39pkr Privacy Policy — How We Handle Your Data

1. Overview

This Privacy Policy applies to all users of the 39pkr platform, including the website at 39pkr.win, the 39pkr Android app, and any related services operated under the 39pkr brand. It explains how we collect, store, use, and protect personal data provided by or generated about players based in Pakistan and elsewhere.

By creating an account on 39pkr and using the platform, you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data as described here. This policy should be read alongside our Terms and Conditions, which govern the overall use of the platform.

We take privacy seriously. The data we collect serves specific, legitimate purposes related to running a secure online gaming platform — account management, payment processing, fraud prevention, and compliance with applicable regulations. We do not use your data for purposes beyond what is described here without first informing you.

2. Data We Collect

The personal data we collect falls into three broad categories: information you provide directly, information generated by your use of the platform, and information received from third-party service providers.

We do not collect full payment card numbers directly. Card payments are processed by our PCI-compliant payment partners who handle card data according to their own security standards. We receive only a masked reference for your records.

3. How We Use Your Data

Every piece of data we collect has a specific purpose. Here is how your information is used across the platform:

• Account Management: Your registration details are used to create and maintain your 39pkr account, authenticate you when you log in, and personalise your in-platform experience.
• Payment Processing: Payment details are used to process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, and other supported methods. Transaction records are retained for financial and audit purposes.
• Identity Verification (KYC): Identity documents are used to verify your age and identity as part of our Know Your Customer process, required before large withdrawals or when flagged by our risk systems.
• Fraud & Security: Device data, IP addresses, and usage patterns are analysed by automated and manual systems to detect suspicious activity, prevent account takeover, and protect other players on the platform.
• Responsible Gaming: Usage data — including session duration, deposit frequency, and betting patterns — is used to identify players who may be showing signs of problematic gambling behaviour and to trigger responsible gaming prompts or account reviews.
• Platform Improvement: Aggregated, anonymised usage data helps us understand how players navigate the game lobby, which features are most used, and where the platform can be improved.
• Customer Support: Communications data is used to resolve your support queries and maintain a record of our interactions for dispute resolution purposes.
• Legal Compliance: We retain and process certain data as required by applicable anti-money laundering obligations, financial regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: Processing required to provide the services you have registered for — account management, game access, payment processing, and withdrawal handling.
• Legal obligation: Processing required to comply with applicable financial regulations, anti-money laundering requirements, and responses to lawful requests from authorities.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where our interest in operating a secure platform does not override your privacy rights.
• Consent: Where we rely on consent — for example, for optional marketing communications — you may withdraw that consent at any time by contacting support or adjusting your account communication preferences.

5. Who We Share Your Data With

39pkr does not sell your personal data. We share it only with third parties whose involvement is necessary to operate the platform, as described below:

• Payment Processors: JazzCash, Easypaisa, Raast, and banking partners receive the payment details necessary to process your PKR transactions. These partners operate under their own privacy policies and security standards.
• Game Software Providers: When you play a game, your session data (such as player ID, stake amount, and game round ID) is transmitted to the relevant game provider's systems to operate the game. Game providers do not receive your full personal profile.
• Identity Verification Services: Third-party KYC providers may process your identity documents during the verification process. These providers are bound by strict data handling agreements.
• Fraud Prevention & Security: We use third-party fraud detection tools that analyse device and behavioural data. These tools process data solely for the purpose of protecting your account and the platform.
• Legal and Regulatory Authorities: We may disclose data to relevant authorities in response to lawful requests, court orders, or where required to prevent financial crime. We will inform you of such disclosures where we are legally permitted to do so.

All third-party partners with whom we share personal data are required to protect that data and use it only for the purpose for which it was shared.

6. Cookies & Tracking Technologies

39pkr uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and gather analytics data on how the platform is used. Cookies are small text files stored on your device by your browser.

We use the following categories of cookies:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in as you navigate between pages. You cannot opt out of essential cookies without stopping your use of the platform.
• Functional Cookies: Remember your preferences such as language settings and game lobby filter selections.
• Analytics Cookies: Collect anonymised data about how players use the platform — which pages are visited, how long sessions last, and where players exit — to help us improve the experience.
• Security Cookies: Help detect and prevent fraudulent activity by fingerprinting device characteristics across sessions.

You can manage cookie settings in your browser. Note that disabling certain cookies may affect the functionality of the 39pkr platform, including keeping you logged in during a session.

7. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period thereafter as required by our legal and compliance obligations. Specific retention periods vary by data type:

• Account registration and identity data is retained for a minimum of five years after account closure to satisfy anti-money laundering and financial record-keeping requirements.
• Transaction records (deposits and withdrawals in PKR) are retained for a minimum of five years for financial audit and compliance purposes.
• Game session logs are retained for three years, primarily to support dispute resolution.
• Support communications are retained for two years after the resolution of the relevant query.
• Device and session technical logs are retained for 90 days for security monitoring purposes.

After the applicable retention period, data is deleted or anonymised in a manner that makes re-identification impossible. If you request account closure, data subject to legal retention obligations will be retained for the required period but no longer used for marketing or profiling purposes.

8. Security Measures

39pkr implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and our servers.
• Encrypted storage of passwords using industry-standard hashing algorithms. We never store your password in plain text.
• Access controls that limit internal access to personal data to staff who require it for their specific role.
• Automated monitoring systems that flag unusual account activity, login attempts from new locations, or patterns consistent with account takeover.
• Regular security reviews and penetration testing of the platform infrastructure.

9. Your Privacy Rights

As a 39pkr account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected].

We aim to respond to all privacy rights requests within 30 days. Some requests may take longer if complex or where legal exceptions apply — in which case we will explain the reason for the delay.

10. Minors & Under-18 Players

39pkr is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account on the platform, please contact support immediately at [email protected].

Where we discover that an account has been created by a person under 18, all data associated with that account will be deleted, the account closed, and any deposits returned to the original payment method. We may require age verification documentation before processing the refund.

11. Updates to This Privacy Policy

39pkr may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable regulations. When changes are made, the "Last updated" date at the top of this page will be revised.

For material changes — those that significantly affect how your data is used or your privacy rights — we will notify registered account holders via email or an in-platform notification before the changes take effect. For minor updates, continued use of the platform after the revised policy is posted constitutes acceptance of the new terms.

We encourage you to review this Privacy Policy periodically to stay informed about how your data is handled.

12. Contact & Privacy Queries

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or have a concern about how your personal data has been handled, please contact our support team:

We take privacy queries seriously and aim to acknowledge all requests within 48 hours and resolve them within 30 days. For complex requests — such as full data access exports or account deletion with associated legal obligations — we will keep you informed of progress throughout the process.