Privacy Policy – How PKBet Protects Your Personal Data

1. Introduction

PKBet — accessible at pkbet-khelo.com — is an online betting and casino platform built specifically for Pakistani players. Running a platform like PKBet means handling personal data responsibly. When you register an account, deposit funds, place a bet, or contact support, you share information with PKBet. This policy tells you exactly how that information is handled.

PKBet is the data controller for all personal information collected through the platform. That means PKBet decides how your data is used and is responsible for ensuring it is processed lawfully, fairly, and transparently. If you have any questions about anything in this policy, the data team at PKBet can be reached at privacy@pkbet-khelo.com — that address is monitored daily and queries receive a response within 14 days.

This policy is reviewed and updated at least once a year. When material changes are made, PKBet will notify registered members by email and via a notice on the platform before the changes take effect. The "Last Updated" date at the top of this page reflects when the most recent version was published.

2. What Data PKBet Collects

PKBet collects personal data in three ways: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third parties (such as payment processors and identity verification services). The table below gives a complete breakdown.

3. Why PKBet Uses Your Data

PKBet collects only the data it genuinely needs to run the platform properly. Here is every purpose for which your data is used:

• Account creation and management: Setting up your PKBet account, verifying your identity, maintaining your account settings and preferences.
• Processing deposits and withdrawals: Routing payment instructions, confirming transaction success, and investigating payment disputes when they arise.
• Providing the betting and casino service: Recording bets, settling wagers, calculating winnings, and maintaining an accurate account balance in PKR.
• Fraud prevention and security: Detecting unusual login patterns, identifying multiple accounts, and protecting both the member and PKBet from financial crime.
• Regulatory compliance and KYC: Verifying that members are over 18, confirming identity to prevent money laundering, and maintaining records required by applicable regulations.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling, delivering deposit limit tools and self-exclusion, and communicating with members who have applied restrictions.
• Customer support: Responding to queries, resolving complaints, and maintaining records of support interactions for quality and training purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to improve site performance, fix bugs, and develop new features members want.
• Marketing communications (with consent only): Sending promotional emails or SMS notifications about PKBet offers, new features, and bonuses. You can opt out at any time — see Section 12.

4. Legal Basis for Processing

PKBet relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Performance of contract: Most core processing — account management, payments, bet settlement — is necessary to deliver the PKBet service you contracted for when you registered.
• Legal obligation: Identity verification (KYC), anti-money laundering checks, and record retention are required by applicable financial and gaming regulations.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and customer support quality are necessary to protect PKBet and its members from harm.
• Consent: Marketing communications are sent only with your explicit consent, given either at registration or through your account marketing preferences. Consent can be withdrawn at any time without affecting your ability to use PKBet.

5. Who PKBet Shares Your Data With

PKBet does not sell personal data. It does not share your data with advertisers, data brokers, or social media platforms for their own purposes. Data is shared only with the following categories of recipients, and only to the minimum extent necessary for each purpose:

5.1 Payment Processors

When you make a deposit or withdrawal on PKBet, the relevant payment details are passed to the applicable payment processor — Easypaisa, JazzCash, NayaPay, SadaPay, or the card payment gateway. These providers receive only the data needed to complete the transaction and are contractually bound to protect it.

5.2 Identity Verification Partners

During KYC verification, identity documents may be processed by a third-party verification service that checks the validity of Pakistani CNICs and other identity documents. This service operates under a strict data processing agreement with PKBet and does not retain your documents beyond the verification period.

5.3 Game Providers

For casino and jackpot slot games provided by third-party studios, a session token and your PKBet account identifier are shared with the game provider to run the game. Game providers do not receive your full name, payment details, or contact information.

5.4 Law Enforcement and Regulatory Authorities

PKBet will disclose personal data to government authorities, regulators, or law enforcement bodies where required by law or where PKBet has a good-faith belief that disclosure is necessary to prevent a crime, protect a person's safety, or fulfil a legal obligation. PKBet will notify affected members of such disclosures where legally permitted to do so.

6. How PKBet Handles Payment Data

Payment security on PKBet is handled with particular care because it involves your real money. The following practices apply specifically to financial data:

• PKBet never stores full card numbers on its own servers. Card transactions are processed through a PCI-DSS Level 1 certified gateway that tokenises your card details — PKBet receives only a token reference, not the actual card number.
• Easypaisa and JazzCash mobile wallet numbers are stored in encrypted form in PKBet's database and are used exclusively for processing withdrawal requests to those accounts.
• Bank account details provided for IBFT withdrawals are stored encrypted and used only for the specific withdrawal request they were provided for, unless you save them to your PKBet withdrawal preferences explicitly.
• All transaction records — deposits, withdrawals, bonus credits — are retained for a minimum of 5 years for regulatory compliance and dispute resolution purposes, even after account closure.
• PKBet's internal access to payment data is restricted on a need-to-know basis. Only the payments and compliance teams have access to financial transaction records, and all access is logged.

7. How Long PKBet Keeps Your Data

PKBet keeps your personal data only as long as it is needed for the purpose it was collected, or as required by law. The following retention periods apply:

After the applicable retention period, PKBet securely deletes or anonymises the data so it can no longer be linked to an individual. Anonymised aggregate data (e.g. total deposits by month, game popularity statistics) may be retained indefinitely for business analysis purposes.

8. How PKBet Keeps Your Data Secure

PKBet employs multiple layers of technical and organisational security to protect your personal data:

• Encryption in transit: All data transmitted between your browser or app and PKBet's servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms this encryption is active.
• Encryption at rest: Sensitive data fields — including identity documents, payment account numbers, and passwords — are encrypted in PKBet's database using AES-256 encryption.
• Password hashing: PKBet never stores your password in plain text. Passwords are hashed using bcrypt with a work factor that makes brute-force attacks computationally impractical.
• Two-factor authentication: OTP verification via your registered mobile number is required for withdrawals and for any account security setting changes. This prevents unauthorised withdrawals even if your password is compromised.
• Access controls: PKBet's internal systems operate on a strict role-based access control model. Staff members only have access to the data categories their role requires. All internal data access is logged and audited.
• Regular security audits: PKBet's infrastructure and application code are tested for vulnerabilities on a regular basis. Critical findings are remediated within 24 hours; high-severity issues within 7 days.
• Breach notification: In the event of a data breach that poses a risk to members, PKBet will notify affected members as quickly as possible and take immediate steps to contain the breach and protect remaining data.

9. Cookies & Tracking Technologies

PKBet uses cookies and similar technologies to keep the platform working correctly, understand how it is being used, and — with your consent — personalise your experience. Cookies are small text files stored in your browser. They do not contain viruses or malware and cannot access other data on your device.

PKBet does not use advertising cookies or allow third-party ad networks to place tracking cookies on its platform. The analytics data PKBet collects is processed internally and is not shared with advertising platforms.

You can manage cookies through your browser settings at any time. Disabling essential cookies will affect your ability to use PKBet. You can also manage analytics and preference cookies through the privacy settings in your PKBet account.

10. Your Data Rights

As a PKBet member, you have the following rights over your personal data. To exercise any of these rights, email privacy@pkbet-khelo.com with your account email address, the right you wish to exercise, and any relevant details. PKBet will respond within 14 days.

11. Children & Minors

PKBet is strictly an adults-only platform. No person under the age of 18 may create an account or use the PKBet service under any circumstances. PKBet does not knowingly collect personal data from anyone under 18. If PKBet discovers that a member is under 18, the account is immediately suspended, all funds are held pending investigation, and the account data is processed in accordance with applicable law before deletion.

If you believe a minor has created a PKBet account, please contact PKBet support immediately at support@pkbet-khelo.com or through the live chat. PKBet takes these reports extremely seriously and investigates every one promptly. We also recommend using parental controls on devices accessible to minors to prevent access to gambling sites including PKBet.

12. Marketing Communications

PKBet sends marketing communications only to members who have given explicit consent to receive them. You may be asked at registration whether you wish to receive promotional emails and SMS messages about PKBet offers, new games, and bonuses. Saying yes is entirely optional — it does not affect your ability to register or use PKBet.

If you have opted in to marketing communications, you can opt out at any time by:

• Clicking the "Unsubscribe" link at the bottom of any PKBet marketing email.
• Replying STOP to any PKBet SMS message.
• Updating your communication preferences in your PKBet account settings.
• Emailing privacy@pkbet-khelo.com with the subject line "Unsubscribe".

Opting out of marketing does not prevent PKBet from sending transactional communications — for example, deposit confirmations, withdrawal notifications, bet settlement summaries, or important account security alerts. These are necessary to operate your account and cannot be disabled.

13. Changes to This Privacy Policy

PKBet reviews this Privacy Policy regularly and updates it when practices change, new data processing activities are introduced, or regulatory requirements evolve. When material changes are made — for example, a new category of data being collected, or a new third-party processor being added — PKBet will:

• Update the "Last Updated" date at the top of this page.
• Send a notification email to all registered members explaining the key changes in plain language.
• Display a notice on the PKBet platform for a minimum of 14 days before the change takes effect.

If you continue to use PKBet after an updated Privacy Policy takes effect, you are deemed to have accepted the revised terms. If you disagree with any change, you should close your account before the effective date of the amendment and request deletion of your data where permitted.

14. Contact PKBet About Privacy

The PKBet data team handles all privacy-related queries, data rights requests, and complaints. The best way to reach them is by email, which creates a clear record of your request and ensures it is routed to the right person.

If you believe PKBet has not handled your personal data correctly and your complaint has not been resolved to your satisfaction after contacting the data team, you may escalate the matter to the relevant regulatory authority in your jurisdiction. PKBet will cooperate fully with any such investigation.