pk198 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is published by pk198 ("the Company", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data relating to all registered Members and visitors to the pk198 Platform accessible at pk198.net.

1.2 pk198 acts as the data controller in respect of personal data collected through its Platform. As data controller, pk198 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

1.3 This Policy should be read alongside the pk198 Terms & Conditions, which together form the complete legal framework governing your use of the pk198 Platform. In the event of any conflict between this Policy and the Terms & Conditions regarding data matters, this Policy shall prevail.

1.4 pk198 serves Members primarily across Pakistan — including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and beyond — and processes personal data in a manner consistent with international gaming industry data protection standards. All Members must be 21 years of age or older to register and use the pk198 Platform.

2. Personal Data We Collect

2.1 pk198 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect are set out below.

2.1 Identity & Contact Data

• Full legal name as it appears on your CNIC or passport;
• Date of birth (for age verification purposes — Members must be 21+);
• Residential address, city, and postcode;
• Email address and mobile phone number;
• CNIC number or passport number (for KYC verification).

2.2 Financial & Payment Data

• JazzCash or EasyPaisa mobile wallet number;
• Bank account details for HBL, UBL, Meezan Bank, or other supported institutions;
• Transaction history including deposits, withdrawals, and bonus credits;
• Source of funds declarations where required under enhanced due diligence procedures.

2.3 Account & Activity Data

• Username and encrypted password;
• Betting and gaming history, including stakes, outcomes, and game titles accessed;
• Bonus and promotional activity records;
• Responsible gaming settings, including any self-exclusion, deposit limit, or cooling-off period requests;
• Customer support communications and complaint records.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and page interaction logs;
• Cookie identifiers and similar tracking technology data (see Section 6).

2.5 KYC Documentation

• Scanned or photographed copies of government-issued identification (CNIC, passport);
• Proof of address documents (utility bills, bank statements dated within 3 months);
• Selfie or liveness verification images where required by our KYC process.

3. How We Collect Your Data

3.1 pk198 collects personal data through the following means:

3.2 pk198 does not purchase personal data from data brokers or compile profiles from unrelated third-party sources. All data collected is obtained directly from you or from service providers acting on pk198's behalf for legitimate purposes described in this Policy.

4. Purpose & Legal Basis for Processing

4.1 pk198 processes your personal data for specific, clearly defined purposes. Each purpose is supported by a recognised legal basis as set out below:

4.2 Where pk198 relies on your consent as the legal basis for processing (for example, for marketing emails or optional analytics cookies), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4.3 Where pk198 relies on legitimate interests as the legal basis, pk198 has assessed that those interests are not overridden by your fundamental rights and freedoms. You have the right to object to processing carried out on this basis (see Section 9).

5. Data Sharing & Disclosure

5.1 pk198 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data will only be shared in the limited circumstances described below.

5.1 Service Providers & Data Processors

pk198 engages trusted third-party service providers who process data on pk198's behalf under strict data processing agreements. These include:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa/Mastercard, and 1LINK — to facilitate deposits and withdrawals in PKR;
• KYC & identity verification providers: To verify the age, identity, and address of Members in compliance with international gaming standards;
• Fraud prevention & AML screening services: To identify and prevent fraudulent activity and financial crime;
• Platform infrastructure & hosting providers: To operate, maintain, and secure the pk198 Platform;
• Customer support platforms: To manage live chat, email support, and complaint handling.

All service providers are contractually bound to process your data only for the purposes instructed by pk198 and to maintain appropriate security standards.

5.2 Legal & Regulatory Disclosure

pk198 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required by applicable law or court order. In such cases, pk198 will disclose only the minimum data necessary to satisfy the legal requirement.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of pk198's business, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data going forward.

6. Cookies & Tracking Technologies

6.1 pk198 uses cookies and similar tracking technologies on the pk198 Platform to enhance your experience, maintain your session, analyse Platform usage, and support fraud prevention efforts. By continuing to use the Platform, you consent to the use of cookies as described in this section.

Types of Cookies Used

6.2 You may control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain features of the pk198 Platform, including login persistence and preference retention. Disabling essential cookies will prevent you from using the Platform.

6.3 pk198 does not use third-party advertising cookies or place tracking pixels on behalf of external advertisers.

7. Data Retention

7.1 pk198 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal, regulatory, and accounting obligations.

7.2 The following retention guidelines apply:

• Active Account Data: Retained for the duration of your membership and for a minimum of 5 years following account closure, in accordance with international AML record-keeping standards;
• KYC Documentation: Retained for a minimum of 5 years from the date of verification, or from the date of the last transaction on the account, whichever is later;
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Customer Support Records: Retained for 3 years from the date of last contact, or from the date of resolution of the relevant complaint;
• Marketing Data (consent-based): Retained until you withdraw consent or for 2 years from last engagement, whichever is sooner.

7.3 When personal data is no longer required for any of the above purposes, pk198 will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

8. Data Security

8.1 pk198 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 Encryption: All data transmitted between your device and the pk198 Platform is encrypted using industry-standard TLS 1.3 protocol;
• Encrypted Password Storage: Account passwords are stored using bcrypt hashing — they are never stored in plaintext and are never accessible even to pk198 staff;
• Access Controls: Internal access to Member personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations;
• Multi-Factor Authentication: Available for Member accounts and mandatory for all internal administrative access to systems holding personal data;
• Regular Security Audits: The pk198 Platform undergoes regular penetration testing and security assessments by independent third-party specialists;
• Data Breach Response: pk198 maintains a documented incident response procedure. In the event of a data breach that poses a risk to Member rights, pk198 will notify affected Members and relevant authorities within the timeframe required by applicable regulations.

8.2 While pk198 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. Members are reminded to use strong, unique passwords for their pk198 account and to contact support immediately at [email protected] if they suspect any unauthorised access.

9. Your Data Rights

9.1 As a Member of pk198, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact pk198 at [email protected] with the subject line "Data Rights Request". pk198 will acknowledge your request within 48 hours and respond substantively within 30 calendar days.

Right of Access

You have the right to request a copy of all personal data that pk198 holds about you. This is sometimes referred to as a Subject Access Request (SAR). pk198 will provide this data in a structured, commonly used, machine-readable format.

Right to Rectification

If any personal data pk198 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (if consent was the legal basis), or where you object to processing and there are no overriding legitimate grounds. Note that erasure requests may be declined where pk198 is required to retain data to comply with legal obligations — for example, AML record-keeping requirements.

Right to Restriction of Processing

You have the right to request that pk198 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of your data is being investigated.

Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You have the right to object to the processing of your personal data where pk198 relies on legitimate interests as the legal basis. pk198 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Rights Related to Automated Decision-Making

If pk198 makes any decisions about you based solely on automated processing that produce significant effects — for example, automated account restriction decisions — you have the right to request human review of such decisions and to contest the outcome.

10. Children & Minors

10.1 The pk198 Platform is strictly intended for use by adults. No person under the age of 21 is permitted to register, access, or use any part of the pk198 Platform. pk198 does not knowingly collect personal data from any individual under the age of 21.

10.2 pk198 applies age verification checks at the point of registration and at the KYC verification stage to enforce this restriction. Any account where the Member is found to be under 21 years of age will be immediately and permanently closed, all deposits refunded, and all associated winnings voided.

10.3 If you have reason to believe that a person under the age of 21 has accessed or registered an account on the pk198 Platform, please contact pk198 immediately at [email protected]. pk198 will investigate and take immediate remedial action.

10.4 Parents and guardians are encouraged to use parental control and internet filtering software to prevent underage access to online gambling platforms. pk198 supports initiatives to protect minors from access to gambling content.

11. International Data Transfers

11.1 As an internationally licensed gaming platform, pk198 may transfer and store your personal data on servers located outside of Pakistan. Where data is transferred to countries that do not provide an equivalent level of data protection, pk198 will implement appropriate safeguards to ensure your data remains protected to the standard described in this Policy.

11.2 Appropriate safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities;
• Data processing agreements with sub-processors that impose equivalent protection obligations;
• Transfers to jurisdictions recognised as providing adequate data protection by relevant international bodies.

11.3 By registering and using the pk198 Platform, you acknowledge and consent to the transfer of your personal data to servers and service providers located outside Pakistan where necessary for the provision of pk198's services.

12. Third-Party Services & Links

12.1 The pk198 Platform may reference third-party payment services including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, Visa/Mastercard, and 1LINK. Each of these services operates under its own independent privacy policy. pk198 is not responsible for the data handling practices of any third-party payment provider.

12.2 pk198 uses third-party KYC and identity verification providers. These providers process your verification documents under their own terms of service and privacy policies, subject to contractual obligations with pk198 regarding data protection standards.

12.3 pk198 does not embed third-party advertising networks, social media trackers, or external analytics platforms on the pk198 Platform that would allow third parties to build independent profiles of Members' gaming behaviour without their knowledge.

13. Updates to This Privacy Policy

13.1 pk198 reserves the right to update, revise, or replace this Privacy Policy at any time. The most current version will always be published on this page, with the effective date clearly indicated at the top of the document.

13.2 For material changes to this Policy — those that meaningfully affect the way your personal data is collected, used, or shared — pk198 will notify you by email to your registered address or via a prominent notification upon your next login, providing at least seven (7) days' advance notice before the change takes effect.

13.3 Your continued use of the pk198 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must discontinue use of the Platform and request account closure.

14. Contact & Complaints

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data pk198 holds about you, please contact the pk198 Data Privacy team using the details below:

14.2 If you are not satisfied with pk198's response to a privacy-related complaint, you have the right to escalate your complaint to the relevant data protection authority or to the independent dispute resolution body designated under pk198's international gaming licence.

14.3 pk198 takes all privacy complaints seriously and is committed to resolving them fairly, promptly, and in accordance with applicable data protection principles. No Member will face any negative consequences for raising a legitimate privacy concern.