Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how vnpkr ("the Platform", "we", "us", "our"), accessible at https://vnpkr.cam, collects, uses, stores, discloses and protects personal data relating to users ("you", "your") of the Platform. It also describes the rights available to you regarding your personal data and how to exercise them.

By accessing or using the vnpkr Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your information as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Policy applies to all personal data collected through the Platform, including data provided during registration, during account use, during support interactions and through automated technical means such as cookies and device identifiers.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, date of birth, device identifiers and financial account details.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, vnpkr.
• "Data Processor" means a third party that processes personal data on behalf of the Data Controller under a data processing agreement.
• "User" means any individual who accesses, registers on or interacts with the Platform.
• "Cookies" means small text files stored on your device by your browser when you visit the Platform.
• "KYC" means Know Your Customer — the identity verification process used to confirm user identities in compliance with AML requirements.
• "AML" means Anti-Money Laundering — the regulatory framework requiring platforms to identify, prevent and report financial crime.

3. Data Controller

For the purposes of applicable data protection legislation, vnpkr is the Data Controller in respect of personal data collected through the Platform. As Data Controller, vnpkr is responsible for ensuring that personal data is processed lawfully, fairly and transparently, collected for specified and legitimate purposes, limited to what is necessary, accurate, securely stored and not retained for longer than necessary.

To contact vnpkr regarding data protection matters, please use the contact details provided in Section 15 of this Policy.

4. Data We Collect

4.1 Data You Provide Directly

We collect personal data that you provide directly to us, including but not limited to:

• Full legal name, date of birth, gender and nationality as provided during registration.
• Email address, contact number and residential address.
• Identity documents submitted for KYC verification, such as CNIC (Computerised National Identity Card) or passport.
• Proof of address documentation, where requested.
• Payment method details and transaction history relevant to deposits and withdrawals.
• Communications with our support team, including Live Chat transcripts and email correspondence.
• Responsible gambling preferences, self-exclusion requests and account limit settings.

4.2 Data Collected Automatically

When you access the Platform, certain technical and usage data is collected automatically, including:

• IP address, browser type and version, operating system and device type.
• Pages visited, time spent on each page, referring URLs and navigation patterns.
• Session duration, login timestamps and feature usage data.
• Cookie identifiers and related tracking data — see Section 9 for full details.

4.3 Data from Third Parties

We may receive personal data from third-party sources including identity verification service providers, fraud prevention databases and payment processors, where necessary to fulfil our legal obligations or verify your identity for KYC/AML compliance purposes.

5. Legal Basis for Processing

We process your personal data only where a lawful legal basis exists. The primary legal bases we rely on are as follows:

6. Data Processing

6.1 Account & Service Management

We process personal data to create and maintain your user account, verify your identity, process deposits and withdrawals, administer bonus and promotion eligibility, and deliver the features and content of the Platform. This processing is necessary for the performance of our contract with you and cannot be restricted without impacting your ability to use the Platform.

6.2 KYC & AML Compliance

We are required by applicable regulations to verify user identities and monitor transactions for the purposes of anti-money laundering and counter-terrorism financing compliance. This processing is based on legal obligation and cannot be waived. Identity documents submitted for KYC purposes are retained for the period required under applicable AML legislation.

6.3 Security & Fraud Prevention

We process technical usage data, login records and transaction patterns to identify and prevent fraudulent activity, unauthorised account access and abuse of Platform services. This processing is based on our legitimate interests in maintaining a secure and trustworthy platform for all users.

6.4 Responsible Gambling

Data related to your use of responsible gambling tools — including deposit limits, session controls and self-exclusion requests — is processed to administer those tools effectively and to fulfil our obligations to promote responsible play. Self-exclusion data may be retained beyond account closure to prevent re-registration during an active exclusion period.

6.5 Communications

Where you have provided consent, we may use your email address or other contact details to send promotional communications, product updates or relevant offers. You may withdraw consent to marketing communications at any time by contacting our support team or following the unsubscribe instructions provided in any communication.

7. Data Sharing & Disclosure

vnpkr does not sell, rent or trade your personal data to third parties. We share personal data only in the following limited circumstances:

• Identity Verification Providers: Third-party KYC/AML service providers who verify your identity documents on our behalf, operating under data processing agreements that restrict their use of your data.
• Payment Processors: Regulated payment processing partners who handle transaction data as necessary to execute deposits and withdrawals. Payment provider names referenced contextually on vnpkr — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — do not imply that these providers process your data on behalf of vnpkr. Actual transaction processing partners depend on the operator's active integrations.
• Regulatory Authorities: We may disclose personal data to competent regulatory or law enforcement authorities where required to do so by applicable law, legal process or regulatory obligation.
• Fraud Prevention & Security: We may share data with fraud prevention agencies or security partners where there is a reasonable basis to believe fraudulent activity or a security threat is present.
• Business Transfers: In the event of a merger, acquisition or asset sale, your personal data may be transferred as part of that transaction. We will notify users of any such transfer and the resulting changes to this Policy in advance where practicable.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. Our general retention principles are as follows:

• Account Data: Retained for the duration of your account's active life and for a period after closure as required by applicable AML and regulatory obligations — typically five years following account closure.
• KYC Documentation: Retained for a minimum of five years following the end of the business relationship, as generally required by AML legislation. Specific retention periods may be longer depending on applicable jurisdiction.
• Transaction Records: Retained for a minimum of five years to satisfy financial record-keeping obligations.
• Support Communications: Retained for three years unless a longer period is required for ongoing dispute resolution.
• Self-Exclusion Records: Retained for the duration of the self-exclusion and for a reasonable period thereafter to prevent re-registration in breach of the exclusion agreement.
• Marketing Preferences: Retained until consent is withdrawn, after which the preference record itself is retained to ensure future marketing is suppressed.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

9. Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device, remember your preferences, maintain session continuity and collect usage analytics. We also use similar technologies including local storage, session storage and pixel tags.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. They enable core features such as session management and security. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Collect anonymised information about how users interact with the Platform — such as pages visited and time spent — to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences and settings, such as language preferences and account display options.
• Marketing Cookies: Used where you have provided consent to deliver relevant promotional content. These may track your browsing activity across sessions.

9.3 Managing Cookies

You may manage and delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to use certain features of the Platform. For analytics and marketing cookies, you may opt out via your browser's cookie management settings or through available consent mechanisms on the Platform.

10. Data Security

vnpkr implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security measures include:

• HTTPS/SSL encryption for all data transmitted between your device and our servers.
• Access controls limiting internal access to personal data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring.
• Pseudonymisation and anonymisation of data where appropriate.
• Incident response procedures to identify, contain and notify in the event of a data breach.

Whilst we maintain robust security practices, no transmission of data over the internet or storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability or incident relating to your vnpkr account, please contact our support team immediately via Live Chat or email.

11. International Data Transfers

As an online platform serving users across multiple jurisdictions, personal data processed by vnpkr may be transferred to and stored in countries outside Pakistan. In particular, data may be processed by service providers located in countries whose data protection laws differ from those of Pakistan.

Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — such as standard contractual clauses, data processing agreements or equivalent mechanisms — to ensure that your data receives a standard of protection consistent with applicable requirements.

By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section.

12. Minors

The vnpkr Platform is strictly intended for adults aged 18 years and above, or the higher minimum age required by the applicable operator or license jurisdiction. We do not knowingly collect, use or retain personal data from individuals under the minimum age requirement.

If we become aware that personal data has been collected from a minor without verifiable parental consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor in your care has provided personal data to vnpkr, please contact our support team at once.

13. Exercising Your Data Rights

To exercise any of the data rights described in this Policy — including access, rectification, erasure, restriction, portability or withdrawal of consent — please contact our support team using the details in Section 15. We may require you to verify your identity before processing any data rights request.

We will respond to all verifiable data rights requests within a reasonable period. Where a request cannot be fully fulfilled — for example, because retention of certain data is required by applicable law — we will explain the reason clearly.

Please note that exercising certain rights — such as erasure of account data — may affect your ability to continue using the Platform and may result in account closure.

14. Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements or Platform features. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

We encourage you to review this Policy periodically. Where changes are significant, we may notify registered users via email or in-platform notification. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

15. Contact Us

If you have questions, concerns or requests relating to this Privacy Policy or our data-handling practices, please contact the vnpkr data protection team through the following channels:

• Email: [email protected] (plain text only — not a clickable link. Do not include sensitive personal data in email communications.)
• Live Chat: Available 24/7 through the Platform's support widget — recommended for account-specific or urgent queries.
• Help Centre: Accessible via your registered account dashboard for self-service guidance on data and privacy topics.

We aim to acknowledge all data-related enquiries promptly and to resolve them within a reasonable period in accordance with applicable obligations.