berpkr ("berpkr", "we", "us", "our") operates the online casino and sports betting platform accessible at https://berpkr.app. For the purposes of this Privacy Policy, berpkr is the data controller — meaning we are the party responsible for deciding how and why your personal data is collected and used.
This Privacy Policy applies to all data collected through the berpkr website, mobile browser experience, customer support channels, and any communications we send to registered players. It applies to all players who register from Pakistan or who access berpkr using a Pakistani mobile number or PKR payment method.
This policy is written in plain English, not legal boilerplate. We want you to actually understand what happens with your data. If anything is unclear, please contact us at support@berpkr.app and we will explain it directly.
berpkr collects personal data in three main ways: data you provide directly, data generated automatically when you use the platform, and data received from third-party service providers involved in operating the platform.
Data you provide directly:
- Full legal name (as it appears on your CNIC or passport)
- Date of birth
- Pakistani mobile number (used as your primary account identifier)
- Email address
- Residential address
- CNIC number or passport number (for KYC verification)
- Copies of identity documents and selfie photographs submitted for KYC
- Preferred payment method details (wallet account numbers, IBAN for bank transfer)
- Any information provided to customer support during a query or complaint
Data collected automatically:
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Pages visited on berpkr, time spent, and navigation patterns
- Login timestamps and session durations
- Games played, bet amounts, and transaction history
- Cookie identifiers and similar tracking technologies (see Section 7)
Data received from third parties:
- Identity verification results from KYC processing partners
- Transaction confirmation data from payment providers (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, card payment gateways)
- Fraud risk scores from transaction monitoring services
berpkr uses your personal data only for specific, legitimate purposes. We do not collect data "just in case" — every data point we hold serves a defined function. The table below summarises our main processing activities:
| Purpose | Data Used | Why It's Necessary |
|---|---|---|
| Account Registration | Name, mobile number, email, date of birth | To create and manage your berpkr account and verify you meet the minimum age requirement |
| Identity Verification (KYC) | CNIC/passport copy, selfie, CNIC number | To verify your identity before processing withdrawals and to comply with anti-money laundering obligations |
| Payment Processing | Payment method details, transaction amounts | To process deposits and withdrawals in PKR via your chosen method |
| Fraud Prevention | IP address, device data, transaction patterns, login history | To detect and prevent fraudulent activity, multi-accounting, and money laundering |
| Customer Support | Account history, communication content | To investigate and resolve queries, complaints, and responsible gaming requests |
| Responsible Gaming | Deposit history, session data, self-exclusion status | To enforce deposit limits, session timers, and self-exclusion as requested by the player |
| Marketing Communications | Mobile number, email, game preferences | To send you relevant promotions and offers — only where you have opted in or not objected |
| Platform Improvement | Anonymised usage data, navigation patterns | To improve berpkr's design, performance, and game selection |
berpkr does not use your personal data for automated decision-making that produces significant legal effects on you, except for fraud detection systems which may temporarily hold withdrawals pending manual review.
berpkr relies on different legal bases to process your personal data depending on the purpose:
- Contractual Necessity: Processing required to deliver the services described in the berpkr Terms and Conditions — account management, payment processing, game access, and customer support.
- Legal Obligation: Processing required to comply with anti-money laundering (AML) obligations, KYC requirements, responsible gaming regulations, and fraud prevention duties.
- Legitimate Interests: Processing that serves berpkr's legitimate interests in preventing fraud, securing the platform, and improving the player experience — where those interests do not override your privacy rights.
- Consent: Marketing communications via SMS and email are sent only where you have provided consent or have not objected when given a clear opportunity to do so. You can withdraw marketing consent at any time by contacting support or clicking the unsubscribe link in any marketing message.
berpkr does not sell your personal data to third parties. Full stop. We share your data only in the following circumstances and only to the extent necessary for each purpose:
- Payment Processors: We share the minimum required transaction data with your chosen payment provider (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT gateway, or card processor) to execute deposits and withdrawals. These providers operate their own privacy policies and are bound by their own data protection obligations.
- KYC Verification Partners: Where automated document verification is used, your identity documents and selfie are shared with a licensed third-party KYC provider. These providers process data solely for identity verification and are contractually prohibited from using it for any other purpose.
- Fraud Detection Services: Anonymised or pseudonymised transaction and behavioural data may be shared with fraud monitoring services to assess risk scores. These services do not receive your full identity details.
- Game Providers: When you launch a third-party game on berpkr, your player session token and stake data are shared with the game provider. Your full identity and payment details are not shared. Game providers receive only what is needed to run the game session.
- Legal and Regulatory Authorities: berpkr may disclose personal data to law enforcement or regulatory bodies where required by law, pursuant to a valid legal process, or where necessary to prevent serious harm.
- Business Transfers: If berpkr is acquired, merged, or undergoes a restructuring, your account data may be transferred to the successor entity as part of that process. You will be notified if such a transfer affects the terms under which your data is held.
We vet all third-party processors to ensure they maintain data protection standards consistent with this policy. We do not engage service providers who cannot demonstrate adequate data security practices.
Payment data receives special treatment at berpkr because of its sensitivity. Here is exactly how it is handled:
- berpkr does not store full card numbers, CVV codes, mobile wallet PINs, or internet banking passwords at any point. Payment credentials are processed directly by PCI-DSS compliant payment gateways and are never written to berpkr's own servers.
- We store your payment method identifier — for example, your Easypaisa wallet number or the last four digits of your card — so that we can associate your account with the correct withdrawal destination. This identifier is stored in encrypted form.
- All communication between berpkr's platform and payment processors is encrypted in transit using TLS 1.2 or higher.
- Transaction records (amounts, timestamps, method, status) are retained as required for accounting, anti-money laundering compliance, and dispute resolution. These records do not contain raw payment credentials.
If you believe your payment details have been compromised in connection with your berpkr account, contact support immediately. berpkr will freeze your account's payment methods pending investigation and work with the relevant payment provider to protect your funds.
berpkr uses cookies and similar technologies to make the platform function correctly and to understand how players use it. Cookies are small data files stored on your device when you visit berpkr. They do not give us access to your device and do not contain payment or identity information.
Types of cookies berpkr uses:
- Strictly Necessary Cookies: These are essential for the platform to work. They maintain your login session, remember your language preference, and ensure transactions are processed securely. You cannot opt out of these without stopping your use of berpkr.
- Functional Cookies: These remember your preferences — such as your preferred game category or display settings — so you don't have to re-select them each visit.
- Analytics Cookies: These help us understand how players navigate berpkr so we can improve the experience. Data collected is aggregated and anonymised — we see patterns, not individual journeys. You can opt out of analytics cookies in your account settings.
- Marketing Cookies: If you have opted in to marketing communications, these cookies help us understand which promotions are relevant to you. You can opt out at any time.
Most mobile browsers allow you to control cookie settings through the browser's privacy or settings menu. Disabling all cookies will affect berpkr's functionality — specifically, you will not be able to stay logged in between sessions.
berpkr retains your personal data for the minimum period necessary to fulfil the purposes it was collected for, subject to any longer retention periods required by law. The following retention periods apply:
- Account data (name, contact details, registration information): Retained for the duration of your account plus 5 years after account closure. This period reflects anti-money laundering record-keeping obligations.
- KYC documents (CNIC/passport copies, selfies): Retained for 5 years after account closure. These records may be required for regulatory compliance or legal proceedings.
- Transaction records (deposits, withdrawals, bet history): Retained for 5 years. Required for accounting, AML compliance, and dispute resolution.
- Customer support records: Retained for 2 years after the query is closed. Required for complaint escalation and quality review.
- Marketing preference records: Retained until you withdraw consent or request deletion, plus 1 year as evidence of consent history.
- Technical and session logs: Retained for 12 months. Used for fraud investigation and platform debugging.
When the applicable retention period expires, berpkr permanently deletes or anonymises the relevant data. Anonymised data — where individual identity cannot be reconstructed — may be retained indefinitely for statistical and analytical purposes.
berpkr applies industry-standard security measures across all systems that hold or process personal data. These include:
- 256-bit SSL/TLS Encryption: All data in transit between your device and berpkr's servers is encrypted. The berpkr website operates exclusively over HTTPS.
- Encryption at Rest: Sensitive data stored in berpkr's databases — including identity document references and payment method identifiers — is encrypted at rest using AES-256.
- Access Controls: Access to personal data within berpkr's internal systems is restricted on a need-to-know basis. Staff members access only the data required for their specific role.
- Two-Factor Authentication: Internal system access for berpkr staff requires multi-factor authentication. We also strongly recommend that players enable 2FA on their berpkr accounts.
- Regular Security Audits: berpkr conducts regular security reviews of its infrastructure and data handling practices. Any vulnerabilities identified are remediated promptly.
- Incident Response: In the event of a data breach that poses a risk to players, berpkr will notify affected players promptly and take immediate remediation steps.
Despite these measures, no online platform can guarantee absolute security. You also have a role to play — keeping your berpkr password strong, enabling 2FA, and contacting support immediately if you suspect unauthorised access to your account.
As a berpkr player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@berpkr.app with the subject line "Data Rights Request" and include your registered mobile number. We will respond within 30 days.
berpkr is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process includes an age declaration, and KYC verification confirms age through identity document review.
If berpkr determines that an account belongs to a person under 18, all data associated with that account will be deleted except for the minimum records required to document the breach and prevent future registration attempts. Any deposited funds will be returned to the original payment source.
If you are a parent or guardian and believe a minor has registered on berpkr, contact us immediately at support@berpkr.app. We will investigate and act within 24 hours.
berpkr may update this Privacy Policy from time to time to reflect changes in the platform, our data practices, or applicable law. When material changes are made, we will notify registered players via their registered mobile number or email address at least 7 days before the updated policy takes effect.
The current version of this policy, with its effective date, is always available at this page. We recommend checking this page periodically. Minor clarifications, formatting corrections, and non-substantive updates may be made without advance notice.
Continued use of berpkr after the effective date of an updated Privacy Policy constitutes your acceptance of the updated terms. If you disagree with a material change, you have the right to close your berpkr account and request deletion of your data before the changes take effect.
For any privacy-related questions, data rights requests, or concerns about how berpkr handles your personal information, please contact us using the following details:
- Email: support@berpkr.app (subject: "Privacy Request" or "Data Rights Request")
- Live Chat: Available 24/7 via the berpkr platform — state "Privacy query" when connecting
- Response time: Data rights requests acknowledged within 3 business days; fully responded to within 30 days
- Languages: English and Urdu
When submitting a data rights request, please include your registered mobile number and a clear description of your request. We may ask for identity verification before processing requests that involve sensitive data access or deletion.