97kr is committed to protecting the privacy and personal data of every Pakistani player who uses our platform. This Privacy Policy explains in plain, clear language what data we collect, how we use it, who we share it with, and the rights you have as a 97kr player over your own information.
Before you read the full legal document below, here are the six core privacy principles that guide every data decision at 97kr. These are genuine operational commitments — not marketing language.
97kr does not collect personal data for the sake of it. Every piece of information we request from you — your CNIC, phone number, payment details — has a specific, legitimate purpose directly connected to operating your account, verifying your identity, or processing your transactions. If we do not need it, we do not collect it.
97kr does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertising networks — under any circumstances. Your data is used exclusively to operate your 97kr account, provide the gaming services you have chosen, and comply with our legal and regulatory obligations. Full stop.
97kr employs industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. This includes SSL encryption for all data in transit, access controls limiting staff access to personal data on a need-to-know basis, and regular security reviews of our platform infrastructure.
97kr players have meaningful rights over their personal data. You can access the data we hold about you, request corrections, ask us to restrict processing, and in certain circumstances request deletion. These rights are not buried in fine print — they are exercisable through our customer support team and are described in detail in the Your Rights section of this policy.
97kr does not hold your personal data indefinitely. Retention periods are determined by the purpose for which data was collected and our legal and regulatory obligations. Account data is retained for the duration of your account and for a defined period thereafter as required by anti-money laundering regulations. Data no longer needed is securely deleted or anonymised.
If 97kr makes material changes to this Privacy Policy, we will notify you via your registered email address and by a prominent notice on the platform before those changes take effect. We will never quietly update our privacy practices in ways that significantly affect your rights without giving you clear advance notice and the opportunity to ask questions.
1.1 This Privacy Policy is published by 97kr ("97kr," "we," "us," or "our"), the operator of the online gaming platform accessible at 97kr.net. It describes how 97kr collects, processes, stores, and protects the personal data of all individuals who access or use the 97kr platform, including registered account holders, prospective players, and visitors to our website.
1.2 97kr is committed to protecting the privacy of its players, particularly those based in Pakistan. This policy has been written in plain English and is intended to be understandable to a general audience — not just legal specialists. Where legal or technical terms are unavoidable, we have defined them clearly.
1.3 This Privacy Policy should be read together with the 97kr Terms & Conditions and the Responsible Gaming Policy. By registering a 97kr account and using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein.
1.4 97kr reserves the right to update this Privacy Policy from time to time. The most current version is always available at 97kr.net/privacy-policy. The "Last updated" date at the top of the sidebar reflects when material changes were last made.
For the purposes of this Privacy Policy, the following definitions apply:
3.1 97kr collects only the personal data necessary to provide our services, comply with our legal and regulatory obligations, and maintain the security and integrity of our platform. The categories of personal data we collect are described below.
When you create a 97kr account, we collect your full legal name as it appears on your CNIC, date of birth, email address, Pakistani mobile phone number, chosen username, and the password you create (stored in hashed, non-reversible form — we never store your password in plain text).
As part of our mandatory KYC process — required before processing withdrawals — we collect copies of your CNIC (front and back), a recent proof of address document (such as a utility bill or bank statement dated within three months), and any supplementary documentation we may reasonably request to verify your identity and address.
We collect records of all deposits and withdrawals processed through your 97kr account, including transaction reference numbers, amounts in PKR, payment method details (JazzCash account number, EasyPaisa details, bank account identifiers as applicable), and transaction timestamps. We do not store complete payment card numbers.
We collect records of all gaming activity on the 97kr platform, including bets placed, games played, game outcomes, session durations, and responsible gaming tool settings you have activated. This data is used to operate your account, settle bets correctly, detect fraud, and support our responsible gaming programme.
When you access the 97kr platform, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, time zone, and session timestamps. This data is used for platform security, fraud detection, and analytical purposes.
If you contact 97kr customer support via live chat or email, we retain records of those communications — including the content of messages, timestamps, and resolution outcomes — to assist with ongoing support, for training purposes, and to maintain a record of any complaints or disputes.
| Data Category | Primary Purpose | Retention |
|---|---|---|
| Registration Data | Account creation and management | Duration of account + 5 years |
| KYC Documents | Identity verification, AML compliance | Duration of account + 7 years |
| Financial Records | Transaction processing, AML compliance | Duration of account + 7 years |
| Gaming Activity | Service delivery, fraud detection, dispute resolution | Duration of account + 5 years |
| Technical / Device Data | Security, fraud detection, analytics | 13 months rolling |
| Support Communications | Complaint handling, training, audit | 3 years from last contact |
4.1 Directly from You. The majority of personal data 97kr holds about you is provided directly by you — at the point of registration, during the KYC process, when making deposits or withdrawal requests, when setting responsible gaming preferences, or when contacting our customer support team.
4.2 Automatically Through Platform Use. Certain technical data is collected automatically when you access the 97kr platform, through the use of cookies, server logs, and similar tracking technologies. See the Cookies section of this policy for more detail.
4.3 From Third-Party Verification Services. 97kr may use third-party identity verification and fraud screening services to cross-reference the information you provide against external databases. These checks are conducted for the purpose of verifying your identity, confirming your age, and detecting fraudulent activity. The data used in these checks is limited to what is strictly necessary for verification purposes.
4.4 From Payment Processors. When you make a deposit or withdrawal, 97kr receives transaction confirmation data from the relevant payment provider — JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank — including transaction reference numbers and amounts. We do not receive or store full payment credentials.
5.1 97kr processes your personal data on the following legal bases, depending on the specific purpose of processing:
6.1 97kr uses your personal data for the following specific purposes:
7.1 97kr does not sell your personal data. We do not transfer your personal data to third-party marketers, data brokers, or advertising networks for their independent commercial use.
7.2 97kr may share your personal data with the following categories of third parties, and only for the purposes specified:
7.3 All third-party processors engaged by 97kr are required to process your personal data only in accordance with 97kr's instructions and to implement appropriate technical and organisational security measures to protect it.
8.1 97kr uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help us recognise you, maintain your session, and improve your experience on the 97kr platform.
8.2 The categories of cookies used by 97kr include:
8.3 You can control cookie settings through your web browser's privacy or settings menu. Note that disabling certain categories of cookies may affect the functionality of the 97kr platform and your ability to access some features of your account.
9.1 97kr takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
9.2 While 97kr takes all reasonable steps to protect your personal data, no internet-based service can guarantee absolute security. You also play an important role in keeping your data secure — by choosing a strong, unique password for your 97kr account, enabling two-factor authentication, and never sharing your login credentials with any third party.
9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 97kr will notify affected players without undue delay and will take all appropriate remedial steps to address the breach and prevent its recurrence.
10.1 97kr retains your personal data for only as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The retention periods applicable to different categories of personal data are set out in the table in Section 3 of this policy.
10.2 Account Data: Your account data is retained for the duration of your 97kr account, and for a period of five years following account closure. This retention is necessary to enable us to respond to any complaints or disputes that may arise following account closure, and to comply with our obligations under applicable law.
10.3 KYC and Financial Records: KYC documents and financial transaction records are retained for a period of seven years following account closure. This extended retention period is required to comply with anti-money laundering regulations applicable to gaming operators under international licensing requirements.
10.4 Self-Excluded Players: Where a player has activated permanent self-exclusion on 97kr, we retain the information necessary to enforce that self-exclusion — including the player's name, CNIC number, and email address — for the duration of the self-exclusion period. This data is held in a restricted-access database and is used solely for the purpose of preventing re-registration by the self-excluded player.
10.5 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.
11.1 As a 97kr player, you have the following rights in relation to your personal data. These rights can be exercised by contacting 97kr customer support via live chat or by emailing us at the address provided in Section 16 of this policy.
You have the right to request a copy of the personal data that 97kr holds about you. We will provide this information in a clear, accessible format within a reasonable timeframe, subject to verification of your identity. This is sometimes called a "Subject Access Request" or SAR.
If any personal data 97kr holds about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many account details — such as your email address or phone number — directly from your account settings dashboard. For corrections to KYC documentation, please contact support.
In certain circumstances, you have the right to request that 97kr delete the personal data we hold about you. This right is not absolute — it is subject to our legal and regulatory data retention obligations, particularly those arising from anti-money laundering requirements, which require us to retain certain financial records for defined periods regardless of account closure or erasure request.
You have the right to request that 97kr restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data we hold, or where you object to processing based on legitimate interests while we assess your objection. During a restriction period, we may store your data but not actively use it.
Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to 97kr in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another service provider where technically feasible.
You have the right to object to 97kr processing your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to processing of your data for direct marketing purposes — including profiling for marketing — at any time. Exercising this right does not require you to provide any justification.
Where processing is based on your consent — such as receiving marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw marketing consent through your account settings or by contacting support.
11.2 97kr will respond to all rights requests within thirty (30) days of receipt. If your request is complex or 97kr receives a high volume of requests simultaneously, this period may be extended by up to a further sixty (60) days — in which case we will notify you of the extension and the reasons for it.
12.1 The 97kr platform is strictly intended for individuals aged 21 years and above. 97kr does not knowingly collect, process, or retain personal data from individuals under the age of 21.
12.2 All new registrations are subject to age verification through the KYC process using CNIC documentation. Accounts identified as belonging to individuals under 21 years of age are permanently closed, any deposited funds are returned to the originating payment account, and all personal data associated with the underage account is deleted from 97kr's active systems.
12.3 If you are a parent or guardian and believe that a person under the age of 21 has created an account on 97kr using false age information, please contact 97kr customer support immediately. We will investigate and take appropriate action as quickly as possible.
13.1 As an internationally licensed gaming platform, 97kr may process or store certain personal data on servers or through systems located outside Pakistan. Where such international transfers occur, 97kr takes all reasonable steps to ensure that your data is protected to a standard equivalent to that described in this Privacy Policy, regardless of where it is processed.
13.2 International data transfers are carried out only to countries or organisations that provide adequate protections for personal data, or subject to appropriate contractual safeguards — such as data processing agreements that impose equivalent data protection obligations on the receiving party.
13.3 If you would like more information about the specific international transfers undertaken by 97kr and the safeguards in place, please contact our customer support team.
14.1 The 97kr platform may contain links to third-party websites or services — for example, game software provider demonstration pages or payment provider information pages. This Privacy Policy applies only to the 97kr platform and does not extend to any third-party websites or services linked from it.
14.2 97kr has no control over the privacy practices, data processing activities, or content of any third-party websites. We recommend that you review the privacy policy of any third-party website or service before providing personal data to it. 97kr accepts no responsibility or liability for the privacy practices of any third-party operator.
15.1 97kr may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or our service offering. The "Last updated" date shown in the Table of Contents sidebar will be revised whenever material changes are made to this policy.
15.2 Where changes are material — meaning they significantly affect your rights or the way 97kr processes your personal data — 97kr will notify registered players via the email address on file at least fourteen (14) days before the changes take effect. The notification will summarise the key changes and link to the updated policy in full.
15.3 Your continued use of the 97kr platform following the notification of material changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure in accordance with the 97kr Terms & Conditions.
16.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how 97kr has handled your personal data, please contact us through any of the following channels:
16.2 97kr aims to acknowledge all privacy-related queries within two (2) business days and to resolve them fully within thirty (30) days, in accordance with Section 11.2 of this policy.
16.3 For responsible gaming matters — including self-exclusion requests, deposit limit settings, and questions about our Responsible Gaming programme — please visit the Responsible Gaming page or contact our support team via live chat. Responsible gaming requests receive priority handling at all hours.
16.4 This Privacy Policy was last reviewed and updated on 1 January 2026. 97kr — Pakistan's premier online gaming platform. 21+ only. Play responsibly.
97kr never sells your data, protects your personal information with industry-standard security, and gives you full control over your privacy settings. 700+ games, PKR payments, 24/7 support. 21+ only.
Login to 97kr About 97kr