Privacy Policy — pk555 Online Gaming Platform

Section 01

1. Introduction

pk555 ("we", "us", "our") operates the online gaming platform accessible at pk555.ws, providing cricket betting, live casino, slots, virtual sports, and related services to Pakistani users. As the data controller responsible for your personal information, we take our obligations under applicable data protection laws seriously.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this policy carefully to understand our practices regarding your personal data. By accessing or using the pk555 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are available on the pk555 platform. Where there is any conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail in matters relating to personal data processing.

If you are under 21 years of age, you are not permitted to use the pk555 platform, and you must not submit any personal data to us. We take the protection of minors' data with the utmost seriousness.

Section 02

2. Data We Collect

pk555 collects personal data through several means, including information you provide directly, data generated automatically through your use of the platform, and data received from third-party service providers. The categories of personal data we collect include:

Data Category	Examples	Source
Identity Data	Full name, CNIC number, date of birth, nationality, photograph (for KYC)	Provided by you
Contact Data	Email address, mobile number, city of residence (e.g. Karachi, Lahore, Islamabad)	Provided by you
Account Data	Username, password (hashed), account preferences, language settings	Provided by you
Financial Data	JazzCash/EasyPaisa wallet references, HBL/UBL/Meezan Bank account references, USDT wallet IDs, transaction history	Provided by you / Payment processors
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Collected automatically
Usage Data	Games played, bets placed, wagering amounts, login timestamps, page views, session duration	Collected automatically
Communications Data	Live chat transcripts, support emails, feedback submissions	Provided by you

We do not intentionally collect any special categories of sensitive personal data (such as health data, religious beliefs, or political opinions). If you choose to disclose such information voluntarily through support communications, we will treat it with the highest level of confidentiality.

Minimal Data Principle: pk555 operates on the principle of data minimisation. We collect only the personal data that is strictly necessary for each identified purpose. Where data can be anonymised or aggregated without loss of utility, we prefer those approaches.

Section 03

3. How We Use Your Data

pk555 uses your personal data exclusively for the following legitimate purposes:

Account Management: To register and maintain your pk555 account, verify your identity, and authenticate your login sessions securely.
Service Delivery: To process your deposits and withdrawals via JazzCash, EasyPaisa, Raast, and other supported Pakistani payment methods; to settle bets, credit winnings, and manage bonuses.
KYC & Compliance: To fulfil our obligations under anti-money laundering (AML) regulations, prevent fraud, verify eligibility (including age verification for the 21+ requirement), and respond to requests from regulatory authorities.
Customer Support: To respond to your queries, resolve disputes, process complaints, and provide 24/7 live chat assistance.
Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and send responsible gaming reminders as required.
Platform Improvement: To analyse usage patterns, conduct internal research, and improve the performance, security, and user experience of the pk555 platform.
Marketing Communications: To send you relevant promotions, bonus offers, and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw consent at any time.
Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, and other illegal activities.

pk555 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated tools assist in fraud detection, a human compliance officer will review any consequential decisions before action is taken.

Section 04

4. Legal Basis for Processing

For each purpose for which we process your personal data, pk555 relies on one or more of the following legal bases:

Contractual Necessity: Processing required to enter into or perform our contract with you — including account registration, transaction processing, and service delivery.
Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and licensing conditions imposed by our international gaming licence.
Legitimate Interests: Processing in pursuit of pk555's legitimate business interests, where those interests are not overridden by your data protection rights — including fraud prevention, platform security, internal analytics, and responsible gaming monitoring.
Consent: Processing for marketing and optional communications, where you have provided freely given, specific, and informed consent. You retain the right to withdraw this consent at any time by contacting [email protected] or updating your account notification preferences.

Right to Object: Where we process your data on the basis of legitimate interests, you have the right to object to such processing. Upon receipt of a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Section 05

5. Cookies & Tracking Technologies

pk555 uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session integrity, and gather analytical insights. The categories of cookies we deploy are as follows:

Strictly Necessary Cookies: Essential for the operation of the platform, including session authentication, security tokens, and load balancing. These cannot be disabled without significantly impairing platform functionality.
Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
Analytical Cookies: Used to collect anonymised data about how users interact with the pk555 platform, including pages visited, time on site, and navigation paths, to help us improve the user experience.
Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking, cross-site request forgery (CSRF), and credential stuffing attacks.

pk555 does not use third-party advertising or tracking cookies that share your behavioural data with external advertising networks. Our cookie usage is limited to the purposes described above.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. A full cookie notice is displayed on your first visit to pk555.ws.

Section 06

6. Data Sharing & Third Parties

pk555 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT processing providers receive the financial data necessary to process your transactions. Each provider is bound by their own data protection obligations.
KYC & Identity Verification Providers: Specialist identity verification partners who assist with CNIC validation, document authentication, and age verification for compliance purposes.
Game Content Providers: Third-party game studios whose titles are hosted on the pk555 platform may receive anonymised gameplay data to facilitate fair game operation and RTP auditing.
Regulatory & Law Enforcement Authorities: Where required by law, court order, or our licensing authority, pk555 may disclose personal data to competent regulatory bodies or law enforcement agencies.
Group Entities: Personal data may be shared within the pk555 corporate group for internal administrative purposes, subject to the same data protection standards as set out in this policy.
Professional Advisors: Legal, financial, and compliance advisors engaged by pk555 may access personal data on a need-to-know basis and under strict confidentiality obligations.

All third parties with whom pk555 shares personal data are required to implement appropriate technical and organisational security measures, and to process personal data only as instructed by pk555 and in accordance with applicable data protection law.

Section 07

7. Data Retention

pk555 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The general retention periods we apply are as follows:

Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, as required by AML and gaming licence compliance obligations.
Financial Transaction Data: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
KYC Documentation: Retained for a minimum of 5 years from the date of verification, and for up to 7 years where a suspicious activity report has been filed in connection with the account.
Customer Support Communications: Retained for 2 years from the date of the last communication, to assist with ongoing queries and dispute resolution.
Marketing Preferences & Consent Records: Retained for the duration of your account, and for 2 years following account closure as evidence of consent management.
Technical & Usage Logs: Retained for 12 months on a rolling basis for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing systems until deletion is completed.

Section 08

8. Your Data Protection Rights

As a user of the pk555 platform, you hold a range of rights in relation to your personal data. We are committed to facilitating the exercise of these rights promptly and without undue obstruction:

Right of Access: You have the right to request a copy of all personal data we hold about you. We will respond to verified access requests within 30 days.
Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. Minor corrections (such as contact details) can be made directly through your Account settings.
Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Please note that erasure may not be possible where retention is required by law or licensing obligations.
Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Marketing-related objections will be actioned immediately.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by contacting our support team or updating your notification preferences.

To exercise any of the above rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request and will respond within 30 calendar days.

Section 09

9. Data Security

pk555 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes:

Encryption: All data transmitted between your device and the pk555 platform is encrypted using TLS 1.2 or higher. Sensitive data at rest, including financial records and identity documents, is stored using AES-256 encryption.
Access Controls: Access to personal data systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo regular data protection training and are bound by confidentiality agreements.
Password Security: User passwords are stored exclusively as salted cryptographic hashes. Plain-text passwords are never stored or transmitted.
Fraud Monitoring: Our automated security systems continuously monitor for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise.
Infrastructure Security: pk555's platform infrastructure is hosted in secure data centres with physical access controls, redundant power systems, and regular penetration testing.
Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, pk555 will notify affected users and relevant regulatory authorities within 72 hours of becoming aware of the breach, where required by applicable law.

While pk555 implements industry-standard security practices, no system is completely impenetrable. You are responsible for maintaining the security of your own account credentials. If you suspect unauthorised access to your account, contact our support team immediately at [email protected].

Section 10

10. Children's Privacy

The pk555 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21 under any circumstances.

During registration, all users are required to confirm that they are at least 21 years old. We conduct age verification checks on all accounts as part of our KYC process, using CNIC documentation and other identity verification methods. Any account found to belong to a person under the age of 21 will be immediately suspended, all associated funds will be frozen, and the matter may be escalated to appropriate authorities.

Parental Notice: If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered on the pk555 platform or submitted personal data to us, please contact us immediately at [email protected]. We will take immediate action to close the account and delete all associated data.

pk555 strongly recommends the use of parental control software to prevent minors from accessing online gambling platforms. Resources on responsible online safety for families are widely available through Pakistani telecommunications providers and internet service providers.

Section 11

11. International Data Transfers

pk555 operates as an internationally licensed gaming operator. As a result, your personal data may be processed in countries outside of Pakistan, including within the jurisdiction where our gaming licence is held and where our infrastructure providers are located.

Wherever your personal data is transferred internationally, pk555 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under the data protection laws applicable to Pakistani users. These safeguards include:

Contractual data protection clauses binding recipient entities to standards equivalent to applicable data protection requirements.
Transfer to jurisdictions that provide adequate levels of data protection as recognised by relevant international frameworks.
Internal data transfer agreements within the pk555 corporate group that ensure consistent data protection standards across all processing locations.

For further information about the specific safeguards applicable to any international transfer of your personal data, you may contact our Data Protection team at [email protected].

Section 12

12. Updates to This Privacy Policy

pk555 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes will be effective upon publication on the pk555 platform. Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will provide notice to registered users via email or an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date displayed at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this policy periodically to stay informed about how pk555 protects your personal data.

Your continued use of the pk555 platform following any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised terms, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

Section 13

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pk555, please contact our Data Protection team through any of the following channels:

Email: [email protected] — please use the subject line "Privacy Enquiry" for faster routing
Live Chat: Available 24/7 directly on the pk555 platform with average response times under 3 minutes

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Where a request is particularly complex, we will notify you if a longer response period is required and will keep you informed of progress.

If you are unsatisfied with our response to any privacy-related complaint, you retain the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction, or with the regulatory body overseeing our international gaming licence.

pk555 Privacy Policy