pk07 Privacy Policy — How We Protect Your Personal Data

This Privacy Policy is issued by the operator of pk07, the online gaming and sports betting platform accessible at pk07.bid and all associated subdomains and mobile-optimised interfaces. References in this Policy to "pk07," "we," "us," or "our" refer to the platform operator in its capacity as the data controller responsible for your personal information.

pk07 is Pakistan's premier online casino and sports betting platform, serving registered players across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and beyond. In our role as data controller, we determine the purposes and means by which your personal data is processed. We take this responsibility seriously and are committed to processing your data lawfully, fairly, and transparently.

For all data protection enquiries, please contact us through the channels listed in Clause 15 of this Policy.

pk07 collects the following categories of personal data, gathered through different interactions with the Platform:

pk07 uses your personal data for the following specific purposes:

• Account Administration: Creating, managing, and maintaining your pk07 account, including authentication at login, account balance management, and processing of deposits and withdrawals.
• Identity Verification (KYC): Verifying your age (21+), identity, and payment method ownership as required under our responsible gaming policy and anti-money laundering compliance obligations.
• Service Delivery: Providing access to cricket betting markets, live casino games, slot titles, instant games, and all other Platform features that constitute the pk07 service you have contracted for.
• Payment Processing: Facilitating deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and bank transfer, and processing withdrawal requests to your verified payment method.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct as defined in the pk07 Terms and Conditions.
• Responsible Gaming Compliance: Monitoring gaming activity to identify patterns consistent with problem gambling, enforcing the responsible gaming limits and self-exclusion periods you set, and contacting you proactively when our systems identify a player who may need support.
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality assurance and training purposes.
• Legal & Regulatory Compliance: Retaining transaction and account records for the periods required by applicable financial regulations and responding to lawful requests from law enforcement, regulatory authorities, or courts of competent jurisdiction.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, identify technical issues, and develop new features that better serve Pakistani players.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to players who have provided consent to receive such communications — subject to the opt-out right described in Clause 13.

pk07 processes your personal data on the following legal bases:

pk07 does not sell your personal data. We share your data with third parties only under the following defined circumstances:

• Payment Processors: Your financial data (payment method details and transaction amounts in PKR) is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processing partners solely to execute your deposit and withdrawal instructions. These processors are contractually required to protect your data and may not use it for any other purpose.
• KYC Verification Providers: Identity documents and verification data may be processed by specialist third-party KYC providers engaged by pk07 to perform identity and age verification. These providers process your data under strict contractual confidentiality obligations.
• Game Content Providers: To facilitate live casino games and slot titles, technical session data (including account identifiers and wagering information) is shared with the game studios and live dealer platform providers whose content is integrated into pk07. These providers operate under data processing agreements with pk07.
• Law Enforcement & Regulatory Authorities: pk07 will disclose personal data to Pakistani law enforcement agencies, international regulatory authorities, or courts of competent jurisdiction where required to do so by a valid legal order, warrant, or regulatory requirement. We will notify affected players of such disclosures where permitted by law to do so.
• Professional Advisors: Our legal advisors, auditors, and compliance consultants may access account and transaction data on a strictly confidential basis in the course of providing professional services to pk07.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of pk07's business, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

pk07 handles payment data — including JazzCash and EasyPaisa account numbers, HBL and UBL bank account details, and transaction records in PKR — with a particularly high level of care given its sensitive nature.

Financial transaction data is encrypted both in transit and at rest. pk07 does not store full payment card numbers, mobile banking PINs, or mobile wallet passwords. When you initiate a deposit via JazzCash or EasyPaisa, the authorisation process takes place directly within the payment provider's secure environment — pk07 receives only a confirmation of the completed transaction, not your authentication credentials.

All withdrawal requests are processed only to payment methods that have been verified as belonging to the registered account holder, consistent with our KYC and anti-money laundering procedures. This policy protects both our players and the integrity of the pk07 platform against fraudulent withdrawal attempts.

Financial records — including deposit history, withdrawal records, and PKR balance movements — are retained for the period required by applicable financial regulations, after which they are securely deleted or anonymised.

pk07 uses cookies and similar tracking technologies on its Platform for the following purposes:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your login state across pages, security cookies that protect against cross-site request forgery, and cookies that remember your language preference. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymised data about how players navigate the Platform — which pages are most visited, average session length, common navigation paths — to help pk07 identify performance bottlenecks and improve user experience. Data collected by performance cookies is aggregated and cannot identify individual players.
• Functionality Cookies: Remember your account preferences such as display settings, preferred game category, and notification configurations so that these are applied automatically each time you log in to your pk07 account.
• Analytics Cookies: pk07 uses analytics tools to track the effectiveness of different Platform features and to understand player engagement patterns at an aggregate level. Analytics data is processed in anonymised form and is not associated with individual player profiles.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core Platform features. Non-essential cookies can be disabled without affecting your ability to access your pk07 account, though some convenience features may not function as intended.

pk07 implements technical and organisational security measures proportionate to the nature of the personal data we process. These measures include:

• Transport Layer Security: All data transmitted between your browser or mobile device and pk07 servers is encrypted using TLS 1.2 or higher, enforcing 256-bit SSL encryption on every connection.
• Encryption at Rest: Sensitive data stored in pk07's databases — including personal details, payment information, and KYC documents — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player account passwords are never stored in readable form. They are processed through a one-way cryptographic hash function with a unique salt before storage, meaning that even internal pk07 staff cannot read your password.
• Two-Factor Authentication: pk07 provides optional two-factor authentication via OTP sent to your registered Pakistani mobile number. We strongly recommend all players activate this feature, particularly those maintaining significant PKR balances in their accounts.
• Access Controls: Access to pk07 systems containing personal data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to regular review.
• Penetration Testing: pk07's systems undergo regular security assessments conducted by qualified security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: pk07 maintains a documented data breach response procedure. In the event of a security incident, our response team is activated within defined timeframes and affected players are notified without undue delay.

While pk07 maintains robust security measures, no online platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password, enabling 2FA, and not sharing your login credentials with anyone.

pk07 retains your personal data for the periods necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory obligations:

After the applicable retention period expires, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player. Anonymised aggregated data may be retained indefinitely for statistical and platform development purposes.

As a pk07 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact pk07 support through the channels listed in Clause 15:

These rights are detailed in the Your Rights section below this Policy.

Age verification is conducted during the account registration process and may be reinforced through KYC documentation requirements. If pk07 becomes aware that a registered account belongs to a person under the age of 21, the account will be immediately closed, gaming activity will be voided, deposited funds will be returned, and all personal data collected in connection with that account will be deleted as promptly as our legal obligations permit.

Parents and guardians who believe that a minor has created a pk07 account are encouraged to contact pk07 support immediately. We will treat such reports with urgency and full confidentiality.

pk07 serves Pakistani players and processes data in the context of Pakistan's digital market. Some of pk07's technical infrastructure, service providers, and game content partners operate servers or process data in jurisdictions outside Pakistan. Where such international data transfers occur, pk07 ensures that adequate protections are in place through one or more of the following mechanisms:

• Contractual data processing agreements that impose data protection obligations on the receiving party equivalent to those applied by pk07.
• Standard contractual clauses or equivalent transfer mechanisms recognised under applicable data protection frameworks.
• Transfer to jurisdictions that maintain data protection standards substantially equivalent to international best practice.

pk07 maintains a record of all international data transfer arrangements and makes this information available to players on request through the contact channels listed in Clause 15.

pk07 may send you promotional communications about bonuses, new game launches, seasonal cricket betting promotions, PSL-related offers, and other marketing content where you have provided your consent to receive such communications. Marketing consent is collected at registration and can be managed at any time through your pk07 account notification preferences settings.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in your pk07 account settings.
• Following the unsubscribe instructions included in any marketing email you receive from pk07.
• Contacting pk07 support directly and requesting removal from marketing communications.

Opting out of marketing communications does not affect your receipt of transactional communications — including deposit confirmations, withdrawal processing updates, account security alerts, and important policy change notifications — which are sent on the basis of contractual necessity rather than marketing consent.

pk07 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When we make material changes to this Policy — changes that significantly affect how we use your personal data or the rights available to you — we will notify you by one or more of the following means:

• A notification displayed on the Platform at your next login.
• An email to your registered pk07 email address.
• A prominent notice on the pk07 homepage.

The version number and "Last Updated" date at the top of this Policy identify the current version. We encourage you to review this Policy periodically to stay informed about how pk07 protects your personal information. Continued use of the pk07 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or the way pk07 processes your personal data — including requests to exercise your data rights — please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within your logged-in pk07 account. This is the fastest channel for routine account queries. Urdu and English supported.
• Email: [email protected] — for formal data subject access requests, deletion requests, and privacy-related concerns. Please mark the subject line "Privacy Request" for priority routing to our data team. We aim to respond within 5 business days.
• Messenger / Viber: Available through the contact information published in the pk07 Contact section of the Platform.

When submitting a data subject access request or a deletion request, please provide sufficient information to allow us to verify your identity as the account holder — this protects you by ensuring we do not disclose your data to an unauthorised third party. Your registered mobile number and a brief description of the data request are typically sufficient to begin the process.