Privacy Policy

This Privacy Policy ("Policy") describes how onepkr ("onepkr", "we", "us", "our"), operator of the website at https://onepkr.cam ("Platform"), collects, processes, stores, shares and protects personal data relating to users of the Platform ("User", "you", "your").

onepkr is an English-language online betting and gaming information platform serving Pakistani users. We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy is intended to give you a clear, plain-language account of our data practices so you can make an informed decision about using the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By accessing or using the Platform, you acknowledge that you have read and understood this Policy.

For the purposes of this Privacy Policy, the following key terms apply:

onepkr collects only the personal data that is necessary to operate the Platform and deliver the services described in these policies. The categories of personal data we may collect include:

We collect personal data through the following methods:

• Direct submission: When you register for an Account, complete a KYC verification flow, submit a support ticket or contact us by email, you provide personal data directly to us.
• Automated technical collection: When you browse the Platform, certain technical and usage data is collected automatically through server logs, cookies and similar technologies. This includes IP address, device identifiers and session activity.
• Third-party sources: Where permitted by Applicable Law and disclosed in this Policy, we may receive personal data from identity verification service providers, fraud detection partners or analytics providers who assist us in operating the Platform.
• KYC verification partners: Where identity or age verification is conducted with the assistance of a third-party KYC provider, that provider may process your identity documents on our behalf. Such partners are bound by data processing agreements and may not use your data for their own purposes.

We do not purchase personal data lists or acquire personal data from data brokers for marketing purposes.

We process personal data for the following defined purposes only:

1. Account management and service delivery — registering your account, enabling login, managing your preferences and delivering the services you have requested.
2. Identity and age verification (KYC) — verifying that you meet minimum age requirements (18+ or higher as applicable) and confirming your identity for AML and fraud prevention purposes.
3. Platform security and fraud prevention — monitoring for unusual activity, preventing multiple account creation, detecting and blocking abuse, and maintaining the integrity of the Platform.
4. Customer support — responding to your enquiries, resolving disputes and maintaining a record of support interactions for quality assurance and training purposes.
5. Legal and regulatory compliance — maintaining records and complying with obligations under Applicable Law, including anti-money laundering requirements, data retention mandates and court orders.
6. Platform analytics and improvement — analysing how users interact with the Platform to identify technical issues, improve content quality and refine user experience.
7. Responsible gambling monitoring — where applicable, processing data to enable self-exclusion requests, apply deposit and loss limit controls, and monitor for indicators of problematic gambling behaviour.
8. Marketing communications — sending relevant updates, promotional information and platform news to users who have explicitly opted in to receive such communications. You may opt out at any time.

We do not process personal data for purposes beyond those listed above without obtaining your prior consent or establishing a separate lawful basis for the new purpose.

Where data protection legislation requires that processing be carried out on a defined lawful basis, onepkr relies on the following bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, KYC, security and support delivery.
• Legitimate interests: Processing for Platform security, fraud prevention, analytics and service improvement, where our legitimate interests do not override your fundamental rights and freedoms.
• Legal obligation: Processing required to comply with a legal obligation, including AML controls, regulatory reporting and responding to lawful authority requests.
• Consent: For optional processing activities such as marketing communications, where we rely on your freely given, specific and informed consent. You may withdraw consent at any time without detriment.

onepkr does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share personal data in the following limited circumstances:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in operating the Platform, including cloud hosting providers, identity verification partners, analytics tools and email delivery services. These providers act as Data Processors and are contractually bound to process personal data only on our instructions and to maintain appropriate security standards.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement, regulatory authorities, courts or other public bodies where we are required to do so by applicable law, court order, or in response to a lawful authority request. We will, where legally permissible, notify affected users of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or part of onepkr's business assets, personal data may be transferred to the acquiring entity as part of that transaction. Affected users will be notified in advance of any such transfer where required by Applicable Law, and the Policy applicable to the transferred data will remain consistent with the terms set out here.

7.4 Payment Provider References

Payment provider names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited for informational context only. onepkr does not transmit personal data to these providers. Any financial data processed in connection with gambling deposits or withdrawals is handled directly between the User and the relevant licensed Operator, not by onepkr.

We do not share personal data with sports organisations, the Pakistan Cricket Board, PSL franchises or any third-party sports body in connection with Platform use.

As an online platform, onepkr may use service providers and infrastructure located outside Pakistan. Personal data may therefore be transferred to, and processed in, countries or territories other than Pakistan ("International Transfer").

Where International Transfers occur, we take steps to ensure that appropriate safeguards are in place to protect your personal data, including:

• Engaging only service providers who maintain recognised data security standards and certifications;
• Implementing contractual clauses that require recipients to protect personal data to a standard consistent with this Policy;
• Ensuring that cloud infrastructure used for data storage applies encryption at rest and in transit;
• Reviewing the data protection frameworks applicable in recipient jurisdictions where required.

By using the Platform, you acknowledge that your personal data may be processed outside Pakistan as described in this section.

onepkr retains personal data only for as long as is necessary for the purposes for which it was collected, as set out in this Policy, and in accordance with any minimum retention periods imposed by Applicable Law.

Our general retention approach is as follows:

• Account data: Retained for the duration of your Account and for a period after Account closure to fulfil legal obligations, resolve disputes and comply with our record-keeping requirements.
• KYC and identity documents: Retained in accordance with applicable AML, fraud prevention and regulatory requirements — typically a minimum of five years from the date of verification or Account closure, whichever is later.
• Support communications: Retained for a period sufficient to resolve any related disputes and for quality assurance purposes, generally not exceeding three years.
• Technical and usage data: Typically retained for up to 24 months, after which it is either aggregated (rendered non-personal) or deleted.
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever is sooner.

When personal data is no longer required, it is securely deleted or anonymised in a manner that ensures it cannot be recovered or reconstructed.

onepkr implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive stored data, including identity documents and account credentials;
• Password hashing using industry-standard cryptographic algorithms — we do not store plain-text passwords;
• Two-factor authentication (2FA) options for account access where supported;
• Access controls limiting internal data access to authorised personnel only, on a need-to-know basis;
• Regular security assessments and infrastructure monitoring to detect and respond to potential vulnerabilities;
• Data breach response procedures, including notification protocols where required by Applicable Law.

While we take reasonable steps to protect your data, no security system is infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by Applicable Law.

onepkr uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit the Platform. They do not contain executable code and cannot access other files on your device.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair Platform functionality. For other cookie types, withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Subject to Applicable Law, you have the following rights in relation to your personal data held by onepkr. To exercise any of these rights, please contact us using the details in Section 16.

We will respond to data rights requests within a reasonable period and in accordance with Applicable Law. We may request proof of identity before processing a request to protect your data from unauthorised access.

The Platform is strictly intended for adults aged 18 years or older — or the higher minimum age required by the relevant operator or license jurisdiction. onepkr does not knowingly collect personal data from individuals under the minimum required age.

If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data, suspend the associated account and, where appropriate, notify relevant parties. If you believe that a minor has provided personal data to onepkr, please contact us immediately at the email address provided in Section 16.

Age verification is a mandatory component of our KYC process. We take underage access to gambling content seriously and actively support age-gating measures at every point in the user journey.

onepkr is focused on serving Pakistani users — including those in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and we recognise that the data protection landscape in Pakistan is evolving. We are committed to respecting the privacy rights of Pakistani users and to operating consistently with applicable Pakistani data protection principles.

CNIC and Passport Data: Where Pakistani users provide CNIC (Computerised National Identity Card) numbers or copies as part of KYC verification, this data is processed solely for the purpose of confirming identity and age. We do not use CNIC data for any other purpose. CNIC data is stored in encrypted form and subject to the retention periods outlined in Section 9.

Payment References: When users mention or interact with content referencing Pakistani payment services — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — onepkr does not transmit personal data to those providers. Those references are informational context only. Any actual payment transactions are processed directly between the user and the relevant licensed operator, entirely outside onepkr's infrastructure.

Legal Context: onepkr is not licensed or regulated by the Government of Pakistan, the PTA, the State Bank of Pakistan or any provincial authority. Where Pakistani data protection legislation imposes specific obligations on data controllers, we are committed to complying with those obligations to the extent applicable. This notice does not constitute legal advice. Users with specific concerns about data rights under Pakistani law are encouraged to seek independent legal guidance.

onepkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements or Platform functionality. When we make material changes, we will update the "Last Updated" date at the top of this page and, where feasible, provide notice to registered users through the Platform or by email.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with a revised Policy, you should discontinue use of the Platform and may request deletion of your personal data as set out in Section 12.

We recommend reviewing this Policy periodically. Previous versions of this Policy may be requested by contacting us at the email address in Section 16.

If you have any questions, concerns or requests relating to this Privacy Policy, your personal data, or the exercise of your data rights, please contact onepkr through the following:

For responsible gambling-related data requests — such as self-exclusion records or harm-related data holds — please also refer to our Responsible Gambling page for additional guidance.