pk69 Privacy Policy — How We Collect, Use, and Safeguard Your Personal Data

1.1 For the purposes of this Privacy Policy, the data controller responsible for your personal information is pk69, operating through the platform accessible at pk69.bid and all associated subdomains and mobile interfaces ("the Platform").

1.2 pk69 determines the purposes and means by which your personal data is processed. All enquiries concerning data protection, personal data requests, or this Privacy Policy should be directed to our dedicated support team at [email protected].

1.3 pk69 processes personal data in accordance with applicable international data protection standards. While the platform serves players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, and Faisalabad, it operates under the data governance framework applicable to its international licensing jurisdiction.

2.1 pk69 collects the following categories of personal data from players in the course of providing its services:

2.2 pk69 does not collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) except where voluntarily disclosed by a Player in the context of a responsible gaming self-exclusion application or support request.

3.1 Direct Collection. pk69 collects personal data directly from you in the following circumstances:

• When you complete the pk69 account registration form (name, mobile number, date of birth)
• When you submit KYC identity documents (CNIC upload, selfie verification)
• When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, or bank transfer
• When you contact our support team via live chat or email
• When you opt in to receive promotional communications or bonus offers
• When you complete responsible gaming questionnaires or apply for self-exclusion

3.2 Automated Collection. pk69 automatically collects certain technical and behavioural data when you access the platform, including through cookies, server logs, and embedded analytics tools. Please refer to Section 7 (Cookies & Tracking) for full details.

3.3 Third-Party Sources. pk69 may receive personal data about you from third-party sources, including:

• Payment processors (JazzCash, EasyPaisa, 1LINK, Raast) confirming transaction status
• Identity verification service providers used to authenticate CNIC data
• Fraud prevention and anti-money-laundering screening databases

4.1 pk69 processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

1. Performance of a Contract. Processing is necessary to fulfil the contractual obligations between pk69 and the Player, including account management, game delivery, payment processing, and withdrawal settlement.
2. Legal Obligation. Processing is required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and age verification duties.
3. Legitimate Interests. Processing is necessary for pk69's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by the Player's fundamental rights.
4. Consent. Where processing is based on consent — primarily in relation to marketing communications — players may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5.1 pk69 uses the personal data it collects for the following specific purposes:

• Account Management — creating, maintaining, and securing your pk69 account, including enabling pk69 login via your registered mobile number and password
• Payment Processing — facilitating PKR deposits and withdrawals through your chosen payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK) and maintaining transaction records
• KYC & Age Verification — verifying that all players are aged 21 or above before they may withdraw funds, as required by our responsible gaming obligations
• Game Delivery & Personalisation — presenting appropriate game lobbies, maintaining your session continuity, and recording game outcomes for settlement purposes
• Security & Fraud Prevention — detecting, investigating, and preventing unauthorised account access, payment fraud, bonus abuse, and multi-accounting
• AML Compliance — monitoring transaction patterns and, where required, submitting regulatory reports in accordance with applicable anti-money-laundering obligations
• Responsible Gaming — monitoring betting patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusions applied by the Player, and conducting proactive outreach where warranted
• Customer Support — responding to queries, processing complaints, and maintaining records of support interactions for quality and compliance purposes
• Platform Analytics & Improvement — understanding how players use pk69 in order to improve navigation, game selection, performance, and the overall user experience
• Marketing — sending promotional offers, bonus announcements, and pk69 news to players who have opted in to receive such communications (see Section 12)

6.1 pk69 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of carefully selected third parties, strictly as necessary to operate the platform and fulfil our obligations:

• Payment Service Providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive the transactional data necessary to process your deposits and withdrawals
• Identity Verification Partners — third-party KYC and CNIC verification services that authenticate the identity and age of Players before withdrawals are processed
• Game Software Providers — licensed game studios and RNG providers receive anonymised session data necessary to deliver and maintain the games accessible on pk69
• Fraud Prevention and AML Service Providers — specialised screening services used to detect financial crime, sanctions exposure, and account security threats
• Cloud Infrastructure and Hosting Providers — internationally certified server infrastructure providers who host pk69 data under contractual data protection obligations
• Regulatory and Law Enforcement Authorities — where required by applicable law, court order, or regulatory direction, pk69 will disclose personal data to the relevant authority

6.2 All third-party service providers engaged by pk69 are required to process personal data only in accordance with pk69's instructions and applicable data protection standards. They are not permitted to use Player data for their own independent purposes.

7.1 pk69 uses cookies and similar tracking technologies (including local storage, session storage, and browser fingerprinting) to operate the platform, maintain your login session, and gather analytics data that helps us improve your experience.

7.2 The following categories of cookies are used by pk69:

• Strictly Necessary Cookies — required for the platform to function. These cannot be disabled and include session authentication tokens, security cookies, and load-balancing identifiers.
• Functional Cookies — remember your preferences such as your preferred language, game lobby view, and responsible gaming settings.
• Analytics Cookies — collect anonymised data about how Players navigate pk69, which games are most popular, and where technical errors occur. This data is used to improve the platform.
• Marketing Cookies — used to deliver relevant promotional content within the pk69 platform based on your gaming history and stated preferences. These cookies are only activated where you have opted in to marketing communications.

7.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to access and use the pk69 platform effectively. Disabling analytics or marketing cookies will not affect your ability to play.

8.1 pk69 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations.

8.2 The following standard retention periods apply:

• Account Data (identity, contact information): retained for the lifetime of the Account plus a minimum of 5 years following account closure, to satisfy AML record-keeping obligations
• Financial Transaction Records: retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping standards
• Gaming & Betting History: retained for a minimum of 3 years from account closure for dispute resolution purposes
• Support Communication Records: retained for 3 years from the date of the last interaction
• KYC Documents (CNIC copies, verification records): retained for a minimum of 5 years following account closure
• Technical Logs (IP addresses, device records): retained for 90 days for security purposes, subject to ongoing investigation requirements

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9.1 pk69 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption — all data transmitted between your device and pk69 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols
• Data-at-Rest Encryption — sensitive personal and financial data stored on pk69 servers is encrypted using AES-256 encryption
• Access Controls — personal data is accessible only to pk69 staff with a demonstrated operational need. Role-based access controls and audit logging are enforced across all systems
• Two-Factor Authentication — available to all Players via SMS OTP to protect account access; mandatory for pk69 administrative accounts
• Penetration Testing and Security Audits — pk69 engages third-party security specialists to conduct regular vulnerability assessments and penetration tests of the platform
• Segregated Player Funds — Player PKR balances are held in accounts segregated from pk69's operational capital, protecting Player funds in all circumstances

10.1 pk69 operates as an internationally hosted platform. Your personal data may be transferred to, stored in, and processed in countries outside Pakistan, including the locations of our server infrastructure, game software providers, and identity verification partners.

10.2 Where personal data is transferred to countries that do not provide an equivalent level of data protection to international standards, pk69 ensures that appropriate safeguards are in place — including contractual data processing agreements requiring the receiving party to maintain protections materially equivalent to those applied by pk69.

10.3 By registering a pk69 account and using the platform, you acknowledge and consent to the cross-border transfer of your personal data as described in this Section, subject to the protections described herein.

11.1 Subject to applicable law and the restrictions described below, pk69 Players have the following rights in relation to their personal data:

• Right of Access — you may request a copy of the personal data pk69 holds about you
• Right to Rectification — you may request correction of inaccurate or incomplete personal data
• Right to Erasure — in certain circumstances, you may request deletion of your personal data, subject to our legal retention obligations
• Right to Restrict Processing — you may request that we limit our use of your data in defined circumstances, such as while a data accuracy dispute is being investigated
• Right to Data Portability — where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a machine-readable format
• Right to Object — you may object to processing based on legitimate interests, including processing for direct marketing purposes
• Rights Related to Automated Decision-Making — you have the right not to be subject to solely automated decisions that produce significant legal effects without human review

11.2 How to Exercise Your Rights. All data rights requests should be submitted to [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 48 hours and respond substantively within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case we will notify you of the delay and reason.

11.3 pk69 may decline requests where fulfilment would conflict with our legal obligations (for example, AML retention requirements) or where the request cannot be verified as coming from the legitimate account holder.

12.1 pk69 may send you promotional communications about bonuses, new games, special offers, and platform news where you have explicitly opted in to receive such communications at registration or subsequently through your account settings.

12.2 Opt-Out. You may withdraw your marketing consent and opt out of all promotional communications at any time by:

• Updating your communication preferences in your pk69 Account Settings
• Contacting [email protected] with the subject line "Unsubscribe"

12.3 Opting out of marketing communications does not affect your receipt of essential account communications, including deposit and withdrawal confirmations, security alerts, OTP messages, and support responses — these are sent as necessary for the operation of your Account and cannot be disabled.

12.4 pk69 does not send unsolicited marketing communications to Players who have self-excluded or who have applied a cooling-off period on their account. Self-excluded Players are also removed from all retargeting and re-engagement campaigns immediately upon exclusion.

13.1 pk69 is strictly an adults-only platform. Access to all Services is limited to individuals who are aged 21 years or above. pk69 does not knowingly collect personal data from or about individuals under the age of 21.

13.2 If pk69 discovers, or is notified, that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be closed, and any funds in the account will be returned to the originating payment method after verification.

14.1 The pk69 platform may contain references or links to third-party services, such as game software provider websites or payment service provider information pages. This Privacy Policy does not extend to any third-party websites or services not operated by pk69.

14.2 pk69 accepts no responsibility for the privacy practices of third-party platforms. We recommend that Players review the privacy policies of any third-party service they access, even where a link originates from the pk69 platform.

15.1 pk69 reserves the right to update this Privacy Policy at any time. Material changes that significantly affect how we use or share your personal data will be communicated to you via your registered mobile number or through a prominent notice on the pk69 platform, with at least 7 days' notice before the changes take effect.

15.2 The "Last Updated" date at the top of this document reflects the most recent revision. We encourage you to review this Privacy Policy periodically to remain informed of how pk69 protects your data.

15.3 Continued use of pk69 following notification of changes to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the platform and contact us to close your account.

16.1 All enquiries, data rights requests, and complaints relating to this Privacy Policy or pk69's data processing practices should be directed to:

16.2 pk69 takes all privacy complaints seriously. If you submit a complaint and are not satisfied with the resolution provided, you retain the right to escalate the matter to the relevant data protection authority applicable in your jurisdiction.

16.3 When contacting us regarding a privacy matter, please include your registered mobile number (do not include your full CNIC in an email), the nature of your concern, and any relevant transaction reference numbers, so that our team can locate your account records and respond efficiently.