pkaz Privacy Policy — How We Handle Your Personal Data

1 Introduction

This Privacy Policy applies to all users of the pkaz platform, including the website at pkaz.onl and the pkaz mobile application. It describes how pkaz collects, uses, stores, and protects your personal information when you register, deposit, play games, withdraw funds or contact our support team.

By creating a pkaz account or using our services, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms and Conditions, which also govern your use of the platform.

We review and update this policy periodically. Any significant changes will be communicated to registered users, and the "Last updated" date at the top of this page will reflect the most recent revision. We encourage you to check this page from time to time.

2 Data We Collect

pkaz collects personal data in two ways: information you provide directly and information collected automatically when you use the platform.

Information You Provide

• Registration details — full name, date of birth, email address, mobile number and CNIC number for identity verification
• Address information — used for verification and correspondence purposes
• Identity documents — copies of CNIC, proof of address or payment method verification submitted during KYC checks
• Payment information — JazzCash or Easypaisa account numbers, bank account details, or card information used for deposits and withdrawals
• Support communications — messages, emails or chat logs when you contact our customer support team
• Preferences and settings — responsible gaming limits, communication preferences and account configuration choices you make

Information Collected Automatically

• Device and browser data — device type, operating system, browser version and screen resolution
• IP address and location data — used to detect suspicious access and ensure you are accessing from a supported region
• Session and activity logs — pages visited, games played, bets placed, deposit and withdrawal history, login times and session duration
• Cookies and tracking data — see Section 6 for full details on how cookies are used

3 How We Use Your Data

The data pkaz collects is used for specific, legitimate purposes. Below is a summary of how each category of data is used:

pkaz does not use your data for automated decision-making that produces legal effects without human oversight. If an account is flagged by our systems, a human member of the team reviews the case before any action is taken.

4 Payment Data

All transactions on pkaz are processed in PKR. When you deposit or withdraw using JazzCash, Easypaisa, Raast, bank transfer or a local debit card, your payment credentials are handled through secure, certified payment processors.

pkaz does not store full card numbers, CVV codes, or full mobile wallet PINs on its own servers. Payment data is tokenised — meaning a secure reference token is stored in place of the actual sensitive details. This token is used to process future transactions without exposing the underlying credentials.

Payment processors used by pkaz are required to meet industry security standards and are contractually bound to use your payment data only for the purpose of processing your transactions. They are not permitted to use your financial data for any other purpose.

5 Data Sharing

pkaz does not sell, rent or trade your personal information. We share data only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers to operate the platform. These include payment processors, identity verification services, game content providers, cloud hosting companies and customer support tools. Each provider is carefully vetted and is only given access to the data they need to perform their specific function. They are contractually prohibited from using your data for any other purpose.

Legal Requirements

pkaz may disclose personal data to law enforcement agencies, regulatory bodies or other authorities if required to do so by applicable law, court order or to protect against fraud, money laundering or other criminal activity. We will only share the minimum data necessary in such circumstances.

Business Transfers

In the event of a merger, acquisition or sale of all or part of pkaz's business, user data may be transferred as part of that transaction. Affected users would be notified in advance, and your data would continue to be handled in accordance with this Privacy Policy.

6 Cookies

pkaz uses cookies and similar tracking technologies to keep the platform running smoothly, remember your preferences and understand how players use the site. Here is what each type of cookie does:

Essential Cookies

These are required for the platform to function. They keep you logged in during a session, remember your language and currency settings, and maintain your shopping cart or deposit flow. You cannot opt out of essential cookies while using pkaz.

Analytics Cookies

These help us understand how players navigate the platform — which games are most popular, where users drop off during the deposit flow, and how long typical sessions last. This data is aggregated and anonymised. It is used solely to improve pkaz and is never linked back to an individual player.

Preference Cookies

These remember choices you have made, such as your preferred game category, display settings or notification preferences, so you do not need to re-configure them every time you log in.

You can manage or clear cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the pkaz platform.

7 Data Security

Protecting your data is a core priority at pkaz. We implement multiple layers of technical and organisational security measures, including:

• TLS encryption on all data transmitted between your device and pkaz servers
• Encrypted storage for sensitive fields including identity document data and hashed passwords
• Access controls — only authorised personnel with a legitimate operational need can access personal data
• Session management — sessions expire after a period of inactivity to reduce the risk of unauthorised access
• Two-factor authentication (2FA) — available for all accounts and strongly recommended
• Regular security audits and vulnerability assessments of the platform infrastructure

Despite these measures, no system is completely immune to security incidents. In the unlikely event of a data breach that affects your personal information, pkaz will notify you promptly and explain the steps taken to contain and investigate the incident.

8 Data Retention

pkaz retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods vary depending on the type of data:

• Account and identity data — retained for the duration of your account plus a minimum of five years after closure, to comply with anti-money laundering and financial record-keeping requirements
• Transaction records — retained for a minimum of five years in line with financial compliance obligations
• Support communications — retained for three years after the last interaction, or longer if related to an open investigation
• Analytics data — anonymised after 13 months and retained in aggregated form indefinitely for platform analysis
• Marketing opt-in records — retained until you withdraw consent, plus one year for audit purposes

After the applicable retention period expires, data is securely deleted or anonymised so it can no longer be linked to you as an individual.

9 Your Rights

As a pkaz user, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team with your request and we will respond within a reasonable timeframe.

• Right to access — you can request a copy of the personal data pkaz holds about you
• Right to correction — if any of your data is inaccurate or out of date, you can ask us to update it
• Right to deletion — you can request that your account and personal data be deleted, subject to our legal retention obligations
• Right to restrict processing — in certain circumstances, you can ask us to limit how we use your data while a dispute is being resolved
• Right to withdraw marketing consent — you can opt out of promotional communications at any time via your account settings or by contacting support
• Right to data portability — you can request a copy of your data in a structured, commonly used format

10 Minors

pkaz is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe that a minor has registered on pkaz, please contact our support team immediately. Any account found to belong to a person under 18 will be closed, all data deleted, and any balance in the account will be voided.

Age verification is carried out during the registration process and may be repeated at any point as part of an account review. Providing false age information to access pkaz is a violation of our Terms and Conditions.

11 Policy Changes

pkaz reserves the right to update this Privacy Policy at any time. When material changes are made, the "Last updated" date at the top of this page will be revised. For significant changes that affect how we use your personal data, we will notify registered users via email or an in-platform notification before the changes take effect.

Continuing to use pkaz after a policy update constitutes acceptance of the revised terms. If you do not agree with an update, you should stop using the platform and contact support to request account closure and data deletion.

12 Contact Us

If you have any questions, concerns or requests related to this Privacy Policy or how pkaz handles your personal data, our support team is available around the clock. You can also visit our FAQ page for answers to common privacy-related questions.

When contacting us about a privacy matter, please include your registered email address and a brief description of your request so we can assist you as quickly as possible.