PK Win Privacy Policy – How We Handle and Protect Your Personal Data

1. Who We Are

This Privacy Policy is issued by PK Win ("pk win", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at pkwin.life. Pk win is the data controller responsible for your personal data collected through this website and through any communications you have with pk win, including live chat, email and SMS.

When this Policy refers to "you" or "the Player", it means any individual who visits pkwin.life, registers an account, deposits funds, places bets or interacts with any pk win service in any other way. This Policy applies to all pk win products including slots, fishing games, crash games, Aviator, jackpot slots, virtual sports and PSL betting.

By registering a pk win account or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood how pk win handles your personal data as described in this document.

2. Data We Collect

Pk win collects different categories of personal data depending on how you interact with the platform. We only collect data that is genuinely necessary for the purposes described in Section 3 of this Policy. Below is a full account of what pk win may collect about you.

Registration & Identity Data

• Full legal name as it appears on your Pakistani CNIC, passport or driving licence
• Date of birth (used to verify you are 18 or over)
• Pakistani mobile phone number
• Email address (if provided)
• Username chosen at registration
• CNIC number or passport number (collected during KYC verification)

Identity Verification Documents

As part of pk win's KYC (Know Your Customer) process, we may ask you to submit scanned copies or clear photographs of one or more of the following documents: Pakistani CNIC (front and back), Pakistani passport photo page, or Pakistani driving licence. These documents are stored securely and used only for identity verification and legal compliance purposes.

Financial & Transaction Data

• Easypaisa, JazzCash, NayaPay or SadaPay account numbers associated with your pk win deposits and withdrawals
• Bank account details submitted for IBFT withdrawals
• Card details for Visa/Mastercard transactions (card numbers are never stored in full by pk win – payment processing is handled by a PCI-DSS compliant payment processor)
• Full transaction history including deposits, withdrawals, bonuses credited and bets placed
• PKR balance history across your pk win account

Gaming Activity Data

• Full record of every game session, bet placed and outcome received on pk win
• Cash-out decisions in crash games including Aviator
• PSL and sports betting selections, stake amounts and settlement results
• Bonus usage and wagering progress

Technical & Device Data

• IP address at the time of registration and at each login
• Device type, operating system version and browser type
• Mobile network operator (where relevant)
• Session timestamps and duration
• Pages visited on pkwin.life and the sequence in which they were visited

Communications Data

If you contact pk win via live chat, email or SMS, pk win retains a record of the communication including the content of messages and any case notes created by the support agent handling your query. This record is kept to provide consistent support and for quality monitoring purposes.

3. How We Use Your Personal Data

Pk win uses the personal data it collects for specific, defined purposes. We do not process data for any purpose that is incompatible with the purposes described here without providing you with separate notice and, where required, obtaining your consent.

• Providing the pk win platform: Your identity and contact data is used to create and maintain your account, verify your identity, process your deposits and withdrawals in PKR and enable you to place bets and play games.
• Identity and age verification (KYC): Pk win is required to verify that players are who they say they are and that they are at least 18 years of age. KYC data is used solely for this purpose and for any related legal compliance obligations.
• Processing financial transactions: Your financial data (Easypaisa/JazzCash numbers, bank account details, card details) is used to process deposits and withdrawals accurately and securely. All PKR transactions are recorded for audit purposes.
• Customer support: Communications data is used to provide you with accurate, consistent support when you contact pk win via live chat or email.
• Fraud prevention and security: Technical and gaming activity data is monitored for signs of fraudulent activity, bonus abuse, money laundering or other prohibited behaviour as described in the pk win Terms and Conditions.
• Responsible gaming: Gaming activity data is analysed to identify patterns that may indicate problem gambling behaviour, so that pk win can fulfil its responsible gaming obligations and offer appropriate support tools.
• Platform improvement: Aggregate, anonymised technical data is used to improve the pk win platform, optimise performance for Pakistani mobile users and prioritise new feature development.
• Legal compliance: Pk win processes and retains certain data categories as required by applicable legal and regulatory obligations, including financial records and KYC documentation.
• Marketing communications: Where you have given explicit consent, pk win may send you promotional information about bonuses, new games and special events via SMS or email. See Section 12 for full details of your marketing preferences and how to opt out.

4. Legal Basis for Processing

Pk win processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing your identity, contact, financial and gaming activity data is necessary for pk win to fulfil its contractual obligations to you as a registered player – in other words, to actually provide the gaming service you signed up for.
• Legal obligation: KYC verification, transaction record-keeping and certain fraud prevention activities are carried out because pk win is legally required to do so. Pk win cannot waive these requirements regardless of player preference.
• Legitimate interests: Pk win processes certain technical and behavioural data on the basis of its legitimate business interests in fraud prevention, platform security, improving service quality and maintaining the integrity of its gaming environment. These interests have been assessed and do not override your fundamental rights and freedoms.
• Consent: Marketing communications are sent only where you have given explicit consent at registration or through your account preferences settings. You may withdraw this consent at any time.

5. Data Sharing with Third Parties

Pk win does not sell your personal data to any third party for any purpose, including marketing purposes. Your data is never made available to advertisers, data brokers or any commercial third party for use outside of the direct provision of the pk win service.

Pk win does share certain data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: Your financial transaction data is shared with the payment providers needed to process your Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and card transactions. These providers are required to handle your data securely and only for the specific purpose of processing the transaction.
• Game software providers: When you play a game at pk win (such as Aviator by Spribe, or slots by NetEnt or Microgaming), your game session data passes through the game provider's servers. This is technically necessary for the game to function. Game providers are contractually prohibited from using this data for any purpose other than providing and improving the game.
• KYC and identity verification services: Pk win may use third-party identity verification services to assist with document verification during the KYC process. These services receive copies of your submitted documents and return a verification result. They do not retain your data after the verification is complete.
• IT and platform service providers: Pk win uses cloud hosting, security monitoring and analytics services provided by third parties. These providers may process certain technical data as part of providing their services to pk win. All such providers are subject to strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order or regulatory direction, pk win may be required to disclose certain player data to relevant authorities. Pk win will only comply with valid, legally binding disclosure requests.

6. Financial Data & Payment Security

Given that all transactions on pk win are conducted in Pakistani Rupees (PKR) via local payment methods including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard, financial data handling is a particularly important aspect of pk win's privacy practices.

Pk win does not store full card numbers, CVV codes or card expiry dates on its own servers. Card payment processing is handled entirely by a PCI-DSS Level 1 compliant payment processor. Pk win only receives a tokenised reference that allows it to identify the card for future transactions without holding the sensitive card data itself.

Easypaisa and JazzCash account numbers are stored in encrypted form in pk win's database. These numbers are necessary to process withdrawals back to the same account from which deposits were made, as required by pk win's anti-money laundering controls. They are not used for any purpose other than processing your requested transactions.

Full transaction histories in PKR are retained by pk win for a minimum of five years as required for financial compliance purposes. During this retention period, this data is accessible only to authorised pk win staff for specific operational and compliance purposes.

7. Data Security

Pk win implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include but are not limited to:

• 256-bit SSL (Secure Sockets Layer) encryption across all connections between your browser or device and pkwin.life – the same encryption standard used by Pakistani commercial banks
• Encryption of sensitive data fields in pk win's database, including payment identifiers and identity document data
• Role-based access controls ensuring that pk win staff can only access the player data that is relevant to their specific job function
• Regular security audits and penetration testing of the pk win platform and underlying infrastructure
• 24/7 security monitoring with automated alerts for anomalous activity patterns
• Secure, access-controlled storage for KYC documents with strict retention limits

While pk win takes all reasonable precautions to protect your data, no online system can guarantee complete security. In the event of a data security incident that affects your personal data in a material way, pk win will notify you as soon as reasonably practicable using the contact details registered on your account.

8. Data Retention

Pk win retains your personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Account registration data: Retained for the duration of your account plus a minimum of five years after account closure, as required for financial compliance purposes.
• KYC documents: Retained for a minimum of five years after the date of verification or after account closure, whichever is later. After this period, document copies are securely deleted.
• Transaction records in PKR: Retained for a minimum of five years from the date of each transaction as required by financial record-keeping obligations.
• Gaming activity records: Retained for the duration of your account plus three years after closure, used for dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for two years from the date of the communication unless the communication relates to a live dispute or regulatory matter, in which case it is retained until the matter is resolved.
• Marketing consent records: Retained until you withdraw consent, plus one year after withdrawal to demonstrate compliance.

When a retention period expires and there is no other legal basis for continued retention, pk win securely deletes or anonymises the relevant data. Anonymised data may be retained indefinitely for statistical and analytical purposes as it can no longer be associated with any individual player.

9. Cookies & Tracking Technologies

Pk win uses cookies and similar tracking technologies on pkwin.life to provide a functional, personalised and secure gaming experience. A cookie is a small text file placed on your device by the website. Below is a summary of the types of cookies pk win uses and what each type does.

You can manage your cookie preferences through the cookie settings panel available in the footer of pkwin.life, or through your browser settings. Disabling non-essential cookies may affect certain personalisation features but will not prevent you from accessing pk win or placing bets.

10. Your Data Rights

As a player on pk win, you have the following rights in relation to your personal data. Pk win will respond to valid requests within 72 hours and complete them within 30 days in most cases. To exercise any of these rights, contact pk win support via live chat or email at support@pkwin.life.