pk8888 Privacy Policy — How We Handle Your Personal Data

1.1 For the purposes of applicable data protection law, the data controller responsible for the personal data of pk8888 players and website visitors is the company that operates the pk8888 platform under its international gaming license (the "Company", "we", "us", "our").

1.2 The Company operates the online gaming platform accessible at pk8888.lat and is responsible for determining the purposes and means by which personal data collected through that platform is processed.

1.3 All data protection enquiries, subject access requests, and data rights exercises may be directed to the Company's data protection contact at [email protected]. Please mark your correspondence clearly as a data protection matter. We will acknowledge your request within five business days and provide a substantive response within thirty calendar days.

2.1 pk8888 collects the following categories of personal data in the course of providing its services:

2.2 We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless directly relevant to a responsible gaming self-assessment or exclusion request, in which case such data is processed with explicit consent and under strict confidentiality.

3.1 Directly from you: When you register a pk8888 account, complete KYC identity verification, make a deposit or withdrawal, contact customer support, or respond to a responsible gaming check, you provide personal data directly to us.

3.2 Automatically during platform use: Technical data such as your IP address, device information, and session data is collected automatically when you access the pk8888 website or mobile platform. This data is collected via server logs and, where applicable, cookies and similar tracking technologies.

3.3 From third-party identity verification providers: Where pk8888 uses a third-party KYC or AML screening service to verify your identity, that provider may supply supplementary verification data to pk8888, including confirmation of document authenticity and sanctions screening results.

3.4 From payment providers: JazzCash, EasyPaisa, and banking partners may provide transaction confirmation data to pk8888 to enable the accurate crediting and debiting of player accounts.

3.5 From fraud and risk management services: pk8888 may receive data from third-party risk management services that assist with detecting and preventing fraudulent activity on the platform.

4.1 pk8888 processes personal data for the following purposes:

• Account creation and management: To register your pk8888 account, verify your identity, and maintain accurate account records.
• Provision of gaming services: To enable you to place bets, play casino games, claim bonuses, and access all features of the pk8888 platform.
• Payment processing: To process deposits and withdrawals via JazzCash, EasyPaisa, and linked bank accounts, and to maintain accurate financial records.
• Identity verification and KYC compliance: To verify that you meet the 21+ age requirement and that your identity is consistent with applicable KYC and AML obligations under our gaming license.
• Fraud prevention and security: To monitor account activity for signs of unauthorised access, fraudulent behaviour, money laundering, or bonus abuse.
• Responsible gaming: To administer deposit limits, cooling-off periods, and self-exclusion requests, and to identify players who may be exhibiting signs of problem gambling behaviour.
• Customer support: To resolve account queries, process complaints, and communicate with you regarding your account.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent to receive such communications.
• Legal and regulatory compliance: To meet the reporting and record-keeping obligations imposed by our international gaming license and applicable law.
• Platform improvement: To analyse aggregated usage data and improve the functionality, performance, and content of the pk8888 platform.

5.1 pk8888 processes personal data on the following legal bases:

• Contract performance: The majority of processing related to account management, payment processing, and the provision of gaming services is necessary for the performance of the contract between you and pk8888.
• Legal obligation: Processing for KYC, AML, age verification, and regulatory reporting purposes is carried out to comply with legal and licensing obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement is carried out on the basis of pk8888's legitimate interests, balanced against player privacy rights.
• Consent: Marketing communications are sent only on the basis of your explicit, freely given consent. You may withdraw consent for marketing communications at any time by contacting [email protected] or updating your account preferences.

5.2 Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.1 pk8888 does not sell personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transaction data necessary to process your deposits and withdrawals.
• Identity and KYC verification services: Third-party KYC providers receive identity documents and personal details to perform verification checks required under our gaming license.
• Game software providers: The game providers whose titles appear in the pk8888 casino (including but not limited to providers of slots, live dealer games, and specialty games) may receive anonymised session data for game performance and fairness auditing purposes. These providers do not receive your personal identity details.
• Fraud and risk management services: Risk management partners receive transactional and behavioural data to support fraud detection.
• IT infrastructure and cloud hosting providers: The infrastructure providers that host the pk8888 platform store data on behalf of the Company as data processors under contractual obligations consistent with this Privacy Policy.
• Regulatory and law enforcement authorities: Where required by law, court order, or the terms of our gaming license, pk8888 will disclose personal data to the relevant regulatory body, law enforcement agency, or government authority.

6.2 All third-party processors engaged by pk8888 are required to process personal data only as instructed by the Company, to maintain appropriate security measures, and to comply with applicable data protection obligations. We conduct due diligence on all third-party processors before engagement.

7.1 pk8888 retains personal data for as long as is necessary to fulfil the purpose for which it was collected and to comply with applicable legal and regulatory obligations.

7.2 The following general retention periods apply:

• Active account data: Retained for the duration of the account relationship and for a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the last transaction, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Customer support communications: Retained for three years from the date of the last communication, or longer where the communication relates to a complaint or legal matter.
• Technical and log data: Retained for twelve months from the date of collection unless retention is required for security investigation purposes.
• Marketing consent records: Retained for the period during which consent is active and for three years following withdrawal of consent as evidence of prior consent.

7.3 Where data is retained solely to meet legal obligations, it is stored in a restricted access environment and is not used for any operational purpose.

7.4 Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in a manner that prevents re-identification.

8.1 pk8888 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, and loss. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the pk8888 platform.
• One-way cryptographic hashing of account passwords — pk8888 customer support staff cannot view your password in plain text.
• Two-factor and OTP-based authentication options for account access.
• PCI-DSS compliant payment data processing — payment instrument details are processed by certified payment gateways and are not stored on pk8888 servers.
• Access controls ensuring that personal data is accessible only to Company staff and processors who have a legitimate need to process it.
• Regular security assessments and penetration testing of the platform.
• Incident response procedures to detect, report, and remediate personal data breaches.

8.2 Notwithstanding the measures above, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, pk8888 will notify affected players within 72 hours of becoming aware of the breach and will take immediate remediation steps.

8.3 Players are responsible for maintaining the security of their own account credentials. You should use a strong, unique password for your pk8888 account and must not share login details with any third party.

9.1 The pk8888 website uses cookies and similar tracking technologies to support the operation of the platform, remember your login session, maintain your preferences, and analyse platform usage.

9.2 The following categories of cookies are used on the pk8888 platform:

• Strictly necessary cookies: These are essential for the operation of the platform, including maintaining your login session, managing your account balance display, and enabling secure payment flows. These cookies cannot be disabled without materially impairing platform functionality.
• Functional cookies: These remember your preferences and settings, such as language selection, notification preferences, and display options. They improve your experience but are not essential.
• Analytics cookies: These collect anonymised data about how players use the platform — which pages are visited, how long sessions last, and what features are used. This data is used in aggregate to improve the platform and is not linked to individual identities.

9.3 You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the pk8888 platform. Strictly necessary cookies are exempt from consent requirements and will remain active regardless of your cookie preferences.

9.4 pk8888 does not use third-party advertising cookies or behavioural tracking cookies that share your data with external advertising networks.

10.1 Subject to applicable data protection law, you have the following rights in relation to the personal data pk8888 holds about you:

10.2 To exercise any of the above rights, please contact pk8888 at [email protected] with "Data Rights Request" in the subject line. We will verify your identity before processing the request and will respond within thirty calendar days. In complex cases, this period may be extended by up to a further sixty days, in which case we will notify you of the extension and the reason for it.

10.3 The right to erasure does not apply where pk8888 is required to retain personal data to comply with a legal obligation — in particular, AML and KYC record-keeping requirements which mandate a minimum five-year retention period regardless of account closure or player request.

10.4 You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe pk8888 has not handled your personal data in accordance with applicable law.

11.1 The pk8888 platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes an age verification step, and we may request documentary proof of age at any time.

11.2 If we become aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data to the extent permitted by applicable law and AML retention obligations, and refund any deposits to the source payment method where technically feasible.

11.3 Parents or guardians who believe a person under their care has created a pk8888 account should contact us immediately at [email protected]. We will investigate and act promptly.

12.1 pk8888 is operated under an international gaming license and uses infrastructure and service providers that may be located in jurisdictions outside Pakistan. As a result, your personal data may be transferred to and stored in countries other than Pakistan.

12.2 Where personal data is transferred internationally, pk8888 ensures that appropriate safeguards are in place to protect the data, including contractual clauses with third-party processors that impose data protection standards equivalent to those described in this Privacy Policy.

12.3 All international data transfers are conducted on a need-to-know basis and are limited to data categories strictly required for the relevant processing purpose.

13.1 pk8888 reserves the right to update this Privacy Policy at any time. Material changes — those that substantively affect the rights of players or the way in which personal data is processed — will be communicated to registered players via the mobile number or email address on file at least seven days before the changes take effect.

13.2 Non-material changes, such as clarifications of existing practices or updates to reflect new regulatory guidance, may be made without prior notice but will always be reflected in the updated policy published at pk8888.lat/privacy-policy with a revised "Last Updated" date.

13.3 Continued use of the pk8888 platform following the effective date of any Privacy Policy update constitutes acceptance of the revised policy. If you do not agree with any changes, you may close your account in accordance with the account closure process described in the Terms & Conditions.

14.1 For all data protection enquiries, including subject access requests, rights exercises, or questions about how pk8888 processes your personal data, please contact:

14.2 If you are not satisfied with our response to a data protection enquiry or complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction where you reside or where the alleged infringement occurred.

14.3 This Privacy Policy should be read in conjunction with the pk8888 Terms & Conditions and Responsible Gaming Policy, both of which contain additional information relevant to the collection and use of personal data on the pk8888 platform.