pk99 –
Privacy Policy & Data Protection

1.1 This Privacy Policy ("Policy") describes how pk99 ("pk99," "we," "us," "our"), the operator of the online gaming platform available at pk99.site, collects, uses, stores, and protects the personal information of individuals ("you," "your," "Player") who access or use the pk99 platform and its associated gaming and betting services.

1.2 pk99 is committed to safeguarding the privacy of all players. This Policy is written in accordance with the privacy and data protection standards required by our international gaming license and applicable data protection frameworks.

1.3 By registering for or using the pk99 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the pk99 platform.

1.4 This Privacy Policy should be read in conjunction with the pk99 Terms & Conditions, which together form the complete agreement governing your use of the pk99 platform.

2.1 pk99 acts as the data controller in respect of all personal data collected from players through the pk99.site platform and its associated services. As data controller, pk99 determines the purposes for which and the means by which personal data is processed.

2.2 pk99 operates under an international gaming license that imposes specific data protection and AML (Anti-Money Laundering) obligations on the platform. Compliance with these obligations requires the collection and retention of certain categories of personal data as described in this Policy.

2.3 For all data-related enquiries, requests, and complaints, please contact the pk99 data protection team at: [email protected]

3.1 pk99 collects the following categories of personal data from players:

3.2 pk99 does not intentionally collect special categories of sensitive personal data (such as health information, religious beliefs, or political opinions) unless specifically required by regulatory obligation and subject to additional safeguards.

4.1 Direct Collection. Most personal data pk99 holds is provided directly by you. This includes information submitted at registration, during the KYC verification process, when making a deposit or withdrawal request, when contacting our support team, or when responding to surveys or promotions.

4.2 Automated Technical Collection. When you access the pk99 platform, certain technical data is collected automatically. This includes your IP address, device identifiers, browser information, and activity logs. This data is collected through standard server logs, cookies, and similar tracking technologies (see Clause 8 for full cookie details).

4.3 Third-Party Sources. pk99 may receive data about you from third parties in limited circumstances, including:

• Identity verification and KYC service providers.
• Payment processors such as JazzCash and EasyPaisa (transaction confirmation data only).
• Fraud prevention and security screening services.
• Regulatory bodies or law enforcement agencies where required by law.

5.1 pk99 processes personal data only where a valid legal basis exists. The legal bases pk99 relies upon are:

• Contractual Necessity: Processing required to perform the contract between pk99 and you — including operating your account, processing bets, and managing payments.
• Legal Obligation: Processing required to comply with our regulatory obligations, including KYC identity verification, AML transaction monitoring, and age verification mandated by our international gaming license.
• Legitimate Interests: Processing for purposes that serve pk99's legitimate business interests and do not override your fundamental privacy rights — including fraud prevention, platform security, usage analytics, and improving the pk99 product.
• Consent: Processing based on your freely given, specific, and informed consent — including sending you marketing communications and promotional offers. You may withdraw consent at any time.

6.1 pk99 uses your personal data for the following purposes:

• Creating, maintaining, and administering your pk99 player account.
• Processing deposits and withdrawals through JazzCash, EasyPaisa, and supported banks.
• Verifying your identity and age (minimum 21 years) in compliance with our licensing obligations.
• Detecting, investigating, and preventing fraud, money laundering, and other illegal activity.
• Providing customer support via live chat and email.
• Personalising your gaming experience on pk99, including game recommendations and bonus offers relevant to your activity.
• Sending transactional notifications, including deposit confirmations, withdrawal updates, and security alerts.
• Sending promotional communications where you have consented to receive them.
• Complying with responsible gaming obligations, including monitoring for signs of problem gambling and facilitating self-exclusion.
• Improving the pk99 platform through usage analysis and technical monitoring.
• Meeting legal, regulatory, and licensing requirements applicable to our gaming operations.

7.1 pk99 does not sell, rent, or trade personal data to third parties for commercial purposes. Data sharing is limited to the following categories of recipients and the specific purposes described:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the minimum transaction and identity data necessary to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and age verification services receive identity documents and biometric data solely for the purpose of verifying your identity in compliance with our licensing obligations.
• Fraud and Security Services: Anti-fraud and cybersecurity providers may receive technical data (IP addresses, device identifiers, session data) to assist in identifying and preventing fraudulent activity on the pk99 platform.
• Regulatory and Legal Authorities: pk99 is required to disclose player data to our licensing authority, relevant financial intelligence units, and law enforcement agencies where legally obligated to do so — including as part of AML reporting obligations. Such disclosures are made only to the extent required by law.
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity partners who provide the technical infrastructure on which the pk99 platform operates. All such providers are bound by data processing agreements with security obligations equivalent to those in this Policy.

7.2 Cross-Border Transfers. Some of pk99's infrastructure and service providers are located outside Pakistan. Where personal data is transferred internationally, pk99 ensures that adequate safeguards are in place — including contractual data protection clauses — to protect your data to at least the standard described in this Policy.

8.1 The pk99 platform uses cookies and similar tracking technologies to provide core functionality, improve user experience, and gather anonymous usage analytics. A cookie is a small data file stored on your device by your browser when you visit pk99.site.

8.2 Types of cookies used by pk99:

• Strictly Necessary Cookies: Required for core platform functions including login session management, security token maintenance, and shopping cart equivalents (active bets / wallet state). These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and preferred deposit method to personalise your pk99 experience.
• Analytical Cookies: Collect anonymous aggregate data about how players use the pk99 platform — pages visited, session length, game popularity. This helps us improve the platform over time.
• Security Cookies: Used to detect fraudulent login attempts, bot activity, and unusual session behaviour that may indicate a security threat to your account.

8.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent certain pk99 features from functioning correctly. For most Pakistani mobile users accessing pk99 via Chrome or Safari, standard browser cookie controls provide full management capability.

9.1 pk99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by our regulatory and legal obligations.

9.2 Retention periods applicable on pk99:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with AML and gaming license record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of transaction, as required by international AML standards applicable to our gaming license.
• KYC Verification Documents: Retained for the duration of your account and 5 years post-closure, or longer where required by regulatory instruction.
• Support Communications: Retained for 3 years from the date of the last interaction to support dispute resolution and quality assurance.
• Marketing Preferences: Retained until you withdraw consent or request erasure, whichever is earlier.
• Technical and Usage Logs: Typically retained for 12 months, used for security monitoring and platform analytics only.

9.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10.1 pk99 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS 1.3 Encryption in Transit: All data transmitted between your device and pk99's servers is encrypted using the current highest standard of Transport Layer Security.
• AES-256 Encryption at Rest: Sensitive data stored on pk99 servers, including payment details and identity documents, is encrypted at rest using AES-256.
• Access Controls: Access to personal player data within the pk99 organisation is strictly role-based. Only personnel with a specific operational need are granted access, and all access is logged and audited.
• Multi-Factor Authentication: Administrative access to pk99 systems that contain player data requires multi-factor authentication.
• Regular Security Testing: pk99 systems are subject to regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident Response: pk99 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, pk99 will notify affected players and relevant authorities within the timeframes required by our licensing obligations.

11.1 As a pk99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request." We will respond within 30 days of receiving a verifiable request.

11.2 Note that some rights are subject to limitations. For example, pk99 cannot delete transaction records or identity verification data that we are legally required to retain under our licensing and AML obligations, even if you request erasure of all data.

11.3 If you are dissatisfied with how pk99 has handled a data request or your personal data more broadly, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

12.1 The pk99 platform is strictly for adults aged 21 years and above. pk99 does not knowingly collect personal data from individuals under the age of 21.

12.2 pk99 employs age verification procedures at account registration and reserves the right to request proof of age at any point during a player's membership. Any account that cannot be verified as belonging to a person aged 21 or over will be suspended immediately.

12.3 If pk99 discovers or is notified that an account has been created by or for a minor, we will immediately suspend the account, refund any balance to the originating payment method (where verifiably belonging to a parent or guardian), and permanently delete all personal data associated with the minor's account.

13.1 pk99 may send you promotional communications about bonuses, new games, PSL special offers, and other platform news, subject to your consent. You will be asked at registration whether you wish to receive such communications.

13.2 You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences in your pk99 account settings.
• Contacting the pk99 support team via live chat or at [email protected].
• Using the unsubscribe link included in any marketing email sent by pk99.

13.3 Withdrawal of marketing consent will not affect your receipt of transactional and account-related communications, which are necessary for the operation of your pk99 account and cannot be opted out of while your account remains active.

13.4 pk99 will process opt-out requests within 5 business days. You may receive one final communication after your opt-out is logged while system updates are processed.

14.1 The pk99 platform may contain links to third-party websites, services, or resources for informational purposes. These links are provided for convenience only. pk99 has no control over the content, privacy practices, or data handling of any third-party site.

14.2 pk99 accepts no responsibility or liability for the privacy practices of any third-party websites linked from the pk99 platform. We strongly encourage you to read the privacy policies of any third-party site you visit before submitting personal information to it.

14.3 The presence of a link to a third-party site on the pk99 platform does not constitute an endorsement of that site or its content by pk99.

15.1 pk99 reserves the right to update or amend this Privacy Policy at any time. The most current version of the Policy will always be available at pk99.site/privacy-policy, with the effective date clearly stated at the top of the document.

15.2 Where changes to this Policy are material — for example, a significant change in the types of data collected, the purposes for which data is used, or your rights — pk99 will notify registered players via email or in-platform notification at least 14 days before the changes take effect.

15.3 Minor amendments, such as editorial corrections or clarifications that do not alter the substantive content of the Policy, may take effect immediately without prior notice.

15.4 Your continued use of the pk99 platform after any amendment to this Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or the personal data pk99 holds about you, please contact the pk99 data protection team through any of the following channels:

16.2 For responsible gaming support, self-exclusion requests, and data deletion requests related to problem gambling accounts, please visit our dedicated Responsible Gaming page for specific contact options.