pkabet Privacy Policy — How We Handle Your Data

pkabet ("we", "us", "our") operates the online casino and sports betting platform available at pkabet.net (the "Platform"). In the course of providing the pkabet Platform to registered users ("you", "your", "User"), pkabet collects, processes, stores, and in certain circumstances shares personal data relating to those users. This Privacy Policy governs all such data processing activities.

pkabet takes its data protection obligations seriously. The Platform is used by a significant number of players from across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi — and pkabet recognises that the personal data of its Pakistani player base deserves the same rigorous protection as that applied to users of internationally regulated financial services platforms.

This Privacy Policy should be read alongside the pkabet Terms & Conditions, which govern the contractual relationship between pkabet and registered users. By creating a pkabet account or using the pkabet Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, where consent is the applicable lawful basis for such processing.

pkabet reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered users via their registered email address or a prominent notice on the Platform. The version number and effective date at the top of this document indicate the currency of the version you are reading.

pkabet collects the following categories of personal data in the course of operating the Platform. pkabet applies the principle of data minimisation — only data that is necessary for the stated purposes is collected and retained.

pkabet collects personal data through the following channels and mechanisms:

• Direct Registration: Information you provide when creating your pkabet account via the registration form on the Platform, including name, email address, date of birth, mobile number, and city of residence.
• KYC Submission: Identity documents submitted by you through the pkabet KYC portal, including CNIC copies, passport pages, and payment method verification screenshots.
• Deposit and Withdrawal Transactions: Financial data generated when you make deposits via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, or when you submit withdrawal requests to your registered payment method.
• Gaming Activity: Data generated automatically as you use the pkabet Platform — including game sessions, wagers placed, in-play betting activity, bonus claims, and session duration records.
• Customer Support Interactions: Information you provide when contacting the pkabet support team via live chat or email, including the content of your communications and any additional documentation you submit.
• Automated Technical Data Collection: Device and session data collected automatically via server logs, session tracking, and cookies when you access the pkabet website or mobile platform — including your IP address, browser type, and device identifiers.
• Third-Party Verification Providers: Identity and AML check data returned by pkabet's third-party KYC and anti-money laundering compliance providers in response to verification checks conducted on your submitted identity documents.

pkabet processes your personal data only where a recognised lawful basis for that processing exists. The applicable lawful basis depends on the specific processing activity in question and is set out below:

• Contractual Necessity: Processing that is necessary for pkabet to perform its obligations under the pkabet Terms & Conditions — including operating your account, processing deposits and withdrawals, and delivering the gaming services you have subscribed for. This is the primary lawful basis for the majority of pkabet's data processing activities.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML compliance obligations imposed by pkabet's international gaming license, age verification requirements, and financial crime reporting obligations.
• Legitimate Interests: Processing necessary for pkabet's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and analytics to improve the Platform — provided that those interests are not overridden by your rights and interests as a data subject.
• Consent: Processing for which pkabet relies on your explicit, freely given, specific, and informed consent — primarily in relation to the sending of marketing communications and the placement of non-essential cookies on your device. You may withdraw any consent given to pkabet at any time without penalty, though this will not affect the lawfulness of any processing carried out prior to withdrawal.

pkabet uses the personal data it collects for the following purposes, in each case on the lawful basis identified in Section 5:

• Account Administration: Creating, maintaining, and managing your pkabet account, including processing deposits, crediting winnings, processing withdrawals, applying bonuses, and administering your responsible gaming settings.
• Identity and Age Verification: Verifying your identity and confirming that you are aged 21 or above before enabling withdrawal functionality on your pkabet account, in compliance with pkabet's international licensing requirements and 21+ age policy.
• Payment Processing: Processing deposit transactions via JazzCash, EasyPaisa, and bank transfer and withdrawal transactions back to your registered payment method, including communicating with payment processors for transaction authorisation and settlement purposes.
• Fraud and Crime Prevention: Monitoring account activity for indicators of fraudulent conduct, bonus abuse, money laundering, identity fraud, and other criminal activity that may affect the integrity of the pkabet Platform or cause harm to legitimate users.
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling, administering player-selected responsible gaming tools such as deposit limits and self-exclusion, and implementing responsible gaming interventions where warranted under pkabet's player protection obligations.
• Customer Support: Responding to your support enquiries, investigating account-related complaints, resolving payment disputes, and maintaining records of support interactions for quality assurance purposes.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how players use the pkabet Platform and to make informed decisions about Platform improvements, new feature development, and content strategy.
• Marketing Communications: Sending you promotional emails, SMS messages, or Platform notifications about pkabet bonuses, new games, and special offers — but only where you have provided explicit consent for such communications and have not subsequently withdrawn that consent.
• Regulatory Compliance: Meeting pkabet's obligations under its international gaming license, including maintaining transaction records, cooperating with regulatory audits, and reporting to relevant authorities where legally required.

pkabet does not sell, rent, or trade your personal data to third parties for their own marketing purposes. pkabet shares your personal data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Your financial data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors as necessary to process deposit and withdrawal transactions. These processors operate under their own privacy policies and are contractually bound to handle your data securely and only for the purpose of transaction processing.
• KYC and AML Compliance Providers: Your identity documents and personal details may be shared with third-party KYC verification and AML screening service providers contracted by pkabet to conduct identity checks and financial crime screening. These providers are contractually bound as Data Processors under pkabet's data protection framework.
• Cloud Infrastructure Providers: pkabet's Platform is hosted on third-party cloud infrastructure. Your personal data is stored on servers operated by pkabet's cloud infrastructure provider, which processes data on pkabet's behalf under a Data Processing Agreement.
• Game Content Providers: Certain technical data (including session identifiers and game outcome records) is shared with the third-party game software providers whose titles are hosted on the pkabet Platform for the purpose of game session management and fair play certification. Personal identity data is not shared with game providers.
• Regulatory Authorities: pkabet may be legally required to disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities in connection with its licensing obligations, the investigation of suspected criminal activity, or in response to a valid legal order or court order.
• Fraud Prevention Networks: In the event that pkabet identifies or suspects fraudulent activity on a user account, relevant account and transaction data may be shared with industry fraud prevention networks and other online gaming operators to prevent the replication of fraudulent conduct across platforms.

pkabet uses cookies and similar tracking technologies on the pkabet website and Platform. Cookies are small text files placed on your device when you visit the Platform, which allow pkabet to recognise your device on subsequent visits, maintain your login session, and collect technical data about your use of the Platform.

pkabet uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the pkabet Platform to function correctly. They maintain your login session, remember your language and currency preferences, and enable core Platform functionality. These cookies cannot be disabled without impairing your use of the Platform and are placed on the basis of contractual necessity.
• Performance and Analytics Cookies: These cookies collect anonymised data about how users interact with the pkabet Platform — including which pages are visited most frequently, how users navigate between sections, and where users encounter errors. This data is used to improve the Platform. Placement of these cookies is subject to your consent.
• Functional Cookies: These cookies remember your preferences and customisations on the pkabet Platform — such as your preferred game categories and responsible gaming settings — to provide a more personalised experience. Placement of these cookies is subject to your consent.
• Security Cookies: These cookies support pkabet's fraud detection and account security systems, helping to identify unusual login patterns or suspicious session activity. These are placed on the basis of pkabet's legitimate interest in Platform security.

You may manage your cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the pkabet Platform. Most modern browsers allow you to view, manage, and delete cookies stored by websites you have visited.

pkabet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to the following:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pkabet Platform is encrypted using 256-bit SSL/TLS protocols, ensuring that data in transit — including login credentials and financial transaction data — cannot be intercepted by third parties.
• Encrypted Data Storage: Sensitive personal data stored on pkabet's servers — including identity documents, financial account details, and account passwords — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data held by pkabet is restricted to authorised personnel who require that access in order to perform their job functions. Access rights are reviewed periodically and revoked when no longer required.
• Two-Factor Authentication: pkabet's internal systems use two-factor authentication for access by pkabet staff. pkabet also offers two-factor authentication to registered users for their account login to provide an additional layer of account security.
• Penetration Testing and Security Audits: pkabet's Platform and data infrastructure undergo periodic security testing and independent audits to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: pkabet maintains a data breach incident response procedure. In the event of a confirmed data breach affecting your personal data, pkabet will notify affected users and, where required, the relevant regulatory authority within the timeframes specified by applicable law.

pkabet retains your personal data for as long as is necessary for the purpose for which it was collected, taking into account pkabet's legal obligations to retain certain categories of data for minimum prescribed periods under its international gaming license and applicable financial regulations.

The following retention periods apply to the principal categories of personal data held by pkabet:

• Account and Identity Data: Retained for the duration of your pkabet account registration and for a period of no less than five (5) years following permanent account closure, in compliance with pkabet's international anti-money laundering and gaming license record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with financial record-keeping requirements under pkabet's international gaming license.
• KYC Documents: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure. Where a KYC verification check was conducted but the account application was declined, documents are retained for the minimum period required by applicable AML regulations and then securely deleted.
• Gaming Activity Records: Retained for a minimum of five (5) years to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Responsible Gaming Records: Self-exclusion records are retained indefinitely to ensure that permanently excluded individuals cannot re-register. Other responsible gaming records are retained for five (5) years following account closure.
• Marketing Consent Records: Records of marketing consents and consent withdrawals are retained for as long as they remain relevant to the lawful basis for any marketing communications, and for a further two (2) years following the last marketing communication sent.
• Technical and Session Data: Log files and session data are retained for a rolling period of thirteen (13) months for security and fraud prevention purposes, after which they are automatically deleted or anonymised.

Upon expiry of the applicable retention period, pkabet will securely delete or irreversibly anonymise your personal data. Where anonymisation rather than deletion is applied, the resulting anonymised data set no longer constitutes personal data and is therefore not subject to the protections of this Privacy Policy.

As a data subject whose personal data is processed by pkabet, you hold the following rights under pkabet's data protection obligations. You may exercise any of these rights by contacting pkabet's data protection team at [email protected] with the subject line "Data Rights Request". pkabet will respond to all data rights requests within 30 days of receipt.

pkabet operates as an international online gaming platform and, as a consequence, your personal data may be transferred to, stored in, and processed in countries outside Pakistan. This includes transfers to the jurisdiction in which pkabet's cloud infrastructure is hosted and to countries in which pkabet's third-party KYC, payment processing, and game software partners are headquartered or operate their technical infrastructure.

Where personal data is transferred to a third country, pkabet ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied by pkabet. These safeguards may include data processing agreements incorporating standard contractual clauses, adequacy determinations, or other legally recognised transfer mechanisms appropriate to the circumstances of each transfer.

By registering for and using the pkabet Platform, you acknowledge that your personal data will be processed in accordance with this Privacy Policy regardless of where that processing physically takes place, and that pkabet is responsible for ensuring that appropriate safeguards are in place for all such international transfers.

The pkabet Platform is strictly for adults aged 21 years and above. pkabet does not knowingly collect personal data from individuals under the age of 21. The age verification process applied during KYC verification is pkabet's primary mechanism for ensuring that minors do not access the Platform.

If pkabet discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21, pkabet will immediately suspend the relevant account, investigate, and — where underage use is confirmed — permanently close the account and delete all personal data associated with it, except for records required to be retained to prevent future re-registration by the same individual.

If you are a parent or guardian and believe that a minor in your care may have registered for or used the pkabet Platform, please contact pkabet immediately at [email protected] so that the matter can be investigated and any account access terminated without delay.

pkabet may send you promotional communications about pkabet bonuses, new game launches, special events, and other pkabet-related offers by email, SMS, or in-Platform notification — but only where you have provided explicit consent to receive such communications during the account registration process or through your pkabet account communication preferences settings.

You may withdraw consent for marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email sent by pkabet;
• Updating your communication preferences in the pkabet account settings page;
• Contacting pkabet customer support via live chat or email with a request to be removed from all marketing communications.

Withdrawal of marketing consent will not affect the lawfulness of any marketing communications sent prior to the withdrawal, nor will it affect pkabet's ability to send you operational and account-related communications that are necessary for the administration of your pkabet account — such as transaction confirmations, security alerts, KYC requests, and responsible gaming communications.

pkabet will process all marketing opt-out requests within 10 business days of receipt. pkabet will not send marketing communications more frequently than permitted by applicable regulations governing electronic marketing, and will always include clear sender identification and an easy opt-out mechanism in every marketing message.

pkabet reserves the right to amend this Privacy Policy at any time to reflect changes in pkabet's data processing practices, changes in applicable law, or changes to the pkabet Platform that affect how personal data is collected or used.

Where a change is material — meaning it affects your rights or changes the purposes for which pkabet processes your personal data — pkabet will provide at least 14 days' advance notice of the change via your registered email address or a prominent notice displayed on the Platform upon login. Non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of pkabet's data processing activities — may be made without advance notice and will take effect upon publication of the updated Privacy Policy on the Platform.

The version number and effective date displayed at the top of this document indicate the currency of the version you are reading. It is your responsibility to review this Privacy Policy periodically to ensure you remain aware of how pkabet processes your personal data. Your continued use of the pkabet Platform following the effective date of any amendment constitutes your acknowledgement and acceptance of the amended Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights set out in Section 11, or wish to submit a complaint about pkabet's handling of your personal data, you may contact pkabet's data protection and customer relations team as follows:

• General Privacy Enquiries: [email protected] — Use the subject line "Privacy Enquiry" to ensure your message is routed to the correct team.
• Data Rights Requests: [email protected] — Use the subject line "Data Rights Request" and specify which right you are exercising (access, rectification, erasure, restriction, portability, or objection). pkabet will respond within 30 days of receipt.
• Data Breach Notification: If you believe your pkabet account has been compromised or accessed without authorisation, contact pkabet immediately via live chat (available 24/7) or email [email protected] with the subject line "Security Incident" so pkabet can take immediate action to secure your account.

pkabet takes all privacy and data protection concerns seriously and will endeavour to respond to all substantive enquiries within 5 business days. Where a response requires investigation or consultation with third-party processors, pkabet may require additional time but will keep you informed of progress at regular intervals.