems is granted only to employees and contractors who require it for their specific job function. All access is authenticated, logged, and subject to regular review.
• Two-Factor Authentication: pakrumm offers and recommends two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorised access.
• Penetration Testing: Our platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure. In the event of a confirmed breach affecting player data, we will notify affected players without undue delay and take immediate steps to contain and investigate the incident.

pakrumm uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit our site.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

pakrumm respects your rights over your own personal data. The following rights are available to all registered players:

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. Contact support to update your registered details.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our regulatory retention obligations. We cannot delete data that we are legally required to retain.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact our Data Privacy team at [email protected] with the subject line "Privacy Rights Request". We may need to verify your identity before processing the request to protect against fraudulent access attempts.

pakrumm is strictly a 21+ platform. We do not knowingly collect or process personal data relating to individuals under the age of 21. All registration flows include age declaration and are followed by identity and age verification as part of the KYC process.

If pakrumm becomes aware that personal data belonging to a person under 21 years of age has been collected — whether through a false age declaration at registration or any other means — the following steps will be taken immediately:

• The account will be suspended pending investigation.
• All funds held in the account will be withheld until the matter is fully resolved.
• The personal data of the underage individual will be deleted from our systems as soon as the investigation is complete, subject to any mandatory retention obligations.
• Any winnings accumulated in the account will be forfeited.

pakrumm may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When we make changes, we will update the "Last Updated" date at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players via email and/or via a prominent in-platform notification prior to the changes taking effect.

Your continued use of pakrumm following any revision to this Policy constitutes your acknowledgment of the updated terms. We encourage you to review this page periodically so that you are always informed about how your data is handled.

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way in which pakrumm handles your personal data, please contact us through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Subject Request" as appropriate
• Live Chat: Available from the bottom-right corner of every page on the Platform, 24/7 in both English and Urdu

We aim to respond to all privacy-related enquiries within 5 business days and to fully resolve data subject requests within 30 days.

If you are not satisfied with our response to your complaint, you have the right to escalate the matter to the relevant data protection authority or the gaming regulatory body under whose licence pakrumm operates. Our support team can provide details of the appropriate escalation route on request.