pk40 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pk40 ("pk40", "we", "us", "our"), the operator of the online casino and sports betting platform at https://pk40.vip ("the Platform"), collects, processes, stores, and protects personal information relating to registered users and visitors ("User", "you", "your"). This Policy is an integral part of pk40's Terms and Conditions and should be read together with them.

pk40 is committed to protecting the privacy of its users, including Pakistani players accessing the Platform from cities such as Karachi, Lahore, Islamabad, Rawalpindi, and Faisalabad. By creating an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with this Policy, you must not access or use the pk40 Platform.

2. Personal Data We Collect

pk40 collects personal data through several channels, including account registration, identity verification, payment processing, Platform usage, and customer support interactions. The categories of personal data we collect include:

• Identity data: Full legal name, date of birth, CNIC (Computerised National Identity Card) number, and copies of identity documents provided during KYC verification.
• Contact data: Email address, Pakistani mobile number, and residential address.
• Financial data: Payment method information (JazzCash account number, Easypaisa wallet number, bank account details), transaction history, deposit and withdrawal records.
• Account data: Username, password (stored in encrypted form only), account settings, responsible gaming preferences, and betting history.
• Technical data: IP address, browser type and version, operating system, device identifiers, session data, and access timestamps.
• Usage data: Pages visited, games played, features accessed, clickstream data, and time spent on the Platform.
• Communications data: Records of your correspondence with pk40 support, including live chat transcripts and email exchanges.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where specifically required by applicable anti-money laundering or responsible gaming regulations.

3. How We Use Your Personal Data

pk40 uses the personal data it collects for the following purposes:

• Account management: To create and maintain your pk40 account, authenticate your identity upon each pk40 login, and manage your account settings and preferences.
• Service delivery: To provide access to games, betting markets, promotional offers, and all other Platform features you use.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, Easypaisa, and other supported Pakistani payment methods.
• Identity verification: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations by verifying your identity before processing withdrawals or as otherwise required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal or prohibited activity on the Platform.
• Responsible gaming: To monitor gambling patterns, enforce deposit limits, respond to self-exclusion requests, and fulfil our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance through the pk40 live chat and email support channels.
• Marketing communications: To send you relevant promotional offers and updates about pk40, subject to your marketing preferences and your right to opt out at any time.
• Analytics and improvement: To analyse Platform usage patterns, improve the user experience, and develop new features and products.
• Legal compliance: To meet our obligations under applicable laws and to respond to lawful requests from regulatory authorities.

4. Legal Basis for Processing

pk40 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and pk40 — including account creation, payment processing, game access, and customer support.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC, AML, and responsible gaming obligations.
• Legitimate interests: Processing in pursuit of pk40's legitimate business interests, including fraud prevention, Platform security, and product improvement, where those interests are not overridden by your rights.
• Consent: Where you have provided explicit consent, such as for receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Cookies and Tracking Technologies

pk40 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how users interact with it. The types of cookies used by pk40 include:

• Essential cookies: Necessary for the Platform to function. These include session cookies that maintain your pk40 login state during your visit. Disabling these will prevent the Platform from working correctly.
• Analytics cookies: Used to collect anonymised data about how users navigate the Platform, which pages are most visited, and how long sessions last. This data is used solely to improve the pk40 user experience.
• Preference cookies: Used to remember your Platform settings and preferences, such as language selection and responsible gaming limits.

You can control cookie settings through your browser preferences. Note that disabling essential cookies will affect your ability to use core Platform features including pk40 login and game access. pk40 does not use cookies for third-party advertising or cross-site tracking.

6. Sharing Your Personal Data

pk40 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients only where necessary and on appropriate contractual terms:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers required to process your PKR transactions.
• Game software providers: Licensed game studios (e.g. Pragmatic Play, Evolution Gaming) may receive anonymised session data as necessary to deliver their games through the pk40 Platform.
• Identity verification services: Third-party KYC providers used to verify identity documents during account verification processes.
• Regulatory and law enforcement authorities: Where pk40 is required by applicable law, court order, or regulatory direction to disclose your data.
• Professional advisers: Legal, compliance, and financial advisers engaged by pk40 who are bound by confidentiality obligations.

All third parties with whom pk40 shares personal data are contractually required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was disclosed.

7. Data Retention

pk40 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

• Account data and transaction records are retained for a minimum of 5 years following account closure to comply with anti-money laundering regulations.
• Identity verification documents (CNIC copies, etc.) are retained for the duration of your account and for 5 years thereafter.
• Customer support communications are retained for up to 3 years.
• Technical and usage data may be retained in anonymised form for up to 2 years for analytics purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with pk40's data disposal procedures.

8. Data Security

pk40 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL encryption for all data in transit between your device and the pk40 Platform.
• Encryption of stored passwords and sensitive financial data.
• OTP-based two-factor authentication for pk40 account access.
• Automated intrusion detection and suspicious activity monitoring systems.
• Restricted access controls ensuring only authorised personnel can access personal data on a need-to-know basis.
• Regular security audits and penetration testing of Platform infrastructure.

While pk40 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You should also take steps to protect your own account by using a strong, unique password and not sharing your pk40 login credentials with anyone.

9. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by pk40:

• Right of access: You may request a copy of the personal data pk40 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pk40's legal retention obligations.
• Right to restriction: You may request that pk40 restrict the processing of your data in certain circumstances.
• Right to data portability: You may request a copy of data you have provided to pk40 in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, please contact pk40 support via live chat or at [email protected]. We will respond to verified requests within 30 days.

10. Children and Minors

The pk40 Platform is strictly intended for adults aged 18 years and over. pk40 does not knowingly collect personal data from individuals under the age of 18. If pk40 discovers or has reason to believe that a minor has registered an account or provided personal data, the account will be immediately closed and all associated data will be deleted. If you believe a minor has accessed the pk40 Platform using your details or otherwise, please contact pk40 support immediately.

11. Third-Party Links

The pk40 Platform may contain links to third-party websites or services for informational or functional purposes. pk40 is not responsible for the privacy practices or content of any third-party website. We recommend that you review the privacy policy of any third-party site you visit. This Privacy Policy applies solely to data collected through the pk40 Platform at https://pk40.vip.

12. Changes to This Privacy Policy

pk40 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Where changes are material, we will notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the pk40 Platform following notification of changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way pk40 handles your personal data, please contact our Data Privacy team:

• Live chat: Available 24/7 on the pk40 Platform.
• Email: [email protected] (plain text — not a clickable link).

We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them within 30 calendar days. For complex requests, we will keep you informed of progress.