1stpkr Privacy
Policy

1 Who We Are

1stpkr is an online casino and sports betting platform operating at 1stpkr.org, serving players primarily across Pakistan including major cities such as Karachi, Lahore, Islamabad and Faisalabad. The platform is operated under international gaming license oversight. For all privacy-related matters, 1stpkr acts as the data controller — meaning we determine the purposes and means by which your personal data is processed.

References to "1stpkr", "we", "us" or "our" throughout this Privacy Policy refer to the operator of the 1stpkr platform. References to "you" or "your" refer to any individual who registers an account on, accesses, or otherwise interacts with the platform.

2 Personal Data We Collect

We collect personal data from you through several means — directly when you provide it to us, automatically as you interact with our platform, and from third-party verification services where required. The categories of data we collect include the following:

2.1 Registration Data

When you create a 1stpkr account, we collect your full name, date of birth, email address, mobile phone number, residential address and preferred currency (PKR). This data is mandatory — without it, we cannot create or maintain a valid account for you.

2.2 Identity Verification (KYC) Data

To comply with our gaming license Know Your Customer obligations and anti-money laundering requirements, we may collect copies of government-issued identity documents such as your CNIC (Computerised National Identity Card), passport, or utility bills. This data is collected and processed solely for identity and age verification purposes.

2.3 Financial Data

We collect information about your deposits and withdrawals, including the payment methods you use (such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay or USDT TRC20), transaction amounts in PKR, and transaction timestamps. We do not store full payment card numbers or mobile banking credentials — payment transactions are processed through secure third-party payment gateways.

2.4 Activity and Betting Data

We collect records of your betting and gaming activity on the platform, including bet placement history, game session data, win/loss records, bonus usage and account balance history. This data is required for account administration, dispute resolution and responsible gaming monitoring.

2.5 Technical and Device Data

2.6 Communications Data

If you contact our customer support team by email or live chat, we retain records of that correspondence including the content of messages, timestamps and the resolution of any issue raised. This is used for service quality assurance and dispute resolution purposes.

3 Legal Basis for Processing

1stpkr processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, financial data and activity data is necessary to provide you with the services you have signed up for under the 1stpkr Terms & Conditions.
• Legal obligation: We are required to collect and retain certain categories of data — particularly KYC and financial records — to comply with our gaming license conditions and applicable anti-money laundering regulations.
• Legitimate interests: We process technical and device data for fraud prevention, platform security and responsible gaming monitoring, where these interests are not overridden by your fundamental privacy rights.
• Consent: Where we send you optional marketing communications, we do so only where you have given your explicit consent at the time of registration or subsequently. You may withdraw this consent at any time.

4 How We Use Your Personal Data

The personal data collected by 1stpkr is used for the following clearly defined purposes:

• Creating and maintaining your 1stpkr account and providing you with access to the platform's services.
• Processing PKR deposits and withdrawals through JazzCash, EasyPaisa and other supported payment methods.
• Verifying your identity and age in accordance with KYC requirements under our gaming license.
• Detecting and preventing fraud, account sharing, bonus abuse and other prohibited conduct described in the Terms & Conditions.
• Monitoring your gaming activity to identify problem gambling indicators and facilitate responsible gaming interventions where appropriate.
• Responding to customer support enquiries and resolving disputes.
• Sending you transactional notifications, including deposit confirmations, withdrawal status updates and account security alerts — these are not marketing messages and cannot be opted out of while your account remains active.
• Complying with any regulatory or law enforcement request made under applicable law.
• Improving platform performance, user experience and product offerings using aggregated and anonymised analytics data.

5 Sharing Your Personal Data

1stpkr does not sell your personal data. We share data only in the following limited and necessary circumstances:

5.1 Payment Processors

To process PKR transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay and USDT TRC20, we share relevant transaction data with those payment service providers. Each provider processes your data under their own privacy terms and applicable financial regulations.

5.2 Identity Verification Partners

Where KYC verification is required, your identity documents may be shared with accredited third-party identity verification service providers. These providers are bound by confidentiality agreements and may not use your data for any purpose other than the verification service they provide to 1stpkr.

5.3 Regulatory and Licensing Authorities

1stpkr may be required to share account holder data with its gaming license authority, relevant financial intelligence units, or law enforcement agencies in response to legally valid requests. We will notify you of such disclosures where we are legally permitted to do so.

5.4 Technology Service Providers

We use third-party technology providers for platform hosting, security monitoring, live casino game delivery, and customer support tooling. These providers act as data processors under binding agreements with 1stpkr and may only process your data as directed by us.

5.5 Business Transfers

In the event of a merger, acquisition or sale of the 1stpkr business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to close your account if you do not wish your data to be transferred.

6 Cookies & Tracking Technologies

1stpkr uses cookies and similar tracking technologies on its platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session authentication tokens and security cookies. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings and responsible gaming reminder intervals. Disabling these may affect your user experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the platform, which we use to improve usability. No personally identifiable data is included in analytics reports.
• Security Cookies: Used to detect fraudulent login attempts, identify suspicious device patterns and support our responsible gaming monitoring systems.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 1stpkr account.

7 Data Retention

1stpkr retains your personal data for as long as your account remains active and for a period thereafter as required by our gaming license obligations and applicable anti-money laundering regulations. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your account membership plus a minimum of 5 years following account closure.
• KYC and identity documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years in accordance with AML record-keeping obligations.
• Betting and gaming activity logs: Retained for a minimum of 3 years following the date of each recorded activity event.
• Customer support communications: Retained for 2 years following the resolution of the relevant support interaction.

Once the applicable retention period has expired and no legal basis remains for continued processing, your personal data will be securely deleted or irreversibly anonymised.

8 Security Measures

1stpkr implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the 1stpkr platform.
• Encryption of sensitive personal data stored in our databases, including identity document data and financial records.
• Strict access controls limiting internal staff access to personal data on a need-to-know basis, with all access logged and auditable.
• Regular security vulnerability assessments and penetration testing conducted by independent security auditors.
• Two-factor authentication available to all account holders for their own account security.
• Continuous automated monitoring for unusual login patterns, suspicious transactions and potential account takeover indicators.

While we take all reasonable precautions, no security system is entirely impenetrable. If you have reason to believe your 1stpkr account has been compromised, please contact our support team immediately using the contact details in the footer of this page.

9 Your Data Protection Rights

Subject to applicable law and our regulatory retention obligations, you have the following rights in relation to the personal data 1stpkr holds about you:

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this within 30 days of a verified request.
• Right of Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected. Certain corrections, such as name or date of birth changes, will require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Data that we are required to retain under gaming license or AML regulations cannot be deleted before the applicable retention period expires.
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to our use of it.
• Right to Data Portability: You may request a structured, machine-readable copy of the personal data you have provided to us, where processing is based on your consent or on a contractual necessity basis.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, please submit a written request to the support email address displayed in the footer of this page. Include your account username and a description of the right you wish to exercise. We may require identity verification before processing your request.

10 Children's Privacy

The 1stpkr platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that personal data belonging to a person under 21 has been collected — whether due to a misrepresentation at registration or otherwise — we will immediately close the associated account, delete the data to the extent not required for regulatory purposes, and return any deposit funds to the originating payment method.

If you believe a minor may have registered an account on our platform using false age information, please notify our support team immediately.

11 International Data Transfers

1stpkr's platform infrastructure involves data processing in multiple jurisdictions as part of its international gaming license operation. Where your personal data is transferred outside of Pakistan, we ensure that appropriate safeguards are in place to maintain the same standard of data protection that applies domestically. These safeguards include contractual obligations imposed on all data processors operating in other jurisdictions, requiring them to process your data only as instructed by 1stpkr and to maintain equivalent security standards.

Payment data shared with PKR payment providers such as JazzCash and EasyPaisa is processed domestically within Pakistan under those providers' own regulatory frameworks.

12 Data Breach Procedures

In the event of a personal data breach that poses a risk to the rights and freedoms of affected account holders, 1stpkr will take the following steps:

• Contain the breach and assess its scope and impact as quickly as possible.
• Notify the relevant gaming license supervisory authority within the timeframe required under our license conditions.
• Notify affected account holders without undue delay where the breach is likely to result in a high risk to their personal rights or financial interests. Notification will be sent to the email address on your account and will describe the nature of the breach, the categories of data affected, and the steps we have taken in response.
• Maintain an internal record of all data breaches regardless of whether external notification is required, in accordance with our license obligations.

13 Marketing Communications

1stpkr may send you promotional communications about bonuses, new game releases, PSL cricket betting markets and other platform features — but only where you have given your explicit consent at the time of registration or subsequently opted in to receive such communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in any marketing email, or by updating your communication preferences in your 1stpkr account settings. Unsubscribing from marketing does not affect the delivery of transactional notifications, which are sent as part of the essential account management service.

We do not share your contact information with third-party marketers. All marketing communications from 1stpkr are sent directly by us from our own systems.

14 Changes to This Privacy Policy

1stpkr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements or platform features. When material changes are made, we will notify all active account holders by email or in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will be revised each time a new version of the policy is published. Your continued use of the platform following the effective date of any update constitutes acceptance of the revised policy. If you do not agree with the changes, you should close your account before the effective date.

We encourage you to review this Privacy Policy periodically to remain informed about how 1stpkr handles your personal data.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or how 1stpkr handles your personal data, please contact our support team. All privacy-related enquiries are handled by staff operating on Pakistan Standard Time (UTC+5), with extended evening coverage.

You may reach us at the email address displayed in the footer of this page. Please use the subject line "Privacy Enquiry" and include your account username to ensure your request is directed to the appropriate team promptly. We aim to acknowledge all privacy enquiries within 5 business days and provide a substantive response within 30 days.