Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how pk809 (the "Operator", "we", "us" or "our"), operating the online gaming and sports betting platform at pk809.cam (the "Platform"), collects, uses, stores, shares and protects personal data relating to individuals who access or use the Platform ("Players", "you" or "your").

We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection legislation. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

2. Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, the Operator.
• "Data Processor" means any third party that Processes Personal Data on behalf of the Operator under a written data processing agreement.
• "KYC" means Know Your Customer — the identity and age verification process required before withdrawals are processed.
• "Cookies" means small text files placed on your device by the Platform to enable functionality, analytics and session management.
• "Account" means your registered player profile on the Platform.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an Account, use our Services or contact our support team, you provide us with data including:

• Full legal name, date of birth and gender;
• Contact details: email address and mobile phone number;
• Residential address (city, province, country — e.g., Karachi, Lahore, Islamabad, Rawalpindi);
• Government-issued identity documentation submitted for KYC verification (e.g., NADRA CNIC, Pakistani passport, driving licence);
• Payment method details submitted for deposits or withdrawals (e.g., account references associated with Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) — payment provider names are used for reference only and do not imply those providers endorse gambling;
• Communications you send to our support team via live chat or email.

3.2 Data We Collect Automatically

When you access the Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Device type, operating system, browser type and version;
• Session data: pages visited, time spent, clicks, game sessions and betting history;
• Cookie identifiers and similar tracking data (see Section 9);
• Log files recording errors, login events and security incidents.

3.3 Data From Third Parties

We may receive Personal Data about you from third-party sources in limited circumstances, including:

• Identity verification and fraud-prevention service providers used during KYC;
• Payment processors confirming transaction status;
• Responsible gambling databases (where applicable under operator obligations) to identify self-excluded individuals.

4. Legal Basis for Processing

We process your Personal Data only where we have a valid legal basis to do so. The primary legal bases we rely on are set out in the table below:

5. How We Use Your Data

We use the Personal Data we collect for the following specific purposes:

5.1 Account Management

To create, maintain and administer your Account on the pk809 Platform, including verifying your identity, processing login events and managing your Account settings and preferences.

5.2 Service Delivery

To provide you with the full range of gaming and sports betting Services — including cricket betting, PSL and ICC tournament odds, live casino, slot games and in-play betting — and to process all associated financial transactions.

5.3 Compliance & Legal Obligations

To fulfil KYC and anti-money laundering (AML) obligations, including verifying your identity before processing withdrawals, monitoring transactions for suspicious activity, and retaining records as required by applicable law.

5.4 Responsible Gambling

To monitor player behaviour patterns for indicators of problem gambling, enforce self-exclusion requests, apply deposit and loss limits set by you, and ensure that any player who has self-excluded is not permitted to open a new Account on the Platform.

5.5 Security & Fraud Prevention

To detect, prevent and investigate fraud, cheating, multi-accounting, money laundering, match-fixing and other prohibited activities. This may involve automated profiling of betting patterns and account behaviour.

5.6 Customer Support

To respond to your queries, complaints and support requests, and to maintain records of those interactions for quality assurance purposes.

5.7 Marketing Communications

To send you promotional offers, bonus alerts, sports betting tips and platform updates — but only where you have given your explicit consent. You may withdraw consent and unsubscribe from marketing communications at any time via your Account settings or by contacting support.

5.8 Platform Improvement

To analyse how Players use the Platform, identify technical issues, test new features and improve the overall user experience through aggregated and anonymised analytics data.

6. Data Sharing & Third Parties

pk809 does not sell, rent or trade your Personal Data. We may share your data with carefully selected third parties only in the following circumstances:

• KYC & Identity Verification Providers: Third-party providers contracted to perform identity and age verification checks on our behalf under data processing agreements.
• Payment Processors: Financial intermediaries required to process your deposit and withdrawal transactions. Only the minimum data necessary for the transaction is shared.
• Fraud & Security Providers: Specialist third parties contracted to assist with fraud detection, IP risk scoring and account security monitoring.
• Responsible Gambling Databases: Where required under the Operator's licensing obligations, we may check and update self-exclusion databases to protect vulnerable players.
• IT Infrastructure Providers: Cloud hosting, content delivery and database service providers who process data solely on our instructions under contractual data protection obligations.
• Legal & Regulatory Authorities: Where required by law, court order or regulatory direction, we may disclose Personal Data to competent authorities. We will notify you of such disclosures where legally permitted to do so.

All third-party Data Processors are bound by written agreements that restrict their use of your Personal Data to the specific purposes for which it was shared and require them to maintain appropriate security standards.

7. International Data Transfers

The Operator may store and process Personal Data on servers located outside Pakistan. Where Personal Data is transferred to countries that may not offer the same level of data protection as your home jurisdiction, we take steps to ensure adequate safeguards are in place, including:

• Contractual clauses with data processors that meet recognised international data transfer standards;
• Selecting processors that operate in jurisdictions with adequacy decisions or equivalent data protection frameworks;
• Applying encryption and access controls to data in transit and at rest.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Pakistan as described above.

8. Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are:

Following the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9. Cookies & Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit the Platform. They allow the Platform to recognise your device, remember your preferences, maintain your login session and collect usage analytics.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, security features and basic navigation. They cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: Collect anonymised data about how Players use the Platform — pages visited, time on site, error reports — to help us improve the experience.
• Functional Cookies: Remember your preferences such as language settings, display options and previously visited game categories.
• Marketing Cookies: Used only with your consent to track engagement with promotional campaigns and to avoid showing you the same offer repeatedly.

9.3 Managing Cookies

You can manage or withdraw consent for non-essential cookies at any time through your browser settings or the cookie preference centre available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

10. Data Security

We implement appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data in transit between your device and our servers;
• Encryption of sensitive data fields at rest, including KYC documents and payment references;
• Role-based access controls ensuring that only authorised staff can access Personal Data, and only to the extent required for their specific role;
• Regular security testing and vulnerability assessments of Platform infrastructure;
• Incident response procedures for detecting, reporting and managing personal data breaches.

In the event of a personal data breach that poses a risk to your rights and interests, we will notify affected Players as soon as reasonably practicable and take all necessary steps to contain and remediate the breach.

11. Your Rights

Subject to applicable data protection law and certain limitations, you have the following rights in relation to your Personal Data held by pk809:

11.1 Right of Access

You have the right to request a copy of the Personal Data we hold about you and information about how it is being processed. We will respond to verified access requests within 30 days.

11.2 Right to Rectification

If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update basic Account information directly through your Account settings, or contact support for assistance.

11.3 Right to Erasure

You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the data has been unlawfully processed. Please note that we may be required to retain certain data to fulfil legal obligations (such as AML record-keeping requirements) even following an erasure request.

11.4 Right to Restriction of Processing

You have the right to request that we restrict Processing of your Personal Data in certain circumstances — for example, while the accuracy of data you have contested is verified, or where you have objected to processing based on legitimate interests pending verification of whether our legitimate grounds override yours.

11.5 Right to Data Portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

11.6 Right to Object

You have the right to object at any time to the processing of your Personal Data for direct marketing purposes. You also have the right to object to processing based on our legitimate interests, on grounds relating to your particular situation, unless we can demonstrate compelling legitimate grounds that override your interests.

11.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact our support team via live chat on the Platform or by writing to [email protected] (plain text only — not a clickable link). We may ask you to verify your identity before processing your request. We will not charge a fee for reasonable requests but reserve the right to charge a reasonable fee or decline manifestly unfounded or excessive requests.

12. Children & Minors

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the Operator's licensing jurisdiction. We do not knowingly collect Personal Data from individuals below the minimum eligible age. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that a minor in your care has registered an Account on the Platform, please contact us immediately at [email protected] (plain text only — not a clickable link) so that we can investigate and take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or Platform functionality. Where changes are material, we will notify you by posting a prominent notice on the Platform or by sending a notification to your registered email address prior to the changes taking effect.

The effective date of the current version of this Policy is stated in the Document Information panel. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should close your Account before the revised Policy takes effect.

14. Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which pk809 handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform. This is the fastest way to reach our team for any privacy-related queries.
• Email: [email protected] (plain text only — not a clickable link)

We aim to acknowledge all written privacy requests within 48 hours and to provide a substantive response within 30 calendar days. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

For more information about your data rights or responsible gambling tools available on pk809, please also visit our Responsible Gambling page.