pk17 Privacy Policy

1. Who We Are

pk17 is an online gaming platform operating at https://pk17.app, providing cricket betting, live casino games, slots, Andar Bahar, Jacks or Better, and related gaming services to registered players. For the purposes of this Privacy Policy, pk17 acts as the data controller in respect of the personal data you provide when using our platform.

pk17 is operated under an international gaming licence. Our platform is designed to serve English-speaking players across Pakistan, including those based in Karachi, Lahore, Islamabad, Faisalabad, and other cities and towns throughout the country. All data processing activities described in this policy are conducted in accordance with the standards required by our licensing authority.

If you have any questions about how pk17 handles your personal data, you can reach our data support team at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

pk17 collects personal data in several categories depending on your level of interaction with the platform. The following table summarises the main categories of data we collect and why:

Data Category	Examples	Why We Collect It
Identity Data	Full name, date of birth, CNIC / passport number	Account registration and KYC age/identity verification
Contact Data	Email address, mobile number, residential address	Account communications, security alerts, support
Financial Data	JazzCash / EasyPaisa mobile number, HBL/UBL/Meezan account reference, USDT wallet address	Deposit processing, withdrawal verification, AML compliance
Transaction Data	Deposit amounts (PKR), withdrawal amounts, bet history, game session records	Account management, dispute resolution, responsible gaming monitoring
Technical Data	IP address, browser type, device model, operating system, session timestamps	Platform security, fraud detection, technical support
Usage Data	Pages visited, games played, features used, click patterns	Platform improvement, personalised experience, analytics
Communications Data	Support chat transcripts, email correspondence	Quality assurance, dispute records, training

pk17 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity document photographs are submitted as part of KYC verification, in which case such data is used solely for identity confirmation purposes and stored securely.

3. How We Collect Your Data

pk17 collects your personal data through the following channels:

• Direct Registration: When you create a pk17 account, you provide your name, date of birth, email address, mobile number, and residential address directly through our registration interface.
• KYC Verification: When you submit identity documents (e.g., CNIC, passport, utility bill) as part of the account verification process, we collect the personal data contained in those documents.
• Deposits and Withdrawals: When you make a PKR deposit via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or USDT, our payment processing systems capture transaction reference data and payment method identifiers.
• Platform Usage: As you browse and use the pk17 platform, our systems automatically collect technical and usage data such as your IP address, device information, session duration, and game activity logs.
• Cookies and Tracking Technologies: pk17 uses cookies and similar tracking technologies on its website. Please see Section 7 for a full explanation of our cookie practices.
• Customer Support Interactions: When you contact pk17 via live chat or email, we retain records of those communications as part of your account history.
• Third-Party Verification Services: In some cases, pk17 may receive identity or fraud-screening data from third-party KYC service providers as part of the verification process.

4. How We Use Your Personal Data

pk17 uses the personal data it collects for the following specific purposes:

• Account Creation and Management: To register your account, maintain your player profile, and provide you with access to pk17's full range of gaming services.
• Identity Verification (KYC): To verify your age (minimum 21 years) and identity as required by our licensing obligations, and to prevent underage gambling.
• Payment Processing: To process your PKR deposits and withdrawals through JazzCash, EasyPaisa, and Pakistani banking partners, and to maintain accurate transaction records.
• Anti-Money Laundering (AML) and Fraud Prevention: To monitor transactions and account activity for indicators of money laundering, fraud, or other prohibited conduct, as required by our international gaming licence.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to apply deposit limits, session limits, or self-exclusion measures requested by players or required by our responsible gaming policy.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance in relation to your pk17 account.
• Platform Security: To detect and prevent unauthorised account access, bot activity, and other security threats to the pk17 platform.
• Service Improvement: To analyse aggregated usage data and improve the performance, design, and game offering of the pk17 platform.
• Marketing Communications: To send you information about pk17 promotions, bonuses, and seasonal offers (including Eid and Ramadan campaigns) — but only where you have opted in to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To fulfil pk17's legal obligations under applicable laws and the requirements of our gaming licence, including responding to lawful requests from regulatory or law enforcement authorities.

5. Legal Basis for Processing

pk17 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered pk17 player — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC identity verification, AML transaction monitoring, and age verification.
• Legitimate Interests: Processing carried out for pk17's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your explicit consent — specifically in relation to marketing communications. You may withdraw your consent at any time by contacting support or adjusting your account notification preferences.

6. Data Sharing and Disclosure

pk17 does not sell your personal data to third parties. We may share your data with the following categories of third parties, strictly for the purposes described in this policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT processing partners receive only the data necessary to process your specific deposit or withdrawal transaction.
• Identity Verification (KYC) Providers: Third-party KYC and AML screening services that assist pk17 in verifying player identity and screening for financial crime risk, as required by our licensing obligations.
• Game Software Providers: Third-party game studios and live casino providers who power specific games on the pk17 platform may receive session data associated with gameplay — but not your full identity or financial data.
• IT and Cloud Service Providers: Data hosting, security monitoring, and technical infrastructure partners who process data on our behalf under strict contractual data protection obligations.
• Regulatory and Law Enforcement Authorities: pk17 may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by applicable law or our licensing authority's instructions.
• Professional Advisers: Legal, accounting, or auditing firms engaged by pk17 may access relevant account data where necessary in connection with their professional services, under confidentiality obligations.

7. Cookies & Tracking Technologies

pk17 uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use our platform.

The following categories of cookies are used on pk17:

• Strictly Necessary Cookies: Required for the pk17 platform to function. These include session cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language and currency preferences. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences and settings (such as your preferred game lobby view or notification settings) to provide a more personalised experience on pk17.
• Analytics Cookies: Help pk17 understand aggregate usage patterns — which pages are most visited, how long sessions last, and which game categories are most popular — so we can improve the platform. This data is processed in aggregated, anonymised form.
• Security and Fraud Detection Cookies: Used to detect suspicious login behaviour, bot activity, and other security threats to your pk17 account and the platform as a whole.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the pk17 platform, and you may not be able to log in or use certain features. pk17 does not use third-party advertising cookies or cross-site tracking cookies.

8. Data Retention

pk17 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing authority. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active pk17 account plus a minimum of 5 years following account closure, as required by standard AML and gaming regulatory record-keeping obligations.
• Transaction Records: PKR deposit and withdrawal records are retained for a minimum of 5 years following the date of the transaction.
• KYC Documentation: Identity verification documents are retained for the period required by our licensing authority, typically 5 years from the date of verification or account closure, whichever is later.
• Technical and Usage Logs: System access logs and usage analytics data are typically retained for up to 12 months, after which they are aggregated or deleted.
• Customer Support Records: Support chat and email records are retained for up to 3 years following the resolution of the relevant enquiry or dispute.
• Marketing Preferences: Records of your marketing consent and opt-out preferences are retained indefinitely to ensure we honour your communication choices.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Data Security

pk17 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the pk17 platform
• Encryption of sensitive stored data, including financial information and identity document references
• Strict access controls, ensuring that only authorised pk17 personnel with a specific business need can access player account data
• Regular independent security audits and penetration testing of the pk17 platform infrastructure
• Two-factor authentication (2FA) options for player account login, strongly recommended for all registered players
• Real-time fraud detection and anomaly monitoring systems that flag unusual account activity
• Secure data centres with physical access controls, redundancy, and disaster recovery capabilities

While pk17 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your pk17 account login credentials confidential and for notifying pk17 immediately at [email protected] if you suspect any unauthorised access to your account.

10. Your Data Rights

As a pk17 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account email address and a description of your request:

• Right of Access: You have the right to request a copy of the personal data that pk17 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you on the pk17 platform.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. Note that this right may be limited where pk17 is required to retain data for legal, regulatory, or contractual reasons.
• Right to Restriction: You have the right to request that pk17 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another data controller where technically feasible.
• Right to Object: You have the right to object to pk17's processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where pk17 processes your data on the basis of your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

pk17 will respond to all valid data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

11. Children's Privacy and Under-21 Protection

pk17 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration and KYC processes are specifically designed to detect and prevent underage account creation.

If pk17 discovers that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, delete or securely destroy all associated personal data, and — where required by our licensing obligations — report the incident to the relevant regulatory authority.

12. Updates to This Privacy Policy

pk17 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or the services we offer. The date of the most recent update is shown at the top of this document.

Where we make material changes to this Privacy Policy — particularly changes that affect how we use your personal data or your data rights — we will notify registered players by email to their registered pk17 address and/or by displaying a prominent notice on the platform. We encourage you to review this Privacy Policy periodically to stay informed about how pk17 protects your data.

Your continued use of the pk17 platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

13. Contact & Data Enquiries

If you have any questions, concerns, or complaints about how pk17 handles your personal data — or if you wish to exercise any of the data rights described in Section 10 — please contact our support and data team through the following channels:

• Email: [email protected] — please include "Privacy Enquiry" in your subject line for faster routing
• Live Chat: Available 24/7 directly on the pk17 platform, including Eid and Pakistani public holidays

pk17 aims to resolve all privacy-related enquiries and data rights requests within 30 days. Our support team is based in a Pakistan-familiar operational context and can assist with queries related to JazzCash and EasyPaisa data handling, CNIC verification records, and all other platform-specific data matters.

If you are not satisfied with our response to your privacy complaint, you may have the right to escalate your concern to the relevant data protection or gaming regulatory authority in accordance with the procedures of pk17's licensing body.