Privacy Policy — 97kr

This Privacy Policy ("Policy") describes how 97kr ("the Platform", "we", "us", "our") collects, uses, stores, discloses and otherwise processes personal data relating to individuals ("Users", "you", "your") who access or use the 97kr platform available at https://97kr.cam and all associated services (collectively, the "Services").

97kr is committed to protecting the privacy and security of all Users' personal data. This Policy is designed to be transparent about our data practices so that you can make informed decisions about your engagement with the platform. By registering an Account or otherwise using the Services, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the Terms & Conditions and Responsible Gambling Policy, both of which form part of the contractual relationship between you and 97kr.

For the purposes of this Policy, the following terms carry the meanings set out below:

97kr collects personal data across the following categories, depending on how you interact with the platform:

97kr does not intentionally collect special category data (such as health, political, religious or biometric data) except where specifically required by applicable law or as provided voluntarily by the User in the context of a responsible gambling or self-exclusion request.

Personal data is collected through the following channels:

• Direct provision: Information you submit when registering an Account, completing KYC, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated collection: Technical data (IP address, device data, session identifiers) collected automatically when you access the 97kr platform, via server logs, cookies, and similar tracking mechanisms.
• Transaction data: Financial records generated when you deposit or withdraw funds via available payment methods in the cashier.
• Third-party sources: Identity verification data returned by KYC service providers following document checks. Fraud prevention signals from anti-fraud partners. Analytics data from platform performance tools.
• Support interactions: Chat transcripts and email content generated when you contact the 97kr support team.

97kr processes personal data on one or more of the following legal grounds, depending on the nature of the data and the purpose of processing:

• Contractual necessity: Processing required to enter into and perform the contract with you, including account registration, enabling betting and gaming activity, processing deposits and withdrawals, and providing customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, identity verification obligations, and lawful disclosure requests from competent authorities.
• Legitimate interests: Processing carried out where 97kr has a legitimate interest that is not overridden by your rights, such as fraud prevention, platform security, responsible gambling monitoring, and internal analytics to improve the platform.
• Consent: Processing based on your freely given, specific and informed consent, such as optional marketing communications. Where consent is the legal basis, you retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

97kr uses your personal data for the following specific purposes:

• To create, manage and maintain your Account, including verifying your identity and age through KYC procedures before processing your first withdrawal.
• To process deposits, withdrawals and other financial transactions through the available payment methods shown in the cashier.
• To deliver the betting, gaming and informational services you have accessed, including sports markets, live casino, and responsible gambling tools.
• To communicate with you about your Account, including transactional notifications, security alerts, and responses to support queries.
• To detect and prevent fraud, money laundering, bonus abuse, multi-accounting and other conduct prohibited under the Terms & Conditions.
• To monitor platform usage for responsible gambling purposes, including identifying potential problem gambling behaviour and applying limits or restrictions where appropriate.
• To comply with applicable legal and regulatory obligations, including responding to lawful requests from law enforcement or regulatory authorities.
• To improve platform performance, fix technical issues, and personalise your experience on 97kr based on usage patterns — subject to your preferences.
• Where you have provided consent, to send you marketing communications about offers, promotions and platform updates relevant to your interests.

97kr does not sell your personal data to third parties. Your data may be shared with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Document verification services used to confirm your identity and age as part of the mandatory KYC process. These providers act as Data Processors under contractual data processing agreements.
• Payment processors: Financial service providers responsible for processing your deposit and withdrawal transactions. Payment method references on 97kr (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are contextual only; their inclusion does not imply any data-sharing relationship with those entities.
• Anti-fraud and AML services: Third-party providers that assist with fraud detection, suspicious activity monitoring, and anti-money laundering compliance screening.
• Game and technology providers: Licensed game studios and sports data providers whose content is integrated into the 97kr platform may receive limited technical data necessary to deliver their services.
• Cloud infrastructure and hosting: Secure cloud services used to host the platform and store data. These providers are bound by data processing agreements and security standards.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent regulatory or law enforcement authority, 97kr will disclose personal data as required without prior notice to you.
• Business transfers: In the event of a merger, acquisition, asset sale or restructuring of the operator's business, personal data held about Users may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party Data Processors engaged by 97kr are required to implement appropriate technical and organisational security measures and to process personal data only for the purposes and in the manner instructed by 97kr.

97kr uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that allow the platform to recognise your browser, maintain your session state, remember your preferences, and analyse how users interact with the platform.

The following categories of cookies may be used on 97kr:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, security cookies, and cookies that maintain your login state. These cannot be disabled without preventing core platform functionality.
• Functional Cookies: Enable enhanced features and personalisation, such as remembering your preferred odds format (decimal/fractional), language preferences, and responsible gambling tool settings.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate and use the platform. Used to identify usability issues, popular content, and performance bottlenecks. No individual user is identifiable from this data.
• Marketing Cookies: Where you have consented, these cookies track your interactions with 97kr to enable relevant promotional communications and measure the effectiveness of campaigns. You may withdraw consent for marketing cookies at any time.

You may manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality — particularly session management and login state. Instructions for managing cookies are available in the help documentation of all major browsers.

97kr takes data security seriously and implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, loss or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 97kr platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted when stored on 97kr's servers.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication (2FA): Available for User Accounts to provide an additional layer of security against unauthorised access.
• Regular security reviews: The operator conducts periodic security assessments of the platform's infrastructure and data handling practices.
• Incident response: In the event of a personal data breach that poses a risk to User rights and freedoms, 97kr will notify affected Users and relevant authorities in accordance with applicable legal requirements.

97kr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting and reporting obligations. The following retention principles apply:

• Active Account data: Personal data associated with an active Account is retained for the duration of the account relationship and for a period following account closure as required by the operator's legal and regulatory obligations.
• KYC documentation: Identity verification documents are retained for a minimum of five years following the end of the account relationship, or longer if required by applicable AML or regulatory frameworks in the operator's licensing jurisdiction.
• Transaction records: Financial transaction history is retained for a minimum of five years to meet accounting and regulatory requirements. Exact periods depend on applicable law.
• Communications data: Support chat transcripts and email correspondence are retained for up to three years following resolution of the relevant query, to assist with complaint handling and training.
• Marketing data: Where consent-based marketing is active, data is retained until you withdraw consent. Once consent is withdrawn, marketing data is deleted or anonymised within a reasonable operational period.
• Technical and usage data: Aggregated analytics data may be retained indefinitely in anonymised form. Non-anonymised technical data (such as IP logs) is retained for a limited period determined by fraud and security requirements.

When personal data is no longer required for any of the above purposes, it is securely deleted or irreversibly anonymised so that it can no longer be linked to you as an individual.

97kr is operated by an entity licensed in a jurisdiction outside Pakistan. As a result, your personal data may be transferred to, stored in, and processed in countries other than Pakistan, including the operator's licensing jurisdiction and the locations of Data Processor infrastructure.

Where personal data is transferred internationally, 97kr takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to those described in this Policy. These safeguards may include contractual protections, standard contractual clauses, or reliance on adequacy decisions by relevant data protection authorities.

By using the 97kr platform and submitting personal data, you acknowledge that your data may be transferred internationally as described in this section.

Subject to applicable data protection law and the operator's licensing obligations, you have the following rights regarding your personal data held by 97kr. These rights can be exercised by contacting support at [email protected]:

• Right of Access: You may request a copy of the personal data 97kr holds about you, together with information about how it is being used. Requests will be fulfilled within a reasonable timeframe.
• Right to Rectification: If you believe personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Account details can also be updated directly through your Account settings where applicable.
• Right to Erasure ("right to be forgotten"): You may request deletion of your personal data. This right is subject to exceptions — notably where retention is required to meet legal, regulatory or AML obligations.
• Right to Restriction of Processing: You may request that 97kr limits the processing of your personal data in certain circumstances, such as during a period in which accuracy is contested or an objection is under consideration.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing processing, this will be honoured promptly.

Requests to exercise any of the above rights will be considered in good faith and responded to within the timeframe required by applicable law. Note that exercising certain rights (such as erasure) may require Account closure and may affect your ability to use the platform.

97kr is strictly an adults-only platform. The Services are not directed to, and 97kr does not knowingly collect personal data from, individuals under the age of 18 — or the higher minimum age required by the operator's licensing jurisdiction.

If 97kr becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close any associated Account. If you are a parent or guardian and believe a minor has registered on 97kr, please contact support immediately at [email protected].

Age verification through KYC procedures is a mandatory step before withdrawal processing. This provides a secondary check to ensure that Account holders meet the minimum age requirement.

97kr's primary user base includes individuals in Pakistan — including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We recognise that Pakistani users may have questions about how their data is treated given Pakistan's evolving data protection landscape.

Pakistan's Personal Data Protection Bill (PDPB), when enacted, may apply to the processing of personal data relating to Pakistani residents. 97kr will monitor developments in Pakistani data protection law and take reasonable steps to align its practices accordingly as legislation develops and comes into force.

Payment method references on the platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are contextual references for Pakistani users' familiarity only. 97kr does not share user personal data with these institutions except as strictly required by a relevant transaction that you have initiated. Their inclusion in this Policy or on the platform does not imply any data-sharing partnership or endorsement of gambling by those entities.

97kr reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they substantially alter how your personal data is processed or reduce your rights — we will take reasonable steps to notify registered Users in advance, by email or through an in-platform notification.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Minor amendments, such as typographical corrections or clarifications of existing practices, may be made without prior notification.

Your continued use of 97kr following the effective date of any amendment to this Policy constitutes your acknowledgement of the updated practices. If you do not agree with the amended Policy, you should cease using the platform and contact support to arrange Account closure.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how your personal data is being processed, please contact the 97kr support team through the channels below. All privacy-related requests will be treated as a priority.

This Privacy Policy was last reviewed and updated in January 2026. 97kr is committed to keeping this document accurate and reflective of its current data processing practices.