Privacy Policy – pk2win Platform

1. Data Controller

1.1 pk2win operates as the data controller in respect of personal data collected from users of the pk2win platform. As data controller, pk2win determines the purposes and means by which personal data is processed.

1.2 This Privacy Policy applies to all individuals who access or use the pk2win platform, including registered account holders, visitors who have not yet registered, and former account holders whose data pk2win is obligated to retain for compliance purposes.

1.3 pk2win processes personal data in compliance with applicable international data protection standards and the privacy obligations imposed by its licensing and regulatory framework.

2. Personal Data We Collect

pk2win collects the following categories of personal data from users:

3. How We Collect Data

pk2win collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — through cookies, log files, and session tracking technologies when you access the pk2win platform, as described in Section 8.
• From third parties — including identity verification providers (for KYC), payment processors (JazzCash, Easypaisa, bank processors), fraud prevention services, and analytics providers, where such sharing is necessary for the provision of services or compliance with legal obligations.

4. Purposes & Legal Basis for Processing

pk2win processes your personal data for the following purposes, each supported by an appropriate legal basis:

• Account registration and management — necessary for the performance of your contract with pk2win.
• Processing deposits and withdrawals in PKR — necessary for contractual performance and compliance with financial regulations.
• KYC and identity verification — necessary for compliance with anti-money-laundering (AML) and know-your-customer (KYC) obligations under pk2win's licensing requirements.
• Fraud prevention and platform security — legitimate interest in protecting pk2win and its users from fraud, abuse, and financial crime.
• Responsible gaming monitoring — legitimate interest and regulatory obligation to identify and respond to signs of problem gambling behaviour.
• Customer support — necessary for contractual performance and legitimate interest in resolving disputes and queries.
• Platform improvement and analytics — legitimate interest in maintaining and improving the pk2win platform experience.
• Marketing communications — based on your consent, where you have opted in to receive promotional messages from pk2win.

5. Data Sharing & Third Parties

5.1 pk2win does not sell your personal data to third parties under any circumstances.

5.2 pk2win shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors — JazzCash, Easypaisa, bank partners, card networks — to process deposits and withdrawals in PKR.
• KYC and identity verification providers — to verify your identity and age in compliance with licensing obligations.
• Fraud prevention and AML compliance services — to detect and prevent financial crime on the platform.
• Game suppliers — Evolution Gaming, Pragmatic Play, PG Soft, JILI, and other certified providers — receive anonymised or pseudonymised session data necessary to deliver their games. They are not provided with your full personal profile.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or lawful government request.
• IT and hosting infrastructure providers — under strict confidentiality agreements, for the operation and security of the pk2win platform.

5.3 All third-party service providers engaged by pk2win are bound by contractual data protection obligations. pk2win does not permit third parties to use your data for their own marketing purposes.

6. Data Retention

6.1 pk2win retains personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account legal, regulatory, and operational requirements:

• Account data is retained for the duration of your active account and for a minimum of 5 years following account closure, in accordance with AML and licensing obligations.
• Transaction and financial records are retained for a minimum of 7 years for audit and regulatory compliance purposes.
• KYC documents are retained for the period required by applicable regulatory standards, typically 5–7 years from the date of collection or account closure.
• Technical and log data may be retained for up to 12 months for security and fraud detection purposes.

6.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

7. Data Security

7.1 pk2win implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pk2win's servers.
• Encryption at rest for sensitive data, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the pk2win platform.
• Two-factor authentication options for player accounts.

8. Cookies & Tracking Technologies

8.1 pk2win uses cookies and similar tracking technologies to operate the platform, improve your experience, and analyse usage patterns. The following types of cookies are used:

• Essential cookies — required for the platform to function, including session management, login authentication, and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game lobby layout.
• Analytics cookies — collect anonymised data on how players navigate the platform to help pk2win improve its services. This data does not identify individual users.
• Security cookies — support fraud detection and account security monitoring systems.

8.2 pk2win does not use third-party advertising cookies or serve targeted behavioural advertising based on your browsing activity across external websites.

8.3 You can manage cookie preferences through your browser settings. Disabling essential cookies may impair the functionality of the pk2win platform.

9. Your Rights

Subject to applicable data protection laws and pk2win's regulatory obligations, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data pk2win holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where pk2win is no longer required to retain it for legal or regulatory purposes.
• Right to restrict processing — you may request that processing of your data be restricted in certain circumstances.
• Right to data portability — you may request a machine-readable copy of personal data you have provided to pk2win.
• Right to withdraw consent — where processing is based on your consent (e.g., marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact pk2win's support team via live chat available 24/7 on site, or by email (see Section 14). pk2win will respond to valid requests within 30 days.

10. Children & Minors

10.1 pk2win is strictly an 18+ platform. pk2win does not knowingly collect, process, or retain personal data from individuals under the age of 18.

10.2 If pk2win becomes aware that personal data has been collected from a person under 18, that data will be deleted promptly and the associated account closed in accordance with Section 12 of the pk2win Terms & Conditions.

10.3 Parents and guardians are encouraged to monitor the online activity of minors in their care. If you believe a minor has registered on pk2win, please notify support immediately via live chat.

11. International Data Transfers

11.1 In order to deliver the pk2win platform and associated services, personal data may be transferred to and processed in countries outside Pakistan. Such transfers are necessary for the engagement of international service providers including game suppliers (Evolution Gaming, Pragmatic Play, PG Soft, JILI), KYC verification providers, and cloud infrastructure services.

11.2 Where personal data is transferred internationally, pk2win ensures appropriate safeguards are in place — including contractual data protection clauses — to protect your data to a standard equivalent to that described in this Privacy Policy.

12. Marketing Communications

12.1 pk2win may send promotional communications — including bonus notifications, VIP rewards updates, and game announcements — to registered players via on-site messages. Such communications are part of the standard platform experience.

12.2 pk2win does not send unsolicited bulk marketing messages to individuals who have not registered on the platform or who have not consented to receive external marketing communications.

12.3 If you do not wish to receive promotional communications from pk2win, you may update your notification preferences in your account settings at any time. Opting out of marketing does not affect essential account communications (e.g., transaction confirmations, security alerts).

13. Changes to This Policy

13.1 pk2win reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, platform functionality, or business practices. Material changes will be communicated to registered players via on-site notice.

13.2 The date of the most recent revision is displayed at the top of this page. Your continued use of pk2win following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14. Contact Us

For any privacy-related queries, data subject access requests, or concerns regarding how pk2win handles your personal data, please contact our support team via live chat available 24/7 on site, or by email at: [email protected] (plain text — not a clickable link).

Please include "Privacy Request" in the subject line of your email and provide your registered mobile number so our team can locate your account securely.