Privacy Policy — pk48 Gaming Platform

Section 1

01 Introduction

This Privacy Policy ("Policy") is published by pk48 ("pk48", "we", "us" or "our") and applies to all personal data collected, processed and stored in connection with your use of the pk48 online gaming and sports betting platform, accessible at pk48.cam and any associated subdomains or applications (collectively, the "Platform").

We are committed to protecting the privacy and security of your personal information. This Policy explains in plain, formal terms what data we collect from you, why we collect it, how it is used, who it may be shared with, how long it is kept, and what rights you have in relation to that data.

This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy, which together form the full framework governing your relationship with pk48.

Section 2

02 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

Section 3

03 Personal Data We Collect

pk48 collects personal data across several categories, depending on how you interact with the platform. The data collected includes, but is not limited to, the following:

3.1 Identity & Registration Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used for age verification purposes);
• Residential address, including city (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• National identity number — for Pakistani nationals, this is your CNIC number;
• Email address and mobile phone number used for account registration.

3.2 Financial & Payment Data

• Deposit and withdrawal transaction records, including amounts in PKR/Rs;
• Payment method identifiers — such as mobile wallet numbers associated with Easypaisa or JazzCash accounts, bank account details (e.g., HBL, UBL, Meezan Bank, Bank Alfalah) or cryptocurrency wallet addresses where applicable;
• Source of funds documentation where requested under AML obligations.

3.3 Technical & Device Data

• IP address and approximate geolocation data;
• Device type, operating system and browser information;
• Session identifiers, login timestamps and activity logs;
• Cookie identifiers and analytics data collected via first-party tracking tools.

3.4 Gaming Activity Data

• Betting history, game session records and wager amounts;
• Sports markets accessed — including cricket, PSL, ICC events, football and other markets;
• Bonus and promotion usage records;
• Responsible gambling tool settings (deposit limits, session timers, self-exclusion status).

3.5 Communications Data

• Support tickets, Live Chat transcripts and email correspondence with pk48;
• Feedback, complaint records and dispute communications;
• Marketing communication preferences and opt-in/opt-out records.

Section 4

04 How We Collect Your Data

pk48 collects personal data through the following mechanisms:

1. Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting support;
2. Automated Collection: Technical data collected automatically when you access the platform, including via cookies, server logs and analytics tools;
3. Third-Party Sources: Identity verification data obtained from KYC service providers; fraud-detection signals from risk-management partners; payment verification data from payment processors. Such third-party sources are contractually bound to handle your data lawfully;
4. Responsible Gambling Tools: Account control settings and self-exclusion status data generated when you interact with our responsible gambling features.

Section 5

05 Data Processing & Use

pk48 uses the personal data we hold for the following specific purposes:

Section 6

06 Legal Basis for Processing

pk48 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• 6.1 Contractual Necessity: Processing required to fulfil our contractual obligations to you — including account registration, transaction processing and support services;
• 6.2 Legal Obligation: Processing required to comply with applicable laws, including KYC/AML requirements, tax record obligations and regulatory reporting;
• 6.3 Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security and responsible gambling monitoring — provided those interests do not override your fundamental rights;
• 6.4 Consent: Processing based on your explicit consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting prior lawful processing.

Section 7

07 Data Sharing & Disclosure

pk48 does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment Processors: To facilitate deposit and withdrawal transactions. Payment processors receive only the data necessary to process your specific transaction;
• KYC & Identity Verification Providers: To verify your identity and age in compliance with our regulatory obligations. Providers are contractually bound to maintain confidentiality and data security standards;
• Fraud Prevention & Risk Management Partners: To detect and prevent fraudulent activity, collusion and prohibited conduct on the platform;
• Technology & Infrastructure Providers: Cloud hosting, platform software and security service providers who process data as data processors on our behalf, under formal data processing agreements;
• Regulatory Authorities & Law Enforcement: Where required by law, court order, regulatory obligation or in response to a lawful request from a competent governmental authority;
• Professional Advisers: Legal counsel, auditors and accountants where necessary for the conduct of pk48's business operations, subject to professional confidentiality obligations.

Section 8

08 Data Retention

pk48 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status and for a defined period thereafter to meet legal, compliance and dispute-resolution obligations;
• KYC & AML Records: Retained for the period required by applicable anti-money laundering regulations — typically a minimum of five years from the end of the business relationship;
• Financial Transaction Records: Retained for accounting, tax and regulatory purposes in accordance with applicable law;
• Support & Communications Data: Retained for the period necessary to resolve any open query or dispute, with a general minimum retention period for compliance purposes;
• Marketing Consent Records: Retained for as long as necessary to evidence the basis on which communications were sent to you.

When personal data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you as an individual.

Section 9

09 Cookies & Tracking Technologies

pk48 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies may be placed on your device:

You can control non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the platform. Essential security and session cookies are required for the platform to operate and cannot be disabled through browser controls.

Section 10

10 Your Data Rights

Subject to applicable law and the specific circumstances of your request, you may have the following rights in relation to the personal data pk48 holds about you:

To exercise any of the above rights, please contact pk48 support via Live Chat or the Help Center within your account. We will respond to all verifiable requests within a reasonable timeframe, and in any event no later than 30 days from receipt of your request.

Section 11

11 Security Measures

pk48 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include:

• HTTPS/TLS encryption for all data transmitted between your device and the platform;
• Encrypted storage of sensitive account data at rest;
• Access controls restricting internal staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring;
• Incident response procedures to detect, investigate and mitigate data security events.

While we apply robust security practices, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your account credentials. If you believe your account has been compromised, contact pk48 support immediately.

Section 12

12 Minors & Age Policy

pk48 is an adults-only platform. We do not knowingly collect personal data from persons under the age of 18, or under the higher minimum age required by the operator's or license jurisdiction's regulations. Age verification is a mandatory component of our KYC process.

If we become aware that personal data has been collected from a person below the applicable minimum age, we will take immediate steps to delete that data and close the associated account. If you believe a minor may have accessed pk48 using your account or personal details, please contact support immediately so that we can take appropriate action.

Section 13

13 International Data Transfers

pk48 operates internationally, and your personal data may be processed or stored in servers located in jurisdictions other than Pakistan. When we transfer personal data outside the jurisdiction in which it was collected, we take steps to ensure appropriate safeguards are in place — including contractual data protection agreements with receiving parties and adherence to applicable data transfer frameworks.

By using pk48 and submitting personal data through the platform, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan. We will always handle your data with the same standard of care described in this Policy, regardless of where it is processed.

Section 14

14 Amendments to This Policy

pk48 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations or platform services. Where changes are material, we will provide notice via the platform or by email to your registered address, with reasonable advance notice before the changes take effect.

The version number and review date displayed at the top of this Policy reflect the most recently published version. Your continued use of the platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should discontinue use of the platform and contact support to close your account.

Section 15

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data we hold about you, please contact pk48 through the following channels:

• Live Chat: Available within your pk48 account — the fastest route for account-specific privacy queries;
• Help Center: Accessible from within the platform for self-service information on data rights and account management;
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line for faster routing.

We take all privacy requests seriously and will respond within a reasonable timeframe. For data deletion or access requests, you may be required to verify your identity before we can process your request — this is a security measure to protect your data from unauthorised requests.

Support is available in English. Urdu-language assistance may be available — please enquire via Live Chat.