pk48 Privacy Policy

1. Introduction

pk48 ("pk48", "we", "us", "our") operates the online gaming and sports betting platform accessible at pk48.app (the "Platform"). We take the privacy and security of your personal data seriously. This Privacy Policy ("Policy") describes how pk48 collects, uses, stores, and discloses personal information obtained from users ("Player", "you", "your") of the Platform, including players accessing pk48 from Pakistan and internationally.

By registering an account, logging in to pk48, or otherwise accessing or using the Platform in any manner, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the pk48 Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with pk48.

2. Data Controller

pk48 is the data controller responsible for your personal data collected through the Platform. As data controller, pk48 determines the purposes and means of processing your personal information. All queries, requests, and complaints relating to the processing of your personal data should be directed to the pk48 Data Protection contact set out in Section 16 of this Policy.

3. Data We Collect

pk48 collects the following categories of personal data in connection with the operation of the Platform:

• Identity Data: Full name, date of birth, gender, nationality, and government-issued identity document details (e.g., CNIC, passport) collected as part of the Know Your Customer ("KYC") verification process.
• Contact Data: Email address, Pakistani mobile telephone number, and postal address.
• Account Data: Username, encrypted password, account registration date, account status, and communication preferences.
• Financial Data: PKR deposit and withdrawal transaction records, payment method details (e.g., JazzCash account reference, Easypaisa wallet number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, or crypto wallet addresses where applicable), and transaction history.
• Gaming Data: Full betting and gaming history including wagers placed, game results, cricket match betting activity, live casino session records, and slot game play history.
• Technical Data: IP address, browser type and version, operating system, device identifiers, and login timestamps.
• Usage Data: Pages viewed, navigation paths through the Platform, session duration, and feature interaction data.
• Communications Data: Records of correspondence between you and pk48 support, including live chat logs, emails, and any other communications.
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, cooling-off periods, and any information disclosed in connection with responsible gaming tools.

4. How We Collect Data

pk48 collects personal data through the following means:

• Direct interactions: Data provided by you when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting support, or completing any other form or process on the Platform.
• Automated technologies: Data collected automatically as you navigate the Platform, including cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Data received from payment processors (including JazzCash, Easypaisa, and banking partners), identity verification providers, fraud prevention services, and publicly available data sources where necessary for KYC or fraud prevention purposes.

5. How We Use Your Data

pk48 processes your personal data for the following purposes:

• To create and manage your pk48 account and provide access to Platform services.
• To verify your identity and age in compliance with KYC obligations and responsible gaming requirements (18+ only).
• To process deposits and withdrawals in PKR via supported payment methods.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To enforce our Terms & Conditions and other policies.
• To provide customer support and respond to your enquiries.
• To send service-related communications, including account notifications, security alerts, and policy updates.
• To send promotional communications where you have consented to receive them (you may opt out at any time).
• To monitor responsible gaming behaviour and apply player protection measures where required.
• To improve Platform functionality, user experience, and game offerings through analysis of usage data.
• To comply with applicable legal and regulatory obligations.

6. Legal Basis for Processing

pk48 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pk48, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with KYC, anti-money laundering, responsible gaming, and other regulatory requirements.
• Legitimate interests: Processing conducted for fraud prevention, Platform security, service improvement, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing of data for direct marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

pk48 does not sell your personal data to third parties. We may share your data with the following categories of recipient where necessary:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and cryptocurrency processing partners, solely to process your financial transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age as required by regulatory obligations.
• Fraud prevention and security services: Service providers used to detect and prevent fraudulent activity on the Platform.
• Game content providers: Where necessary to deliver game content and resolve game-related disputes, limited gaming data may be shared with certified game providers.
• Legal and regulatory authorities: Where pk48 is required by law, court order, or regulatory direction to disclose personal data.
• Professional advisers: Lawyers, auditors, and other professional advisers acting on behalf of pk48 under obligations of confidentiality.

All third parties with whom pk48 shares personal data are required to implement appropriate technical and organisational security measures and to process data only as instructed by pk48.

8. International Transfers

Your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, pk48 implements appropriate safeguards including standard contractual clauses or equivalent mechanisms to ensure that your personal data receives a level of protection consistent with this Policy and applicable data protection standards.

9. Data Retention

pk48 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations, including anti-money laundering record-keeping requirements. Financial transaction records and KYC documentation are typically retained for a minimum of five (5) years following account closure. Gaming records may be retained for a longer period where required by the relevant gaming authority. Data that is no longer required for any lawful purpose will be securely deleted or anonymised.

10. Cookies & Tracking Technologies

pk48 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security features. These cannot be disabled.
• Performance and analytics cookies: Used to understand how players interact with the Platform, identify errors, and improve user experience. These are activated only with your consent.
• Functionality cookies: Used to remember your preferences, such as language settings and login status.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

11. Security Measures

pk48 employs appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption across the Platform, two-factor authentication options for player accounts, access controls limiting staff access to personal data on a need-to-know basis, regular security assessments and penetration testing, and secure encrypted storage of sensitive data including KYC documentation and financial records. Despite these measures, no transmission of data over the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, pk48 will notify affected users and relevant authorities as required by applicable law.

12. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by pk48:

• Right of access: The right to request a copy of the personal data pk48 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction: The right to request that pk48 restricts the processing of your data in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact pk48 using the details in Section 16 below. pk48 will respond to all legitimate requests within one calendar month. Identity verification may be required before requests can be processed.

13. Children's Privacy

The pk48 Platform is strictly intended for adults aged 18 and over. pk48 does not knowingly collect personal data from persons under the age of 18. If pk48 becomes aware that personal data has been collected from an underage individual, such data will be deleted immediately and the associated account closed. Parents and guardians who believe their child may have registered on pk48 should contact pk48 support immediately at [email protected].

14. Third-Party Links

The Platform may contain references to third-party payment processors and service providers. This Policy applies only to data processed by pk48 directly. pk48 is not responsible for the privacy practices of third-party services and encourages players to review the privacy policies of any third-party services they interact with.

15. Policy Updates

pk48 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform functionality. The current version of this Policy, including the date of last update, will always be published at pk48.app/privacy-policy. Where material changes are made, pk48 will notify registered players by email or via a prominent notice on the Platform. Your continued use of the Platform following notification of any update constitutes your acceptance of the revised Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by pk48, please contact our Data Protection team:

Email: [email protected]

pk48 will acknowledge your query promptly and endeavour to provide a full response within one calendar month. Where a request is complex or involves multiple queries, this period may be extended by a further two months, and you will be informed accordingly.