8pkr Privacy Policy
Your Data. Protected.

The data controller responsible for the personal data of all 8pkr players is the operator of the 8pkr platform — an internationally licensed gaming operator accessible at https://8pkr.ws. When this Privacy Policy refers to "8pkr", "we", "us", or "our", it refers to this entity in its capacity as data controller.

As data controller, 8pkr determines the purposes and means by which your personal data is collected and processed. 8pkr operates in compliance with the data protection requirements set out under its international gaming licence and in accordance with globally recognised data protection principles including those reflected in the General Data Protection Regulation (GDPR).

For all data protection enquiries, subject access requests, or privacy-related complaints, you may contact 8pkr's designated data protection point of contact by emailing [email protected] with the subject line "Data Privacy Request".

8pkr collects personal data through multiple touchpoints during your relationship with the platform. The categories of personal data we collect are as follows:

Identity & Registration Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Pakistani National Identity Card (CNIC) number and document image, or equivalent identity document for non-Pakistani players.
• Residential address in Pakistan or elsewhere.
• Email address used for account registration and communications.
• Mobile phone number, including the number registered to your JazzCash or EasyPaisa account.

Financial & Transaction Data:

• JazzCash account number and registered mobile number.
• EasyPaisa account number and registered mobile number.
• Bank account details (HBL, UBL, Meezan Bank, or other Pakistani banks) where bank transfer is used.
• Full deposit and withdrawal transaction history, including timestamps, amounts in PKR, and transaction reference numbers.
• Wallet balance history and bonus transaction records.

Gaming & Betting Activity Data:

• Complete bet history across all casino games and sports betting markets.
• Game session durations, win/loss records, and stake amounts in PKR.
• Sports betting selections, odds accepted, and settlement outcomes.
• Responsible gaming tool usage, including deposit limits set, cool-down activations, and self-exclusion requests.

Technical & Device Data:

• IP address and approximate geographic location at time of login and during active sessions.
• Device type, operating system, browser type, and version.
• Device fingerprint used for duplicate account detection and fraud prevention.
• Cookie identifiers and session tokens (see Section 6 for full cookie details).

Communications Data:

• Records of live chat conversations with 8pkr's customer support team.
• Email correspondence sent to or received from 8pkr.
• Complaint and dispute records.

8pkr uses the personal data described in Section 2 for the following specific purposes:

8pkr does not use personal data for automated individual decision-making that produces significant legal effects on players, except where such processing is required for AML compliance or fraud detection, in which case players retain the right to request human review of any automated decision.

8pkr processes personal data on the following legal bases as recognised under internationally applicable data protection frameworks:

• Contract Performance: Processing is necessary to perform the contract between 8pkr and the player — including operating the player's account, processing transactions, and providing access to casino games and sports betting markets.
• Legal Obligation: Processing is required to comply with 8pkr's obligations under its international gaming licence, including KYC identity verification, AML transaction monitoring, responsible gaming intervention, and regulatory reporting.
• Legitimate Interest: Processing is necessary for 8pkr's legitimate business interests, including fraud prevention, security monitoring, duplicate account detection, and platform analytics — where these interests are not overridden by players' fundamental rights.
• Consent: Where processing is based on consent — specifically for marketing communications and optional personalisation features — you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent may be withdrawn via your account settings or by contacting support.

8pkr does not sell your personal data. We share personal data with third parties only where strictly necessary and only with parties who are contractually required to handle your data in accordance with applicable data protection standards. The categories of third parties with whom 8pkr may share your data are:

• KYC Verification Partners: Licensed identity verification service providers who process CNIC images, selfie verification data, and address documents on behalf of 8pkr to fulfil our legal KYC obligations.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other licensed Pakistani payment service providers involved in processing your deposits and withdrawals. These entities receive only the data necessary to complete the specific transaction.
• Game Content Providers: Third-party casino game developers and live dealer studio operators whose games are hosted on the 8pkr platform. These providers receive anonymised session data for game integrity auditing purposes and do not receive your full identity data.
• Regulatory Authorities: 8pkr's international gaming licence regulator and, where required by applicable law, Pakistani financial intelligence and law enforcement authorities. Disclosure to such bodies is carried out in strict compliance with applicable legal requirements.
• Cloud Infrastructure Providers: Secure cloud hosting partners who provide the infrastructure on which 8pkr's platform and data storage operates. These providers are subject to strict data processing agreements and do not access player data for their own purposes.
• Fraud Prevention Networks: Industry fraud intelligence sharing networks in which 8pkr participates to protect Pakistani players from account takeover, payment fraud, and bonus abuse. Sharing is limited to anonymised risk signals and confirmed fraud event data.

8pkr uses cookies and similar tracking technologies on its website to ensure proper platform functionality, maintain session security, and understand how players interact with the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the 8pkr platform to function and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load balancing identifiers. No personal data is shared with third parties via strictly necessary cookies.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game categories, and deposit limit display preferences — to provide a more personalised experience on return visits.
• Analytics Cookies: 8pkr uses anonymised analytics cookies to understand aggregate platform usage patterns — such as which game categories are most popular among Pakistani players and where players encounter technical difficulties. Individual player behaviour is not linked to identity data in analytics processing.
• Security Cookies: Device fingerprinting and risk scoring cookies help 8pkr identify suspicious login attempts, detect duplicate account registrations, and flag unusual transaction patterns for fraud review.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to the 8pkr platform. Disabling functional or analytics cookies will not affect your ability to play games or process transactions.

8pkr retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any mandatory retention obligations imposed by 8pkr's international gaming licence or applicable law. The following retention periods apply:

• Active Account Data: All personal data associated with an active 8pkr account is retained for the full duration of the account's active status.
• Post-Closure Retention: Following voluntary or involuntary account closure, 8pkr retains identity documents, transaction records, and communication logs for a minimum of five years from the date of closure, in compliance with AML and gaming licence record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for a minimum of five years following the completion of the KYC process or the closure of the account, whichever is later.
• Marketing Data: Where processing was based on consent, marketing preference data and associated identifiers are deleted within 60 days of consent withdrawal, except where retention is required for suppression list management to ensure opted-out players are not re-contacted.
• Anonymous Analytics Data: Aggregated, anonymised analytics data that cannot be linked back to an individual player is retained indefinitely for platform improvement purposes.

8pkr implements technical and organisational security measures proportionate to the sensitivity of the personal data we process. Our security infrastructure includes:

• Encryption in Transit: All data transmitted between your browser or mobile device and the 8pkr platform is encrypted using TLS 1.3. This applies to login sessions, deposit flows, game sessions, and all API communications.
• Encryption at Rest: Personal data and financial records stored on 8pkr's servers are encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key rotation policy.
• Access Controls: Access to personal data within 8pkr's internal systems is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular access rights reviews.
• Two-Factor Authentication: All 8pkr staff accounts with access to player data are required to use multi-factor authentication. Players are strongly encouraged to enable 2FA on their own accounts.
• Penetration Testing: 8pkr's platform undergoes regular third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident affecting player personal data, 8pkr has a documented incident response plan that includes assessment, containment, notification to affected players, and regulatory reporting within required timeframes.

While 8pkr takes all reasonable technical and organisational precautions to protect your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication to maximise the security of their own accounts.

As an internationally licensed gaming operator, 8pkr may transfer personal data to, and process it in, countries outside Pakistan — including the jurisdiction in which 8pkr's gaming licence is held and the locations of our cloud infrastructure and KYC verification partners.

Where personal data is transferred internationally, 8pkr ensures appropriate safeguards are in place to protect the data to an equivalent standard to that which it receives within Pakistan. These safeguards include:

• Data processing agreements with all third-party recipients that include binding data protection obligations.
• Transfer to recipients in jurisdictions that maintain adequacy determinations or equivalent data protection frameworks.
• Standard contractual clauses or equivalent transfer mechanisms where transfers are made to jurisdictions without formal adequacy determinations.

You may request further information about the specific safeguards applicable to international transfers of your personal data by contacting 8pkr's support team at [email protected] with the subject line "International Transfer Enquiry".

8pkr is strictly an adult gaming platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes mandatory age verification steps, and KYC identity checks are designed to detect and prevent registration by minors.

If 8pkr discovers that personal data has been collected from a person under the age of 21, the following actions will be taken immediately:

• The account will be permanently closed and all access suspended.
• All funds in the account will be forfeited in accordance with 8pkr's Terms and Conditions.
• All personal data associated with the underage account will be deleted as promptly as possible, subject to any AML or regulatory retention obligations that may apply.
• Where required by the applicable regulatory framework, the incident will be reported to the relevant licensing authority.

To exercise any of the data rights described in this Privacy Policy — including access, rectification, erasure, restriction, portability, or withdrawal of consent — please submit a request to 8pkr using one of the following methods:

• Email: Send your request to [email protected] with the subject line "Data Rights Request". Include your registered account username and a description of the right you wish to exercise.
• Live Chat: Contact 8pkr's 24/7 live chat support team and request to be connected to the data privacy team. Live chat requests will be logged and escalated to the data privacy team within one business day.

8pkr will acknowledge all valid data rights requests within 5 business days of receipt and will provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, 8pkr may extend the response period by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

To protect the security of your personal data, 8pkr will require identity verification before processing any data rights request. You will be asked to confirm your account credentials and may be asked to provide a copy of your CNIC or other identity document if the request involves sensitive data or account changes.

8pkr reviews and updates this Privacy Policy periodically to reflect changes in applicable data protection law, our gaming licence requirements, platform functionality, or the data processing practices described herein. When a material update is made to this Privacy Policy, 8pkr will notify registered players by:

• Displaying a prominent notification banner on the 8pkr platform upon your next login.
• Sending an email notification to your registered email address summarising the key changes.

The updated Privacy Policy will be published on this page with a revised effective date and version number. Your continued use of the 8pkr platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the updated Privacy Policy, please stop using the platform and contact support to request account closure.

Minor updates — including typographical corrections, clarifications of existing provisions, and changes that do not materially affect your rights or 8pkr's data processing activities — may be implemented without advance notice and will be effective immediately upon publication on this page.

We recommend bookmarking this page and checking it periodically. The version number and effective date displayed at the top of this page and in the updated badge above always reflect the current version of the Privacy Policy in force.