pk098 Privacy Policy

pk098 is an internationally licensed online casino and sports betting platform accessible at pk098.org. References to "pk098", "we", "us", or "our" in this Privacy Policy mean the operating entity behind the pk098 Platform and all associated digital products and services.

pk098 acts as the data controller with respect to the personal data of registered players and Platform visitors. As data controller, pk098 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

pk098 collects the following categories of personal data, depending on how you interact with the Platform:

pk098 does not collect or process special category data (such as racial or ethnic origin, political opinions, health data, or biometric data for identification purposes) except where required by law or by the conditions of our gaming licence (e.g., processing a self-exclusion request that touches on problem gambling history).

pk098 collects personal data through the following means:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your Account profile.
• Automated technologies: Technical data collected automatically when you access the Platform, including via cookies, server logs, pixel tags, and similar tracking technologies (see Section 7 for full cookie details).
• Third-party KYC providers: Identity verification data returned by licensed third-party verification services that cross-reference your submitted documents against official databases.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, bank transfer services, and cryptocurrency network confirmations.
• Fraud prevention and AML services: Risk scoring and screening data from licensed anti-money-laundering and fraud detection partners used to protect the Platform and its players.

pk098 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process transactions, and deliver the Services you have requested under the pk098 Terms & Conditions.
• Legal obligation: Processing required to comply with applicable anti-money-laundering (AML) regulations, gaming licence conditions, tax reporting obligations, and law enforcement requests.
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and improving the quality of our Services — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, optional personalisation features, or any other processing for which pk098 has obtained your explicit, freely given, and revocable consent.

Where consent is the legal basis for processing, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pk098 uses your personal data for the following purposes:

• Creating, verifying, and managing your pk098 Account.
• Processing deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bitcoin, and USDT.
• Conducting identity verification and age confirmation to ensure all players are 21 years of age or older.
• Complying with AML and Know Your Customer (KYC) obligations required under our international gaming licence.
• Detecting, investigating, and preventing fraud, cheating, collusion, money laundering, and other prohibited conduct on the Platform.
• Administering bonuses, promotions, and loyalty rewards in accordance with applicable promotional terms.
• Providing customer support and resolving disputes or complaints.
• Enforcing responsible gaming measures, including deposit limits, cooling-off periods, and self-exclusion requests.
• Sending transactional communications (account notifications, security alerts, withdrawal confirmations) which are non-optional.
• Sending promotional communications where you have opted in to receive them.
• Analysing Platform usage to improve game offerings, website performance, and the overall player experience.
• Meeting legal, regulatory, and licensing obligations.

pk098 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• KYC and identity verification providers: Licensed third-party services that verify the authenticity of identity documents and confirm player age.
• Payment processors: JazzCash, EasyPaisa, and partner banking institutions (HBL, UBL, Meezan Bank) for processing financial transactions; blockchain network validators for cryptocurrency transactions.
• Fraud prevention and AML partners: Licensed services that screen transactions and player profiles against watchlists and risk databases as required by our gaming licence.
• IT and infrastructure providers: Cloud hosting, database, and content delivery partners who process data on our behalf under strict data processing agreements.
• Regulatory and licensing authorities: Gaming regulators, tax authorities, law enforcement agencies, and courts where disclosure is required by law or by the conditions of our international gaming licence.
• Professional advisers: Lawyers, accountants, and auditors subject to professional confidentiality obligations.

All third-party service providers engaged by pk098 are required to process personal data solely on pk098's documented instructions and to implement appropriate technical and organisational security measures.

pk098 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and analyse usage patterns. The categories of cookies used are as follows:

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. pk098 does not use cookies to serve third-party advertisements on the Platform.

pk098 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required by AML and gaming licence regulations.
• Financial transaction data: Retained for a minimum of five (5) years following the date of the transaction in line with financial record-keeping obligations.
• Gaming activity logs: Retained for three (3) years from the date of the relevant activity, or longer if required by a regulatory request or ongoing investigation.
• Support and communications data: Retained for two (2) years from the date of the last interaction, unless the communication relates to an unresolved dispute.
• Marketing preference data: Retained for as long as you hold an active Account or until you withdraw consent, whichever is earlier.

When personal data is no longer required, pk098 will securely delete or anonymise it in accordance with our data destruction policy. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.

pk098 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• Transport Layer Security (TLS 1.3) for all data in transit between your device and pk098 servers.
• AES-256 encryption for all sensitive data stored at rest, including identity documents and financial details.
• Two-factor authentication (2FA) available for all player Accounts and enforced for all administrative access.
• Role-based access controls ensuring that pk098 staff can only access personal data to the extent required for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by qualified independent security professionals.
• Incident response procedures with defined escalation paths and player notification obligations in the event of a data breach that poses risk to your rights.

As an internationally operated Platform, pk098 may transfer your personal data to servers or service providers located outside of Pakistan. Where such transfers occur, pk098 ensures that appropriate safeguards are in place to maintain the same level of data protection that applies within the originating jurisdiction.

Safeguards used by pk098 for international transfers include:

• Binding contractual clauses (data processing agreements) with all third-party recipients that require them to uphold equivalent data protection standards.
• Transfers only to jurisdictions that maintain recognised data protection frameworks, or to recipients that have certified compliance with such frameworks.
• Regular review of international data transfer arrangements to ensure ongoing adequacy.

By using the pk098 Platform and submitting your personal data, you acknowledge that your data may be processed in jurisdictions outside Pakistan. If you have questions about the specific countries to which your data may be transferred, contact our support team.

pk098 respects your right to control your personal data. Depending on applicable law, you may hold some or all of the following rights:

To exercise any of the above rights, submit a written request to support@pk098.org with the subject line "Data Rights Request". pk098 will verify your identity before processing any request and will respond within thirty (30) days. In complex cases, this period may be extended by a further two months, of which you will be notified.

The pk098 Platform is strictly intended for users aged 21 years and above. pk098 does not knowingly collect personal data from any person under the age of 21.

If pk098 becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately, the associated Account will be closed, and any funds held will be reviewed in line with our Terms & Conditions. If you believe that a minor has registered an Account or submitted data to pk098, please contact support@pk098.org immediately.

pk098 encourages parents and guardians in Pakistan and elsewhere to make use of parental control software to prevent minors from accessing online gambling platforms.

The pk098 Platform may occasionally reference or link to third-party resources such as licensing authority websites or responsible gaming organisations. These third-party sites operate under their own independent privacy policies, and pk098 accepts no responsibility for their data practices.

pk098 recommends reviewing the privacy policy of any third-party website before submitting personal data to it. The presence of a reference to a third-party resource on the pk098 Platform does not constitute an endorsement of that resource's privacy practices.

pk098 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the conditions of our gaming licence. The "Effective" date at the top of this Policy will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or how your data is used — pk098 will notify registered players by email at least fourteen (14) days before the new Policy takes effect. For minor or clarificatory changes, the updated Policy will be published on the Platform without individual notice.

Continued use of the pk098 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you should close your Account before the effective date.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by pk098, please contact us using the details below:

• Email: support@pk098.org — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 from within your pk098 Account dashboard
• Response Time: Privacy-related enquiries acknowledged within 48 hours; fully resolved within 30 days

pk098 takes all privacy concerns seriously and is committed to resolving them promptly and fairly. If you feel that your concern has not been adequately addressed, you have the right to raise a complaint with the relevant supervisory authority or with the dispute resolution body designated under our international gaming licence.