pk32 Privacy Policy

pk32 ("we", "us", "our", "pk32") is the operator of the online casino and sports betting Platform accessible at https://pk32.bid. This Privacy Policy describes how pk32 collects, processes, stores, uses, and shares personal data relating to individuals who visit, register on, or interact with the pk32 Platform in any capacity (collectively, "you", "your", "Player", "user").

pk32 operates under an international gaming licence issued by a recognised gaming regulatory authority. As a condition of that licence, pk32 is subject to specific data protection, record-keeping, and player identification obligations that shape many of the data practices described in this Policy. Where those regulatory obligations require data retention or processing that might otherwise not occur, pk32 is legally compelled to comply and will do so with the minimum data necessary for the specific regulatory purpose.

This Policy applies to all personal data processed by pk32 regardless of the medium through which it is collected — including the pk32 website, mobile web application, email communications, live chat, and telephone (where applicable). By accessing the pk32 Platform or submitting any personal data to pk32, you acknowledge that you have read and understood this Privacy Policy.

pk32 collects personal data in the following categories, depending on your interactions with the Platform:

pk32 does not collect or store full payment card numbers. Where payment card details are used, they are processed exclusively by PCI-DSS compliant third-party payment processors and are never stored within pk32's own infrastructure.

pk32 collects personal data through the following channels and methods:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, participating in promotions, or updating your Account profile.
• Automated technical collection: Server logs, session management systems, and cookies automatically capture Technical Data whenever you access the pk32 Platform, regardless of whether you are logged in to an Account.
• Payment processors: Confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers following completed transactions — including transaction reference numbers, amounts, timestamps, and status confirmations.
• Identity verification providers: Where pk32 uses third-party KYC or identity verification services, those services may return verification status information (confirmed, rejected, pending) alongside identity data elements used in the verification process.
• Fraud prevention systems: Automated risk assessment systems may collect and analyse behavioural and technical signals to detect fraud, money laundering, or other prohibited activities in accordance with pk32's AML/CFT obligations.

pk32 processes personal data only where a valid legal basis exists for doing so. The following table sets out the primary purposes of processing and the corresponding legal basis for each:

5.1 General Principle. pk32 does not sell, rent, or otherwise transfer your personal data to any third party for their own commercial or marketing purposes. Data sharing with third parties occurs only in the specific circumstances described in this Section and is limited to the minimum data necessary for the stated purpose.

5.2 Permitted Third-Party Recipients. pk32 may share your personal data with the following categories of recipient:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, GrabPay, and other payment providers receive the transaction data necessary to execute your deposit or withdrawal request. These providers operate under their own privacy policies and are responsible for their own data handling practices.
• Identity Verification Providers: Third-party KYC and identity verification service providers receive identity data elements required to complete verification of your Account, operating under binding data processing agreements with pk32.
• Regulatory Authorities: pk32's licensing authority and other competent regulatory or law enforcement authorities may receive personal data where required by applicable law, a valid legal order, or regulatory instruction. pk32 will notify you of such disclosure where legally permitted to do so.
• Fraud Prevention Agencies: Shared fraud databases and detection service providers may receive data elements necessary to identify and prevent fraudulent activity, money laundering, or other prohibited conduct, in accordance with pk32's AML/CFT programme.
• Technology Service Providers: Cloud hosting, data storage, platform infrastructure, and analytics service providers who process data on pk32's behalf under binding data processing agreements that impose obligations equivalent to those in this Privacy Policy.
• Professional Advisors: Lawyers, auditors, and insurers who require access to specific data in the course of providing professional services to pk32, subject to professional confidentiality obligations.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of pk32's business or assets, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection standards. pk32 will notify registered Players of any such material change through the registered email address or in-Platform notification.

pk32 operates under an international gaming licence and uses technology and service providers based in various jurisdictions. As a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan. In all cases, pk32 ensures that appropriate safeguards are in place to protect your personal data in accordance with the data protection standards applicable under pk32's regulatory framework.

Where personal data is transferred to service providers located outside Pakistan, pk32 relies on: (a) binding data processing agreements incorporating standard contractual clauses or equivalent protections; (b) certifications or codes of conduct providing equivalent protection; or (c) the necessity of the transfer for the performance of a contract between pk32 and the Player (such as payment processing). Players who wish to obtain further information about international data transfer safeguards applied by pk32 may submit a written request to [email protected].

pk32 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention period required by law or regulation. The following general retention principles apply:

• Active Account data (identity, contact, gaming activity, financial records) is retained for the lifetime of your pk32 Account and for a minimum period of five (5) years following Account closure, as required by AML/CFT regulatory obligations applicable to licensed gaming operators.
• KYC documents (CNIC copies, proof of address) are retained for a minimum of five (5) years following Account closure or the completion of the last transaction, in accordance with AML/CFT record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years in accordance with applicable financial record-keeping obligations.
• Support communications (chat transcripts, emails, complaint records) are retained for three (3) years following the close of each communication or complaint, to support dispute resolution and quality assurance.
• Marketing consent records are retained for three (3) years following withdrawal of consent or Account closure, whichever is earlier, to demonstrate lawful basis for historical marketing communications.
• Technical and log data is generally retained for thirteen (13) months for fraud prevention and platform security purposes, after which it is anonymised or deleted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised, it may continue to be used by pk32 for statistical and analytical purposes without restriction, as it no longer constitutes personal data.

Subject to applicable law and regulatory limitations, you have the following rights in relation to your personal data held by pk32. To exercise any of these rights, contact pk32 at [email protected] with your request, and pk32 will respond within 30 calendar days (which may be extended by a further 60 days for complex requests with written notice).

9.1 What Are Cookies. Cookies are small text files placed on your device when you visit the pk32 Platform. They enable the Platform to recognise your device on subsequent visits, maintain your login session, and deliver a functional gaming experience. pk32 also uses similar technologies including session storage and local storage within your browser.

9.2 Types of Cookies Used by pk32.

• Essential Cookies: Required for the Platform to function. These include session management cookies that maintain your pk32 login state and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limit configurations) to deliver a consistent experience across sessions.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the Platform — page views, session duration, feature engagement — to help pk32 improve service quality. Individual players are not identifiable from analytics data.
• Fraud Prevention Cookies: Used to identify devices associated with fraudulent activity, multiple account creation, or bonus abuse, in accordance with pk32's AML/CFT and integrity obligations.

9.3 What pk32 Does Not Use. pk32 does not use third-party advertising cookies, retargeting cookies, or cross-site tracking technologies that follow your activity across non-pk32 websites. pk32 does not share cookie data with advertising networks or data brokers.

9.4 Managing Cookies. You may control and delete cookies through your browser settings. Disabling essential cookies will prevent you from logging in to your pk32 Account and accessing most Platform features. Disabling analytics or functional cookies will not prevent Platform access but may affect your experience. Detailed browser cookie management instructions are available through your browser's help documentation.

pk32 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, disclosure, or alteration. Key security measures include:

• TLS 256-bit encryption for all data transmitted between your device and the pk32 Platform, providing the same protection used by international banking applications.
• Encryption at rest for all stored personal data, including identity documents, financial records, and gaming history, using industry-standard AES-256 encryption.
• Bcrypt password hashing ensuring that Account passwords are never stored in readable form — not accessible even to pk32 personnel.
• Role-based access controls limiting employee access to personal data strictly to what each individual role requires, with all access logged and auditable.
• Regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures for managing and reporting data breaches, including mandatory notification to affected players and the relevant regulatory authority within required timeframes.

pk32 is a strictly adult platform. Access to all pk32 services — casino games, sports betting, slot machines, live dealer tables — is limited to individuals who are 21 years of age or older. pk32 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is conducted through CNIC documentation review during the Account registration and KYC process. Any Account discovered to have been registered by or on behalf of an individual under 21 will be immediately suspended. All personal data associated with such an Account will be handled in accordance with the applicable regulatory guidance for underage registrations, which may include deletion of gaming data while retaining identity records for the period required by AML/CFT obligations.

If you have reason to believe that a minor has registered a pk32 Account or has accessed the Platform, please notify pk32 immediately at [email protected]. pk32 will investigate and take appropriate action without delay.

12.1 Opt-In Consent. pk32 will only send you marketing communications — including promotional emails, bonus offers, SMS messages, and in-Platform notifications regarding new games or promotions — where you have provided explicit consent at the time of Account registration or subsequently through your Account communication preferences.

12.2 Opting Out. You may withdraw your consent to marketing communications at any time using any of the following methods: (a) clicking the unsubscribe link included in any marketing email from pk32; (b) updating your communication preferences in your pk32 Account settings; or (c) contacting pk32 support at [email protected] with a written opt-out request. pk32 will process opt-out requests within five (5) business days.

12.3 Service Communications. Opting out of marketing communications does not affect pk32's ability to send you transactional and service communications required for the performance of your Account contract — including deposit confirmations, withdrawal notifications, Account security alerts, KYC requests, and material changes to these Terms or this Privacy Policy.

The pk32 Platform does not contain links to third-party websites for commercial or affiliate purposes. Where any reference to third-party services appears in supporting documentation (such as payment provider names), those services operate under their own privacy policies for which pk32 accepts no responsibility.

pk32 is not responsible for the data practices of payment processors, identity verification providers, or any other third party with whom pk32 shares your data in the circumstances described in this Policy. Where data is shared with such third parties, pk32 contractually requires equivalent data protection standards as a condition of the arrangement.

pk32 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how your data is processed or your rights in relation to it — pk32 will notify you by email to your registered address and/or by a prominent in-Platform notice at least fourteen (14) days before the changes take effect.

For minor or non-material changes (such as clarifications of existing practices, correction of typographical errors, or updates to contact information), pk32 will update the "Last Updated" date at the top of this Policy without prior individual notification. We encourage you to review this Policy periodically to stay informed about how your data is handled.

Your continued use of the pk32 Platform following the effective date of any Privacy Policy update constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, you must cease using the Platform and may request Account closure in accordance with the pk32 Terms and Conditions.

For all privacy-related enquiries, data subject rights requests, or complaints regarding pk32's data handling practices, please contact the pk32 Data Protection team using the following details. pk32 will acknowledge all data-related enquiries within five (5) business days and will provide a substantive response within the timeframes stated in Section 8.

• Privacy Enquiries Email: [email protected] — please include "Privacy Policy" or "Data Request" in the subject line to ensure prompt routing.
• Live Chat: Available directly through the pk32 Platform for real-time support, including initial guidance on data rights requests.
• Response Standard: pk32 aims to acknowledge privacy enquiries within five (5) business days and to fully resolve standard data access or correction requests within thirty (30) calendar days.

If you are not satisfied with pk32's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction applicable to your circumstances, or to the relevant gaming regulatory authority, whose contact details are published in pk32's gaming licence documentation.