butpkr Privacy Policy

1 Who We Are

butpkr is an internationally licensed online gaming platform accessible at butpkr.app, offering sports betting, live casino, slots, and instant games to eligible players. For the purposes of this Privacy Policy, butpkr acts as the data controller in respect of all personal data collected from players and website visitors.

This Privacy Policy applies to all personal data collected through the butpkr website, mobile platform, customer support channels, and any other touchpoint through which you interact with butpkr. It should be read alongside the butpkr Terms & Conditions, which govern your overall use of the platform.

2 Data We Collect

butpkr collects only the personal data that is necessary to operate a licensed online gaming service responsibly and securely. The categories of personal data we collect are set out in the table below:

butpkr does not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case it is used solely for the purpose of that request.

3 How We Collect Your Data

butpkr collects your personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion on butpkr.
• Automated collection: Technical and usage data collected automatically as you navigate the butpkr platform, via cookies, server logs, and similar tracking technologies. See Section 7 for full details.
• Third-party sources: Identity and address verification data received from licensed KYC and AML service providers (such as document verification agencies); fraud risk signals received from payment processors including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay; and geolocation data from IP intelligence services used to enforce access restrictions.

4 Legal Basis for Processing

butpkr processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account setup, payment processing, bet settlement, and customer support. Without this processing, butpkr cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and gaming licence conditions. butpkr is legally required to perform this processing and cannot waive it at a player's request.
• Legitimate interests: Processing carried out for butpkr's legitimate business interests where those interests are not overridden by your rights — including fraud detection, platform security, responsible gaming monitoring, and improving platform functionality.
• Consent: Processing for direct marketing communications and the use of non-essential cookies. You may withdraw your consent at any time by updating your communication preferences in your butpkr account settings or by contacting support.

5 How We Use Your Data

butpkr uses your personal data for the following specific purposes:

• To create, verify, and maintain your butpkr player account.
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20.
• To verify your identity and age (21+) as required by our international gaming licence.
• To detect and prevent fraud, money laundering, account takeover, and multi-accounting.
• To monitor your gaming activity for responsible gaming purposes, including identifying at-risk behaviour patterns and proactively offering responsible gaming tools.
• To settle bets, resolve disputes, and maintain auditable records of all transactions.
• To provide 24/7 customer support via live chat and email.
• To send you transactional communications — account confirmations, deposit receipts, withdrawal notifications, and security alerts — which are not subject to marketing opt-out as they are necessary for service delivery.
• To send you promotional communications, personalised offers, and bonus notifications, but only where you have consented to receive them.
• To improve the butpkr platform through anonymised analytics and user experience research.
• To comply with all applicable legal, regulatory, and licence obligations.

6 Sharing Your Data

butpkr does not sell your personal data. We share your data only where necessary and always under strict controls. The categories of recipients are as follows:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive transaction data necessary to process your deposits and withdrawals. Each payment partner is contractually bound to use your data solely for payment processing purposes.
• KYC and AML service providers: Licensed identity verification and document authentication providers who process your identity documents on butpkr's behalf for the sole purpose of completing KYC checks.
• Gaming software providers: Casino game and sportsbook technology providers who may receive anonymised session and bet data necessary to deliver their games and resolve technical disputes.
• Regulatory and law enforcement authorities: butpkr will disclose personal data to relevant gaming regulators, financial intelligence units, or law enforcement agencies where legally required to do so, without prior notice to the player where disclosure would prejudice a lawful investigation.
• IT and security infrastructure providers: Cloud hosting, cybersecurity, and data backup service providers who process data on butpkr's behalf under strict data processing agreements, with no right to use your data for their own purposes.

7 Cookies & Tracking Technologies

butpkr uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session when you are logged in, and to gather anonymised analytics that help us improve the platform experience for Pakistani players.

The cookies used on butpkr fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit, security tokens that protect your account from CSRF attacks, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred odds format, and your last-visited game lobby section. Disabling these will not prevent platform access but will reduce personalisation.
• Analytics cookies: Collect anonymised data about how players navigate the platform — pages visited, time on page, click paths — to help butpkr identify usability improvements. No personally identifiable information is included in analytics data sets.
• Responsible gaming cookies: Track session duration and activity patterns to support the delivery of responsible gaming alerts and session time reminders you have configured in your account settings.

You can manage cookie preferences via your browser settings at any time. Blocking all cookies may impact your ability to log in and use certain platform features. butpkr does not use third-party advertising or cross-site tracking cookies.

8 Data Retention

butpkr retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following minimum retention periods mandated by our gaming licence and applicable AML regulations:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, as required by anti-money laundering regulations applicable to licensed gaming operators.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for AML and financial compliance purposes.
• Responsible gaming records: Self-exclusion requests and responsible gaming tool activations are retained for the duration of your self-exclusion period plus five (5) years to prevent circumvention of protective measures.
• Customer support communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed, or until you withdraw consent, whichever is earlier.

Following the expiry of applicable retention periods, your personal data will be securely deleted or anonymised in a manner that prevents re-identification.

9 Your Rights

As a player on butpkr, you have the following rights with respect to your personal data. butpkr will respond to all rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days with prior notice to you.

To exercise any of the above rights, contact the butpkr support team via live chat from within your account dashboard or by email at [email protected] (plain text — not a clickable link). Please include your full name and registered email address so we can verify your identity before processing your request.

10 Security Measures

butpkr takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and butpkr servers is encrypted in transit.
• AES-256 encryption at rest: All personal data and financial records stored on butpkr infrastructure are encrypted at the storage layer.
• Two-Factor Authentication (2FA): Available to all players and strongly recommended to protect account access.
• Role-based access controls: butpkr staff access to personal data is strictly limited to the minimum necessary for each role. Access to player financial data requires elevated authorisation.
• Regular penetration testing: butpkr engages independent cybersecurity specialists to conduct regular penetration tests and vulnerability assessments of the platform.
• Incident response plan: butpkr maintains a documented data breach response plan and will notify affected players within 72 hours of becoming aware of a breach that poses a risk to their rights.

11 Minors & Age Policy

butpkr operates a strict 21+ age policy. The butpkr platform is not directed at, and is not intended for use by, any person under the age of 21. butpkr does not knowingly collect personal data from individuals under 21 years of age.

All new accounts are subject to mandatory age verification as part of the KYC process before full account functionality — including deposits, wagering, and withdrawals — is activated. Where butpkr has reasonable grounds to suspect that a registered player is under 21 years of age, the account will be suspended immediately pending age verification.

Any personal data inadvertently collected from a person under 21 will be permanently deleted upon discovery. Any funds deposited by a player subsequently found to be under 21 will be returned to the originating payment method. Any winnings generated during such a period will be void.

12 International Data Transfers

butpkr operates under an international gaming licence, and your personal data may be processed by butpkr and its service providers in jurisdictions outside of Pakistan. Where such transfers occur, butpkr ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements that impose data protection obligations on all third-party processors equivalent to those butpkr itself observes.
• Transfer to jurisdictions that maintain adequately equivalent data protection standards as assessed by butpkr's Data Protection Officer.
• Implementation of standard contractual clauses where required to ensure lawful cross-border data transfers.

Payment data related to JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and SadaPay transactions is processed within Pakistan by the respective Pakistani payment service providers, subject to their own privacy policies and applicable Pakistani financial regulations. butpkr does not store your full bank account numbers or mobile wallet PINs on its own servers.

13 Changes to This Privacy Policy

butpkr reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable data protection laws, gaming regulations, business practices, or platform functionality. The "Last Updated" date at the top of this page will be revised whenever a change is made.

For material changes that significantly affect how butpkr processes your personal data or that reduce your privacy rights, butpkr will provide at least fourteen (14) days' advance notice via the email address registered to your account. For minor or clarificatory amendments, the updated Policy will be published on this page without individual notification.

Your continued use of the butpkr platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with a material change, you should close your butpkr account before the revised Policy takes effect by contacting our support team.

14 Contact & Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way butpkr handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your butpkr account dashboard. Live chat is the fastest way to reach a support agent for any privacy-related query.
• Email (plain text — not a clickable link): [email protected] — Please use the subject line "Privacy Request" and include your full name and registered email address so we can verify your identity efficiently.

butpkr has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection obligations. The DPO can be reached via the same email address above with the subject line "Attention: DPO". butpkr aims to acknowledge all privacy-related correspondence within 48 hours and to provide a substantive response within thirty (30) days.