pk97 Privacy Policy

1. Definitions

Throughout this Privacy Policy, the following terms carry the meanings set out below:

• "pk97", "we", "us", "our" — refers to the pk97 platform and its licensed operating entity accessible at https://pk97.bio.
• "Player", "you", "your" — any individual who accesses, registers on, or uses any part of the pk97 platform.
• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, including name, CNIC number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data. For all data collected through pk97, the Controller is pk97's licensed operating entity.
• "Processor" — a third party that processes Personal Data on behalf of pk97 under a binding data processing agreement, such as a payment gateway or KYC verification provider.
• "KYC" — Know Your Customer; the identity verification process mandated by pk97's licensing and AML compliance obligations.
• "AML" — Anti-Money Laundering; the legal framework under which pk97 is required to monitor transactions and report suspicious financial activity.

2. Who We Are

pk97 is an internationally licensed online casino and sports betting platform serving players across Pakistan, including Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Multan, and other cities. pk97 operates under an international gaming licence and is committed to maintaining the highest standards of player data protection consistent with that licence's requirements.

As the Data Controller for personal data collected through the pk97 platform, we are responsible for ensuring that all processing activities described in this Privacy Policy are conducted lawfully, fairly, and transparently. For any data-related enquiries, you can contact the pk97 Data Protection team via the support email displayed in the footer of this website.

3. Personal Data We Collect

pk97 collects personal data in the following categories, depending on your level of interaction with the platform:

3.1 Registration Data

• Full legal name (as it appears on your CNIC)
• Date of birth (to verify the 21+ age requirement)
• Residential address
• Mobile phone number
• Email address
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Copy of CNIC (Computerised National Identity Card) — front and back
• Proof of address documentation (utility bill or bank statement)
• Payment method ownership evidence (screenshot or letter from payment provider)
• Selfie or live photograph where required by KYC verification partner

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• JazzCash / EasyPaisa mobile wallet numbers (last four digits stored; full numbers processed by the payment provider)
• Bank account details submitted for bank transfer withdrawals
• Cryptocurrency wallet addresses used for USDT TRC20 transactions
• Transaction reference numbers and processing timestamps

3.4 Gaming & Betting Activity Data

• Game session records including game type, wager amounts, outcomes, and session duration
• Sports bets placed including market, stake, odds, and settlement outcome
• Bonus and promotion usage history
• Responsible gaming tool settings and self-exclusion records

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps and platform navigation logs
• Cookie identifiers and similar tracking technologies (see Section 8)

3.6 Communications Data

• Customer support chat transcripts and email correspondence
• Complaint and dispute records
• Survey responses and voluntary feedback submitted to pk97

4. How We Collect Your Data

pk97 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, placing bets, contacting customer support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the pk97 platform, including through cookies, server logs, and session tracking technologies.
• Third-party providers: Identity verification data returned by our KYC partners; payment confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and other payment processors; fraud detection signals from our risk management partners.
• Publicly available sources: In limited circumstances, publicly available information may be used to corroborate identity details provided during KYC or to investigate suspected fraudulent activity.

5. Purposes of Processing

The table below sets out each purpose for which pk97 processes personal data and the categories of data involved:

6. Legal Bases for Processing

pk97 processes your personal data on the following legal bases in accordance with applicable data protection principles:

• Contract performance: Processing that is necessary to provide the services you have registered for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our licensing conditions, AML regulations, tax reporting obligations, and responses to lawful regulatory requests.
• Legitimate interests: Processing conducted in pursuit of pk97's legitimate business interests, including fraud prevention, platform security, and service analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as direct marketing communications, where we have obtained your prior consent. You may withdraw consent at any time by updating your communication preferences in Account Settings.

7. Data Sharing & Third Parties

pk97 does not sell your personal data. We may share your data with the following categories of third parties, strictly limited to the purposes described:

• KYC & identity verification partners: To fulfil our mandatory identity verification obligations prior to withdrawal processing.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, cryptocurrency network processors, and retail cash partners — to facilitate your deposit and withdrawal transactions.
• Fraud and risk management providers: To detect and prevent fraudulent account activity, match-fixing, and money laundering.
• Licensing and regulatory authorities: Where required by the conditions of our international gaming licence or by lawful regulatory order or court direction.
• Cloud infrastructure and hosting providers: Who store platform data on our behalf under binding data processing agreements that prohibit independent use of your data.
• Customer support platform providers: Used to manage live chat and email support ticketing, under contractual data protection terms.

All third-party processors engaged by pk97 are bound by data processing agreements that require them to process your personal data only on pk97's documented instructions and to maintain appropriate technical and organisational security measures.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the pk97 platform. They allow the platform to recognise your device, maintain your session, remember your preferences, and collect analytical data about platform usage patterns.

8.2 Types of Cookies Used by pk97

• Strictly necessary cookies: Required for core platform functionality including session authentication, security tokens, and shopping cart state for deposit flows. These cannot be disabled without breaking core platform functions.
• Functional cookies: Store your language preferences, display settings, and responsible gaming tool configurations to personalise your experience between sessions.
• Analytical cookies: Used to collect anonymised data about how players navigate the pk97 platform — which pages are visited most, where sessions end, and how features are used — to inform product improvements.
• Marketing cookies (consent-based): Used only where you have given prior consent to receive personalised pk97 promotional communications. These may track which promotions you have viewed or interacted with.

8.3 Managing Cookies

You may manage your cookie preferences through the pk97 Cookie Preference Centre accessible via the platform's footer, or through your browser settings. Disabling strictly necessary cookies will impair your ability to use the pk97 platform. Disabling other cookie categories will not affect your core gaming experience but may reduce personalisation quality.

9. Data Retention

pk97 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by our licensing and compliance obligations:

• Account registration and KYC data: Retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, in accordance with financial record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution, regulatory reporting, and responsible gaming monitoring.
• Customer support communications: Retained for two (2) years from the date of the final communication in a support thread, unless a complaint or dispute requires longer retention.
• Self-exclusion records: Retained for the full duration of the exclusion period plus five (5) years thereafter, to prevent re-registration during the exclusion window.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised — such that no individual can be re-identified — may be retained indefinitely for statistical and analytical purposes.

10. Your Data Rights

As a pk97 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the pk97 support team with your registered account details and a description of your request:

pk97 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a high volume of data, this period may be extended by a further two months with prior notice. All requests are handled free of charge unless they are manifestly unfounded or excessive.

11. Data Security

pk97 implements the following technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and the pk97 platform is encrypted using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal data and financial records stored in pk97's databases are encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to pk97 personnel with a documented business need. All internal access is role-based, logged, and subject to regular review.
• Two-factor authentication: Available for all pk97 player accounts. We strongly recommend enabling 2FA to protect your account from unauthorised access.
• Penetration testing: pk97's platform infrastructure is subject to periodic third-party penetration testing to identify and remediate security vulnerabilities.
• Incident response: pk97 maintains a documented data breach response plan. In the event of a breach affecting your personal data, you will be notified in accordance with applicable regulatory requirements.

Whilst pk97 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own device, account credentials, and two-factor authentication details.

12. Children & Minors

The pk97 platform is strictly for adults aged 21 years and over. pk97 does not knowingly collect personal data from individuals under the age of 21. Registration requires date-of-birth confirmation and is subject to KYC age verification prior to withdrawal of any funds.

If pk97 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be deleted to the extent permitted by law, and any deposited funds will be returned to the deposit source following identity verification of the account holder.

If you believe a minor may have registered a pk97 account using your personal details or payment methods, please contact the pk97 support team immediately so we can investigate and take appropriate action.

13. Third-Party Links

The pk97 platform may contain links to third-party websites, including payment provider portals and licensing authority pages. pk97 is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party site you visit via a link from the pk97 platform. This Privacy Policy applies solely to data processed by pk97 in connection with your use of the pk97 platform.

14. Changes to This Privacy Policy

pk97 reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, the purposes for which it is used, or the third parties with whom it is shared — pk97 will notify registered players via the email address on file and/or a prominent notice on the platform prior to the effective date of the change.

The "Last Updated" date at the top of this page will reflect the date of the most recent revision. We recommend reviewing this Privacy Policy periodically, particularly before making a deposit or submitting sensitive documents. Continued use of the pk97 platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

15. Contact & Data Enquiries

For any questions, concerns, or formal requests relating to your personal data and this Privacy Policy, please contact the pk97 Data Protection team through the following channels:

• Live Chat: Available 24/7 directly on the pk97 platform — the fastest way to reach our support team.
• Support Email: The email address published in the footer of this website. Please include your registered username, the nature of your enquiry, and any relevant transaction or account references.

pk97 will acknowledge all data-related enquiries within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days. If you are not satisfied with pk97's response to a data rights request or complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority or the dispute resolution mechanism associated with pk97's gaming licence.