pk98 Privacy Policy

This Privacy Policy ("Policy") describes how pk98 ("pk98", "we", "us", "our"), the operator of the online gaming platform accessible at https://pk98.cam, collects, uses, stores, shares and protects personal information relating to registered users, visitors and any other individuals who interact with the pk98 platform or related services ("you", "your", "Data Subject").

pk98 is committed to handling personal data responsibly and in accordance with applicable data protection principles, including purpose limitation, data minimisation, storage limitation and integrity and confidentiality. This Policy is designed to give you clear and complete information about our data practices so that you can make informed decisions about your privacy.

By registering an account on pk98, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not register or continue to use the pk98 platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or one or more factors specific to their identity.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means pk98, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party engaged by pk98 to process Personal Data on pk98's behalf and under pk98's instructions.
• "KYC Data" means identity verification documentation collected to meet Know Your Customer and Anti-Money-Laundering compliance requirements.
• "Cookies" means small text files placed on your device by the pk98 platform for the purposes described in Section 9 of this Policy.
• "Platform" means the pk98 website, mobile browser interface, associated APIs and all related services.
• "Third Party" means any person or entity other than you and pk98.

pk98 collects the following categories of personal data, depending on how you interact with the platform:

pk98 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs or biometric data beyond what is required for identity verification (e.g. a photograph on an identity document). Where sensitive data is incidentally received as part of a KYC document, it is used solely for verification purposes and is not processed for any other purpose.

pk98 collects personal data through the following channels:

• Direct Provision: Information you actively provide during registration, account updates, KYC submissions, payment processes and support interactions.
• Automated Collection: Technical and behavioural data collected automatically when you access and use the pk98 platform, including via cookies, server logs and analytics tools.
• Third-Party Sources: Identity verification data received from third-party KYC and AML service providers engaged by pk98 to cross-reference the identity documents you submit. pk98 may also receive fraud-risk signals from payment processors.
• Publicly Available Sources: In limited circumstances, pk98 may supplement identity verification with information from publicly available databases where required for AML compliance purposes.

pk98 processes your personal data for the following purposes, each supported by a corresponding legal basis:

• Account Registration & Management — to create and administer your pk98 account, verify your eligibility and maintain your account in good standing. Legal basis: performance of a contract.
• Identity Verification (KYC) & AML Compliance — to verify your identity, prevent underage gambling, detect and prevent fraud, and meet anti-money-laundering legal obligations. Legal basis: legal obligation and legitimate interests.
• Payment Processing — to process deposits and withdrawals, maintain transaction records and reconcile financial accounts. Legal basis: performance of a contract.
• Responsible Gambling — to monitor account activity for signs of problem gambling, apply self-imposed limits and exclusions, and flag accounts for welfare checks where appropriate. Legal basis: legal obligation and legitimate interests.
• Platform Security & Fraud Prevention — to detect and prevent account compromise, bot activity, collusion, multi-accounting and other prohibited conduct. Legal basis: legitimate interests.
• Customer Support — to respond to your queries, complaints and support requests, and to maintain records of support interactions. Legal basis: performance of a contract and legitimate interests.
• Platform Improvement & Analytics — to analyse platform usage patterns, improve features and optimise the user experience. Legal basis: legitimate interests (using anonymised or aggregated data where possible).
• Marketing Communications — to send promotional offers, bonuses and platform updates to registered players who have consented to receive marketing communications. Legal basis: consent (you may withdraw consent at any time).

pk98 does not use your personal data for automated profiling that produces significant legal effects, nor for any purpose unrelated to the operation of the pk98 platform.

pk98 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers — third-party services that assist in verifying the identity documents you submit during the KYC process. These providers act as Data Processors under pk98's instruction.
• Payment Processing Partners — payment infrastructure providers that facilitate deposits and withdrawals. These providers receive only the transaction data necessary to process your payment.
• Fraud Prevention & Security Services — third-party services that assist pk98 in detecting fraudulent activity, account compromise and prohibited conduct.
• Platform Technology Providers — cloud hosting, database and infrastructure providers who store and process platform data on pk98's behalf under binding data processing agreements.
• Game Software Providers — third-party game studios whose games are integrated into pk98. These providers may receive session-level game data necessary to render and record gameplay outcomes. They do not receive your full identity or payment data.
• Legal & Regulatory Authorities — where pk98 is legally compelled to disclose personal data by a court order, regulatory instruction or law enforcement request, we will comply with such obligations. Where permissible, pk98 will notify you of any such disclosure.

All third-party Data Processors engaged by pk98 are subject to contractual data processing agreements that require them to process personal data only in accordance with pk98's instructions, to implement appropriate security measures, and to delete or return data upon termination of the engagement.

pk98 retains personal data for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The following indicative retention schedules apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical purposes.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in respect of your personal data held by pk98:

To exercise any of the rights listed above, please submit a written request to [email protected] with the subject line "Data Rights Request". Include your registered account email address and a clear description of the right you wish to exercise. pk98 will respond within a reasonable period and, in any event, within the timeframe required by applicable law.

pk98 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns and, where consented, deliver relevant content. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gambling limit configurations and cashier preferences. These are not essential but significantly improve the user experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform, including pages visited, session duration and navigation paths. This information helps pk98 identify areas for improvement.
• Security & Fraud-Detection Cookies: Help detect and prevent fraudulent activity, bot access and account compromise by establishing device fingerprints and session consistency.

pk98 does not use third-party advertising cookies or tracking pixels that share behavioural data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the pk98 platform.

As an international online gaming platform, pk98 may transfer your personal data to servers or service providers located in countries other than your country of residence. Such transfers are necessary for the operation of the platform, payment processing and compliance functions.

Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection, pk98 implements appropriate safeguards including standard contractual clauses, data processing agreements and, where applicable, adequacy decisions. By using pk98 you acknowledge and consent to these international transfers as necessary for the provision of the Services.

pk98 strictly prohibits access by persons under the age of 18 — or the higher minimum age required by the operator's license jurisdiction. The platform is intended exclusively for adult users. pk98 implements age-verification procedures at registration and may conduct enhanced checks at any time.

If pk98 becomes aware that an Account has been created by or on behalf of a minor, the Account will be immediately closed, all balances will be returned to the depositing payment source (less any funds wagered), and any personal data relating to the minor will be deleted in accordance with applicable law as promptly as possible.

Parents or guardians who suspect that a minor has accessed pk98 should contact us immediately at [email protected]. We will act without delay.

pk98 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These include:

• 256-bit TLS/SSL encryption for all data transmitted between your browser and pk98 servers.
• Encryption of data at rest using industry-standard algorithms.
• Role-based access controls limiting staff access to personal data to those with a documented operational need.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Audit logging of access to sensitive personal data records.
• Multi-factor authentication requirements for internal administrative access.

Notwithstanding these measures, no internet-based system is entirely immune to security risks. pk98 cannot guarantee absolute security and encourages Players to use strong, unique passwords, enable any available two-factor authentication and report any suspected account compromise immediately.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, pk98 will notify affected individuals without undue delay and in accordance with applicable legal requirements.

The pk98 platform may reference or contextually mention third-party services — such as payment method providers familiar to Pakistani users (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) — for informational purposes. These references do not constitute active links to, nor endorsement of, those providers' privacy practices.

If you choose to interact with any third-party service in connection with your use of pk98 (such as initiating a transfer through a mobile wallet), that interaction is subject to the third party's own privacy policy and terms. pk98 is not responsible for and has no control over how third parties collect, use or protect your personal data.

pk98 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements or platform features. Where changes are material — that is, where they substantively affect how your personal data is collected, used or shared — pk98 will provide advance notice by displaying a prominent notice on the platform and/or sending a notification to your registered email address.

Minor or administrative updates (such as clarifications of existing practices, correction of typographical errors, or formatting changes) may be made without specific notice. The "Last Updated" date at the top of this document will always reflect the most recent revision.

Your continued use of the pk98 platform following publication of any updated Privacy Policy constitutes acceptance of that updated Policy. If you do not agree with any changes, you must cease using the platform and may request closure of your Account in accordance with the Terms & Conditions.

The most current version of this Privacy Policy is always available at https://pk98.cam/privacy-policy.

For any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by pk98, please contact our support team using the details below. We are available 24 hours a day, 7 days a week.

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request"
• Platform: https://pk98.cam
• Support Hours: 24 / 7

When submitting a data rights request, please provide your registered email address, your account username (if different), and a clear description of your request. We will verify your identity before processing any data access, correction, deletion or portability request to ensure we do not disclose personal data to an unauthorised third party.