pk99 Privacy
Policy

01 Introduction

pk99 is Pakistan's leading online casino and sports betting platform, serving registered adult players from Karachi, Lahore, Faisalabad, Islamabad and across the country. As a platform that processes real-money transactions and verifies player identities, pk99 necessarily collects and processes personal data about its users.

We take that responsibility seriously. This Privacy Policy has been written to give you a clear, honest account of our data practices — what we collect, why we collect it, who we share it with (and why), how long we keep it, and what rights you have over it. We do not bury important information in footnotes or use deliberately obscure language. If something in this policy is not clear, contact our support team directly.

This policy should be read together with the pk99 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a matter relating to data privacy, this Privacy Policy shall prevail.

02 Personal Data We Collect

The categories of personal data pk99 collects depend on the nature of your interaction with the platform. The following table summarises the main categories:

pk99 does not collect or process special categories of personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) unless specifically required for identity verification in exceptional circumstances, in which case additional consent and safeguards will apply.

03 How We Collect Your Data

pk99 collects personal data through the following means:

• Direct collection — data you provide yourself when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your profile;
• Automated collection — technical and usage data collected automatically via cookies, server logs, and analytics tools as you interact with the pk99 platform;
• Third-party sources — identity verification data received from KYC and anti-fraud service providers engaged by pk99; payment transaction data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other payment processors.

04 Purpose & Legal Basis for Processing

pk99 processes your personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which pk99 processes personal data and the corresponding legal basis:

Where pk99 relies on legitimate interests as a legal basis for processing, we have assessed that our legitimate interests are not overridden by your privacy interests or fundamental rights. You may object to processing on legitimate interests grounds by contacting our support team.

05 Sharing Your Personal Data

pk99 does not sell or rent personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and cryptocurrency processors require transaction data to facilitate deposits and withdrawals on your behalf;
• KYC and identity verification providers — third-party services that process identity documents to verify your age and identity in compliance with AML standards;
• Fraud prevention and security services — to detect and prevent fraudulent activity, money laundering and account abuse;
• Game content providers — studios such as Evolution, Pragmatic Play and others may receive anonymised or pseudonymised session data necessary for fair-play verification and game operation;
• Regulatory and law enforcement authorities — where pk99 is required to disclose information by law, court order or regulatory instruction, we will comply;
• Professional advisers — legal, accounting and compliance advisers engaged by pk99, who are bound by professional confidentiality obligations.

06 International Data Transfers

As an internationally operated platform serving Pakistani players, some of your personal data may be transferred to, and processed in, countries outside Pakistan. Where such transfers occur, pk99 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that provide an adequate level of data protection as recognised by applicable international standards;
• Use of standard contractual clauses or equivalent data transfer mechanisms with service providers located in other jurisdictions;
• Ensuring that all third-party service providers who receive transferred data are contractually bound to maintain security standards at least equivalent to those applied by pk99.

07 Data Retention

pk99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following general retention principles apply:

• Account and transaction data — retained for a minimum of five (5) years following account closure or the last transaction, to comply with AML record-keeping obligations;
• KYC documents — retained for a minimum of five (5) years following account closure or the completion of the verification process;
• Customer support communications — retained for a minimum of two (2) years to support dispute resolution;
• Marketing data (where consent given) — retained until you withdraw consent or request removal;
• Technical and usage data — retained for up to twenty-four (24) months for analytics and security monitoring purposes.

When data reaches the end of its applicable retention period, pk99 will securely delete or permanently anonymise it in accordance with our data governance procedures.

08 Security Measures

pk99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration or destruction. Key security measures applied on the pk99 platform include:

• 256-bit SSL/TLS encryption on all data in transit between your device and pk99 servers;
• Encryption at rest for sensitive data stores including KYC documents and financial records;
• Two-factor authentication (2FA) available to all players for added login security following pk99 Login;
• Session monitoring to detect and respond to anomalous login patterns or suspicious account activity;
• Role-based access controls limiting internal access to personal data to authorised personnel with a documented business need;
• Regular security assessments including penetration testing and vulnerability scanning of the pk99 platform;
• Incident response procedures with defined notification timelines for data breaches where notification is required by applicable law.

While pk99 applies robust technical and organisational security measures, no system is entirely impenetrable. Players are encouraged to use strong, unique passwords for their pk99 accounts and to enable two-factor authentication from the account security settings.

09 Cookies & Tracking Technologies

pk99 uses cookies and similar tracking technologies on the platform to deliver and improve services. The categories of cookies used on pk99 include:

• Strictly necessary cookies — required for basic platform functions including pk99 Login session management, security tokens and navigation. These cannot be disabled without affecting platform functionality;
• Performance and analytics cookies — used to understand how players interact with the pk99 platform, which pages are visited most frequently, and where technical errors occur. Data collected is aggregated and anonymised;
• Functionality cookies — used to remember your preferences such as language settings, game filter selections and display preferences;
• Fraud prevention cookies — used to identify and prevent fraudulent access patterns and to support the security of your pk99 account session.

You can manage cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the pk99 platform, including the ability to complete pk99 Login or maintain an active session.

10 Your Data Subject Rights

As a data subject whose personal data is processed by pk99, you hold the following rights under applicable data protection law:

To exercise any of these rights, contact the pk99 support team via 24/7 live chat or submit a written request to [email protected]. pk99 will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case pk99 will notify you of the extension and the reasons for it.

Some rights are subject to limitations. For example, the right to erasure does not apply where pk99 is required to retain data under AML legislation or other applicable law. Where a request cannot be fulfilled in full, pk99 will provide a written explanation of the reason.

11 Marketing Communications

pk99 may send promotional communications — including offers, bonus notifications, tournament invitations and platform news — to registered players who have opted in to receive such communications during registration or through account settings.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the notifications section of your pk99 account settings following pk99 Login;
• Contacting the pk99 support team directly via 24/7 live chat and requesting removal from marketing lists.

Opting out of marketing communications will not affect service communications, which are transactional in nature and necessary for account operation — such as withdrawal confirmations, security alerts, verification requests and these policy updates.

12 Children & Minors

If pk99 becomes aware or has reasonable grounds to suspect that personal data has been collected from an individual under the age of 21 — whether through a falsified registration or any other means — pk99 will immediately suspend the account, delete the associated personal data to the extent not required for legal obligations, and take appropriate follow-up action in accordance with our responsible gaming and compliance policies.

If you are a parent or guardian and believe your child has registered on pk99, please contact our support team immediately so that the account can be closed and the data handled appropriately.

13 Responsible Gaming & Data

In order to fulfil its responsible gaming obligations, pk99 monitors certain usage patterns — including deposit frequency and amounts, session duration, and betting behaviour — to identify players who may be showing signs of problem gambling. This monitoring is conducted in pk99's legitimate interests and in compliance with applicable regulatory requirements.

Data collected as part of responsible gaming monitoring may be used to:

• Enforce deposit limits, loss limits and session time reminders set by the player;
• Identify and act on potentially problematic gambling behaviour, including proactively contacting affected players;
• Process and enforce self-exclusion requests, including preventing excluded players from registering new accounts;
• Comply with reporting requirements to licensing and regulatory bodies in respect of responsible gaming practices.

Self-exclusion data is retained for a minimum of five (5) years to prevent circumvention of exclusion periods. Players who have self-excluded cannot request deletion of their exclusion record during the exclusion period, as this data is necessary to fulfil pk99's regulatory obligations. For more information, visit the Responsible Gaming page.

14 Changes to This Privacy Policy

pk99 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — that is, where they significantly affect how we process your personal data or the rights available to you — pk99 will notify registered players via the registered email address or via an in-platform notification a reasonable time before the changes take effect.

Minor changes (such as clarifications of existing practices, updated contact details, or corrections of typographical errors) may be made without prior notice. The "Last Updated" date at the top of this policy reflects the date of the most recent revision. Your continued use of the pk99 platform following any update constitutes your acknowledgment of the revised policy.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data by pk99, please contact us through any of the following channels:

• 24/7 Live Chat — available directly on the pk99 platform following login. This is the fastest channel for most queries;
• Email — [email protected] (plain text, non-clickable). Include "Privacy Request" in your subject line for faster routing to the relevant team;

For formal data subject rights requests, please identify yourself as submitting a "Data Subject Rights Request" and include your registered pk99 account username and the mobile number or email address associated with your account so that we can verify your identity before processing the request.

pk99 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you may be entitled to escalate your concern to an applicable data protection supervisory authority.