pk47 Privacy Policy

This Privacy Policy is issued by pk47, the operator of the online casino and sports betting platform accessible at pk47.bid ("the Platform"). For the purposes of applicable data protection law, pk47 is the data controller in respect of the personal information collected from players and visitors through the Platform.

pk47 operates under an international gaming licence issued by a recognised regulatory authority. As part of our licensing obligations, pk47 is required to maintain robust data protection, KYC (Know Your Customer), and anti-money laundering (AML) standards. This Policy reflects those obligations alongside our genuine commitment to respecting the privacy of Pakistani players who use the Platform.

pk47 collects personal data across several categories depending on how you interact with the Platform. The categories, specific data points, and the lawful basis for collection are set out in the following table:

pk47 does not collect sensitive personal data such as racial or ethnic origin, political opinions, health data, or biometric data (beyond liveness verification images used solely for identity confirmation and not stored beyond the verification event).

pk47 collects personal data through the following channels and mechanisms:

• Direct Submission — Registration: When you complete the pk47 registration form, you provide your name, date of birth, mobile number, email address, and chosen username. This data is submitted directly by you and forms the core of your Account record.
• KYC Verification Process: When you submit identity documentation (CNIC, selfie, utility bill) to complete the verification process required before withdrawals are enabled, that documentation is processed by pk47's identity verification service provider.
• Transaction Processing: When you make a deposit via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, or submit a withdrawal request, financial data is captured through the payment gateway interaction.
• Automated Technical Collection: As you use the Platform, technical and behavioural data is collected automatically through server logs, session management systems, and cookies (see Section 6).
• Support Interactions: Data shared through live chat or email support queries is recorded and associated with your Account for quality assurance and regulatory compliance purposes.
• Third Parties: In limited circumstances, pk47 may receive data from third-party identity verification or fraud screening services as part of the KYC and AML compliance process. This data is used solely for Account verification and security purposes.

pk47 processes personal data only for specific, documented purposes. The following list describes each processing purpose and its corresponding lawful basis:

• Account Creation and Management: To create, maintain, and administer your pk47 Account, including processing your login credentials, balance, gaming history, and Account settings. Basis: contractual necessity.
• Payment Processing: To process PKR deposits through JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to process withdrawal requests to verified payment methods in your name. Basis: contractual necessity.
• Age and Identity Verification (KYC): To confirm that you are aged 21 or above and that your identity matches the Account registration details, as required under our gaming licence. Basis: legal obligation.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for patterns consistent with money laundering or financial crime, and to report suspicious activity to the relevant regulatory authority as required by law. Basis: legal obligation.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, collusion, and unauthorised access. Basis: legitimate interests.
• Responsible Gaming: To monitor gameplay patterns and account activity for indicators of problem gambling, and to apply responsible gaming tools — including deposit limits, cooling-off periods, and self-exclusion — where appropriate. Basis: legitimate interests and legal obligation under our gaming licence.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of those interactions as required by our licensing obligations. Basis: contractual necessity and legal obligation.
• Regulatory Reporting: To provide account and transaction data to our licensing regulatory authority, law enforcement agencies, or other bodies where legally required to do so. Basis: legal obligation.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates where you have not opted out of marketing communications. Basis: legitimate interests (for existing customers) or consent (for new marketing channels).
• Platform Analytics and Improvement: To analyse how players use the Platform in order to improve game selection, user interface, payment flows, and overall experience. Basis: legitimate interests.

pk47 does not sell your personal data to third parties under any circumstances. We share personal data only where necessary for the following purposes, and only with parties who are bound by data processing agreements or equivalent contractual data protection obligations:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive financial and identity data strictly as necessary to process your PKR transactions. Each processor operates under their own privacy obligations.
• Identity Verification Service Providers: Third-party KYC providers receive identity documents and biometric liveness data for the sole purpose of verifying your age and identity. These providers do not retain your data beyond the verification event.
• Game Software Providers: Technical session data (not personal identity data) is shared with game software providers to authenticate game sessions and resolve disputes. Game providers operate under confidentiality agreements with pk47.
• Fraud Prevention and Security Services: Technical and behavioural data may be shared with specialised fraud detection platforms to identify and prevent account abuse.
• Regulatory Authorities: pk47's gaming licensing authority, financial intelligence units, or law enforcement agencies may request access to account and transaction data as required under applicable law. pk47 is legally obligated to comply with such requests.
• Legal Advisors: In the event of a legal dispute, pk47's legal representatives may have access to relevant account data strictly as necessary to conduct proceedings.

pk47 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, prevent fraud, and understand how players interact with the site. The following categories of cookies are used on pk47.bid:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your Account authentication state, and ensure that security controls function correctly. These cookies cannot be disabled without breaking core Platform functionality.
• Functional Cookies: These remember your preferences — such as game lobby filters, language settings, and responsible gaming limit settings — to improve your experience on return visits.
• Analytics Cookies: These collect aggregated, anonymised data about how visitors navigate the Platform. This information helps pk47 identify usability issues and improve the site. Individual users are not identified through analytics data.
• Security Cookies: These support fraud detection and rate-limiting systems, helping to identify unusual login patterns, bot activity, and potential account takeover attempts.

You can manage cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pk47 Account or using most Platform features. Analytics and functional cookies can be disabled without affecting core functionality, though some preference settings may not persist between sessions.

pk47 implements a multi-layered technical and organisational security framework to protect your personal data. Key security measures include:

• Encryption in Transit: All data transmitted between your browser or app and pk47's servers is encrypted using 256-bit Transport Layer Security (TLS). This applies regardless of the network you are on — Jazz, Telenor, Zong, Ufone mobile data, or any Wi-Fi connection across Pakistan.
• Encryption at Rest: Stored personal data — including identity documents, payment references, and account details — is encrypted at rest using industry-standard algorithms.
• Access Controls: Internal access to personal data is restricted to pk47 staff with a documented operational need. All access is logged, and access logs are reviewed periodically.
• Two-Factor Authentication: All pk47 internal systems that process personal data require Two-Factor Authentication for access. Player Accounts can optionally enable 2FA, and we strongly encourage all Pakistani players to do so.
• Vulnerability Management: pk47's platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to player data, pk47 will notify affected players and the relevant regulatory authority within the timeframe required under our licensing obligations.

While pk47 applies robust technical controls, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and enable Two-Factor Authentication on their pk47 Account to provide an additional layer of personal protection.

pk47 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

• Account Data (active accounts): Retained for the duration of the Account's active status plus a minimum of five years following permanent closure. This period is mandated by our gaming licence to support regulatory audits and AML compliance.
• Transaction Records: PKR deposit and withdrawal records are retained for a minimum of five years from the date of the transaction, in accordance with anti-money laundering record-keeping requirements.
• KYC Documentation: Identity documents (CNIC copies, selfie images, address proof) are retained for a minimum of five years from the date of verification or Account closure, whichever is later.
• Support Communications: Live chat transcripts and email records are retained for three years from the date of the interaction, or longer where the content is relevant to an open dispute or regulatory investigation.
• Technical and Security Logs: Server logs, login records, and session data are retained for 12 months for operational security purposes, after which they are anonymised or deleted.
• Marketing Preferences: Records of your marketing opt-out are retained indefinitely to ensure that we do not inadvertently re-add you to marketing lists following system updates.

When a retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

As a player whose personal data is processed by pk47, you have the following rights in respect of that data. You may exercise any of these rights by contacting the pk47 support team through live chat or the email address displayed in the footer of this page:

pk47 operates as an internationally licensed gaming platform. Your personal data may be transferred to, stored in, and processed in countries other than Pakistan, including the jurisdiction in which our gaming licence is issued and jurisdictions in which our technology infrastructure providers operate.

Where personal data is transferred outside Pakistan to third parties, pk47 ensures that appropriate safeguards are in place. These safeguards include contractual data processing agreements that impose obligations equivalent to those under our gaming licence jurisdiction's data protection standards, and — where applicable — adequacy determinations or standard contractual clauses recognised by the relevant regulatory frameworks.

pk47 is strictly an adults-only platform. The minimum age for registration and use of any gaming or betting feature on pk47 is 21 years. pk47 does not knowingly collect or process personal data from individuals under the age of 21.

If pk47 becomes aware that personal data has been collected from an individual under the age of 21, the relevant Account will be immediately closed, all balances forfeited, and all personal data associated with the Account deleted (subject to any mandatory regulatory retention obligations that may apply).

If you believe that a minor has created a pk47 Account or that pk47 has inadvertently collected personal data from a person under 21, please contact our support team immediately. We treat such reports as a priority and will investigate and act within 24 hours of receipt.

pk47 may send you promotional communications relating to bonus offers, new game releases, seasonal promotions, VIP programme updates, and other Platform news. For existing players, we do this on the basis of legitimate interests — the mutual commercial relationship between an active player and the Platform. For players who have self-excluded or requested that we cease contact, no marketing communications will be sent.

You may opt out of marketing communications at any time by:

• Updating your notification preferences in the Account settings panel;
• Contacting pk47 support via live chat or the email address in the footer of this page and requesting removal from all marketing lists.

Opt-out requests for marketing communications are processed within 5 business days. Please note that opting out of marketing does not affect transactional communications — you will continue to receive messages about your Account activity, transaction confirmations, security alerts, and responses to support queries.

pk47 does not share your contact details with third-party marketing organisations. All promotional communications originate directly from pk47 and relate exclusively to the pk47 platform.

pk47 reviews this Privacy Policy periodically and updates it when our data practices change, when we introduce new features that involve data processing, or when changes in applicable law or our licensing obligations require it. The "Last Updated" date at the top of this Policy indicates when the current version was published.

Where changes are material — meaning they significantly affect how we use your personal data or the rights you hold in respect of it — we will notify registered Players via the mobile number or email address on file before the changes take effect. Where changes are minor or clarificatory, we may update the Policy without individual notification, and the updated Policy will be effective from the date of publication at pk47.bid/privacy-policy.

We encourage you to review this Policy periodically to remain informed about how pk47 handles your personal data. Continued use of the Platform after an updated Policy is published constitutes your acknowledgement of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how pk47 has handled your personal data, please contact us through the following channel:

• Live Chat: Available 24/7 through the pk47 Platform. This is the fastest route for all enquiries including data rights requests.
• Email: The pk47 support email address is displayed in plain text in the footer of every page on this site. Please include your registered username and Account number in all privacy-related email correspondence to allow us to locate your Account records promptly.

Privacy-related enquiries and data rights requests receive a first response within 5 business days and a full resolution within 30 calendar days of receipt. If we require additional time to fulfil a complex data subject access request, we will notify you within the initial 30-day period and provide a revised timeline.