pka999 Privacy
Policy

Introduction

This Privacy Policy ("Policy") describes how pka999 ("pka999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "you", "your") who register for or use the pka999 online gaming platform, accessible at pka999.net and any associated mobile or digital interface operated by pka999.

pka999 is operated under an international gaming licence and is subject to data protection obligations that arise from that licence. This Policy is designed to explain those obligations and your rights in plain, accessible language. Where technical or legal terms are unavoidable, we have defined them within their relevant section.

This Policy should be read alongside the pka999 Terms & Conditions and Responsible Gaming page, both of which form part of the overall agreement between you and pka999. By accessing or using the pka999 platform, you confirm that you have read, understood, and agree to the terms of this Privacy Policy.

Data Controller

For the purposes of applicable data protection law, pka999 is the data controller in respect of personal data collected through the pka999 platform. As data controller, pka999 determines the purposes for which and the means by which personal data is processed. Where pka999 engages third-party service providers to process data on its behalf, those parties act as data processors and are bound by contractual obligations consistent with this Policy.

For all data-related enquiries, requests, or complaints, players may contact pka999's designated data contact point at: [email protected]. Please include "Privacy" in the subject line of your message to ensure your query is directed to the appropriate team.

Data We Collect

pka999 collects the following categories of personal data from players:

3.1 Identity & Registration Data

Full legal name, date of birth, gender, and a copy of your CNIC (Computerised National Identity Card) or other government-issued identity document submitted during KYC verification.

3.2 Contact Data

Email address, mobile phone number, and residential address (including city — e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi — and country).

3.3 Financial & Transaction Data

Records of all PKR deposits and withdrawals, including the payment method used (JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, MCB, or other supported methods), transaction amounts, timestamps, and reference numbers. We do not store full payment account credentials beyond what is necessary to process and verify transactions.

3.4 Account Activity Data

Game play records, betting history, session durations, wagering amounts, bonus redemption history, win/loss records, and responsible gaming tool usage (e.g., deposit limits set, self-exclusion periods applied).

3.5 Technical & Device Data

IP address, device type, browser type and version, operating system, device fingerprint identifiers, and geolocation data (country and region level only). This data is collected automatically when you access the pka999 platform.

3.6 Communications Data

Records of your communications with pka999 support (live chat transcripts, emails, and any other written correspondence), including the content of those communications and the dates and times they occurred.

3.7 Preference & Marketing Data

Your stated preferences for bonus types, game categories, and marketing communications, including opt-in and opt-out records for promotional emails and SMS notifications.

How We Collect Data

pka999 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — through cookies, server logs, and device fingerprinting technologies when you visit or use the pka999 platform. See Section 10 for full details on cookies.
• From third-party KYC providers — pka999 uses licensed identity verification services to cross-reference the identity documents you submit. These providers return a verification outcome and may supply supplementary identity data where required under our licensing obligations.
• From payment processors — when you initiate a PKR transaction via JazzCash, EasyPaisa, or a bank transfer, pka999 receives transaction confirmation data from the relevant payment processor.
• From fraud prevention and anti-money laundering (AML) databases — pka999 is required under its international gaming licence to screen player data against sanctions lists and AML risk databases. Such screening returns only a pass/fail or risk-flag result; we do not retain the contents of third-party databases.

Lawful Basis for Processing

pka999 processes personal data only where a lawful basis exists. The applicable bases are as follows:

How We Use Your Data

pka999 uses the personal data we collect for the following specific purposes:

• To create, manage, and maintain your pka999 account, including applying account-level settings such as deposit limits, self-exclusion periods, and session timers.
• To verify your identity in accordance with KYC requirements under our international gaming licence, and to re-verify your identity where required by regulatory triggers or enhanced due diligence procedures.
• To process PKR deposits via JazzCash, EasyPaisa, Raast, and supported Pakistani banking channels, and to process withdrawal requests to your verified payment method.
• To detect, investigate, and prevent fraudulent activity, duplicate account creation, bonus abuse, money laundering, and other conduct prohibited under the pka999 Terms & Conditions.
• To personalise your platform experience — for example, displaying game recommendations based on your play history or surfacing cricket betting markets relevant to PSL and international fixtures.
• To send you transactional notifications (account confirmations, deposit receipts, withdrawal updates, KYC requests) via email or SMS. These communications are not marketing and cannot be opted out of while your account is active.
• To send you marketing communications about pka999 promotions, bonuses, and new game launches — but only where you have given explicit consent to receive such communications. See Section 14.
• To comply with reporting obligations to regulatory and law enforcement authorities as required under our international gaming licence.
• To analyse platform usage, game performance, and player behaviour in aggregate (anonymised) form to improve the pka999 platform and product offering.

Sharing Your Data

pka999 does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the following limited circumstances:

• KYC and Identity Verification Providers: Licensed third-party identity verification services receive your identity document data and return a verification outcome. These providers are contractually prohibited from using your data for any purpose other than verification.
• Payment Processors: JazzCash, EasyPaisa, Raast, and partnered Pakistani banks receive the transaction data necessary to execute your PKR deposit or withdrawal. pka999 shares only the minimum data required for the transaction.
• AML and Fraud Prevention Services: pka999 uses licensed AML screening and fraud detection platforms that receive limited personal data (name, date of birth, country) to perform sanctions and risk checks as required under our licensing obligations.
• Game Technology Providers: Third-party game studios (slot, live dealer, and sports betting providers) may receive anonymised session identifiers necessary to serve game content. They do not receive your full identity or financial data.
• Regulatory and Law Enforcement Authorities: pka999 is required to disclose personal data to competent authorities upon lawful request, including our gaming licence regulator, financial intelligence units, and law enforcement agencies investigating financial crime.
• Professional Advisors: Legal counsel, auditors, and insurers engaged by pka999 may access limited personal data in the course of providing professional services, subject to strict confidentiality obligations.

International Data Transfers

pka999 operates under an international gaming licence, and certain data processing activities — including KYC verification, fraud screening, and platform infrastructure — may involve the transfer of personal data to processors located outside of Pakistan. Where such transfers occur, pka999 ensures that appropriate safeguards are in place, including contractual data processing agreements that impose obligations on the receiving party consistent with the data protection standards applied by pka999.

pka999 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate safeguards. If you require further information about the specific safeguards applied to any international transfer of your data, please contact pka999 at [email protected].

Data Retention

pka999 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to longer retention periods required by legal and regulatory obligations. The following retention periods apply:

Where a legal hold is placed on an account — for example, in connection with a regulatory investigation, fraud inquiry, or ongoing dispute — data will be retained for the duration of that hold regardless of the standard retention periods above. Once a hold is lifted and the standard retention period has expired, data will be securely deleted or anonymised.

Cookies & Tracking Technologies

The pka999 platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage patterns, and improve the player experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: Remember your account preferences such as language settings, responsible gaming tool configurations, and game lobby display preferences.
• Analytics Cookies: Collect anonymised data about how players use the pka999 platform — such as pages visited, session duration, and features used — to help pka999 improve the platform. Data collected by analytics cookies is aggregated and not linked to your individual identity.
• Security and Fraud Prevention Cookies: Device fingerprinting and session integrity cookies used to detect suspicious activity, identify duplicate accounts, and protect players from unauthorised account access.

pka999 does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the pka999 platform.

Security Measures

pka999 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, and disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the pka999 platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing. pka999 staff cannot access or retrieve your password in plain text.
• Two-Factor Authentication (2FA): pka999 offers optional 2FA for all accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection.
• Access Controls: Access to personal data within pka999's internal systems is restricted on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
• Data Minimisation: pka999 collects only the personal data required for the specific purpose identified, and does not retain data beyond the periods set out in Section 9.
• Incident Response: pka999 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to players, pka999 will notify affected players without undue delay.

Your Data Rights

Subject to applicable law and the conditions of pka999's international gaming licence, you have the following rights in respect of your personal data held by pka999:

• Right of Access: You may request a copy of all personal data pka999 holds about you. pka999 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by pka999 is inaccurate or incomplete, you may request that it be corrected. Identity data corrections may require re-submission of KYC documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to overriding legal and regulatory retention obligations — pka999 cannot erase financial transaction records or KYC data before the mandatory retention period has elapsed.
• Right to Restriction of Processing: You may request that pka999 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or object to a specific processing activity.
• Right to Data Portability: You may request that pka999 provide your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interest, including profiling for platform analytics. You may also withdraw consent for marketing communications at any time. See Section 14.

To exercise any of the above rights, contact pka999 at [email protected] with your full name, registered email address, and a clear description of the right you wish to exercise. pka999 will verify your identity before processing any data rights request.

Children & Minors

The pka999 platform is strictly for individuals aged 21 years and above. pka999 does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step in the pka999 account registration and KYC process.

If pka999 discovers or has reason to believe that an account has been registered by a person under 21, the account will be immediately suspended, all associated data will be flagged for investigation, and any balances will be handled in accordance with pka999's underage gambling policy as set out in the Terms & Conditions. Personal data associated with an underage account will be retained only for the period required to complete the investigation and any associated regulatory reporting, after which it will be securely deleted.

If you are a parent or guardian and believe a minor may have registered a pka999 account, please contact us immediately at [email protected]. We will investigate and act on all such reports without delay.

Marketing Communications

pka999 sends marketing communications — including promotional emails, SMS notifications about bonuses, and updates on new game launches — only to players who have given explicit opt-in consent during or after registration. Consent records (including the date, time, and method of consent) are retained by pka999 for audit purposes.

You may withdraw consent for marketing communications at any time by:

• Clicking the unsubscribe link included in any pka999 marketing email.
• Updating your communication preferences directly within your pka999 account settings.
• Contacting pka999 support at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. Transactional communications (account notifications, deposit confirmations, KYC requests, withdrawal updates) are not marketing and will continue to be sent regardless of your marketing preference settings while your account remains active.

Third-Party Links

The pka999 platform may contain links to third-party websites, including those of licensed game providers, payment processors, or responsible gaming organisations. pka999 is not responsible for the privacy practices of any third-party website and this Policy does not apply to those sites. We encourage you to review the privacy policy of any third-party site you visit via a link from the pka999 platform.

Policy Amendments

pka999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing obligations. Where amendments are material, pka999 will notify registered players via email or a prominent in-platform notice at least 7 days before the updated Policy takes effect.

The effective date at the top of this Policy will be updated each time a revision is made. Continued use of the pka999 platform after the effective date of any amended Policy constitutes your acceptance of the updated terms. If you do not agree with the updated Policy, you should cease using the platform and request account closure before the effective date of the change.

Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pka999, please contact our support team:

Email: [email protected]
Operating Name: pka999
Website: pka999.net
Support Hours: 24 hours a day, 7 days a week

Please include "Privacy Request" in the subject line of your message. pka999 will acknowledge all privacy-related contacts within 5 business days and endeavour to provide a substantive response within 30 days. Where a request is complex or high in volume, pka999 may extend this period by a further 30 days, in which case you will be notified of the extension and the reason for it.