pk99 Privacy Policy

1. Who We Are

This Privacy Policy is issued by pk99, the operator of the online betting and casino platform accessible at pk99.im (the "Platform"). References to "pk99", "we", "us", or "our" throughout this document refer to the pk99 platform operator.

pk99 operates an online cricket betting, sports betting, and casino gaming platform specifically designed for Pakistani players. Our platform supports Pakistani Rupee (PKR) transactions and integrates with Pakistani payment methods including JazzCash, Easypaisa, HBL, UBL, Meezan Bank, and Bank Alfalah. This Privacy Policy applies to all users who register an account on pk99, visit pk99.im, or interact with our customer support team.

For any privacy-related queries, you may contact our data team at: [email protected] (plain text — not a clickable link).

2. Data We Collect

pk99 collects personal data in the following categories, depending on how you interact with the platform:

Registration & Identity Data:

• Full legal name as it appears on your CNIC or passport
• Date of birth (for mandatory age verification — pk99 is strictly 18+)
• Email address
• Pakistani mobile phone number
• Username and hashed password (plain-text passwords are never stored)
• CNIC number or passport number (where submitted for KYC verification)

Financial & Transaction Data:

• JazzCash or Easypaisa account numbers linked to your pk99 wallet
• Bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transfers
• Deposit history, withdrawal history, bonus credits, and bet settlement records (all in PKR)

Usage & Behavioural Data:

• Betting activity including markets selected, odds accepted, stakes, and outcomes
• Casino and slot game session data including game titles played, session duration, and wager amounts
• Login timestamps, device type, operating system, and browser information
• IP address and approximate geolocation (city level — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad)

Support & Communications Data:

• Content of support interactions submitted via email or live chat
• Complaint records and their resolution status
• Communication preferences (opt-in/opt-out status for marketing)

KYC & Verification Documents:

• Scanned or photographed copies of government-issued identity documents submitted during the verification process
• Proof of address documentation where required
• Proof of payment method ownership where required

3. How We Use Your Data

pk99 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your pk99 account, including password reset and two-factor authentication functionality.
• Service delivery: Processing your bets on cricket, PSL, and other markets; operating casino and slot game sessions; crediting winnings to your PKR balance.
• Payment processing: Facilitating deposits and withdrawals via JazzCash, Easypaisa, and supported bank channels; conducting reconciliation and fraud prevention checks.
• Identity verification (KYC): Verifying your age (18+), identity, and payment method ownership in compliance with our platform's compliance obligations.
• Responsible gaming: Monitoring account activity for signs of problem gambling; applying deposit limits, cooling-off periods, or self-exclusion where requested or required; maintaining self-exclusion records indefinitely.
• Fraud prevention & security: Detecting, investigating, and preventing unauthorised access, duplicate accounts, money laundering, match-fixing-related activity, and other prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: Analysing aggregated usage patterns to improve the pk99 interface, odds presentation, game library selection, and payment experience.
• Marketing communications: Sending promotional offers, bonus notifications, and PSL match-day promotions to users who have opted in. You may withdraw consent at any time.
• Legal & regulatory compliance: Maintaining records required by applicable regulatory authorities and responding to lawful requests from competent authorities.

4. Legal Bases for Processing

pk99 processes personal data on the following legal bases:

• Contractual necessity: Processing your registration data, payment data, and betting activity is necessary to perform the contract between you and pk99 (i.e., to provide the platform as described in our Terms & Conditions).
• Legal obligation: Processing for KYC, age verification, anti-money-laundering checks, and regulatory record-keeping is required by applicable law.
• Legitimate interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics serves the legitimate interests of pk99 and its users in operating a safe and fair platform.
• Consent: Processing for marketing communications and optional analytics cookies is carried out on the basis of your explicit consent, which may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing

pk99 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and any other payment service provider involved in processing your deposits or withdrawals will receive the transaction data necessary to complete the payment.
• Identity verification providers: Third-party KYC and document verification services may process your identity documents on our behalf under strict data processing agreements.
• Technology and hosting providers: Cloud infrastructure, database, and security service providers operating on behalf of pk99 under binding confidentiality and data processing obligations.
• Regulatory and law enforcement authorities: Where legally required, we may disclose data to applicable regulatory bodies, financial intelligence units, or law enforcement agencies operating under lawful authority.
• Fraud prevention networks: Shared fraud databases used to identify and block bad actors across the online gaming industry. Only the minimum necessary data is shared in this context.

All third parties with whom pk99 shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate technical and organisational security measures.

6. Cookies & Tracking Technologies

pk99 uses cookies and similar tracking technologies on the pk99.im platform. These fall into three categories:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and shopping cart-equivalent functionality (your active bet slip). These cannot be disabled without breaking core platform features.
• Analytics cookies: Used to understand how users interact with pk99 — which pages are visited most, where users encounter friction, and how platform performance can be improved. These are activated on an opt-in basis.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of pk99 marketing campaigns. These are activated only with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair platform functionality, including the ability to log in to your pk99 account.

7. Data Retention

pk99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention rules:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, in line with applicable financial record-keeping obligations.
• KYC documents: Retained for five years from the date of submission or from account closure, whichever is later.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded individuals. This is a responsible gaming obligation, not a commercial one.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.
• Support correspondence: Retained for three years from the date of the interaction, or longer if related to an unresolved complaint or legal matter.

8. Data Security

pk99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• TLS/SSL encryption for all data transmitted between your browser and pk99.im
• Encrypted storage for sensitive personal data including identity documents and payment information
• Bcrypt or equivalent hashing for stored passwords — plain-text passwords are never stored
• Role-based access controls limiting internal access to personal data to those with a business need
• Regular security assessments and penetration testing of the platform infrastructure
• Two-factor authentication available to all users and mandatory for high-value account operations

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, pk99 will notify affected users promptly in accordance with applicable notification obligations.

9. Your Rights

As a registered pk99 user, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data pk99 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal obligations to retain certain records (including transaction history and KYC documentation).
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, such as while a correction request is being assessed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of your personal data for transfer to another provider.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications, optional analytics), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will assess and respond to such objections promptly.

To exercise any of these rights, contact our support team at: [email protected]. We will respond within a reasonable timeframe and may require identity verification before processing your request.

10. Children's Privacy

pk99 is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. If we discover that a user is under 18, their account will be closed immediately, all personal data will be deleted (except records required to prevent future re-registration), and any deposits will be returned.

Age verification is mandatory before any real-money activity is permitted. If you have reason to believe that a minor has registered on pk99, please contact us immediately at the support email above.

11. International Data Transfers

pk99 may transfer personal data to servers or service providers located outside Pakistan in connection with hosting, analytics, or payment processing services. Where such transfers occur, pk99 ensures that appropriate contractual protections are in place — including standard contractual clauses or equivalent safeguards — to ensure your data receives a level of protection consistent with this Policy.

Payment data related to JazzCash and Easypaisa transactions is processed and stored in accordance with the relevant payment providers' own security and privacy frameworks.

12. Changes to This Privacy Policy

pk99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will notify registered users by email (to the address held on their pk99 account) and by posting a prominent notice on pk99.im for a reasonable period.

Your continued use of the pk99 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure.

The current version of this Policy is dated June 2026. The version date at the top of this page reflects the most recent revision.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by pk99, please contact our support team. Support is available 24/7 in both English and Urdu.

Data and privacy contact email (plain text — not a clickable link): [email protected]

We will acknowledge all privacy-related requests within a reasonable period and provide a substantive response as quickly as possible.