i8pkr Privacy Policy

i8pkr ("we", "us", "our") operates the online gaming platform accessible at i8pkr.pro and is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy has been drafted in accordance with internationally recognised data protection principles and the requirements of our gaming licence obligations.

This Privacy Policy applies to all personal data collected by i8pkr through the Platform — including during account registration, deposits, withdrawals, gameplay, customer support interactions, and general browsing of i8pkr.pro. It applies to all registered players in Pakistan and any other jurisdiction where i8pkr operates.

This Privacy Policy should be read alongside the i8pkr Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

i8pkr collects personal data through several channels: directly from you during registration and account use, automatically through your device and browser, and in limited circumstances from third-party verification providers. The categories of data we collect are set out below.

We do not knowingly collect sensitive categories of personal data (such as health information, religious beliefs, or biometric data) unless explicitly required by our KYC obligations. Where such data is provided voluntarily by you during a support interaction, it will be handled with heightened care and used only for the purpose for which it was provided.

i8pkr uses personal data only for clearly defined, legitimate purposes. We do not use your data for any purpose that is incompatible with those stated at the time of collection. The primary purposes for which we process your personal data are as follows:

• Account Management: To create, verify, and maintain your i8pkr account, including processing your registration details and keeping your account records accurate and up to date.
• Identity & Age Verification (KYC): To confirm that you meet the 21+ age requirement and to verify your identity before processing withdrawal requests, in compliance with our licensing obligations.
• Payment Processing: To facilitate PKR deposits and withdrawals via JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK. Financial data is passed to payment processors solely for the purpose of completing the transaction.
• Gaming Services: To deliver the games and sports betting markets you access on the Platform, record bet outcomes, calculate and credit winnings, and apply bonus terms accurately.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and improve the quality of our support services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, underage gambling, and other prohibited conduct as described in our Terms & Conditions.
• Regulatory Compliance: To fulfil our obligations under our international gaming licence, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: To send you promotional offers, PSL season bonuses, new game announcements, and other marketing content — but only where you have given your explicit consent. You may withdraw consent at any time.
• Platform Improvement: To analyse usage patterns, identify bugs, improve navigation, and enhance the overall player experience across the Platform.

Every processing activity carried out by i8pkr rests on one or more recognised legal bases. The primary legal bases we rely on are:

• Contractual Necessity: Processing that is necessary to deliver the services you have contracted for when registering an i8pkr account — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with the terms of our international gaming licence, anti-money laundering regulations, and lawful requests from regulatory or law enforcement bodies.
• Legitimate Interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, and improve our services — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain optional analytics features, where your explicit, informed consent has been obtained. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

i8pkr does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Sharing of personal data is strictly limited to the following categories of recipients, and only to the extent necessary for each stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK receive transaction-specific financial data solely to process your PKR deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services receive identity documents (e.g. CNIC scans) to complete the verification process required under our licence. These providers are contractually bound to use your data only for verification purposes.
• Gaming Software Providers: Providers of casino games, crash engines, and sports data feeds may receive anonymised or pseudonymised gameplay identifiers to resolve technical disputes or investigate game integrity issues. They do not receive your full personal identity data.
• Fraud Detection & AML Partners: Specialist compliance and anti-money-laundering screening services may process transaction data to identify suspicious patterns, in accordance with our licensing obligations.
• Regulatory & Law Enforcement Authorities: Where required by our gaming licence or applicable law, we may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies. We will notify you of any such disclosure where we are legally permitted to do so.
• Professional Advisors: Legal counsel, auditors, and accountants acting in a professional capacity may access relevant account data on a strictly confidential, need-to-know basis.

All third parties who receive personal data from i8pkr are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions and applicable data protection principles.

i8pkr uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies we use are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery. They cannot be disabled without breaking the Platform.
• Functional Cookies: These remember your settings (such as preferred game categories or last deposit method) to provide a more personalised experience. They are not essential but improve usability.
• Analytics Cookies: These collect anonymised data about how players use the Platform — which pages are visited most, where sessions typically start and end, and which game types are most popular. This data is used to improve the Platform experience.
• Marketing & Retargeting Cookies: Where you have consented, these cookies enable us to show you relevant promotional content. You may withdraw consent at any time via your browser settings or by contacting our support team.

i8pkr does not use third-party advertising networks that track your activity across other websites without your consent. Any analytics tools used operate under strict data processing agreements that prohibit use of your data for the provider's own purposes.

i8pkr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls in place include:

• TLS Encryption in Transit: All data transmitted between your device and the i8pkr Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data fields — including CNIC numbers, financial identifiers, and authentication credentials — are stored in encrypted form within our databases.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis. All access events are logged and subject to periodic review.
• Two-Factor Authentication: Administrative access to production systems requires multi-factor authentication. We strongly encourage all players to enable two-factor authentication on their i8pkr accounts as well.
• Penetration Testing: Our Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: i8pkr maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authority within the timeframe required by applicable law.

i8pkr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our gaming licence and applicable legal obligations. Our general retention schedule is as follows:

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate statistical purposes.

Note that where your account is subject to an active investigation, fraud review, regulatory enquiry, or legal proceeding, the relevant data will be retained beyond the standard schedule until the matter is fully resolved.

As an i8pkr player, you hold a number of rights in relation to your personal data. These rights are set out below, along with guidance on how to exercise them:

• Right of Access: You may request a copy of the personal data i8pkr holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For most data fields, you can update your information directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. This right applies where the data is no longer necessary for its original purpose and we are not subject to a legal obligation to retain it. Note that KYC and financial records must be retained for the periods described in Section 8 above, regardless of a deletion request.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of data we hold, while we verify your rectification request.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests at any time. You also have an unconditional right to object to processing for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

i8pkr operates a strict 21+ policy. The Platform is not intended for and must not be used by any person under 21 years of age. We do not knowingly collect personal data from individuals under the age of 21.

As part of our commitment to preventing underage gambling, all accounts are subject to KYC age verification. Where i8pkr discovers or reasonably suspects that an account has been registered by or on behalf of an individual under the age of 21, the account will be immediately suspended, all funds will be withheld pending investigation, and the personal data of the minor will be securely deleted as soon as practicable after the investigation concludes.

For information on responsible gaming tools — including self-exclusion and deposit limits — please visit our Responsible Gaming page.

i8pkr reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered players by email to the address on file and/or via an in-platform notification. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform following notification of any changes constitutes your acknowledgement of the updated Policy.

We take all privacy enquiries seriously. Where you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or gaming regulator under whose jurisdiction i8pkr's licence is held.