Privacy Policy for pk17

This Privacy Policy ("Policy") is issued by the pk17 brand ("pk17", "we", "us", "our"), the operator of the online gaming platform accessible at https://pk17.cam (the "Platform"). It describes how pk17 collects, processes, stores, shares and protects personal data relating to users ("you", "your") who access or register on the Platform.

pk17 serves English-language users across Pakistan — including players in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — as well as internationally accessible markets. This Policy applies to all personal data collected through the Platform, our customer support channels and any associated communications.

pk17 is committed to handling your data with care, transparency and in accordance with applicable data protection frameworks. This Policy is reviewed periodically and updated to reflect changes in our practices or applicable legal requirements.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

pk17 collects the following categories of Personal Data:

pk17 collects Personal Data through the following channels:

• Direct Submission: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey, you directly provide us with Personal Data.
• Automated Technologies: When you browse or interact with the Platform, we automatically collect Technical Data through cookies, server logs, pixel tags and similar tracking technologies (see Section 9 for details).
• Third-Party Verification Services: During KYC and Anti-Money Laundering (AML) checks, we may receive additional verification data from identity verification service providers or publicly available databases.
• Payment Processors: When you make a deposit or withdrawal, our payment processing partners may share transaction confirmation data and basic payment method identifiers with us for record-keeping and reconciliation purposes.
• Fraud Prevention Services: We may receive risk signals from specialist fraud detection service providers that help us identify suspicious account activity or potential security threats.

pk17 processes your Personal Data on one or more of the following legal grounds, depending on the purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform our obligations under the Account agreement with you — including account creation, game access, payment processing and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML regulations, KYC obligations, responsible gambling duties and financial record-keeping laws.
• Legitimate Interests: Processing is carried out based on our legitimate interests in fraud prevention, platform security, business analytics and improving the quality of our services — where those interests are not overridden by your rights.
• Consent: Where we rely on your consent — for example, for marketing communications — we will ask for it explicitly and separately. You may withdraw your consent at any time without affecting processing carried out before withdrawal.

pk17 uses the Personal Data we collect for the following specific purposes:

1. Account Management: Creating and maintaining your registered Account, verifying your identity, authenticating login attempts and managing account settings.
2. Transaction Processing: Processing deposits, withdrawals and bonus credits, including interaction with payment processing partners.
3. Regulatory Compliance: Fulfilling KYC, AML and responsible gambling obligations imposed by the Operator's license jurisdiction, including verifying age and identity, monitoring for problem gambling indicators and reporting to regulators where required.
4. Customer Support: Responding to your enquiries, processing complaints, resolving disputes and providing technical assistance.
5. Platform Improvement: Analysing aggregate usage data to identify technical issues, improve Platform performance, test new features and optimise the user experience.
6. Fraud Prevention & Security: Detecting, investigating and preventing fraudulent transactions, multiple-account abuse, money laundering and other prohibited activities.
7. Marketing Communications: Sending you promotional offers, platform updates and relevant content — only where you have opted in to receive such communications. You can unsubscribe at any time via the link in any marketing email or by contacting support.
8. Responsible Gambling Monitoring: Using activity data to identify potential problem gambling behaviour and, where appropriate, reaching out to offer responsible gambling support tools or information.

pk17 does not sell your Personal Data. We may share it with the following categories of recipients only to the extent necessary and for the stated purposes:

• Service Providers (Data Processors): Third-party companies that provide services on our behalf — including payment processors, identity verification providers, fraud detection firms, cloud hosting providers, analytics platforms and customer support software vendors. All such processors are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared.
• Regulatory Authorities: Government bodies, financial intelligence units or gaming regulators who have a legal right to request or receive data in the context of investigations, audits or compliance verification. pk17 will comply with such requests to the extent required by law.
• Legal & Law Enforcement: Where we are legally compelled to disclose data by court order, law enforcement request or other binding legal process, we will comply with our obligations while, where permissible, notifying you of such requests.
• Business Successors: In the event of a merger, acquisition, asset sale or corporate restructuring, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections.

pk17 is an internationally operated Platform. Your Personal Data may be transferred to and processed in countries outside of Pakistan, including the jurisdiction in which the Operator holds its gaming licence and countries where our Data Processor partners are based.

Where such international transfers occur, pk17 applies appropriate safeguards to ensure that your data receives a level of protection consistent with applicable data protection standards. These safeguards may include:

• Standard contractual clauses approved under applicable data protection frameworks;
• Adequacy decisions recognising the destination country as providing sufficient data protection;
• Binding corporate rules or equivalent approved mechanisms where applicable.

Please note that Pakistan does not have a comprehensive modern data protection law equivalent to the EU's General Data Protection Regulation (GDPR). To the extent that your data is processed in a jurisdiction with a recognised data protection framework, we apply that framework's standards. You may request information about the specific safeguards applied to your data transfer by contacting [email protected].

pk17 uses cookies and similar tracking technologies (including pixel tags, local storage objects and session identifiers) to operate the Platform effectively. Cookies are small text files placed on your device by your browser when you visit the Platform.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session management, login authentication and security features. They cannot be disabled without significantly impairing your use of the Platform.
• Functional Cookies: Remember your preferences — such as language settings, display options and responsible gambling tool configurations — so you do not have to reset them each visit.
• Analytical / Performance Cookies: Collect anonymised data about how users interact with the Platform (page views, click paths, error rates) to help us improve performance and identify usability issues.
• Marketing / Targeting Cookies: Used, where you have consented, to track your visits across sessions and enable delivery of relevant promotional content. These cookies may involve interaction with third-party advertising partners.

pk17 retains your Personal Data for as long as your Account is active and for the period necessary to fulfil the purposes set out in this Policy, including any applicable legal, regulatory or accounting obligations.

Specific retention guidelines include:

• Account and Identity Data: Retained for the lifetime of your Account, plus a minimum of five (5) years following Account closure — or longer if required by applicable AML, KYC or gaming regulations.
• Transaction Records: Financial transaction logs are retained for a minimum of seven (7) years in accordance with standard financial record-keeping requirements.
• Communications Data: Support interactions and correspondence are typically retained for three (3) years after your last interaction, or longer if a formal dispute remains open.
• Marketing Preferences: Opt-in and opt-out records are retained for the duration of your Account, plus sufficient time to demonstrate compliance with applicable marketing regulations.
• Anonymised Analytics Data: Aggregated, anonymised usage data with no identifying information may be retained indefinitely for Platform improvement and statistical purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted, destroyed or irreversibly anonymised.

Subject to the applicable data protection laws in the jurisdiction governing pk17's data processing operations, you may hold the following rights in respect of your Personal Data:

To exercise any of the rights listed above, submit a written request to [email protected] (email address — plain text only, not a clickable link). We will respond within 30 days of receipt of a verifiable request. We may require you to verify your identity before processing certain data rights requests to prevent unauthorised access to another person's data.

The pk17 Platform is intended exclusively for adults. We do not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the Operator's license jurisdiction. If we discover that we have inadvertently collected data from a minor, we will delete it promptly and close the associated Account without delay.

pk17 implements technical and organisational measures designed to protect your Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using SSL/TLS protocols.
• Access Controls: Internal access to Personal Data is restricted to authorised personnel with a legitimate operational need. Access logs are maintained.
• Security Monitoring: Systems are monitored for unusual access patterns, potential intrusion attempts and vulnerability indicators.
• Vendor Vetting: All third-party Data Processors are assessed for their own security standards before being engaged, and are contractually bound to maintain appropriate security measures.

While we take these precautions seriously, no internet-based system can be guaranteed to be entirely secure. If you believe your Account has been compromised, contact [email protected] immediately.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, pk17 will notify affected users without undue delay and in accordance with applicable breach notification requirements.

The Platform may reference or display content from third-party service providers — such as live game feeds from studio partners or payment processing interfaces. These third parties operate under their own privacy policies, over which pk17 has no control.

pk17 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service provider whose services you use in connection with your pk17 Account, particularly payment processors.

pk17 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Account holders via the email address on file and/or by posting a prominent notice on the Platform before the updated Policy takes effect.

The "Last Reviewed" date displayed at the top of this page will be updated each time the Policy is revised. We encourage you to review this Policy periodically to stay informed about how we protect your data.

Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms, provided that material changes to processing for which you previously gave consent will be communicated separately and will require fresh consent where required by applicable law.

For any questions, concerns or formal data rights requests relating to this Privacy Policy, please contact the pk17 Data Protection team using the details below. All privacy-related communications should be addressed in English. Urdu-speaking support is available on live chat on request.