pk2win Privacy Policy – How We Collect, Use & Protect Your Personal Data

pk2win ("the Platform", "we", "us", "our") operates the online betting and casino services accessible at pk2win.org. For the purposes of data protection, pk2win acts as the Data Controller in respect of personal data submitted by users during registration, account use, and all other interactions with the platform.

This Privacy Policy applies to all personal data collected in connection with your use of pk2win, including registration, account management, deposits and withdrawals, sports betting, casino gaming, customer support interactions, and any marketing communications you have consented to receive.

This policy should be read alongside pk2win's Terms & Conditions and Responsible Gaming policy, which form part of the overall agreement governing your use of the platform.

pk2win collects personal data from you directly (information you provide) and automatically (information generated by your use of the platform). The categories of personal data we collect include:

We do not collect sensitive personal data beyond what is necessary for identity verification and fraud prevention. We do not collect or store full payment card numbers, bank account PINs, JazzCash PINs, Easypaisa PINs, or equivalent payment credentials — these are handled directly by the respective payment providers through their own secure interfaces.

pk2win uses personal data collected from users for the following purposes:

• Account registration and management — to create, maintain, and authenticate your pk2win Account.
• Identity verification (KYC) — to verify your age (18+) and identity as required by anti-money laundering and responsible gaming obligations.
• Transaction processing — to process deposits, withdrawals, and related financial operations through your chosen payment method (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, Skrill, Neteller).
• Service delivery — to provide access to betting markets, casino games, live dealer services, and all other platform features.
• Customer support — to respond to your queries, resolve disputes, and manage complaint processes.
• Fraud prevention and security — to detect and prevent fraudulent activity, money laundering, and abuse of platform terms, including duplicate account detection.
• Responsible gaming — to monitor gambling patterns, apply deposit and session limits, enforce self-exclusion, and fulfil duty-of-care obligations to users.
• Legal compliance — to meet regulatory requirements including AML record-keeping, age verification documentation retention, and responding to lawful information requests from competent authorities.
• Marketing communications — where you have provided explicit consent, to send promotional offers, bonus notifications, and platform updates relevant to your interests.
• Platform improvement — to analyse usage patterns, improve user experience, and develop new features using aggregated and anonymised analytics data.

pk2win processes your personal data under the following legal bases:

• Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions, including account management, transaction processing, and service delivery.
• Legal obligation — processing required by applicable law, including AML regulations, age verification requirements, and regulatory compliance obligations.
• Legitimate interests — processing for fraud prevention, platform security, abuse detection, and aggregate analytics, where these interests are not overridden by your privacy rights.
• Consent — processing for marketing communications and any non-essential cookies, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time.

5.1 We Do Not Sell Your Data. pk2win does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Full stop.

5.2 Service Providers. pk2win shares personal data with carefully selected third-party service providers who process data on our behalf and strictly under our instructions. These include:

• Payment processors and banking partners (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and cryptocurrency transaction processors) — for the purpose of executing financial transactions.
• Identity verification providers — for CNIC authentication and KYC document review.
• Game technology providers (Evolution Gaming, Pragmatic Play, JILI, PG Soft, and similar studios) — to deliver live dealer and RNG casino game functionality.
• Cloud infrastructure and hosting providers — to store and process account and platform data securely.
• Customer support platforms — to manage and log support interactions.
• Analytics providers — using anonymised and aggregated data only, for platform performance monitoring.

5.3 Regulatory and Legal Disclosure. pk2win may disclose personal data to competent regulatory authorities, law enforcement agencies, financial intelligence units, or courts where required by applicable law or valid legal process. We will notify you of such disclosures where permitted by law.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of pk2win's assets, personal data held by pk2win may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

pk2win uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us deliver a functional, personalised, and secure user experience.

Categories of cookies used by pk2win:

• Essential cookies — required for the platform to function. These include authentication session cookies that keep you logged in to your pk2win Account, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies — remember your preferences such as language settings, display preferences, and last-visited game sections. These improve your experience but are not strictly necessary.
• Analytics cookies — collect anonymised data about how users interact with the platform, which pages are visited most, and where technical errors occur. This data helps pk2win improve the platform.
• Marketing cookies — used only where you have explicitly consented, to track referral sources and measure the effectiveness of promotional campaigns.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use pk2win normally.

pk2win retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and regulatory requirements:

• Account and identity data — retained for the duration of your account plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required by financial regulations applicable to the platform's operating jurisdiction.
• KYC documentation — retained for the duration of the account plus five (5) years following closure or the final transaction, whichever is later.
• Customer support records — retained for three (3) years from the date of the final support interaction unless a dispute or legal claim requires longer retention.
• Marketing consent records — retained for as long as you remain on our marketing list, plus evidence of consent for three (3) years following any withdrawal of consent.

After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

pk2win implements technical and organisational security measures appropriate to the risk involved in processing your personal data. These include:

• HTTPS/TLS encryption for all data transmitted between your device and the pk2win platform.
• Encrypted storage of sensitive personal data and authentication credentials at rest.
• Access controls limiting employee access to personal data to those with a legitimate operational need.
• Two-factor authentication (2FA) available to all users for their pk2win Account login.
• Regular security assessments and penetration testing of the platform's technical infrastructure.
• Incident response procedures for detecting, containing, and notifying affected parties of any personal data breaches.

Subject to applicable law and the legitimate interests of pk2win in operating a secure and compliant platform, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data pk2win holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure — you may request deletion of your personal data, subject to pk2win's legal obligations to retain certain records (see Section 7). Retention obligations may mean that full erasure is not immediately possible.
• Right to restriction of processing — you may request that pk2win restrict processing of your data in certain circumstances, such as where you contest the accuracy of data held.
• Right to data portability — where processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of your personal data.
• Right to withdraw consent — where processing is based on consent (e.g., marketing communications), you may withdraw that consent at any time via Account Settings or by contacting support.
• Right to object — you may object to processing carried out on the basis of pk2win's legitimate interests. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds.

To exercise any of the above rights, contact pk2win support via live chat inside your account dashboard or by emailing [email protected]. We will respond within 30 days of receiving your request. Identity verification may be required before your request is fulfilled.

pk2win may transfer personal data to countries outside Pakistan in connection with the operation of the platform — for example, to cloud hosting providers, game technology partners (whose servers may be located in various jurisdictions), and international payment processors.

Where personal data is transferred internationally, pk2win ensures that appropriate safeguards are in place. These may include standard contractual clauses, adequacy decisions, or equivalent data transfer mechanisms. By using pk2win and accepting this Privacy Policy, you consent to such international transfers where necessary for the provision of platform services.

pk2win is an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If you are a parent or guardian and believe that a minor has registered an account or provided personal data to pk2win, please contact our support team immediately. We will promptly investigate and, where confirmed, delete the minor's data and close the account.

Age verification through CNIC is required as part of the KYC process, providing a structural barrier against underage account use. pk2win reserves the right to request age verification documents at any time during the account lifecycle.

pk2win may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform features. Material changes will be communicated to registered users via email or in-platform notification prior to taking effect. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of pk2win following notification of changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you should discontinue use of the platform and contact support to close your account.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pk2win, please contact us through the following channels:

• Live Chat: Available 24/7 inside your logged-in pk2win Account dashboard — the fastest route for most enquiries.
• Email: [email protected] — response within 12 hours for standard enquiries, within 30 days for formal data subject access requests.

If you are not satisfied with pk2win's handling of a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Details of the applicable authority are available from pk2win support on request.