butpkr Privacy Policy

butpkr is an internationally licensed online casino and sports betting platform accessible at butpkr.net, operated by its licensed holding entity under an international online gaming licence. butpkr serves English-speaking players across Pakistan, offering cricket betting, live dealer casino games, slots, fishing games, and related entertainment products.

For the purposes of this Privacy Policy, butpkr acts as the data controller in respect of all personal data collected from players who register and use the platform. This means butpkr determines the purposes for which your personal data is processed and the manner in which it is processed.

This Privacy Policy applies exclusively to personal data processed by butpkr in connection with the butpkr.net platform. It does not govern the data practices of third-party game studios, payment providers, or other external services whose privacy policies govern their own data handling independently.

butpkr collects personal data from players at various stages of account registration, verification, and platform use. The categories of personal data we collect are detailed in the table below:

butpkr does not collect sensitive personal data such as biometric data, health data, religious or political beliefs, or racial or ethnic origin unless explicitly required for a specific regulatory compliance purpose and with your prior consent.

Where you choose not to provide data that is marked as mandatory during registration, butpkr may be unable to open or maintain your account or process withdrawal requests.

butpkr uses the personal data collected from players for the following purposes:

• Account Management: To register your account, verify your identity, and maintain accurate account records on the butpkr platform.
• KYC & Age Verification: To confirm that you are at least 21 years of age and that your identity matches the payment methods associated with your account, as required by our licensing obligations.
• Payment Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other supported Pakistani payment methods, and to maintain a complete transaction history for your account.
• Platform Security: To detect, investigate, and prevent fraudulent activity, multi-account abuse, bonus abuse, money laundering, and other activities prohibited under butpkr's Terms and Conditions.
• Responsible Gaming: To monitor player behaviour for signs of problem gambling, to enforce self-exclusion elections, and to comply with our duty of care obligations under our gaming licence.
• Customer Support: To respond to your queries, complaints, and formal disputes, and to maintain a record of all communications for quality assurance purposes.
• Legal & Regulatory Compliance: To comply with applicable anti-money-laundering (AML) regulations, tax reporting requirements, and any obligations imposed by butpkr's international gaming licence authority.
• Platform Improvement: To analyse aggregate, anonymised behavioural data in order to improve platform performance, game offerings, and user experience. This analysis does not identify you personally.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have opted in to marketing communications. You may opt out at any time by contacting support or updating your account preferences.

butpkr processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to open your account, accept deposits, process withdrawals, and provide the core platform services you have signed up for. Without this processing, butpkr cannot perform its contractual obligations to you.
• Legal Obligation: Processing required to comply with AML regulations, KYC obligations, licensing conditions, and any other applicable laws or regulatory requirements. butpkr is legally required to conduct this processing regardless of player consent.
• Legitimate Interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where butpkr's legitimate interests in maintaining a safe and compliant platform are not overridden by your data protection rights.
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have given clear, informed, and freely withdrawable consent. You may withdraw consent for marketing at any time without affecting your ability to use the butpkr platform.

butpkr uses cookies and similar tracking technologies on the butpkr.net platform to ensure core functionality, maintain session security, and where you have consented, to improve platform performance through analytics.

butpkr does not use third-party advertising cookies or share cookie data with external advertising networks. You may manage your cookie preferences at any time via the cookie settings panel available on the butpkr platform, or by adjusting your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly.

butpkr shares personal data with third parties only to the extent necessary to operate the platform, comply with legal obligations, or protect platform integrity. The categories of third parties who may receive your personal data are:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and any other payment service providers used to process your deposits and withdrawals. These providers receive only the financial data necessary to execute your transaction.
• KYC & Identity Verification Providers: Third-party identity verification services that assist butpkr in meeting its KYC and AML obligations. These providers are contractually bound to process your data for verification purposes only.
• Game Studio Providers: Licensed third-party game studios whose games are integrated into the butpkr casino lobby. These providers may receive anonymised session data for game performance monitoring purposes.
• IT & Platform Infrastructure Providers: Cloud hosting, data centre, and cybersecurity service providers who process data on butpkr's behalf under strict data processing agreements.
• Regulatory Authorities: butpkr's international licensing authority and, where required by applicable law, Pakistani regulatory bodies, law enforcement agencies, or courts. Disclosure to these parties is made only where legally required.

butpkr retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any minimum retention periods required by our licensing obligations or applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with butpkr's data destruction procedures. Anonymised, aggregated data that can no longer identify you may be retained indefinitely for statistical analysis.

butpkr implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS 1.3 Encryption in Transit: All data transmitted between your browser or device and the butpkr platform is encrypted using TLS 1.3, the current industry standard for secure data transmission.
• AES-256 Encryption at Rest: Personal data and financial records stored on butpkr servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to butpkr personnel who require it for legitimate operational purposes. All access is governed by role-based permissions and is logged for audit purposes.
• Two-Factor Authentication: butpkr offers 2FA for player accounts and mandates it for all internal staff access to systems holding personal data.
• Regular Security Audits: The butpkr platform and its data infrastructure undergo regular independent security assessments and penetration testing.
• Incident Response: butpkr maintains a formal data breach incident response plan. In the event of a breach affecting your personal data, you will be notified within 72 hours via your registered email address.

As a player on the butpkr platform, you hold the following rights in respect of your personal data. butpkr will respond to all verified requests within 30 calendar days of receipt:

To exercise any of the above rights, contact the butpkr Data Protection team at [email protected] with the subject line "Data Rights Request". butpkr may require you to verify your identity before processing any request to protect against unauthorised access to account data.

The butpkr platform is strictly restricted to individuals aged 21 and above. butpkr does not knowingly collect or process personal data from individuals under the age of 21 under any circumstances.

If butpkr becomes aware that personal data has been collected from a player who is under the age of 21, that account will be immediately suspended, all data collected will be securely deleted, and any deposits made will be returned subject to identity verification of the individual. Winnings accumulated during a period of underage access will be forfeited.

If you are a parent or guardian and believe that a minor in your care has created a butpkr account, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

butpkr's platform infrastructure and some of its third-party service providers may be located outside of Pakistan. Where your personal data is transferred to, stored in, or processed in a country outside Pakistan, butpkr ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Privacy Policy.

These safeguards include:

• Contractual data processing agreements with all third-party processors that include standard data protection clauses.
• Transfer only to third parties operating in jurisdictions with recognised data protection frameworks, or where equivalent contractual protections are in place.
• Regular review of cross-border data transfer arrangements to ensure continued adequacy of protections.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us at [email protected].

but pkr reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. When material changes are made, butpkr will notify registered players via their registered email address at least 14 days before the updated policy takes effect.

The effective date at the top of this Privacy Policy will be updated each time a new version is published. Continued use of the butpkr platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Privacy Policy, you should cease using the platform and contact us to close your account.

All previous versions of this Privacy Policy are archived and available on request by contacting [email protected].

For all privacy-related matters, including data access requests, data deletion requests, marketing opt-outs, and complaints regarding butpkr's data handling practices, please contact the butpkr Data Protection team using the details below:

When submitting a data rights request, please include your registered email address, your butpkr username, and a clear description of the request. butpkr may ask you to verify your identity before processing the request to ensure your data is not disclosed to an unauthorised third party.

butpkr is committed to resolving all privacy concerns directly and promptly. If you are not satisfied with our response, you retain the right to escalate your complaint to the supervisory authority in the jurisdiction of our licensing body.