pk888 Privacy Policy — Your Data, Explained Plainly

This Privacy Policy describes how pk888 ("pk888", "we", "our", "the Platform") collects, uses, stores, and protects the personal data of players and visitors who access the pk888 website and use its services. pk888 is the data controller for all personal data collected through the Platform.

We are committed to handling your data responsibly and in accordance with applicable data protection principles. This Policy applies to all pk888 account holders, prospective registrants who have begun but not completed the registration process, and visitors to the Platform who have not registered.

If you have any questions about this Privacy Policy or about how pk888 handles your personal data, you can contact us at: privacy@pk888-jit.com or through the live chat support available on every page of the Platform.

pk888 collects the following categories of personal data:

Registration Data: When you create a pk888 account, we collect your full legal name, date of birth, mobile number, email address (if provided), and preferred payment method. This information is required to create and operate your account.

Identity Verification Data (KYC): To comply with anti-money laundering obligations and to protect all players, pk888 requires identity verification before processing withdrawals. This involves collecting a copy of your CNIC (Computerised National Identity Card) and, in some cases, a proof of address document such as a utility bill or bank statement dated within the last three months.

Financial Data: We collect records of all deposits, withdrawals, and transactions processed through your pk888 account, including payment method identifiers (such as your Easypaisa or JazzCash account number — not full access credentials). This data is stored in an isolated payment data environment separate from your gaming profile.

Gaming Activity Data: Records of games played, bets placed, wins, losses, and session times are retained as part of your account history. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

Technical Data: When you access pk888, our servers automatically collect your IP address, device type, operating system, browser version, session duration, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

Communications Data: Records of your communications with pk888 support — including chat transcripts and emails — are retained for dispute resolution and service quality purposes.

pk888 uses your personal data for the following purposes, and only for these purposes:

• Account Management: Creating, maintaining, and securing your pk888 account; processing your bets, deposits, and withdrawals in PKR; crediting bonuses and VIP Club rewards.
• Identity Verification: Confirming that you meet the eligibility requirements to use pk888 (age 18+, accurate identity) and complying with anti-money laundering obligations.
• Fraud Prevention and Security: Detecting and preventing unauthorised access to accounts, identifying patterns consistent with fraudulent activity, and protecting the integrity of the Platform for all players.
• Responsible Gaming: Monitoring gaming activity for patterns that may indicate problem gambling behaviour, and acting on responsible gaming tool activations (deposit limits, self-exclusion requests, etc.).
• Customer Support: Handling queries, resolving disputes, and providing the support services available on pk888.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and the overall player experience. Individual player data is not used for this purpose in an identifiable form.
• Marketing Communications: If you have opted in to marketing communications, we may send you information about new games, promotions, and offers relevant to your account. You can opt out at any time from within your account settings or by contacting support.
• Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from authorities, and maintaining audit trails for regulatory purposes.

pk888 processes your personal data on the following legal bases:

• Contract Performance: Most data processing on pk888 is necessary to perform our contract with you — i.e., to operate your account, process bets in PKR, and pay out winnings. Without this processing, the service cannot be provided.
• Legal Obligation: Identity verification (KYC), transaction record-keeping, and certain security monitoring are required by applicable anti-money laundering and financial crime prevention laws.
• Legitimate Interests: Fraud prevention, security monitoring, platform improvement using anonymised data, and responsible gaming monitoring are conducted under our legitimate interest in providing a safe, fair platform.
• Consent: Marketing communications and optional cookie use are based on your consent, which you can withdraw at any time.

Given that pk888 is a Pakistani-focused platform and that all transactions are processed in PKR, the payment data we handle includes mobile wallet identifiers (Easypaisa and JazzCash account numbers), IBFT bank account details, and card numbers (Visa/Mastercard). This data requires the highest level of protection and is handled accordingly.

Payment data is stored in a dedicated, isolated data environment with independent encryption and access controls, completely separate from your gaming profile database. Staff who handle payment queries see only masked versions of payment identifiers (e.g., only the last four digits of a card number). Full payment credentials are never visible to pk888 employees in their day-to-day work.

pk888 does not store full card numbers, CVV codes, or full banking credentials. Card payments are processed through a PCI-DSS compliant payment gateway — the sensitive card data is handled entirely within that gateway's secure environment and is not passed to or stored on pk888's own servers.

Transaction records (amounts, dates, methods, and masked identifiers) are retained for a minimum of 5 years to comply with financial record-keeping obligations. These records may be accessed by pk888's compliance team in the event of an AML investigation or a dispute resolution process.

pk888 does not sell, rent, or license your personal data to third parties. Data sharing occurs only in the following limited and specific circumstances:

• Payment Processors: To complete PKR deposits and withdrawals, necessary transaction data (amount, currency, masked payment identifier) is shared with our licensed payment processing partners. These partners are contractually required to process data only for the purpose of completing your transaction and to delete it thereafter.
• Identity Verification Services: CNIC and document verification may be performed using third-party identity verification services. These services receive only the documents required for verification and are not permitted to retain or use your data for any other purpose.
• Game Software Providers: The game studios whose software powers pk888 games receive anonymised game session data (bet amount, game outcome, session length) for the purpose of game performance monitoring. This data does not include your name, contact details, or payment information.
• Legal and Regulatory Authorities: pk888 will disclose personal data to law enforcement or regulatory bodies when required to do so by a lawful legal order. We do not voluntarily share data with authorities beyond what is legally required.
• Fraud Prevention Networks: In cases of confirmed fraud or serious Terms breach, limited data may be shared with industry fraud prevention networks to protect other players and platforms from the same actor.

In all cases where data is shared with third parties, those parties are subject to written data processing agreements that restrict how they may use your data.

pk888 uses cookies and similar technologies to operate the Platform, maintain your session, and understand how the Platform is used. The following types of cookies are used:

Required cookies cannot be disabled as they are essential for the Platform to function. Optional cookies can be managed from the cookie preferences panel accessible in the footer of every page. Declining optional cookies does not affect your ability to play games, deposit, or withdraw.

pk888 does not use third-party advertising cookies or share browsing data with advertising networks.

pk888 implements the following technical and organisational security measures to protect your personal data:

• TLS Encryption: All data in transit between your device and pk888 servers is encrypted using TLS 1.2 or higher. This applies to login, gameplay, deposits, withdrawals, and support communications.
• AES-256 Encryption at Rest: Personal data stored in pk888 databases is encrypted at rest using AES-256. Database encryption keys are managed separately from the data they protect.
• Access Controls: Employee access to player data follows the principle of least privilege — staff see only the data necessary for their specific role. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: All administrative access to systems holding player data requires multi-factor authentication. Players are also offered 2FA for their own accounts, which we strongly recommend activating.
• Penetration Testing: pk888 commissions independent security audits and penetration tests of its infrastructure on a regular basis. Findings are remediated according to a severity-based priority schedule.
• Incident Response Plan: pk888 maintains a documented data breach response plan. In the event of a confirmed breach affecting personal data, affected players will be notified within 72 hours as described in the introduction to this Policy.

pk888 retains personal data for the following periods:

• Active Account Data: Retained for the full duration of your account relationship with pk888 plus a minimum of 5 years after account closure to comply with financial record-keeping obligations.
• KYC / Identity Documents: Retained for 5 years after account closure. This is required by anti-money laundering regulations.
• Transaction Records: Retained for 5 years from the date of the transaction, in line with standard financial record-keeping requirements.
• Support Communications: Retained for 2 years from the date of the communication, or for the duration of any ongoing dispute, whichever is longer.
• Technical Logs (IP, Session Data): Retained for 12 months for security and fraud monitoring purposes, then deleted or anonymised.
• Marketing Consent Records: Retained until you withdraw consent, plus 12 months as a record of prior consent history.

When the applicable retention period expires, data is securely deleted from all active systems and backups on a scheduled cycle. Data that cannot be immediately deleted due to backup cycles will be isolated from active use and deleted at the next scheduled backup purge.

As a pk888 player, you have the following rights regarding your personal data. All requests should be submitted to privacy@pk888-jit.com and will be responded to within 30 days.

pk888 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. The registration process includes an age confirmation step and identity verification before withdrawals is designed in part to confirm that all players are adults.

If pk888 becomes aware that personal data has been collected from a person under 18 — whether through self-disclosure, a third-party report, or the identity verification process — the account will be closed immediately, all data associated with the account will be deleted (except records required to demonstrate the violation), and any funds deposited will be returned to the source payment method after verification of the refund destination.

Parents and guardians who believe a minor has registered on pk888 should contact us immediately at privacy@pk888-jit.com. We will respond within 24 hours and close the account within the same period.

pk888 may update this Privacy Policy from time to time. Where changes are material — such as introducing new categories of data collection, changing how data is shared with third parties, or significantly altering retention periods — registered players will be notified by email at least 14 days before the changes take effect.

Minor changes, such as clarifications of existing practices or updated contact details, may take effect upon publication. The current version of this Privacy Policy is always accessible from the footer of every page on pk888. The date of last update is shown in the header of this page.

If you disagree with any change to this Privacy Policy, you may close your account and request deletion of your data before the changes take effect. Continued use of the Platform after the effective date of a policy update constitutes your acceptance of the revised policy.

For all privacy-related queries — data access requests, correction requests, deletion requests, or general questions about how pk888 handles your data — please contact us via:

• Privacy Email: privacy@pk888-jit.com — please mark your subject line with "Privacy Request" so it reaches the right team promptly.
• General Support Email: support@pk888-jit.com — for account-related queries that also involve data questions.
• Live Chat: Available 24/7 from the support icon on any page of the Platform.

pk888 will acknowledge all privacy requests within 24 hours and provide a substantive response within 30 days. If a request is complex or involves multiple data types, we may extend the response period by a further 60 days — we will notify you if this extension is needed and explain the reason.

For matters relating to responsible gaming — deposit limits, self-exclusion, or general support around gaming behaviour — please visit our Responsible Gaming page or contact support directly. Privacy requests and responsible gaming requests are handled by different teams; marking your message clearly helps us get you to the right person faster.