pk1997 Privacy Policy —
Your Data, Your Rights

1.1 Data Controller. pk1997 ("the Company", "we", "us", "our") is the data controller responsible for the personal data of players on the pk1997 platform. The Company operates pk1997.net under an international gaming licence and is legally responsible for ensuring that all personal data processed in connection with the platform is handled lawfully, fairly, and transparently in accordance with this Privacy Policy and applicable data protection standards under the Company's licensing jurisdiction.

1.2 How to Reach Us. All data-related inquiries, subject access requests, and privacy complaints should be directed to the Company's data protection contact via email at [email protected]. Please include the subject line "Data Privacy Request — [Your Account Mobile Number]" to ensure prompt routing to the appropriate team. Our support team is available via Live Chat from 8 AM to 2 AM PKT daily for urgent matters.

1.3 Scope. This Privacy Policy applies to all users of the pk1997 platform, including registered players with active accounts, users who have initiated but not completed registration, and visitors who browse the pk1997.net website without registering. Different categories of data are collected for each of these user types, as set out in Section 2 below.

2.1 The following table sets out the categories of personal data that pk1997 collects, along with specific examples of the data included within each category:

2.2 pk1997 does not collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes — except to the extent that identity verification documents (such as a CNIC photograph) necessarily contain such information. Where such data is incidentally collected, it is processed solely for the purpose of identity verification and is subject to enhanced security controls.

3.1 Directly From You. The majority of the personal data pk1997 holds about you is provided directly by you in the course of registering your account, completing identity verification, making deposits and withdrawals, placing bets, contacting our support team, or setting your responsible gaming preferences. You are not legally obligated to provide this data, but in many cases it is a necessary condition of using the pk1997 platform — for example, we cannot process a JazzCash withdrawal without the relevant account reference.

3.2 Automatically During Use. When you access the pk1997 platform — whether via a browser on your Android phone in Karachi, an iPhone in Lahore, or a desktop in Islamabad — we automatically collect certain Technical Data about your session. This includes your IP address, device identifiers, browser type, and session duration. This data is collected via cookies and similar technologies as described in Section 10, and via our platform's standard server logging infrastructure.

3.3 From Third Parties. pk1997 may receive personal data about you from third parties in limited circumstances, including: identity verification providers who validate your CNIC or conduct liveness checks; payment processors who confirm the status of JazzCash, EasyPaisa, or bank transfer transactions; fraud prevention service providers; and self-exclusion scheme administrators where you have registered a self-exclusion with an external scheme that has a data-sharing arrangement with pk1997.

4.1 pk1997 processes your personal data only where we have a valid legal basis for doing so. The following table sets out our primary processing purposes and the corresponding legal basis under applicable data protection standards:

4.2 Where pk1997 relies on your consent as the legal basis for processing — for example, for sending promotional communications about new casino games or pk1997 bonus offers — you may withdraw that consent at any time by updating your communication preferences within your Account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.1 Our Commitment. pk1997 does not sell, rent, or trade your personal data to third parties for marketing or any other commercial purpose. This is an absolute commitment — not a policy that includes hidden carve-outs. The sharing arrangements described in this Section are limited to what is operationally necessary or legally required.

5.2 Service Providers. pk1997 shares personal data with carefully selected third-party service providers who assist in operating the platform and delivering services to you. These providers include: identity verification and KYC providers; payment processors for JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank transactions; fraud detection and cybersecurity service providers; cloud hosting and infrastructure providers; and customer support platform providers. All such third parties are required to process your data only on our instructions and in accordance with data protection standards equivalent to those set out in this Policy.

5.3 Regulatory and Legal Disclosures. pk1997 may be required to disclose your personal data to: the regulatory authority that issued our gaming licence; financial intelligence units and law enforcement agencies in connection with AML/CTF obligations; courts and tribunals in connection with legal proceedings; and tax authorities where legally required. We will notify you of such disclosures where we are lawfully permitted to do so.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material part of pk1997's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and provided with information about the privacy arrangements that will apply following the transfer.

6.1 The security and integrity of your financial data is treated as a top priority at pk1997. Given that Pakistani players use payment methods including JazzCash, EasyPaisa, Raast, HBL, UBL, Meezan Bank, and 1LINK, we are conscious that financial data carries particular sensitivity.

6.2 pk1997 does not store your full payment credentials on our own servers. When you deposit via JazzCash or EasyPaisa, the transaction is processed by a certified third-party payment processor operating under PCI-DSS (Payment Card Industry Data Security Standard) Level 1 compliance. pk1997 retains only a tokenised reference identifier for reconciliation purposes — not your full mobile wallet credentials.

6.3 Your transaction history — including the dates, amounts, and payment methods of all deposits and withdrawals — is retained on your pk1997 Account for regulatory compliance purposes and to provide you with a complete record of your financial activity on the platform. You can access your full transaction history at any time through the Account dashboard after pk1997 login.

7.1 pk1997 implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The following security measures are in place across the pk1997 platform:

7.2 While pk1997 takes all reasonable and commercially practicable steps to protect your data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure: use a strong, unique password for your pk1997 account, do not share your credentials with anyone, and log out fully when using shared devices. If you suspect any security compromise, contact us immediately via Live Chat.

8.1 pk1997 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable regulatory obligations under our international gaming licence. The following retention periods apply as a general framework:

8.2 Following the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in such a manner that it can no longer be associated with you as an individual. Anonymised and aggregated data may be retained beyond these periods for statistical and platform improvement purposes.

9.1 As a pk1997 player, you have the following rights in respect of your personal data. These rights are not theoretical — they are exercisable by contacting our support team as described in Section 14:

9.2 pk1997 will respond to all valid data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be notified of the extension and the reasons for it within the initial 30-day period. We will not charge a fee for responding to a data rights request unless the request is manifestly unfounded or repetitive.

9.3 Please note that certain rights cannot be exercised where doing so would conflict with our regulatory obligations — for example, AML regulations require us to retain financial transaction records for a mandatory minimum period regardless of an erasure request. Where we cannot fully comply with a request, we will explain the reason clearly.

10.1 The pk1997 platform uses cookies and similar technologies (including session tokens and local storage objects) to operate core platform functions, measure performance, and detect fraud. A cookie is a small text file placed on your device when you access a website. Cookies do not contain your pk1997 password or payment data. The following types of cookies are used on pk1997.net:

10.2 You can manage optional cookie preferences through your browser's built-in settings. Most modern browsers (Chrome, Firefox, Safari) allow you to view, delete, and block cookies on a per-site basis. Please be aware that disabling certain optional cookies may affect the performance of some non-essential pk1997 platform features.

11.1 The pk1997 platform is strictly intended for adults who are twenty-one (21) years of age or older. pk1997 does not knowingly collect or process personal data relating to individuals under the age of 21, and does not provide any services to minors under any circumstances.

11.2 Where pk1997 becomes aware, or has reasonable grounds to suspect, that personal data has been collected from a person under the age of 21, we will take immediate steps to verify the account holder's age, suspend account access pending verification, and permanently close any account confirmed to belong to an underage individual. Any funds held in such an account will be handled in accordance with our regulatory obligations.

11.3 If you are a parent or guardian and believe that your minor child has registered an account on pk1997 without your knowledge, please contact our support team immediately at [email protected]. We will investigate promptly and take appropriate action.

12.1 pk1997 operates under an international gaming licence, and some of the service providers and infrastructure partners we work with — including cloud hosting providers and KYC verification platforms — may process personal data in jurisdictions outside Pakistan. This means your data may be transferred to and processed in countries other than the country from which you access the pk1997 platform.

12.2 Where such transfers occur, pk1997 takes appropriate steps to ensure that your personal data receives a level of protection equivalent to that set out in this Privacy Policy. These steps may include: entering into data processing agreements with third-party providers that include data protection clauses; transferring data only to providers in jurisdictions with recognised adequate data protection standards; and applying technical and organisational safeguards that travel with the data to its destination.

12.3 If you would like more information about the specific safeguards applied to any international data transfer associated with your pk1997 account, please contact us at [email protected] with the subject line "International Transfer Query — [Your Account Mobile Number]".

13.1 pk1997 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in our platform services, changes in applicable regulatory requirements, or changes recommended by our Data Protection Officer. The version number and "last updated" date at the top of this Policy will be revised with each update.

13.2 Where a change to this Privacy Policy materially affects how we use your personal data, we will notify you directly via SMS to your registered Pakistani mobile number or via a prominent notice on the pk1997 platform, providing at least seven (7) calendar days' advance notice before the change takes effect. For minor or administrative updates, notice will be given by updating the version date at the top of this page.

13.3 Your continued use of the pk1997 platform following the effective date of any revision to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of any changes.

14.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how pk1997 is handling your personal data, please contact us through the following channels:

14.2 Complaints. If you are not satisfied with pk1997's response to a privacy concern, you have the right to escalate your complaint to the regulatory authority responsible for overseeing data protection standards under our gaming licence jurisdiction. Contact information for the applicable regulatory authority is available from our support team upon request.

14.3 We take all privacy complaints seriously and will investigate each one thoroughly. We commit to providing a substantive written response to all formal privacy complaints within thirty (30) calendar days, or to notifying you within that period if additional time is required due to the complexity of your complaint.