pk40 Privacy Policy

1. Introduction

pk40 ("pk40", "we", "us", "our") operates the online gaming and sports betting platform accessible at pk40.app. We are committed to protecting the privacy and personal data of all individuals who interact with our Platform — whether as registered players, visitors to our website, or individuals who contact our support team.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we use it, the conditions under which we may share it, and the rights available to you regarding your own data. This Policy applies to all data processing activities carried out by pk40 in connection with the Platform. By registering for a pk40 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with our Terms and Conditions and our Responsible Gaming Policy, both of which are accessible via the pk40 website.

2. Personal Data We Collect

2.1 Registration Data

When you create a pk40 account, we collect information you provide directly, including your full legal name, date of birth, email address, mobile phone number, residential address, and your chosen username and password. This information is required to create and maintain your account and to fulfil our Know Your Customer (KYC) obligations.

2.2 Identity Verification Data

To comply with our anti-money laundering (AML) and responsible gaming obligations, we may request copies of government-issued identity documents such as a Pakistani CNIC, passport, or driving licence. We may also request proof of address documents such as a utility bill or bank statement issued within three months.

2.3 Financial Data

We collect data relating to your financial transactions on the Platform, including deposit amounts, withdrawal requests, payment method details (such as your JazzCash or Easypaisa mobile number, or bank account details), transaction history, and PKR balance information. We do not store full payment card numbers on our servers — card processing is handled by our certified third-party payment processors.

2.4 Gaming Activity Data

We record data relating to your use of the pk40 Platform, including bets placed, games played, session duration, game outcomes, bonus usage, and wagering history. This data is used to administer your account, resolve disputes, and fulfil our responsible gaming monitoring obligations.

2.5 Technical & Device Data

When you access the pk40 Platform, we automatically collect certain technical data including your IP address, browser type and version, device type and operating system, referring URL, and pages visited. This data is collected through cookies and similar technologies as described in Section 6.

2.6 Communications Data

If you contact our support team via email or live chat, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used to manage our support interactions and improve service quality.

3. How We Use Your Personal Data

pk40 processes personal data for the following purposes:

• Account Management: To create, maintain, and administer your pk40 account, including processing deposits, withdrawals, and wagers.
• Identity & Age Verification: To verify that you are at least 18 years of age and to confirm your identity as required under our KYC obligations.
• Anti-Money Laundering (AML): To detect, investigate, and prevent financial crime, fraud, and money laundering in accordance with applicable laws and regulations.
• Responsible Gaming: To monitor for signs of problem gambling, to enforce account limits and exclusions, and to provide appropriate intervention where necessary.
• Platform Security: To protect the integrity of the Platform and our Users against fraud, account takeover, cheating, and abuse.
• Customer Support: To handle your enquiries, complaints, and disputes in a timely and effective manner.
• Marketing Communications: Where you have provided consent or where permitted under applicable law, to send you promotional offers, bonus notifications, and relevant updates about pk40. You may opt out of marketing communications at any time via your account settings.
• Legal Compliance: To comply with applicable legal, regulatory, and licensing obligations, including responding to lawful requests from competent authorities.

4. Legal Basis for Processing

pk40 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our agreement with you, including operating your account and processing your transactions.
• Legal Obligation: Processing required to comply with our legal and regulatory obligations, including KYC, AML, and responsible gaming requirements.
• Legitimate Interests: Processing for fraud prevention, Platform security, and service improvement, where such interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

pk40 does not sell your personal data to any third party. We may share your data with the following categories of recipients under strict confidentiality obligations:

• Payment Processors: To facilitate deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, UnionPay, and USDT TRC20.
• Identity Verification Providers: To conduct KYC and age verification checks required under our licensing obligations.
• Gaming Software Providers: To provide access to third-party games available on the pk40 Platform. These providers may process gameplay data under their own privacy policies.
• Fraud Prevention & AML Services: To screen transactions and account activity against sanctions lists and fraud databases.
• Legal & Regulatory Authorities: Where required by law, court order, or regulatory authority. pk40 will only disclose data to authorities in response to a lawful and specific request.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the pk40 Platform. They allow us to recognise your device, maintain your session, remember your preferences, and collect analytical data about how the Platform is used.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function, including session management and authentication. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data on how players interact with the Platform, to help us identify and fix issues and improve user experience.
• Functional Cookies: Allow the Platform to remember your preferences such as language settings and display options.
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed with your consent.

6.3 Managing Cookies

You can manage non-essential cookie preferences through the cookie settings panel on the pk40 Platform. You can also control cookies through your browser settings, though disabling strictly necessary cookies may affect your ability to use certain features of the Platform.

7. Data Retention

pk40 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for the periods required by applicable law. Specifically:

• Account data and gaming history is retained for the duration of your pk40 account and for a minimum of five years following account closure, to comply with AML and regulatory record-keeping requirements.
• KYC documents and identity verification records are retained for a minimum of five years from the date of verification.
• Support communications are retained for a minimum of two years from the date of the interaction.
• Marketing data is retained until you withdraw consent or unsubscribe, whichever is earlier.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

pk40 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk40 Platform.
• Encryption of sensitive data stored at rest on our servers.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of our Platform infrastructure.
• Two-factor authentication available for all player accounts to protect against unauthorised login.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe your pk40 account has been compromised, please contact us immediately at [email protected].

9. Your Data Rights

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by pk40:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request a structured, machine-readable copy of your personal data in certain circumstances.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact pk40 at [email protected]. We will respond to all verified requests within 30 days.

10. Children's Privacy

The pk40 Platform is strictly intended for users aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please notify us at [email protected].

11. Third-Party Links

The pk40 Platform may contain references or links to content from third-party gaming software providers. pk40 is not responsible for the privacy practices of third-party websites or services. We recommend reviewing the privacy policies of any third-party providers whose games or services you access through the Platform.

12. Changes to This Privacy Policy

pk40 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or Platform functionality. Where changes are material, we will provide notice on the Platform or via email to your registered address. The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform following the publication of any changes constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how pk40 processes your personal data, please contact our Data Protection team:

Email: [email protected]
Platform: pk40.app

We aim to respond to all data-related enquiries within 30 days of receipt.