Privacy Policy – Will PKR Data Protection & User Rights

This Privacy Policy is issued by Will PKR ("we", "us", "the Platform"), the operator of the online betting and gaming platform accessible at willpkr.net. Will PKR provides sports betting, online casino, Ludo gaming, virtual sports and related entertainment services to registered users in Pakistan.

This policy applies to all personal data we collect from individuals who:

• Register an account on Will PKR
• Browse or use the willpkr.net website without registering
• Contact Will PKR's customer support team
• Participate in Will PKR promotions, tournaments or bonus programmes
• Interact with Will PKR through any other channel where personal data is provided

By using Will PKR's platform or services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you disagree with any part of this policy, you should not use Will PKR's services.

Will PKR collects personal data through different channels and for different purposes. The types of data we collect depend on how you interact with the platform. Below is a clear breakdown:

Will PKR does not intentionally collect sensitive personal data beyond what is listed above. We do not collect biometric data other than the selfie photograph required for identity verification, which is processed only for KYC matching purposes and is not stored beyond the verification period.

Will PKR only collects and processes personal data when there is a clear, legitimate reason to do so. Here are the purposes for which we use your data and the legal basis that justifies each:

• To operate your account and provide Will PKR's services: This is necessary to fulfil our contractual obligations to you. Without this processing, we cannot run your account, credit deposits, settle bets or process withdrawals.
• To verify your identity (KYC/AML compliance): We are required by applicable anti-money laundering regulations to verify the identity of users before processing withdrawals above certain thresholds. This processing is a legal obligation — it is not optional.
• To process payments: Processing your deposit and withdrawal requests requires sharing relevant transaction data with the payment provider you have selected. This is essential for the service to function.
• To detect and prevent fraud, bonus abuse and prohibited behaviour: Will PKR processes transactional and technical data to identify patterns consistent with fraud, multiple account creation, automated play and other prohibited activities. This is a legitimate interest that protects the fairness of the platform for all users.
• To send you service communications: Deposit confirmations, withdrawal notifications, account security alerts and terms change notifications are sent based on our contractual relationship with you. These are not optional — they are part of the service.
• To send you promotional communications: If you have opted in to receiving bonus offers and promotions from Will PKR, we will send you these communications based on your consent. You can withdraw this consent at any time through your account settings or by contacting support.
• To improve Will PKR's platform and services: Aggregated, anonymised usage data is analysed to understand how users interact with the platform, identify areas for improvement and make informed product decisions. This processing does not involve identifiable personal data.

Will PKR does not sell your personal data to anyone. We do not share your data with third-party marketers. However, providing you with the Will PKR service requires us to work with a number of third-party service providers who may receive certain types of your personal data. Every such provider is bound by contractual obligations to protect your data and use it only for the specific purpose we have engaged them for.

The categories of third parties with whom Will PKR shares personal data are:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT-linked banks and Visa/Mastercard payment networks receive the transaction data necessary to process your deposits and withdrawals. They do not receive your betting history or personal preferences.
• Identity verification providers: When KYC verification is required, your CNIC details and verification photograph are shared with our identity verification partner for matching against official records. This data is not retained by the verification provider beyond the verification transaction.
• Game software providers: When you play games provided by Pragmatic Play, Evolution Gaming, Ezugi or other licensed game studios, the game provider's system receives the data necessary to run the game session — typically your account identifier and session token. Game providers do not receive your full personal profile.
• Customer support tooling: Will PKR uses a third-party customer support platform to manage live chat and email support. Support agents and their tooling have access to your account information and correspondence history as necessary to resolve your queries.
• Legal and regulatory authorities: Will PKR may be required by law to disclose certain user data to regulatory bodies, law enforcement agencies or courts. We comply with such requirements but will not disclose more information than is strictly required by the legal obligation.
• Fraud prevention services: Aggregated risk signals from your account behaviour may be shared with fraud prevention services to identify patterns consistent with money laundering, identity fraud or coordinated bonus abuse. These services process data under strict data processing agreements.

Will PKR uses cookies and similar tracking technologies on the willpkr.net website. A cookie is a small text file stored in your browser when you visit a website. Cookies allow Will PKR to recognise your browser, remember your preferences and analyse how users interact with the platform.

The cookies used by Will PKR fall into the following categories:

You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in and using Will PKR's platform. Disabling functional or analytics cookies may affect your experience but will not prevent basic functionality.

Will PKR does not keep your personal data indefinitely. The length of time we retain different types of data depends on the purpose for which it was collected and applicable regulatory requirements:

• Account data and transaction records: Retained for the duration of your active account plus 5 years after account closure. This retention period is required for anti-money laundering compliance and potential dispute resolution purposes.
• KYC verification documents: Retained for the duration of your account plus 5 years after closure. Regulatory requirements mandate this retention period.
• Customer support communications: Retained for 2 years from the date of the last communication in each case. This allows us to reference previous interactions if a related issue arises.
• Game session logs: Retained for 90 days. Available to you on request during this period for dispute resolution. After 90 days, logs are aggregated and anonymised.
• Technical logs (IP, session data): Retained for 12 months for security monitoring purposes, then deleted.
• Marketing consent records: Retained for as long as you remain opted in, plus 1 year after withdrawal of consent (to demonstrate compliance if queried).

When a retention period expires, Will PKR securely deletes or irreversibly anonymises the relevant data so it can no longer be attributed to an identifiable individual. Anonymised aggregated data may be retained indefinitely for statistical and product improvement purposes.

As a Will PKR user, you have the following rights in relation to your personal data. These rights can be exercised by contacting Will PKR's support team at support@willpkr.net with the subject line "Data Rights Request". Will PKR will respond within 30 days of receiving a valid request.

Will PKR will not charge a fee for handling data rights requests unless a request is clearly unfounded or excessively repetitive. In such cases, we will explain our reasoning before applying any charge.

Will PKR implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration or destruction. Key security measures in place include:

• TLS encryption on all data in transit between your device and Will PKR's servers
• Encrypted storage of sensitive data fields including passwords (which are hashed and salted — Will PKR's own staff cannot view your password) and identity document data
• Access controls limiting which Will PKR staff can access which categories of user data, based on job function
• Audit logging of all access to personal data records by internal staff
• Regular security assessments of Will PKR's infrastructure and application layer
• Two-factor authentication (2FA) available and recommended for all Will PKR accounts

Despite these measures, no digital system can guarantee absolute security. Will PKR will notify affected users and relevant authorities in the event of a data breach that poses a risk to your rights and interests, as quickly as practically possible after the breach is identified.

Will PKR uses account data to support its responsible gaming commitments. Specifically, we may use your betting and deposit activity to identify patterns that are consistent with problem gambling behaviour — such as rapidly escalating bet sizes, frequent deposits following losses, or unusual session lengths. When such patterns are identified, Will PKR may proactively reach out to offer responsible gaming tools.

This processing is based on Will PKR's legitimate interest in preventing gambling-related harm to its users. It is not used to target you with additional promotional offers — its sole purpose is player welfare. You can opt out of this proactive monitoring by contacting support, though doing so means Will PKR will not be able to alert you if concerning patterns emerge in your account activity.

Data related to self-exclusion, cooling-off periods and deposit limits is retained for the full term of any active restriction plus 2 years after it expires. This is to ensure that reinstated accounts are not offered bonuses or promotional content during the period immediately following a self-imposed restriction.

For more information about the responsible gaming tools available on Will PKR, visit our Responsible Gaming page.

Will PKR reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer or applicable legal requirements. When changes are made, we update the "Last Updated" date at the top of this page.

For material changes — meaning changes that significantly affect how we use your personal data or your rights over it — Will PKR will notify registered users by email at least 14 days before the changes take effect. This gives you time to review the updated policy and contact us if you have concerns before the changes apply to your account.

Minor updates — such as clarifications of existing practices, correction of typographical errors or changes to our contact details — may be made without prior notification beyond updating the page. It is good practice to check this page periodically if you want to stay informed of Will PKR's current data practices.

If you have questions about this Privacy Policy, want to exercise a data right, or want to raise a concern about how Will PKR handles your personal data, you can contact us through the following channels:

• Email: support@willpkr.net — use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure it reaches the right team quickly
• Live Chat: Available 24/7 inside your Will PKR account — for general privacy questions, support agents can assist or escalate to the appropriate team

Will PKR aims to respond to all privacy-related enquiries within 5 working days. Data rights requests as described in Section 7 are handled within 30 days of a valid request being received. If a request is complex or involves a large volume of data, we may extend this to 60 days — in which case we will inform you within the initial 30-day period.

Will PKR takes privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.