pkaz Privacy Policy

pkaz is Pakistan's trusted online casino and sports betting platform, accessible at pkaz.bio. pkaz is operated under an international gaming licence and provides cricket betting, live casino games, slot machines, and fast PKR payouts via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency.

For the purposes of this Privacy Policy, pkaz is the data controller responsible for the personal data of Players and visitors who interact with the pkaz Platform. As data controller, pkaz determines the purposes and means of processing your personal data and is accountable for handling it in accordance with applicable data protection principles.

References in this Privacy Policy to "pkaz", "we", "our", or "us" refer to the operator of the pkaz Platform. References to "you", "your", or "Player" refer to any individual who visits, registers on, or uses the pkaz Platform in any capacity.

pkaz collects the following categories of personal data from Players and Platform visitors. We collect only what is necessary for the specific purposes described in this Policy.

pkaz collects personal data through the following means:

• Direct submission: Data you provide when creating your pkaz Account, completing KYC verification, making a deposit or withdrawal, setting responsible gaming limits, contacting support, or submitting feedback.
• Automated collection: Technical Data collected automatically when your device connects to the pkaz Platform, including via cookies, session logs, and server-side analytics. See Section 8 for full details of our cookie practices.
• Third-party sources: Identity verification data received from our KYC service providers during the verification process; fraud risk signals received from payment processors and fraud prevention networks; and publicly available data used to screen against sanction and PEP (Politically Exposed Person) lists as required by anti-money-laundering regulations.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment processors when you make deposits or receive withdrawals.

pkaz does not purchase personal data from data brokers or any other commercial data sources. All data collected by pkaz is obtained through the channels listed above in connection with a genuine Player relationship or Platform visit.

pkaz processes your personal data only where a valid legal basis exists. The following table sets out the purposes for which pkaz processes personal data and the corresponding legal basis for each purpose.

Where pkaz relies on legitimate interests as its legal basis, those interests are the secure and efficient operation of the Platform, the prevention of fraud and financial crime, and the improvement of the gaming experience for all Players. pkaz has assessed that these legitimate interests are not overridden by your rights and interests in the context of each specific processing activity.

Where pkaz relies on your consent — for example, for marketing communications — you may withdraw that consent at any time by updating your notification preferences in your Account settings or by contacting pkaz support. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

pkaz does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared only in the following circumstances and only to the extent strictly necessary for the purpose described:

• KYC and identity verification providers: pkaz shares Identity Data and KYC Documents with authorised third-party KYC verification services to conduct identity and age verification as required by our gaming licence. These providers act as data processors under binding contractual data processing agreements with pkaz.
• Payment processors: Financial Data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency payment processors solely to process your deposits and withdrawals. Each processor operates under its own privacy policy and applicable financial services regulations.
• Fraud prevention and AML screening: Technical and Financial Data may be shared with fraud prevention networks and AML screening services to detect and prevent financial crime. This includes sanctions list screening and PEP checks.
• Cloud infrastructure and hosting providers: pkaz uses cloud hosting services to store and process Platform data securely. These providers are contractually restricted from accessing or using your data for any purpose other than providing infrastructure services to pkaz.
• Regulatory authorities: pkaz is required by law and by its gaming licence to provide certain information to relevant regulatory authorities, tax authorities, and law enforcement agencies upon lawful request. pkaz will comply with all such requests to the extent required by applicable law.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of pkaz's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments being maintained.

pkaz operates under an international gaming licence, and some of our data processing activities involve the transfer of personal data to countries outside Pakistan. This may occur, for example, when cloud infrastructure or KYC verification services are hosted or operated in other jurisdictions.

Where personal data is transferred internationally, pkaz ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards may include:

• Transfers to countries or territories recognised as providing an adequate level of data protection;
• Contractual clauses that impose data protection obligations on the recipient;
• Binding corporate rules applicable to transfers within a corporate group;
• Other lawful transfer mechanisms available under applicable data protection law.

If you would like more information about the specific safeguards pkaz relies on for any particular international transfer, you may contact the pkaz support team using the details in Section 14.

pkaz retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or our gaming licence obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, pkaz will securely delete or anonymise your personal data so that it can no longer be associated with you. In some cases, anonymised or aggregated data derived from your Account activity may be retained indefinitely for statistical purposes, but this data will not be capable of identifying you.

pkaz uses cookies and similar tracking technologies to operate the Platform, recognise returning Players, maintain session security, and understand how the Platform is used. The following categories of cookies are used on the pkaz Platform:

• Strictly Necessary Cookies: These cookies are essential for the pkaz Platform to function. They enable core features such as Account login, session management, and security token validation. You cannot opt out of strictly necessary cookies while using the Platform.
• Functional Cookies: These cookies remember your preferences — such as language settings, responsible gaming limit configurations, and game display preferences — to provide a more personalised experience on return visits.
• Analytics Cookies: pkaz uses privacy-respecting analytics tools to understand aggregate Platform usage patterns, identify technical issues, and improve the Platform. Analytics data is processed in anonymised or pseudonymised form wherever possible.
• Fraud Prevention Cookies: These cookies collect device fingerprinting data used by our fraud prevention systems to detect suspicious login attempts, duplicate Account creation, and other prohibited conduct. They are necessary for Platform security.

pkaz does not use third-party advertising or behavioural tracking cookies that profile you across other websites for commercial advertising purposes. Our cookie use is limited to the operational categories described above.

pkaz recognises and respects your rights in relation to your personal data. The following rights are available to you and can be exercised by contacting the pkaz support team using the details in Section 14:

• Right of Access: You have the right to request a copy of the personal data pkaz holds about you, along with information about how it is being used. pkaz will provide this within 30 days of your request.
• Right to Rectification: If any personal data pkaz holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update many of your Account details directly through your pkaz Account settings.
• Right to Erasure: You may request that pkaz delete your personal data where it is no longer needed for the purposes it was collected for, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests. This right is subject to pkaz's legal data retention obligations — pkaz cannot delete data it is legally required to retain.
• Right to Restriction: You may request that pkaz restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while an objection to processing is being assessed.
• Right to Data Portability: Where pkaz processes your personal data by automated means on the basis of contract performance or consent, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to pkaz's processing of your personal data where that processing is based on legitimate interests. pkaz will stop processing unless it can demonstrate compelling legitimate grounds that override your rights. You have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

pkaz will respond to all valid data rights requests within 30 days. In complex cases, this period may be extended by a further 30 days, in which case pkaz will notify you of the extension and the reason for it. There is no charge for submitting a data rights request.

pkaz enforces the 21+ age restriction through mandatory KYC verification, which requires every Player to submit valid government-issued photo identification (CNIC or passport) confirming they are 21 years of age or older before their Account is fully activated and any withdrawal can be processed.

If pkaz becomes aware that personal data has been collected from a person under the age of 21 — whether through a registration attempt, KYC verification failure, or any other means — pkaz will immediately close the relevant Account and delete all personal data associated with that Account. Any real-money funds deposited by an underage Player will be returned to the payment method used for the deposit, net of any winnings derived from wagers placed on the Account.

If you believe that pkaz may have inadvertently collected personal data relating to a person under the age of 21, please contact the pkaz support team immediately using the details in Section 14.

pkaz implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the pkaz Platform;
• AES-256 encryption for personal and financial data stored in pkaz systems;
• Role-based access controls ensuring that pkaz staff can access Player data only to the extent required for their specific job function;
• Multi-factor authentication for all internal pkaz systems that process Player data;
• Regular vulnerability assessments and penetration testing of the Platform;
• Real-time fraud monitoring systems that flag anomalous Account activity for review;
• Incident response procedures for managing and notifying affected Parties in the event of a data security incident.

While pkaz takes all reasonable measures to protect your personal data, no system can guarantee complete security against all possible threats. pkaz encourages Players to protect their own Account security by using a strong, unique password, enabling any two-factor authentication options available on the Platform, and contacting pkaz support immediately if they suspect unauthorised access to their Account.

The pkaz Platform may from time to time contain links to third-party websites, including payment processor portals, responsible gaming information resources, and regulatory body websites. This Privacy Policy applies solely to data processing carried out by pkaz on the pkaz Platform. It does not extend to any third-party websites you may access via links from the Platform.

pkaz is not responsible for the privacy practices of any third-party website. We encourage you to read the privacy policy of any third-party website you visit before submitting any personal data to it.

pkaz reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or the services offered on the Platform. When we make a material change to this Policy — meaning a change that significantly affects how we collect, use, or share your personal data — we will notify registered Players by email or via an in-Platform notification before the change takes effect.

The updated Privacy Policy will be published on the pkaz Platform with a revised "Last Reviewed" date at the top of the page. We encourage you to review this Policy periodically. Your continued use of the pkaz Platform following publication of an updated Policy constitutes your acknowledgement of the changes.

For minor or administrative updates that do not materially affect your rights, pkaz may update the Policy without advance individual notification, relying on the publication of the updated version on the Platform as sufficient notice.

If you have any questions, concerns, or requests relating to this Privacy Policy or pkaz's handling of your personal data, please contact the pkaz Data Protection team using the following details:

• Email: [email protected]
• Subject Line: Privacy Request — [your Account username]
• Live Chat: Available 24/7 via the pkaz Platform — ask to speak with the Data Protection team

pkaz will acknowledge your privacy-related contact within two business days and will provide a substantive response within 30 calendar days. For complex requests involving large volumes of data or multiple processing activities, the response period may be extended by a further 30 days with prior notice to you.

If you are not satisfied with pkaz's response to your privacy concern, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction. pkaz is committed to cooperative and transparent engagement with regulatory bodies in all jurisdictions in which it operates.

This Privacy Policy was last reviewed and published on 1 January 2026. pkaz thanks you for taking the time to understand how your personal data is handled on Pakistan's trusted online casino and sports betting platform.