pka888 Privacy Policy

pka888 ("we", "us", "our") is the operator of the online gaming platform accessible at pka888.net. We are licensed under an international gaming authority and operate the Platform for players in Pakistan and other permitted jurisdictions. For the purposes of this Privacy Policy, pka888 is the data controller responsible for personal data collected from registered players, visitors, and prospective users of the Platform.

This Privacy Policy applies to all personal data processing activities conducted by pka888 in connection with the Platform, including registration, identity verification, gaming activity, payment processing, customer support, and marketing communications. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the agreement between you and pka888.

pka888 collects personal data in the following categories. We only collect data that has a clear, documented purpose within our gaming operations and compliance obligations:

• Identity Data: Full legal name as it appears on your CNIC, CNIC number, date of birth, gender, and nationality. Required for KYC verification and age confirmation (21+ rule).
• Contact Data: Primary email address, Pakistani mobile number (including the mobile wallet account — JazzCash or EasyPaisa — linked to that number), and city or province of residence within Pakistan (e.g., Karachi, Lahore, Faisalabad, Islamabad, Rawalpindi, Peshawar).
• Financial Data: Records of all deposits and withdrawals, the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, or USDT wallet address), transaction reference numbers, and PKR amounts. Full payment instrument details are never stored by pka888.
• Gaming Activity Data: Complete betting and gaming history, session timestamps, game types played, bonus activations, win and loss records, and responsible gaming tool settings (deposit limits, session limits, self-exclusion status).
• Technical & Device Data: IP address at login, device type and operating system, browser version, screen resolution, and Pakistan Standard Time (PKT) timestamps for all account events.
• Communication Data: Live chat transcripts, email correspondence with our support team, and records of any formal complaints or disputes raised against the Platform.

pka888 collects personal data through the following channels:

• Direct Submission: Information you voluntarily provide during account registration, KYC document upload, payment method linking, and support interactions.
• Automated Technical Collection: Technical and device data collected automatically when you access the Platform, via server logs, session management systems, and fraud-detection tooling.
• Payment Processor Confirmation: Transaction status and reference data passed to pka888 by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and our USDT processing partner upon completion of a deposit or withdrawal.
• KYC & Identity Verification Providers: Identity verification data cross-referenced against government databases or third-party KYC providers engaged by pka888 to confirm document authenticity.
• Cookies & Tracking Technologies: Session cookies and analytics tools used to understand Platform usage patterns and improve user experience. See Section 8 for full cookie details.

All personal data processing by pka888 is conducted under one or more of the following lawful bases, aligned with internationally recognised data protection principles:

• Contractual Necessity: Processing your identity, contact, financial, and gaming activity data is necessary to deliver the services described in our Terms & Conditions — account management, game access, payment processing, and customer support.
• Legal Obligation: KYC verification, AML transaction monitoring, responsible gaming record-keeping, and data retention for regulatory audits are all required by pka888's gaming licence conditions and applicable financial crime legislation.
• Legitimate Interest: Fraud prevention, multi-account detection, platform security, and internal analytics are processed under pka888's legitimate interest in maintaining a safe and fair gaming environment.
• Consent: Marketing communications — promotional emails, SMS notifications, bonus alerts — are sent only where you have provided explicit opt-in consent during registration or subsequently via Account Settings. Consent can be withdrawn at any time.

pka888 uses your personal data exclusively for the following documented purposes:

• Creating and managing your pka888 Account, including identity verification and age confirmation to enforce the 21+ restriction.
• Processing deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT — and routing transactions to the correct payment gateway.
• Detecting and preventing fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Providing customer support via live chat and email, and resolving disputes through our internal complaints procedure.
• Delivering responsible gaming tools including self-exclusion enforcement, deposit limit management, and session time tracking.
• Sending transactional communications — account verification codes, withdrawal confirmations, security alerts — which are not optional and will be sent regardless of marketing preferences.
• Where consent has been given: sending promotional communications about bonuses, new games, PSL betting markets, and other pka888 offers.
• Conducting internal Platform analytics to improve game performance, page load speed, and user experience for Pakistani players.

pka888 does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and USDT network operators receive the transaction data required to process your deposits and withdrawals. Each operates under their own privacy terms and applicable Pakistani financial regulation.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by pka888 to cross-check CNIC data and confirm document authenticity. These providers operate under binding data processing agreements with pka888.
• Game Content Providers: Providers such as Evolution, Pragmatic Play, PG Soft, Hacksaw Gaming, and Nolimit City operate the game servers that deliver content to the Platform. They may process session identifiers and bet data to deliver their games but are not permitted to use this data for their own marketing purposes.
• Cloud Infrastructure Providers: pka888's Platform is hosted on secure cloud infrastructure. Server-level access to encrypted data may exist for maintenance purposes, governed by strict data processing agreements.
• Regulatory & Law Enforcement Authorities: pka888 is obligated to disclose data to licensing authorities, financial intelligence units, and law enforcement agencies where required by our gaming licence or applicable law. Disclosures are made only to the extent legally required.

As an internationally licensed gaming operator, pka888 may process or store certain data on infrastructure located outside Pakistan. Where personal data is transferred internationally, pka888 ensures that appropriate safeguards are in place, including contractual data protection clauses equivalent to international standards, to protect your data to the same standard as if it remained within Pakistan.

Where pka888 transfers data to game content providers or KYC services operating in other jurisdictions, such transfers occur under binding service agreements that include data protection obligations. You acknowledge, by registering a pka888 Account, that your data may be processed in jurisdictions outside Pakistan for the purposes described in this Policy.

pka888 uses the following categories of cookies and similar tracking technologies on the Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Used to measure page load performance, identify technical errors, and understand aggregate usage patterns. Data collected is anonymised at the aggregate level and not linked to individual player accounts for marketing profiling.
• Fraud Prevention Cookies: Device fingerprinting and session consistency checks used to detect multi-accounting, bot activity, and unauthorised login attempts. These operate under pka888's legitimate interest in Platform security.
• Preference Cookies: Store your language preference, notification settings, and display preferences to personalise your Platform experience on return visits.

You may manage cookie preferences through your browser settings. Disabling strictly necessary or fraud prevention cookies may impair Platform functionality or prevent login. pka888 does not use third-party advertising cookies or sell cookie-derived data to external advertising networks.

pka888 implements a multi-layered security architecture to protect personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and the pka888 Platform is encrypted using TLS 1.3. There is no fallback to unencrypted HTTP connections.
• Encryption at Rest: All personal data and KYC documents stored on pka888 servers are encrypted using AES-256. Database-level encryption is applied to all tables containing personal identifiers.
• Access Controls: Internal access to personal data is restricted to pka888 personnel with a documented business need. All internal access is logged and subject to audit. Support agents can see only the data necessary to resolve a player query.
• Two-Factor Authentication: Available to all registered players and mandatory for pka888 internal staff accounts. Players are strongly encouraged to enable 2FA from Account Settings.
• Incident Response: In the event of a personal data breach that poses a risk to registered players, pka888 will notify affected players and the relevant regulatory authority within 72 hours of becoming aware of the incident, in accordance with our gaming licence obligations.

pka888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by the conditions of our international gaming licence. The following retention schedule applies:

• Identity & KYC Data: Retained for a minimum of 5 years following permanent account closure, as required by anti-money laundering compliance obligations.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of the transaction, in compliance with financial record-keeping regulations applicable under our gaming licence.
• Gaming Activity Data: Retained for 5 years following account closure to support dispute resolution, regulatory audit, and responsible gaming review processes.
• Support & Communication Records: Retained for 3 years from the date of the last interaction to support dispute resolution and quality assurance.
• Self-Exclusion & Responsible Gaming Records: Retained permanently in anonymised form. Active self-exclusion flags are retained indefinitely to prevent re-registration circumvention, regardless of account closure requests.
• Technical & Device Data: Retained for 2 years on a rolling basis for fraud prevention and security monitoring purposes.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to any individual player. Anonymised aggregate data may be retained indefinitely for statistical and business intelligence purposes.

As a registered player at pka888, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected] (plain text — not a clickable link). We will respond to verified requests within 30 days.

• Right of Access: You may request a complete summary of all personal data pka888 holds about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared.
• Right to Rectification: If any personal data held by pka888 is inaccurate or incomplete, you may request correction. Identity data changes require re-verification of your KYC documents.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose collected, subject to pka888's legal retention obligations under our gaming licence. Data subject to mandatory retention periods cannot be deleted before those periods expire.
• Right to Restrict Processing: You may request that pka888 pause processing of your data while a rectification request or complaint is being reviewed, without requiring full deletion.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to pka888, including your account information and transaction history, in CSV format.
• Right to Object: You may object to processing based on legitimate interest — particularly profiling for responsible gaming risk assessment — and pka888 will review whether a compelling legitimate ground exists to continue processing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time via Account Settings > Notification Preferences. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

pka888 strictly prohibits registration and participation by individuals under the age of 21. This is a non-negotiable condition of our gaming licence and a core responsible gaming commitment. The Platform is not directed at, and does not knowingly collect personal data from, anyone under 21 years of age.

All registrations are subject to mandatory age verification as part of the KYC process. Where pka888 discovers, through its own checks or following notification, that an individual under 21 has registered an account, the account will be immediately suspended, all funds will be returned after identity verification (where possible), and all personal data associated with the account will be deleted as soon as permissible under our regulatory obligations.

pka888 sends promotional and marketing communications only where you have provided explicit consent during registration or subsequently activated marketing preferences in your Account Settings. Marketing communications may include bonus alerts, PSL betting promotions, new game announcements, seasonal casino offers, and platform updates.

You may opt out of all marketing communications at any time by:

• Visiting Account Settings > Notification Preferences and disabling all marketing toggles.
• Clicking the unsubscribe link included in every marketing email sent by pka888.
• Contacting pka888 live chat support and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your receipt of transactional messages — withdrawal confirmations, security alerts, and account verification codes will continue to be sent as they are operationally necessary and are not marketing in nature.

pka888 does not share your contact details with third-party advertisers or affiliate marketing networks for their own direct marketing purposes.

pka888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, gaming licence requirements, or applicable regulatory guidance. When we make material changes to this Policy, we will notify registered players via email and/or a prominent notice on the Platform at least 14 days before the changes take effect.

The "Effective Date" displayed at the top of this Policy indicates the date of the most recent revision. Continued use of the pka888 Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised Policy, you must close your Account before the effective date of the changes.

Previous versions of this Privacy Policy are available upon written request to our support team. We maintain an archive of all historical Policy versions for regulatory record-keeping purposes.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data at pka888, please contact us through the following channels:

• Live Chat: Available 24/7, 365 days a year, directly from the pka888 Platform. Average response time under 3 minutes. Recommended for urgent data security concerns.
• Support Email: [email protected] (plain text — not a clickable link). For formal data rights requests, please include your registered username and a description of your request in the subject line.
• Business Hours (PKT): 00:00 – 23:59, every day of the year. No scheduled downtime or public holiday closures.

If you are unsatisfied with pka888's response to a data rights request or privacy complaint, you have the right to escalate the matter to the licensing authority under whose jurisdiction pka888 operates. Details of the applicable licensing authority are available from our compliance team upon request. pka888 commits to cooperating fully with any regulatory investigation into data handling practices.