920kr Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy applies to the 920kr platform — accessible at 920kr.pro — and to the 920kr mobile app for Android and iOS. It explains how 920kr collects, uses, stores and protects personal data relating to people who visit the site, register an account or use the platform's services.

By registering an account on 920kr, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree with any part of this policy, you should not use the platform.

This policy is part of the broader set of rules governing your use of 920kr. It should be read alongside the Terms and Conditions and the Responsible Gaming guidelines.

2. Data We Collect

920kr collects personal data in the following categories, depending on how you interact with the platform:

We do not collect your full JazzCash or Easypaisa PIN, your bank login credentials, or your card CVV. Payment transactions are handled through our payment processor integrations — 920kr does not store complete payment card numbers.

3. How We Use Your Data

920kr uses your personal data for the following purposes:

• Account management: To create and maintain your account, process your login, and manage your account settings and preferences.
• Identity verification: To confirm that you are who you say you are, that you meet the minimum age requirement of 18, and to satisfy fraud prevention obligations.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer and card. This requires sharing necessary transaction data with our payment processing partners.
• Platform operation: To deliver the gaming services you use — loading games, recording game results, crediting wins to your balance and maintaining transaction records.
• Customer support: To respond to your queries via live chat or email, and to investigate complaints or disputes related to your account.
• Responsible gaming: To monitor account activity for patterns that may indicate problem gambling, and to administer deposit limits, session reminders and self-exclusion requests.
• Security and fraud prevention: To detect and prevent unauthorised account access, money laundering, bonus abuse, and other fraudulent or prohibited activities.
• Platform improvement: Aggregate and anonymised usage data is used to understand how the platform is being used, which games are popular, and where the user experience can be improved.
• Communications: To send you transactional notifications — deposit confirmations, withdrawal updates, account security alerts. Promotional communications are sent only where you have not opted out.

4. Payment Data & PKR Transactions

All financial transactions on 920kr are conducted in Pakistani Rupees (PKR). Supported methods include JazzCash, Easypaisa, Raast, bank transfer and card. Each of these methods involves its own data handling by the respective provider — 920kr's role is to initiate and record the transaction on the platform side.

When you make a deposit via JazzCash or Easypaisa, the transaction is processed through that provider's system. 920kr receives confirmation of the transaction and credits your balance accordingly. We store a reference to the transaction — amount, method, timestamp, and the reference ID provided by the payment provider — but not your JazzCash PIN or mobile wallet password.

Withdrawal processing requires that your identity is verified. This is a standard anti-money-laundering measure and applies to all players, not just those withdrawing large amounts. The verification data you submit for this purpose is retained for the period required by applicable financial record-keeping standards.

Financial transaction records are retained for a minimum of five years from the date of the transaction, in line with standard financial compliance requirements. This is not negotiable and applies even if you close your account.

5. Sharing Your Data

920kr does not sell your personal data to any third party for marketing or commercial purposes. Your data may be shared with the following categories of third parties, and only where necessary:

• Payment processors: JazzCash, Easypaisa and other payment infrastructure providers receive the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy policies.
• Identity verification providers: Where document verification is required, data may be processed by a specialist identity verification service that confirms document authenticity.
• Game providers: Third-party game studios (Pragmatic Play, Evolution, NetEnt and others) may receive a session token or player identifier to load and operate their games. They do not receive your full personal profile.
• Platform infrastructure providers: Cloud hosting, database and security providers who operate the technical infrastructure for the platform access data as part of their contracted services, under data processing agreements with 920kr.
• Fraud prevention services: Transaction and account activity data may be checked against fraud detection systems to identify suspicious patterns.
• Legal obligations: If 920kr is required by a valid legal process to disclose personal data, we will comply with that requirement. Where legally permitted, we will attempt to notify the affected account holder.

6. Data Retention

920kr retains personal data for as long as is necessary for the purpose for which it was collected, and for any applicable legal or compliance obligations. The following general retention periods apply:

• Active account data: Retained for the lifetime of your account and for a period of up to two years after account closure, to handle any post-closure queries or disputes.
• Financial transaction records: Retained for a minimum of five years from the transaction date in line with financial record-keeping requirements.
• Identity verification documents: Retained for the period required by applicable compliance obligations — typically five years from the date of verification or account closure, whichever is later.
• Support communication records: Retained for up to three years from the date of the last interaction, unless the record relates to an unresolved dispute.
• Usage and gameplay logs: Retained for up to 24 months from the date of the session, unless relevant to a dispute.

When data is no longer required to be retained, it is securely deleted or anonymised so that it can no longer be linked to an individual.

7. Security Measures

920kr takes the security of your personal and financial data seriously. The following measures are in place to protect your information:

• TLS encryption: All data transmitted between your browser or app and the 920kr platform is encrypted using Transport Layer Security (TLS). This applies to all pages — including login, deposit flows and account settings.
• Password hashing: Your account password is stored as a one-way hash. 920kr staff cannot read your password — they can only reset it. This is why we will never ask you for your password.
• Biometric login: The 920kr mobile app supports fingerprint and Face ID authentication. Biometric data is processed locally on your device and is not transmitted to 920kr's servers.
• Access controls: Access to personal data within the organisation is restricted on a need-to-know basis. Staff who process support queries, for example, can access account details relevant to your query but cannot access full payment card data.
• Fraud monitoring: Automated and manual monitoring identifies unusual account activity — unexpected login locations, rapid multiple withdrawals, patterns associated with account takeover attempts.

No security measure is perfect, and 920kr cannot guarantee that data breaches will never occur. In the event of a breach that affects your personal data, we will notify affected users as required and take immediate steps to contain and investigate the incident.

8. Cookies & Similar Technologies

920kr uses cookies and similar local storage technologies on the website and in the mobile app. These are used for the following purposes:

• Session management: To keep you logged in during your session and maintain your account state across page loads.
• Preferences: To remember your lobby filter settings, language preference and other platform customisation choices.
• Security: To detect and prevent cross-site request forgery and other session-based attacks.
• Analytics: Aggregate, anonymised data about which pages are visited and which features are used helps us improve the platform. This data cannot be used to identify individual users.

920kr does not use third-party advertising tracking cookies. We do not participate in cross-site behavioural advertising networks. The cookies we use are first-party functional cookies and internal analytics only.

Most browsers and mobile operating systems allow you to manage cookie settings. Disabling cookies will affect platform functionality — in particular, session management requires cookies to function. If you disable cookies entirely, you may not be able to stay logged in.

9. Your Rights Over Your Data

You have the following rights regarding the personal data 920kr holds about you. To exercise any of these rights, contact the support team via live chat or email.

10. Minors

920kr is strictly an adults-only platform. Registration is permitted only for individuals aged 18 or over. We do not knowingly collect, store or process personal data from minors.

As part of the registration process, we collect date of birth information to verify minimum age eligibility. Where identity verification is conducted, date of birth is cross-checked against the submitted identity document. Accounts where underage use is detected or suspected are closed immediately and associated data handled in line with the Terms and Conditions.

11. Changes to This Privacy Policy

920kr may update this Privacy Policy from time to time as the platform evolves or as applicable requirements change. The date at the top of this page reflects the most recent update. Significant changes will be communicated to registered players via their registered email address.

Your continued use of the platform after a policy update constitutes your acceptance of the revised terms. We encourage you to review this page periodically so you're aware of how your data is being handled. If you have questions about any change, contact support before continuing to use the platform.

12. Contact — Data Queries

For any questions about this Privacy Policy, to exercise your data rights, or to report a privacy concern, you can reach the 920kr team through the following channels. Please note that for data access requests, we will need to verify your identity before providing information.

We aim to respond to all privacy-related enquiries within five business days. Complex data access requests may take longer — we will inform you if that is the case.