But PKR Privacy Policy – How We Handle Your Personal Data in Pakistan

1. Who We Are

This Privacy Policy applies to the But PKR platform, operated under the brand name But PKR and accessible at butpkr.ws. When this policy refers to "But PKR", "we", "us" or "our", it means the platform operator responsible for processing your personal data.

But PKR is a betting and casino platform designed exclusively for Pakistani players. We are the data controller for all personal data collected through the platform. If you have any questions about how your data is processed, you can reach us at privacy@butpkr.ws or through the live chat on the platform.

This policy is written in English for Pakistani users. It covers the butpkr.ws website, any mobile-optimised version of the platform and all features available after login — including sports betting, live casino, crash games, baccarat and the VIP Club.

2. Personal Data We Collect

But PKR collects personal data in several categories depending on how you interact with the platform. Below is a complete breakdown of the categories of data we may hold about you.

2.1 Registration Data

When you create an account at But PKR, we collect:

• Full legal name
• Date of birth
• Pakistani CNIC number (for KYC verification)
• Residential address in Pakistan
• Mobile phone number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) requirements and to verify your age, But PKR may collect:

• Scanned or photographed copy of your CNIC, passport or driving licence
• Proof of address (utility bill, bank statement)
• Proof of payment method ownership (screenshot of wallet or bank account in your name)
• Selfie photograph for liveness verification in some cases

2.3 Financial Data

When you make deposits or request withdrawals at But PKR, we collect transaction records including:

• Deposit and withdrawal amounts in PKR
• Payment method type (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, card)
• Masked payment identifiers (last 4 digits of card, partial mobile wallet number)
• Transaction timestamps and reference numbers

But PKR does not store full card numbers or mobile wallet PINs. Full card data is processed through PCI-DSS-compliant payment processors and is not retained on But PKR servers.

2.4 Betting and Gaming Activity Data

We maintain records of your activity on the platform, including:

• Bets placed — sport, event, market, stake, odds, outcome and settlement
• Casino and live game sessions — game type, bet amounts, results, session duration
• Bonus activity — bonuses claimed, wagering progress, expiry and conversion
• VIP Club points and tier history

2.5 Technical and Device Data

Automatically collected when you use the platform:

• IP address and approximate geographic location
• Device type, operating system and browser version
• Session timestamps, pages visited and features used
• Crash reports and error logs

2.6 Communication Data

Records of communications with But PKR support, including live chat transcripts and email correspondence. These are retained to ensure consistent support quality and to maintain an accurate record of any disputes or resolutions.

3. How We Collect Your Data

But PKR collects personal data through the following channels:

3.1 Directly From You

The majority of your data is provided directly by you when you register, complete KYC verification, make deposits or withdrawals, place bets, contact support or update your account settings. You are always aware when you are providing data directly to But PKR.

3.2 Automatically Through Platform Use

When you browse the But PKR platform or place bets, technical data is collected automatically through server logs, session tracking and cookies. This data is used for platform security, fraud prevention and performance optimisation — not for targeted advertising.

3.3 From Payment Providers

When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay or bank IBFT, the payment provider confirms the transaction to But PKR. The data shared is limited to what is necessary to confirm and reconcile the payment — we do not receive your full wallet PIN or bank account credentials.

3.4 From Identity Verification Providers

Where But PKR uses a third-party KYC provider to verify your CNIC or conduct a liveness check, the verification outcome (pass/fail and reason) is shared back with But PKR. The underlying document data is processed by the KYC provider in accordance with their own security standards and is not retained by But PKR beyond the period required for compliance obligations.

4. Why We Use Your Personal Data

The following table summarises the main purposes for which But PKR processes your personal data and the type of data involved in each purpose.

But PKR does not use your personal data for purposes beyond those listed above without first obtaining your explicit consent or where required by law.

5. Legal Basis for Processing

But PKR processes your personal data under the following legal bases:

• Contract performance: Processing your registration data, bets and payments is necessary to provide the services you have signed up for at But PKR. Without this processing, we cannot operate your account.
• Legal obligation: KYC verification, AML checks and age verification records are required by applicable compliance obligations. We are required to perform this processing regardless of your preference.
• Legitimate interests: Fraud prevention, platform security monitoring and responsible gaming analysis are conducted on the basis of But PKR's legitimate interest in operating a safe and compliant platform. These interests are balanced against your privacy rights.
• Consent: Marketing communications — including PSL match alerts, bonus notifications and promotional emails — are only sent with your explicit consent, given at registration or in account settings. You can withdraw consent at any time.

6. Sharing Your Personal Data

But PKR does not sell your personal data. We share data only in the circumstances described below, and only to the minimum extent necessary.

6.1 Payment Processors

We share the transaction data necessary to process your deposits and withdrawals with your chosen payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank or your card network. These providers are bound by their own privacy policies and applicable Pakistani financial regulations.

6.2 Identity Verification Providers

Where KYC verification is required, But PKR shares relevant identity document data with our approved third-party KYC provider for the purpose of verification only. The provider is contractually bound to process data solely for this purpose and to maintain appropriate security standards.

6.3 Game Software Providers

Live casino and RNG game providers such as Evolution Gaming, Pragmatic Play and Microgaming receive the session data necessary to operate their games — including your username, stake amounts and game results. These providers do not receive your full identity or financial data and process game session data under strict contractual data processing agreements with But PKR.

6.4 Legal and Regulatory Requirements

But PKR may disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, a court order or for the prevention, investigation or prosecution of criminal activity including fraud and money laundering.

6.5 Business Transfers

In the event of a merger, acquisition or sale of all or part of the But PKR business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the new controller before your data is transferred.

7. Data Retention

But PKR retains personal data only for as long as it is necessary for the purpose for which it was collected, or as long as required by law.

• Active account data: Retained for the full duration of your account being active at But PKR.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, as required by AML compliance obligations.
• Financial transaction records: Retained for 5 years following each transaction for financial record-keeping purposes.
• Betting and gaming history: Retained for 2 years following your last active session, or longer if required for dispute resolution.
• Support communications: Retained for 3 years following the close of each support interaction.
• Marketing consent records: Retained until you withdraw consent or for 3 years following last contact if no withdrawal is received.

When personal data is no longer required, But PKR securely deletes or anonymises it. Anonymised data — where it is no longer possible to identify you from the data — may be retained indefinitely for platform analytics and product development.

8. Cookies and Tracking Technologies

But PKR uses cookies and similar tracking technologies on the platform. Below is a summary of the types of cookies in use and their purpose.

9. How We Protect Your Data

But PKR implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction.

9.1 Technical Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and But PKR servers
• AES-256 encryption for personal data stored at rest in our databases
• PCI-DSS-compliant payment processing — full card data never touches But PKR servers
• Two-factor authentication available on all player accounts
• Automated anomaly detection systems monitoring for unusual login and withdrawal patterns
• Regular penetration testing and security audits of the platform infrastructure

9.2 Organisational Measures

• Staff access to personal data is restricted to those with a genuine need to access it for their role
• All staff with access to personal data receive data protection training
• A defined incident response procedure is in place for data breach scenarios
• Third-party processors are subject to data processing agreements and security audits

No security system is completely impenetrable. If you believe your But PKR account has been compromised, contact support immediately at support@butpkr.ws so we can take immediate protective action.

10. Your Rights Over Your Personal Data

As a But PKR player, you have the following rights regarding your personal data. All requests can be submitted by email to privacy@butpkr.ws and will be responded to within 14 days.

• Right to Access
  You have the right to request a copy of all personal data But PKR holds about you. We will provide this in a readable format, free of charge, within 14 days of receiving your request.
• Right to Correction
  If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Many details — such as your email address and mobile number — can be updated directly in account settings without contacting support.
• Right to Deletion
  You have the right to request deletion of your personal data. Note that this right is subject to our legal obligation to retain certain records (KYC, financial transactions) for the periods described in Section 7. We will delete everything that is not subject to a legal retention requirement.
• Right to Data Portability
  You can request a copy of your personal data in a structured, commonly used electronic format for transfer to another service. This applies to data you provided directly to But PKR that is processed based on your consent or contract performance.
• Right to Object
  You have the right to object to processing of your data based on But PKR's legitimate interests, including responsible gaming profiling and fraud risk scoring. We will review your objection and restrict or cease processing where your rights outweigh our legitimate interest.
• Right to Withdraw Marketing Consent
  You can withdraw your consent to receive marketing communications from But PKR at any time — through account settings, by clicking "unsubscribe" in any marketing email, or by contacting support. Withdrawal does not affect account access or the validity of any bet or transaction already placed.

11. Children's Privacy

The But PKR platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. Age verification is conducted on all accounts as part of the registration and KYC process.

If But PKR becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately closed, any deposits refunded to the original payment method and all personal data associated with the account securely deleted to the extent permitted by law.

If you believe a minor has created an account at But PKR, please notify us immediately at support@butpkr.ws so we can take prompt action.

12. Responsible Gaming and Data Processing

But PKR processes your betting and gaming activity data for responsible gaming purposes. This means we monitor patterns in your play — deposit frequency, session length, bet escalation and self-exclusion history — to identify signs that your gambling may be becoming harmful.

This processing is conducted on the basis of our legitimate interest in operating a responsible platform and our commitment to player welfare. The responsible gaming data processing at But PKR may result in:

• Automated warnings displayed during your session when unusual patterns are detected
• Proactive contact from our responsible gaming team if your account triggers concern thresholds
• Temporary restrictions on deposit amounts or session access in serious cases

You can view and manage all responsible gaming settings in your account settings at any time. Full details on the tools available are on our Responsible Gaming page.

13. Changes to This Privacy Policy

But PKR reviews this Privacy Policy regularly and updates it when our practices change or when legal requirements change. The "Last Updated" date at the top of this page always reflects the most recent revision.

If we make a material change to this policy — meaning a change that significantly affects how your data is used or your rights — we will notify you by email and display a notice on the platform at least 14 days before the change takes effect.

Your continued use of the But PKR platform after the effective date of any change to this policy constitutes your acceptance of the revised terms. If you do not agree with a change, please contact support to close your account before the change takes effect.

14. How to Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how But PKR has handled your personal data, please contact us through the following channels:

• Privacy email: privacy@butpkr.ws
• General support email: support@butpkr.ws
• Live chat: Available 24/7 after login — mark your query as a privacy matter for priority routing
• Languages: English and Urdu — Urdu available 9 AM to midnight PKT

We aim to respond to all privacy-related requests within 14 days. Complex requests — such as full data access exports or contested deletion requests — may take up to 30 days. We will acknowledge receipt of your request within 2 business days and keep you informed of progress.