Privacy Policy

Welcome to the butpkr Privacy Policy. butpkr ("we", "us", "our", "the Platform") operates the online entertainment platform accessible at https://butpkr.cam. We are committed to protecting the personal data of every individual who visits, registers on or interacts with the Platform — including players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar.

This Privacy Policy describes the types of personal data butpkr collects, the purposes for which that data is processed, the lawful grounds on which we rely, the circumstances in which data may be shared with third parties, the security measures we apply, how long we retain data, and the rights you hold as a data subject. This Policy applies to all Users of the Platform, regardless of location.

Our data handling practices are guided by internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) and comparable frameworks, to the extent applicable to our operations. We do not represent that Pakistani data protection legislation mandates these standards, but we apply them as a matter of commitment to our players.

The following terms carry the meanings set out below throughout this Privacy Policy:

butpkr collects Personal Data across several categories depending on how you interact with the Platform. The following grid summarises the key data types collected:

butpkr collects Personal Data through a range of channels and methods:

• Account Registration: When you create a butpkr account, you provide identity, contact and security information directly through the registration form.
• KYC Verification: When you submit identity documents for age and identity verification, this data is collected directly from you and processed by our KYC service provider.
• Deposits and Transactions: Financial data is collected when you initiate deposits or withdrawals through the Platform's cashier. Payment processing is handled by third-party payment processors; butpkr receives transaction metadata but not full card credentials.
• Platform Use: Technical and usage data are collected automatically as you navigate the Platform, via server logs, analytics tools and session tracking technologies.
• Cookies and Similar Technologies: The Platform uses cookies, web beacons and similar tracking technologies to collect Technical Data and to support Platform functionality. See Section 8 for full details.
• Support Interactions: When you contact our support team — via email at [email protected] or through in-platform chat — the content of your communications is recorded and stored.
• Third-Party Sources: In limited circumstances, butpkr may receive data about you from third parties — for example, identity verification agencies, fraud prevention databases or publicly available registers — to fulfil our regulatory obligations.

butpkr processes your Personal Data on the following lawful grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing is necessary to perform our contract with you — for example, to maintain your account, process deposits, settle bets and process withdrawals.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory obligations — including KYC verification, anti-money laundering checks and responsible gambling assessments.
• Legitimate Interests: Processing is necessary for our legitimate interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, usage analytics and improving user experience.
• Consent: For marketing communications and non-essential cookies, butpkr relies on your freely given, specific, informed and unambiguous consent. You may withdraw consent at any time without detriment to your account status.

butpkr uses the Personal Data we collect for clearly defined purposes. We do not use your data for any purpose incompatible with those disclosed at the time of collection. The primary purposes for which we process your data are:

• Account Management: Creating and maintaining your account, verifying your identity and age, processing login requests and enabling access to Platform features.
• Transaction Processing: Facilitating deposits and withdrawals, maintaining transaction records and resolving payment disputes.
• Regulatory Compliance: Fulfilling KYC, anti-money laundering (AML) and counter-terrorism financing (CTF) obligations as required by our licensing and regulatory framework.
• Responsible Gambling: Monitoring betting patterns to identify indicators of problem gambling, enforcing self-exclusion and limit requests, and conducting affordability assessments where required.
• Platform Security and Fraud Prevention: Detecting and preventing fraudulent activity, account takeover attempts, multi-accounting, bonus abuse and other prohibited conduct as described in the Terms & Conditions.
• Customer Support: Responding to support queries, resolving disputes and maintaining records of communications for quality assurance and compliance purposes.
• Analytics and Product Improvement: Understanding how Users navigate the Platform, which features are most used, and how the user experience can be improved — using aggregated and anonymised data where possible.
• Marketing Communications: Sending promotional emails, bonus offers and product updates to Users who have opted in to receive such communications. You may opt out at any time.
• Legal Proceedings: Preserving and disclosing data as required by court order, regulatory investigation or other lawful legal process.

butpkr does not sell, rent or trade your Personal Data to any third party for their own commercial purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share financial transaction data with payment processors to facilitate deposits and withdrawals. These processors operate under contractual data protection obligations and are authorised to use your data only for the purposes of processing your transactions.
• KYC and Identity Verification Providers: We share identity document data with specialist KYC verification providers to fulfil our age and identity verification obligations. These providers are not authorised to retain your documents beyond the verification period without your consent.
• Fraud Prevention and AML Databases: We may share Technical Data and transaction data with fraud prevention and AML service providers to screen for prohibited conduct and comply with financial crime prevention obligations.
• Analytics Providers: Aggregated and anonymised usage data may be shared with analytics platforms to help us understand platform performance. No individually identifiable data is transmitted to analytics providers without appropriate safeguards.
• Regulatory and Legal Authorities: We will disclose Personal Data to competent authorities — including gambling regulators, law enforcement agencies and courts — where we are legally compelled to do so, or where disclosure is necessary to protect the safety of Users or the integrity of the Platform.
• Business Transfers: In the event of a merger, acquisition or transfer of substantially all of butpkr's business assets, User data may be transferred to the successor entity. Affected Users will be notified in advance and given the opportunity to close their accounts if they do not consent to the transfer.

butpkr uses cookies and similar tracking technologies to support the operation, security and improvement of the Platform. Cookies are small data files stored on your device when you visit the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens and load balancing cookies. These cookies cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Support personalisation features such as language preferences, previously visited games and display settings. These are not essential but improve your experience on the Platform.
• Analytics Cookies: Used to collect aggregated data on how Users interact with the Platform — including pages visited, session duration and navigation paths. This data helps us improve content and usability. Analytics cookies are only placed with your consent where required.
• Marketing and Retargeting Cookies: Used to deliver relevant promotional content. These cookies require your explicit consent and can be withdrawn through your browser settings or the Platform's cookie preference centre.

You may manage cookie preferences through your browser's built-in privacy settings. Disabling all cookies may affect the functionality of the Platform. For further information on managing cookies, consult your browser's documentation or visit a recognised online resource on cookie management.

butpkr retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with butpkr plus a minimum of five (5) years following account closure, to satisfy AML and regulatory record-keeping obligations.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, in accordance with standard AML compliance frameworks. Earlier deletion may be permitted where no regulatory obligation applies, upon written request.
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years to satisfy financial record-keeping and AML obligations.
• Support Communications: Retained for up to three (3) years from the date of the last communication, unless they are relevant to an ongoing dispute or regulatory matter.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever is earlier. Where consent has been withdrawn, marketing data will be deleted within 30 days.
• Technical and Usage Data: Server logs and session data are typically retained for up to twelve (12) months, after which they are aggregated, anonymised or deleted.

Where retention beyond these periods is required by a court order, regulatory investigation or other lawful requirement, butpkr will retain the relevant data for the duration of that requirement and inform the affected User where legally permissible.

butpkr implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive stored data is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a need-to-know basis. Role-based access controls and multi-factor authentication are enforced for all staff with access to production systems.
• Penetration Testing: butpkr conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in Platform infrastructure and code.
• Incident Response: butpkr maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Users and relevant supervisory authorities within the timeframes required by applicable law.
• Third-Party Security Standards: All Third-Party Service Providers with access to Personal Data are contractually required to maintain security standards at least equivalent to those applied by butpkr.

butpkr respects your rights as a data subject. The following rights are available to you in connection with the Personal Data we hold about you. We will respond to all verified rights requests within thirty (30) calendar days, and will notify you if an extension is required.

• Right of Access: You have the right to request a copy of the Personal Data butpkr holds about you, together with information about the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
• Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update most account details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and no other lawful basis exists, or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to Restriction of Processing: You may request that butpkr restrict processing of your data in certain circumstances — for example, while the accuracy of data is contested, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling and direct marketing. Where you object to direct marketing, we will cease processing your data for that purpose immediately upon receipt of your request.
• Rights in Relation to Automated Decision-Making: Where butpkr uses automated processes to make decisions about you that have legal or significant effects — for example, fraud detection systems — you have the right to request human review of that decision.

To exercise any of the above rights, please submit a written request to [email protected], including your full name, registered email address and a description of the right you wish to exercise. Identity verification may be required before we action your request to prevent unauthorised access to your data.

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by butpkr, please contact our support team. We are available 24 hours a day, 7 days a week, to assist players across Pakistan.

When contacting us regarding a data rights request, please include your full name, your registered account email address, and a clear description of your request or complaint. butpkr may ask you to verify your identity before actioning any request to protect your data from unauthorised disclosure.

For further information about our platform rules, please review the Terms & Conditions. For information about our commitment to player wellbeing, visit our Responsible Gambling page. Common questions about your account and the Platform are answered in our FAQ.

This Privacy Policy may be updated periodically to reflect changes in our data processing practices, changes in applicable law, or changes in the Platform's features and services. The most recent version will always be published at https://butpkr.cam/privacy-policy with the effective date displayed at the top of this page. We will notify registered Users of material changes via email or in-platform notification before they take effect.