pk48 Privacy Policy —
Your Data, Protected

1.1 pk48 ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all individuals who use the pk48 platform, including players registered in Pakistan and all other jurisdictions in which the platform is accessible.

1.2 This Privacy Policy ("Policy") sets out how pk48 collects, uses, stores, shares, and protects personal data in the course of operating our online gaming and sports betting platform, and explains the rights available to data subjects in relation to that data.

1.3 "Personal data" means any information relating to an identified or identifiable natural person. This includes — but is not limited to — your name, CNIC number, date of birth, mobile phone number, email address, bank account or mobile wallet details, IP address, device identifiers, and records of your gaming and betting activity on the pk48 platform.

1.4 This Policy is effective as of January 2026 and supersedes all previous versions. We will notify registered players of any material changes to this Policy before they take effect, in accordance with Section 15 of this document.

2.1 For the purposes of applicable data protection law, pk48 acts as the Data Controller in respect of personal data collected from players and users of the pk48 platform. As Data Controller, pk48 determines the purposes for which personal data is processed and the manner in which that processing is carried out.

2.2 Where pk48 engages third-party service providers — such as payment processors, game content studios, KYC verification providers, or fraud detection services — those providers act as Data Processors and process personal data only on pk48's documented instructions and in accordance with appropriate data processing agreements.

2.3 pk48 operates under an international gaming authority license. Our data handling practices are subject to oversight by that licensing authority, which may impose data retention, security, and reporting requirements as conditions of licensure.

3.1 pk48 collects the following categories of personal data from players and platform users:

3.2 pk48 does not collect or process special categories of personal data (such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs) except where expressly required by applicable law or with your explicit consent.

4.1 pk48 collects personal data through the following channels:

• Account Registration: When you create a pk48 Account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you submit identity documents to complete our Know Your Customer process, either at registration or before your first withdrawal.
• Deposits and Withdrawals: When you conduct financial transactions through the pk48 Cashier, payment-related data is received from your payment provider (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, USDT TRC20 etc.).
• Platform Use: Your gaming activity, bet history, session data, and technical data are automatically recorded as you interact with the pk48 platform.
• Customer Support: When you contact our support team via live chat or email, your communications are recorded for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: As described in Section 9 of this Policy, pk48 uses cookies and similar technologies to collect technical and behavioural data during your platform sessions.
• Third-Party Sources: In limited circumstances, pk48 may receive data from third-party identity verification providers, fraud detection agencies, or payment processors to supplement our own records for compliance purposes.

5.1 pk48 processes your personal data for the following purposes, each supported by an appropriate legal basis under applicable data protection law:

• Account Creation and Management: To create, maintain, and manage your pk48 Account and to provide you with access to our gaming and betting services. Legal basis: Performance of contract.
• Identity and Age Verification (KYC): To verify that you are who you say you are and that you meet the 21+ age requirement before processing withdrawals or granting access to premium features. Legal basis: Legal obligation and compliance with licensing requirements.
• Payment Processing: To process deposits received from your JazzCash, EasyPaisa, or bank account and to return withdrawal amounts to your designated payment method. Legal basis: Performance of contract.
• Anti-Money Laundering (AML) Compliance: To monitor financial transactions for patterns consistent with money laundering, terrorist financing, or other financial crime, as required under our international gaming license. Legal basis: Legal obligation.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, to administer self-exclusion and deposit limit tools, and to provide appropriate interventions where required. Legal basis: Legal obligation and legitimate interest.
• Customer Support: To respond to your queries, complaints, and account requests. Legal basis: Performance of contract and legitimate interest.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bot usage, and other prohibited conduct on the pk48 platform. Legal basis: Legitimate interest and legal obligation.
• Marketing Communications: To send you promotional offers, bonus notifications, and gaming updates, where you have consented or where we have a legitimate interest in marketing to existing players. Legal basis: Consent or legitimate interest, as applicable.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the pk48 platform, game offering, and user experience. Legal basis: Legitimate interest.

6.1 pk48 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is shared with third parties only in the circumstances described in this Section.

6.2 pk48 may share your personal data with the following categories of third parties:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and USDT TRC20 gateway providers — for the purpose of processing deposits and withdrawals on your behalf.
• KYC and Identity Verification Providers: Licensed third-party identity verification services used to confirm CNIC authenticity and validate the age and identity of pk48 players.
• Game Content Providers: Studios including Pragmatic Play, PG Soft, Evolution Gaming, and others may receive anonymised session identifiers to facilitate game play. These providers do not receive personally identifiable information beyond what is technically required for game delivery.
• Fraud Prevention and Security Services: Third-party fraud detection platforms that assist pk48 in identifying suspicious activity, multi-accounting, bot usage, and financial crime patterns.
• Regulatory and Licensing Authorities: Our international gaming license authority and, where legally required, government agencies and law enforcement bodies — to meet our regulatory reporting and AML obligations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by pk48, who are bound by professional confidentiality obligations.

6.3 All third-party processors engaged by pk48 are subject to contractual data processing agreements requiring them to process personal data only as instructed by pk48, to maintain adequate security measures, and to comply with applicable data protection standards.

7.1 As an internationally licensed online gaming platform, pk48 and certain of its third-party service providers operate infrastructure in jurisdictions outside Pakistan. Personal data held by pk48 may therefore be transferred to, stored in, or processed in countries other than Pakistan.

7.2 Where personal data is transferred to a jurisdiction that may not offer the same level of data protection as Pakistan or the jurisdiction of our licensing authority, pk48 implements appropriate safeguards. These may include contractual clauses requiring the recipient to maintain data security and privacy standards equivalent to those applied by pk48.

7.3 By registering a pk48 Account and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data as described in this Section, subject to the safeguards described herein.

8.1 pk48 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for compliance with legal, regulatory, audit, and licensing obligations, and to resolve disputes and enforce our agreements.

8.2 Specific retention periods applicable to key data categories are as follows:

• Account and Identity Data: Retained for the duration of your active Account and for a minimum of five (5) years following permanent Account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial regulatory obligations.
• Gaming Activity Records: Retained for the duration of the Account plus five (5) years, or such longer period as may be required by our licensing authority.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for the duration of active consent plus three (3) years to evidence compliance with marketing regulations.

8.3 Where personal data is no longer required, pk48 will securely delete or anonymise that data in accordance with our data lifecycle management procedures. Anonymised, aggregated data may be retained indefinitely for analytical and business improvement purposes.

9.1 pk48 uses cookies and similar tracking technologies on the pk48 platform. Cookies are small data files placed on your device that allow pk48 to recognise your browser, maintain your session, and collect information about how you use the platform.

9.2 pk48 uses the following categories of cookies:

9.3 Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. You may be able to decline non-essential cookies; however, please note that doing so may limit certain functionality of the pk48 platform, including the ability to maintain a persistent login session. Essential cookies cannot be disabled via browser settings without impairing core platform functionality.

10.1 pk48 implements a multi-layered approach to data security. The measures currently in place include, without limitation:

• 256-bit SSL Encryption: All data transmitted between your device and the pk48 platform is protected by Transport Layer Security (TLS) using 256-bit encryption — the same standard applied by major international financial institutions.
• Encrypted Data Storage: Personal data, financial records, and KYC documentation stored on pk48's servers are encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to player personal data within pk48's organisation is restricted to personnel who require it to perform their specific functions. Access is controlled by role-based permissions and is logged and audited.
• Two-Factor Authentication (2FA): Internal systems at pk48 require 2FA for all personnel with access to production databases containing player data.
• Regular Security Audits: pk48's platform and data infrastructure undergo regular third-party security assessments and penetration testing.
• Incident Response Plan: pk48 maintains a documented data breach response plan. In the event of a significant data breach affecting player personal data, we will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

10.2 Whilst pk48 takes all reasonable technical and organisational measures to protect your personal data, no method of data transmission over the internet or electronic storage is completely secure. We cannot therefore guarantee the absolute security of your data against all conceivable threats.

11.1 Subject to applicable data protection law and to any overriding legal retention obligations, you have the following rights in relation to your personal data held by pk48:

11.2 To exercise any of the above rights, please contact pk48 support at [email protected]. We will respond to all valid requests within thirty (30) calendar days of receipt. Complex or multiple requests may require up to ninety (90) days with appropriate notice to you of any extension.

11.3 pk48 may request additional identity verification before processing a data subject request to ensure that personal data is not disclosed to unauthorised parties.

12.1 The pk48 platform is intended exclusively for individuals who are 21 years of age or older. pk48 does not knowingly collect, use, or retain personal data from individuals who are under the age of 21.

12.2 Age verification is conducted as a mandatory step during Account registration and is reinforced through KYC procedures. Where pk48 discovers or has reasonable grounds to suspect that an Account has been registered by or on behalf of an individual under 21 years of age, that Account will be immediately suspended and all personal data associated with it will be processed only to the extent necessary to investigate and close the Account, after which it will be deleted subject to any mandatory legal retention period.

12.3 Parents and guardians who believe that a minor may have registered on the pk48 platform should contact our support team immediately at [email protected]. We will investigate and respond within 48 hours.

13.1 With your consent, or where we have a legitimate interest in communicating with you as an existing pk48 player, we may send you promotional communications relating to bonuses, new games, special offers, and platform updates. Communications may be sent via SMS to your registered Pakistani mobile number, by email, or via in-platform notifications.

13.2 You may withdraw consent to receive marketing communications at any time by:

• Updating your communication preferences within your pk48 Account settings;
• Contacting pk48 support at [email protected] to request removal from our marketing lists.

13.3 Withdrawal of consent to marketing does not affect the lawfulness of any marketing communications sent prior to your withdrawal. Operational communications — such as deposit confirmations, withdrawal notifications, KYC verification requests, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences as they are necessary for account administration.

13.4 Players who have activated self-exclusion under pk48's Responsible Gaming tools will be excluded from all promotional marketing communications for the duration of the self-exclusion period.

14.1 The pk48 platform does not include links to third-party websites for commercial purposes. Where links to third-party resources — such as game provider documentation or responsible gaming support organisations — are included in specific areas of the platform, pk48 is not responsible for the privacy practices of those external sites.

14.2 We recommend that you review the privacy policies of any third-party websites you visit, as their data collection and processing practices may differ from those of pk48.

15.1 pk48 reserves the right to update or amend this Privacy Policy at any time. Where updates are material — meaning they significantly change how we collect, use, or share your personal data — we will provide advance notice to registered players via in-platform notification or by email to your registered address, at least fourteen (14) days before the changes take effect.

15.2 Non-material updates — including clarifications, formatting improvements, or corrections of typographical errors — may be applied without advance notice. The "Last Updated" date at the top of this page and in the sidebar will be updated to reflect the date of any change.

15.3 Your continued use of the pk48 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a material change to this Policy, you have the right to close your pk48 Account before the effective date of the change by contacting our support team.

16.1 If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to raise a complaint about how pk48 has handled your personal data, please contact our support team through the following channel:

16.2 pk48 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within five (5) business days and provide a substantive response within the timeframes specified in Section 11 of this Policy.

16.3 Where you are not satisfied with pk48's response to a data protection complaint, you may have the right to escalate the matter to the supervisory authority in the jurisdiction of our licensing authority, or to seek independent legal advice regarding your rights under applicable data protection law.

16.4 This Privacy Policy was last updated in January 2026. It supersedes and replaces all previously published versions of the pk48 Privacy Policy. The current version of this Policy is always available at pk48.bid/privacy-policy.