pk101 Privacy Policy – How We Handle Your Personal Data

1. Data Controller

For the purposes of applicable data protection legislation, pk101 is the data controller responsible for the personal information collected through pk101.app. References in this Policy to "pk101," "we," "us," or "our" refer to the operating entity behind the Platform. Any queries regarding this Policy or data processing practices should be directed to [email protected].

2. Personal Data We Collect

When you use pk101, we may collect and process the following categories of personal data:

• Identity Data: Full name, date of birth, gender, nationality, and copies of identity documents (e.g., Pakistani CNIC or passport) where required for age and identity verification.
• Contact Data: Pakistani mobile number (03XX format), email address, and residential address.
• Account Data: Username, encrypted password, account preferences, responsible gaming settings, and communication preferences.
• Financial Data: Payment method details (JazzCash account number, Easypaisa number, bank account details for HBL, UBL, Meezan Bank, Bank Alfalah, or crypto wallet addresses for USDT TRC20), transaction history, deposit and withdrawal records, and account balance information.
• Technical Data: IP address, device type, operating system, browser type and version, mobile carrier, screen resolution, and session duration data.
• Usage Data: Pages visited on pk101.app, games played, bets placed, time spent on specific game categories, click behaviour, and navigation paths within the Platform.
• Communications Data: Records of your correspondence with pk101 customer support, including chat logs, email content, and support ticket history.
• Responsible Gaming Data: Self-imposed limits, cooling-off periods, self-exclusion status, and any responsible gaming assessments conducted with your consent.

3. How We Collect Your Data

pk101 collects personal data through the following means:

• Direct collection: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or update your account profile on pk101.
• Automated collection: Through cookies, web beacons, server logs, and similar tracking technologies when you access pk101.app. Technical and usage data are collected automatically during your session.
• Third-party sources: From payment service providers (JazzCash, Easypaisa, banking institutions), identity verification service providers, fraud prevention databases, and publicly available sources where necessary for compliance purposes.

4. How We Use Your Personal Data

pk101 processes your personal data for the following purposes:

• Creating and managing your pk101 player account, including verifying your identity and age (18+ requirement).
• Processing deposits and withdrawals via JazzCash, Easypaisa, and other supported Pakistani payment methods.
• Providing access to casino games, sports betting markets, PSL cricket odds, and all other Platform features.
• Detecting, investigating, and preventing fraudulent transactions, collusion, money laundering, and other prohibited conduct in compliance with AML obligations.
• Complying with legal and regulatory obligations imposed by pk101's licensing jurisdiction, including record-keeping, reporting, and audit requirements.
• Providing customer support, responding to queries, resolving disputes, and communicating material account changes.
• Administering bonuses, promotions, free bet offers, and loyalty programmes.
• Improving Platform performance, game availability, and user experience through aggregate analytics.
• Sending service communications (e.g., account notifications, deposit confirmations, security alerts). Marketing communications are sent only where you have given explicit consent and may be withdrawn at any time.
• Facilitating responsible gaming monitoring, including applying player-requested limits and exclusions.

5. Legal Basis for Processing

pk101 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil pk101's obligations under the player account agreement, including payment processing, account management, and game provision.
• Legal obligation: Processing required to comply with AML, KYC (Know Your Customer), age verification, and other regulatory requirements applicable to pk101's operations.
• Legitimate interests: Fraud prevention, security monitoring, Platform improvement, and responsible gaming risk identification — where such interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookie placement, where explicit consent has been obtained and can be withdrawn at any time.

6. Data Sharing & Disclosure

pk101 does not sell your personal data to unaffiliated third parties for their own marketing purposes. We may share your data with:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and cryptocurrency processors, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers who verify the authenticity of identity documents submitted during account registration or withdrawal requests.
• Game software providers: Casino game suppliers whose RNG-certified products are integrated into the pk101 Platform, to the extent necessary for game logging and fairness audits.
• Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, or regulatory directive from a competent authority.
• Fraud prevention and responsible gaming bodies: Including shared self-exclusion databases where required under licensing conditions to protect vulnerable players.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers operating under confidentiality obligations and data processing agreements.

All third parties with whom pk101 shares personal data are contractually required to process that data in accordance with applicable data protection standards and solely for the purposes specified in their data processing agreements with pk101.

7. Cookies & Tracking Technologies

pk101.app uses cookies and similar technologies to operate the Platform effectively and to improve the user experience. Categories of cookies used include:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, login persistence, and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised data on how players navigate pk101.app — which game categories are visited most, where sessions originate, and how the mobile experience performs on Pakistani handsets.
• Functional cookies: Storing your language preference, last-viewed game category, and responsible gaming settings between sessions.

You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use pk101. For more detailed information on individual cookies set by pk101, please refer to our cookie management tool available on the Platform.

8. Data Retention

pk101 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, including meeting legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, consistent with AML regulatory requirements.
• Customer support communications are retained for three (3) years from the date of last contact.
• Responsible gaming records, including self-exclusion history, are retained for a minimum of five (5) years to prevent re-registration during exclusion periods.
• Technical logs (IP addresses, session data) are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pk101's data destruction procedures.

9. Data Security

pk101 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and pk101.app.
• One-way cryptographic hashing of account passwords — pk101 staff cannot retrieve or view your password in plain text.
• Restricted internal access controls — only personnel with a legitimate business need are authorised to access personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Incident response procedures for prompt detection, containment, and notification of data breaches where required by applicable law.

While pk101 employs robust security practices, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect unauthorised access to your pk101 account, contact [email protected] immediately.

10. Your Data Rights

Subject to applicable law and the specific jurisdiction from which you access pk101, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data pk101 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to pk101's legal retention obligations (particularly AML requirements which may override erasure requests).
• Right to restrict processing: Request that pk101 temporarily pause processing of your data in certain circumstances.
• Right to data portability: Receive a structured, machine-readable copy of data you have provided to pk101, where processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, submit a written request to [email protected]. pk101 will respond within 30 days. Identity verification may be required before any request is actioned.

11. Children's Privacy

pk101 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If pk101 becomes aware that a minor has registered an account or provided personal information, the account will be immediately suspended, all data will be deleted, and any deposits will be returned subject to verification. If you believe a minor has accessed pk101, please notify us immediately at [email protected].

12. Cross-Border Data Transfers

As an online platform serving Pakistani players, pk101 may transfer personal data to servers and service providers located outside of Pakistan, including in pk101's licensing jurisdiction and cloud infrastructure regions. Where such transfers occur, pk101 ensures that appropriate safeguards are in place — including data processing agreements, standard contractual clauses, or equivalent mechanisms — to protect your personal data to a standard consistent with applicable data protection requirements.

13. Changes to This Privacy Policy

pk101 reserves the right to update this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the most recent revision. Where changes are material, pk101 will notify registered players via an in-platform notice or email to your registered address. Continued use of pk101 following a Policy update constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must cease using the Platform and contact support to close your account.

14. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or pk101's data processing practices, please contact us:

Email: [email protected]

pk101 aims to respond to all privacy-related enquiries within 5 business days. For data subject rights requests, please indicate "DATA REQUEST" in your subject line to ensure prompt routing to the relevant team.