Privacy Policy

1 Introduction

pk6816 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at pk6816.app. We are deeply committed to protecting the privacy and personal data of every individual who visits, registers on, or uses our platform — including all players accessing pk6816 from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and every other city and region across Pakistan.

This Privacy Policy sets out in plain, clear language how pk6816 collects, stores, uses, shares, and protects your personal information. It also explains the rights you hold in relation to your data and how you may exercise those rights at any time. We have aligned our data handling practices with internationally recognised privacy standards, including principles drawn from the General Data Protection Regulation (GDPR), to ensure your information is treated with the highest level of care.

By accessing pk6816 or creating an account, you confirm that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. This Policy must be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and pk6816.

2 Data We Collect

pk6816 collects personal data across several categories depending on your interaction with the platform. The table below summarises what we collect and why each category is necessary:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless it is volunteered by the player in a support communication and is directly relevant to addressing their query.

3 How We Collect Your Data

pk6816 collects your personal data through the following methods:

• Direct Submission: Information you provide during account registration, KYC document upload, deposit/withdrawal requests, support communications, or when responding to promotions and surveys.
• Automated Technical Collection: Data gathered automatically when you access the pk6816 platform, including IP addresses, cookies, session identifiers, device fingerprints, and clickstream data. This collection occurs even if you do not register an account.
• Third-Party Payment Processors: When you make a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or Visa/Mastercard, our payment partners may pass back transaction metadata to pk6816 for reconciliation and fraud screening purposes.
• Identity Verification Services: During KYC checks, we may use third-party identity verification providers who cross-reference your submitted documents against government and commercial databases to confirm your identity and age.
• Fraud & AML Screening: We may receive data from third-party anti-money laundering and fraud screening services that flag unusual activity patterns associated with your account or payment methods.

4 Purpose of Processing

pk6816 processes your personal data strictly for the following defined purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent:

1. Account Management: Creating, maintaining, and administering your pk6816 account, including managing your PKR balance, bonus wallet, and gaming history.
2. KYC & Age Verification: Confirming that you are at least 21 years of age and that your identity matches the information provided at registration, as required under our gaming licence obligations.
3. Payment Processing: Facilitating PKR deposits and withdrawals via your chosen payment method, reconciling transactions, and managing refund or reversal requests.
4. Fraud Prevention & AML Compliance: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, match-fixing, and other forms of platform abuse.
5. Customer Support: Responding to your queries, resolving complaints, and providing technical assistance through live chat and email support channels.
6. Responsible Gaming: Monitoring your gaming behaviour to identify potential signs of problem gambling, and applying deposit limits, cooling-off periods, or self-exclusion where triggered or requested.
7. Regulatory Compliance: Meeting our obligations under the terms of our international gaming licence, including record-keeping, reporting, and cooperation with regulatory authorities.
8. Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent or where we have a legitimate interest, and always with a clear unsubscribe option.
9. Platform Improvement: Analysing aggregated usage data to improve the pk6816 website, mobile experience, game library, and feature set for Pakistani players.

5 Legal Basis for Processing

Under internationally recognised data protection frameworks, pk6816 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the pk6816 Terms & Conditions — including account management, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with our gaming licence conditions, anti-money laundering regulations, and other applicable legal requirements, including mandatory record retention.
• Legitimate Interests: Processing carried out to pursue our legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights.
• Consent: For marketing communications, personalised promotions, and any non-essential cookies or tracking technologies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting prior processing.

6 Sharing Your Data

pk6816 does not sell your personal data to any third party under any circumstances. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard receive transaction-specific financial data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification services receive the identity documents and personal details you submit during verification, solely for the purpose of confirming your eligibility.
• Fraud & AML Screening Services: We share relevant account and transaction data with fraud detection and anti-money laundering screening partners to fulfil our compliance obligations.
• Gaming Software Providers: The game providers whose titles are available on pk6816 may receive anonymised or pseudonymised session data to support game performance and dispute resolution.
• Regulatory Authorities: In response to a valid legal request, court order, or regulatory instruction from our licensing authority, we may be required to disclose player data. We will notify you of such disclosure where permitted by law.
• Professional Advisers: Lawyers, auditors, and insurers who are bound by professional confidentiality obligations may access relevant data in the course of providing services to pk6816.

7 Data Retention

pk6816 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy gaming licence and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven years following the date of the transaction, in line with international financial compliance standards.
• KYC Documents: Retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later.
• Support Communications: Retained for three years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter.
• Marketing Preferences: Retained until you withdraw consent or request deletion, after which the opt-out record itself is retained indefinitely to prevent inadvertent re-contact.
• Technical & Log Data: Retained for up to 24 months from the date of generation, after which it is automatically purged or anonymised.

After the applicable retention period expires, your personal data is securely deleted or permanently anonymised in a manner that prevents re-identification.

8 Cookies & Tracking Technologies

pk6816 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last-visited game category, and display preferences to personalise your pk6816 experience across sessions.
• Analytics Cookies: Collect anonymised data about how players navigate the pk6816 platform — which pages are most visited, how long sessions last, and where users encounter errors — to help us improve the site.
• Responsible Gaming Cookies: Track session duration and gaming frequency locally to support the delivery of in-platform responsible gaming prompts and reality checks.

9 Data Security

pk6816 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the pk6816 platform is protected by TLS 1.3 encryption, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored within pk6816's infrastructure — including KYC documents, financial records, and identity data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within pk6816 is restricted to authorised personnel who require it to perform their specific job functions. All staff with data access undergo mandatory privacy and security training.
• Two-Factor Authentication: pk6816 supports and encourages two-factor authentication (2FA) on player accounts to provide an additional layer of security beyond your password.
• Penetration Testing: pk6816's platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, pk6816 will notify affected players and relevant regulatory authorities within the timeframe required by our licensing obligations.

While we take every reasonable precaution, no internet-based platform can guarantee absolute security. You are responsible for keeping your pk6816 login credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10 Your Data Rights

As a pk6816 player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a verified request.

• Right of Access: You may request a copy of all personal data pk6816 holds about you, along with information on how it is being processed.
• Right to Rectification: If any of your personal data held by pk6816 is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. Note that mandatory legal retention obligations may prevent full erasure in some cases.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

11 Minors & 21+ Policy

pk6816 is strictly an adults-only platform. We do not knowingly collect, process, or store personal data belonging to any individual under the age of 21. This is not merely a policy preference — it is a mandatory condition of our gaming licence and a core ethical commitment of the pk6816 platform.

All accounts on pk6816 must pass mandatory KYC age verification before real-money gaming is permitted. This process requires submission of a valid, government-issued identity document — such as a Pakistani CNIC, passport, or driver's licence — that confirms the account holder is 21 years of age or older.

Parents and guardians in Pakistan are encouraged to use internet filtering and parental control software to prevent minors from accessing online gambling platforms. pk6816 cooperates with responsible gaming organisations and supports industry-wide age verification initiatives.

12 International Data Transfers

As pk6816 operates under an international gaming licence, some of your personal data may be processed or stored by our service providers in jurisdictions outside Pakistan. Where such transfers occur, pk6816 ensures that adequate safeguards are in place to protect your data, including:

• Contractual clauses that require all third-party processors to handle your data in accordance with standards equivalent to those described in this Privacy Policy.
• Use of service providers whose data processing operations are located in jurisdictions with recognised data protection frameworks.
• Regular review and audit of third-party data processors to ensure ongoing compliance with our standards.

By using pk6816, you acknowledge that your data may be transferred to and processed in jurisdictions outside Pakistan as part of the platform's normal operational activities. All such transfers are conducted with appropriate safeguards in place as described above.

13 Changes to This Policy

pk6816 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, we will notify you by:

• Sending a notification to your registered pk6816 email address at least 7 days before the changes take effect, where the changes are material to your rights.
• Displaying a prominent banner notification within the pk6816 platform for a period of not less than 14 days following the update.
• Updating the "Last Updated" date at the top of this Privacy Policy page.

Your continued use of pk6816 following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change, you should cease using the platform and close your account prior to the effective date of the change.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pk6816 processes your personal data, our dedicated privacy team is available to assist you. We are committed to responding to all privacy-related enquiries promptly and transparently.

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. For complex data access or deletion requests, we may extend this period by a further 30 days, in which case we will inform you of the extension and the reason for it.

If you are not satisfied with our response to a privacy complaint, you may refer the matter to the relevant supervisory authority in your jurisdiction or to the dispute resolution body specified under our gaming licence terms.