onepkr Privacy Policy

onepkr is an online sports betting and casino platform accessible at onepkr.org, operated under international gaming regulations and designed specifically for the Pakistani market. For the purposes of this Privacy Policy, onepkr acts as the data controller in respect of all personal data collected from registered Players and visitors to the Platform.

As data controller, onepkr is responsible for determining the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, you may contact the onepkr Data Protection team through the channels listed in Section 14 of this policy.

onepkr is committed to handling all personal data in accordance with internationally recognised data protection principles, including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

onepkr collects personal data from you in the following ways: data you provide directly, data collected automatically during your use of the Platform, and data received from third-party service providers. The specific categories of data collected are as follows:

Registration Data

• Full legal name (as per your CNIC or passport)
• Date of birth (used to verify the 21+ age requirement)
• Pakistani mobile number (used as your primary account identifier)
• Email address (optional, used for account recovery and promotional communications where opted in)
• Preferred username

KYC & Identity Verification Data

• Copy of your Computerised National Identity Card (CNIC), passport, or driver's licence
• Selfie or live photo taken during the identity verification process
• Proof of address documents (utility bills, bank statements) where requested
• Source-of-funds documentation for high-value accounts where required by compliance obligations

Financial Transaction Data

• JazzCash or EasyPaisa mobile wallet identifiers associated with deposits and withdrawals
• HBL, UBL, Meezan Bank, SadaPay, or Raast account references used for bank transfers
• USDT TRC20 wallet addresses for cryptocurrency transactions
• Deposit amounts, withdrawal requests, transaction timestamps, and reference IDs

Gaming & Activity Data

• Bet history, wager amounts, game selections, and settlement outcomes
• Session start and end times, session duration, and pages visited within the Platform
• Bonus activations, wagering progress, and promotion participation records

Technical & Device Data

• IP address and approximate geolocation (city level)
• Device type, operating system, and browser version
• Unique device identifiers where accessible
• Cookie identifiers and session tokens (see Section 5)

Communication Data

• Live chat transcripts and support ticket content
• Emails sent to or received from the onepkr support team
• Feedback forms and survey responses where submitted voluntarily

onepkr uses the personal data collected from Players for the following purposes:

onepkr will never use your personal data for purposes beyond those listed above without first obtaining your explicit consent or as otherwise required by applicable law.

onepkr processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

Contractual Necessity: The majority of data processing by onepkr is necessary for the performance of the contract between onepkr and the Player — specifically, to operate your account, process your transactions, and deliver the gaming and sportsbook services you have registered for.

Legal Obligation: onepkr is subject to international anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and gaming licence conditions that legally require us to collect, verify, and retain certain categories of personal and financial data. Processing for these purposes is mandatory and cannot be refused.

Legitimate Interests: onepkr processes certain technical and activity data on the basis of its legitimate interests in preventing fraud, securing the Platform, improving the quality of its services, and detecting problem gambling patterns to fulfil its responsible gaming obligations. In each case, onepkr has assessed that these interests do not override the rights and freedoms of Players.

Consent: Where onepkr sends you promotional communications about PSL betting offers, casino bonuses, or new Platform features via SMS or email, this is done on the basis of your explicit consent. You may withdraw this consent at any time by contacting onepkr support or using the opt-out mechanism included in each message.

onepkr uses cookies and similar tracking technologies to operate the Platform effectively, remember your session, and analyse how the Platform is used. A cookie is a small text file stored on your device when you visit a website.

Essential Cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your language preference, and ensure the security of your account. These cookies cannot be disabled without impairing your ability to use the Platform.

Analytics Cookies: onepkr uses anonymised analytics data to understand which pages are most visited, how Players navigate the Platform, and where technical errors occur. This data is aggregated and cannot be used to identify individual Players.

Preference Cookies: These cookies remember choices you have made — such as your preferred sports markets or display settings — so that your experience is consistent across sessions.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging into your onepkr account. onepkr does not use third-party advertising cookies or tracking pixels for behavioural advertising purposes.

onepkr may share your personal data with the following categories of third parties in the circumstances described:

Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and Raast receive the minimum financial data necessary to process your deposit or withdrawal transactions. All payment partners are contractually bound to maintain appropriate security standards and may not use your data for any other purpose.

Identity Verification Providers: onepkr engages licensed KYC and AML service providers to conduct automated identity checks against your submitted CNIC or passport data. These providers operate under strict data processing agreements and store verification records only for the period required by compliance obligations.

Game Content Providers: The online casino games and slot titles available on the onepkr platform are supplied by licensed third-party game studios. These providers may receive anonymised session data for game integrity and fairness auditing purposes. They do not receive your name, CNIC, or financial information.

Regulatory & Law Enforcement Authorities: onepkr will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where required to do so by a valid legal order, warrant, or regulatory direction. onepkr will, where legally permissible, notify the affected Player of such a disclosure.

Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of the onepkr business, personal data held by onepkr may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to how their data will be processed.

onepkr operates under an international gaming licence and may process or store certain categories of personal data on servers located outside Pakistan. Where personal data is transferred internationally, onepkr ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy.

Such safeguards include: contractual data processing agreements with all third-party processors incorporating internationally recognised standard contractual clauses; selection of data processors operating in jurisdictions with adequate data protection frameworks; and ongoing review of the security practices of all international data processors engaged by onepkr.

If you wish to obtain further information about the specific safeguards applied to any particular international transfer of your personal data, please contact the onepkr Data Protection team as described in Section 14.

onepkr retains personal data for different periods depending on the category of data and the purpose for which it was collected:

Account and Registration Data: Retained for the duration of your active onepkr account plus a period of five years following account closure, to satisfy anti-money laundering record-keeping obligations.

KYC Documents: Identity verification documents (CNIC copies, selfies, proof of address) are retained for a minimum of five years following account closure as required by applicable AML and gaming licence regulations. After this period, documents are securely destroyed.

Financial Transaction Records: All deposit and withdrawal transaction records are retained for a minimum of seven years to comply with financial record-keeping requirements under international gaming regulations.

Gaming Activity Data: Bet history and session records are retained for five years following the date of each transaction, after which they are anonymised or deleted.

Communication Records: Live chat transcripts and support emails are retained for two years from the date of the communication, after which they are purged from onepkr's systems.

Once the applicable retention period has expired, onepkr will securely delete or irreversibly anonymise your personal data. You may request early deletion of certain categories of data (see Section 9), subject to any overriding legal retention obligations that prevent earlier deletion.

As a registered Player on the onepkr platform, you hold the following rights in respect of the personal data onepkr holds about you. To exercise any of these rights, please contact the onepkr Data Protection team via live chat or the email address listed in Section 14. onepkr will respond to all rights requests within 30 calendar days of receipt.

Right of Access: You have the right to request a copy of all personal data onepkr holds about you, together with information about how it is being processed. onepkr will provide this information in a structured, readable format.

Right to Rectification: If any personal data onepkr holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

Right to Erasure: You have the right to request that onepkr delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and no overriding legal basis for retention exists. Note that certain financial and KYC data cannot be deleted before the minimum regulatory retention periods have elapsed.

Right to Restrict Processing: You may request that onepkr restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.

Right to Data Portability: You have the right to receive the personal data you have provided to onepkr in a structured, commonly used, machine-readable format, and to request that it be transferred directly to another controller where technically feasible.

Right to Withdraw Consent: Where onepkr processes your data on the basis of your consent — primarily for promotional communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Right to Object: You have the right to object to the processing of your personal data where onepkr relies on legitimate interests as the legal basis, unless onepkr can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

The onepkr platform is an adults-only gambling service accessible only to individuals who are 21 years of age or older. onepkr does not knowingly collect, store, or process personal data from any person under the age of 21. Age verification is a mandatory step in the registration process, and additional KYC checks may be triggered at any time where there is reasonable doubt about a Player's age.

If onepkr becomes aware that personal data has been collected from a person who is under 21 years of age, that account will be immediately suspended, all associated funds will be reviewed in accordance with onepkr's responsible gaming policy, and the personal data will be deleted from onepkr's systems as swiftly as possible.

If you believe that a minor has registered an account on the onepkr platform, please notify the support team immediately via live chat so that appropriate action can be taken.

onepkr employs a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

Transport Security: All data transmitted between your device and onepkr's servers is encrypted using TLS 1.2 or higher with 256-bit AES encryption. HTTPS is enforced across the entire Platform with no fallback to unencrypted HTTP.

Data Storage Security: Personal data stored on onepkr's servers is encrypted at rest. Database access is restricted to authorised personnel only, with all access logged and monitored for anomalous activity.

Access Controls: onepkr operates a strict role-based access control policy. Employees may only access the categories of personal data that are directly required for their specific job function. All internal access to Player data is logged and subject to periodic audit.

Two-Factor Authentication: onepkr strongly recommends that all Players enable two-factor authentication (2FA) on their accounts. 2FA adds a second layer of verification to your onepkr login, significantly reducing the risk of unauthorised access even if your password is compromised.

Penetration Testing & Vulnerability Management: The onepkr Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their onepkr accounts and to report any suspicious account activity to the support team without delay.

The onepkr platform may contain references or links to third-party game providers, payment processor interfaces, or informational resources. This Privacy Policy applies exclusively to data processed by onepkr. onepkr is not responsible for the privacy practices or data handling of any third-party services that you access in connection with using the Platform.

Where you interact with a third-party payment interface — such as the JazzCash or EasyPaisa payment gateway — that interaction is governed by the privacy policy of the respective payment provider. onepkr recommends that you review the privacy policies of all third-party services you engage with while using the onepkr Platform.

onepkr reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, operational requirements, or applicable legal obligations. When material changes are made to this policy, onepkr will notify active Players by displaying a prominent notice on the Platform or by sending a notification to the mobile number registered to your account.

The effective date at the top of this policy will be updated each time the policy is revised. It is your responsibility to review this Privacy Policy periodically and to remain informed of any updates. Continued use of the onepkr platform following the posting of any revised Privacy Policy constitutes your acceptance of the changes.

If any proposed change to this Privacy Policy would involve using your personal data in a way that is materially different from what was described at the time of collection, onepkr will seek your explicit consent before applying that change to your data.

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a complaint about how onepkr has handled your personal data, please contact us through the following channels:

Live Chat: The fastest way to reach the onepkr Data Protection team is via the live chat function available 24/7 within the Platform. Average response time is under two minutes.

Email: support onepkr.org (displayed as plain text — not a clickable link). Please include "Privacy Request" in the subject line of your message. Responses are provided within five business days for routine enquiries and within 30 calendar days for formal rights requests.

onepkr is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with onepkr's response to your complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in the jurisdiction under which onepkr's international gaming licence is issued.