920kr Privacy & Data Policy

This Privacy Policy ("Policy") describes how 920kr ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "Player") who access or use the 920kr platform at https://920kr.com, including its associated services, mobile interfaces, and support channels.

920kr is operated as an internationally licensed online sports betting and casino platform. We are committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection standards. Our platform is designed to serve Pakistani players, and we recognise the trust you place in us when you share your information.

By registering a 920kr account, depositing funds, placing bets, or otherwise using the 920kr platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the 920kr Terms and Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms and Conditions regarding data matters, this Privacy Policy shall take precedence.

920kr collects personal data through several channels: directly from you during registration and account management, automatically as you use the platform, and in limited circumstances from authorised third parties. The categories of personal data we collect are as follows:

920kr does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by applicable regulatory obligations and with your explicit consent where required.

920kr uses your personal data exclusively for the purposes set out below. We do not use your data for any purpose that is incompatible with the original reason for collection without first notifying you and obtaining any required consent:

• Account Creation & Management: To register, verify, and maintain your 920kr account, including processing deposits, withdrawals, and bet placement.
• Identity Verification (KYC): To fulfil our obligations under applicable anti-money laundering (AML) and Know Your Customer regulations, including verifying your identity, age, and payment method ownership before processing withdrawals.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, and other prohibited conduct on the 920kr platform.
• Legal & Regulatory Compliance: To comply with our obligations under applicable gaming regulations, anti-money laundering laws, and any lawful requests from regulatory authorities or law enforcement agencies.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with your 920kr account via live chat and email.
• Platform Improvement: To analyse anonymised aggregate usage data in order to improve the performance, features, and overall user experience of the 920kr platform.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour and to apply responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion where triggered.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about 920kr — but only where you have opted in to receive such communications. You may opt out at any time via your account settings or by contacting our support team.

920kr processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to provide you with a functioning 920kr account, process your bets, and manage your deposits and withdrawals.
• Legal Obligation: Processing that is required to comply with applicable laws, including AML regulations, KYC obligations under our gaming licence, and mandatory reporting requirements.
• Legitimate Interests: Processing for 920kr's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily applied to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where processing is based on legitimate interests, 920kr has conducted a balancing assessment to ensure that your interests and fundamental rights do not override our legitimate interests. Details of these assessments are available from our data protection contact upon request.

920kr uses cookies and similar tracking technologies on its platform to ensure core functionality, maintain session security, and gather anonymised analytics data. The following types of cookies are used on the 920kr platform:

• Strictly Necessary Cookies: These cookies are essential for the 920kr platform to function. They maintain your login session, remember your preferences, and enable secure transactions. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your language preference, betting interface layout choices, and other personalisation settings to improve your 920kr experience across sessions.
• Analytics Cookies: 920kr uses anonymised analytics tools to understand aggregate user behaviour — such as which pages are most visited and how long sessions last — so that we can continually improve the platform. No individual player is identifiable from analytics data.
• Security Cookies: These cookies help detect fraudulent activity, bot traffic, and other security threats in real time, protecting both 920kr and its players from harm.

920kr does not use third-party advertising or retargeting cookies. You will not find Facebook Pixel, Google Ads tracking, or similar advertising network trackers operating on the 920kr platform.

920kr does not share your personal data with third parties except in the limited circumstances described below. In all cases, third parties who receive your data are bound by strict confidentiality and data protection obligations:

• Payment Processors: When you make a deposit or request a withdrawal, your payment details are shared with the relevant payment service provider (e.g., JazzCash, EasyPaisa, HBL) solely for the purpose of processing the transaction. These providers operate under their own privacy policies and applicable financial regulations.
• Game Technology Providers: 920kr's casino and slot game library is powered by licensed third-party game providers. These providers may receive technical session data (such as bet amounts and game outcomes) necessary to operate the games and verify results. They do not receive your full identity or contact data.
• KYC & Identity Verification Services: 920kr may use authorised third-party KYC service providers to assist in verifying the identity documents you submit. These providers process your data under binding data processing agreements and applicable data protection law.
• Regulatory & Law Enforcement Authorities: 920kr will disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory direction. Where legally permitted, 920kr will notify you of such disclosure.
• AML Compliance Reporting: Where 920kr is obligated to file suspicious activity reports under applicable AML regulations, relevant account and transaction data will be disclosed to the appropriate authorities. 920kr is legally prohibited from notifying you (tipping off) if such a report is filed.

Beyond the categories above, 920kr will not share your personal data with any third party without your explicit prior consent.

920kr is Pakistan's crypto-first betting platform, accepting Bitcoin (BTC), USDT TRC20, JazzCash, EasyPaisa, HBL, and SadaPay. The privacy implications of each payment method differ, and 920kr handles payment data accordingly:

• Cryptocurrency Transactions (Bitcoin, USDT TRC20): Crypto deposits and withdrawals are processed on-chain. 920kr records your wallet address and transaction hash for compliance and fraud prevention purposes. While blockchain transactions are publicly visible by nature, 920kr does not publish or unnecessarily disclose your wallet address to third parties beyond regulatory requirements.
• Mobile Money (JazzCash, EasyPaisa): Your registered mobile number associated with JazzCash or EasyPaisa is collected and stored as a payment method identifier. This data is used exclusively for transaction processing and fraud prevention, not for marketing purposes unless you have opted in.
• Bank Transfer (HBL, SadaPay): Account name and account number details provided for bank transfer withdrawals are stored securely and used only to process the relevant withdrawal. These details are not retained beyond the period necessary for transaction reconciliation and KYC compliance.

920kr retains your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory retention obligations, and to resolve disputes or enforce agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained for multiple purposes with different retention periods, the longer period applies until all purposes have been fulfilled.

920kr implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• TLS Encryption: All data transmitted between your browser or device and 920kr's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Password Hashing: Account passwords are never stored in plain text. 920kr applies industry-standard cryptographic hashing with salting to all stored passwords, meaning even 920kr staff cannot read your password.
• Two-Factor Authentication (2FA): 920kr provides optional 2FA for all registered accounts. We strongly recommend enabling 2FA in your account security settings to add an additional layer of protection beyond your password.
• Access Controls: Access to personal data within 920kr's internal systems is restricted on a strict need-to-know basis. Staff members are only granted access to the categories of personal data necessary to perform their specific job functions.
• Security Monitoring: 920kr operates continuous security monitoring on its platform infrastructure to detect and respond to suspicious activity, attempted intrusions, and data anomalies in real time.
• Third-Party Audits: 920kr's security infrastructure and data handling practices are subject to periodic review by independent security professionals to identify and remediate vulnerabilities.

As a 920kr player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact 920kr's support team via live chat or at [email protected] with your account username and a description of your request:

• Right of Access: You have the right to request a copy of the personal data 920kr holds about you. We will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many data fields directly through your 920kr account settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances you may request that 920kr delete your personal data. Please note that this right is not absolute — 920kr may be required to retain certain data for legal, regulatory, or contractual reasons even after account closure.
• Right to Restriction: You have the right to request that 920kr restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a portable format and, where technically feasible, to have it transferred directly to another controller.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. 920kr will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

920kr will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

920kr is strictly a 21+ platform. We do not knowingly collect, process, or store personal data from any individual under the age of 21. The 920kr registration process includes mandatory age verification steps, and KYC procedures are in place to detect and prevent underage registration.

If you are a parent or guardian and believe that a person under the age of 21 has created a 920kr account or submitted personal data to 920kr, please contact our support team immediately at [email protected]. Upon verification of the report, 920kr will promptly close the account, void any associated transactions, and securely delete all personal data associated with the minor.

920kr operates on an internationally licensed basis and its server infrastructure, service providers, and operational teams may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where personal data is transferred internationally, 920kr ensures that appropriate safeguards are in place to protect your data to a standard equivalent to applicable data protection requirements. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities and incorporated into agreements with data processors located in third countries.
• Binding corporate rules where applicable within the 920kr group of companies.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.

You may request further details about the international transfer mechanisms applied by 920kr by contacting our support team at [email protected].

920kr reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our platform's services. When we make material changes to this Policy, we will notify registered players by email and/or by a prominent notice on the 920kr platform prior to the changes taking effect.

The "Effective Date" at the top of this page will always reflect the date on which the current version of the Privacy Policy came into force. We recommend that you review this page periodically to stay informed of how 920kr protects your personal data.

If you have any questions, concerns, or complaints about this Privacy Policy or about how 920kr handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the 920kr platform. Our Pakistani-fluent support team is on hand around the clock to assist you with privacy-related enquiries.
• Email: [email protected] — please include "Privacy Request" in the subject line, along with your 920kr account username and a clear description of your enquiry or request.

920kr aims to respond to all privacy-related enquiries within 5 business days and to resolve data rights requests within 30 calendar days as described in Section 10 above.

If you are dissatisfied with 920kr's response to your privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction under which 920kr's gaming licence is held. Details of the applicable authority are available from our support team upon request.