pk165 Privacy Policy

1. Introduction

Welcome to the Privacy Policy of pk165. pk165 operates an online casino and sports betting platform accessible at https://pk165.net, serving users primarily located in Pakistan. This Privacy Policy describes the types of personal information that pk165 collects from users, the purposes for which that information is used, the conditions under which it may be shared, and the rights available to you as a data subject.

By creating an account on pk165, depositing funds, or using any part of the pk165 platform — including the casino lobby, slot games, live dealer tables, cricket betting markets, and the pk165 Login page — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This policy applies to all registered users of pk165, whether you are based in Karachi, Lahore, Faisalabad, Islamabad, or anywhere else in Pakistan, and regardless of whether you access pk165 through a web browser, mobile browser, or any pk165-branded application.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for the personal information you provide to pk165 is the operating entity behind the pk165 brand, which holds the applicable international gaming licence under which pk165 operates.

The data controller determines the purposes and means by which your personal data is processed. Any queries regarding the exercise of your data rights or the specific legal entity acting as controller may be directed to the pk165 support team at the contact details provided in Section 15 of this policy.

Where pk165 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, and fraud detection services — those providers act as data processors and are contractually bound to process your data only on pk165's instructions and in compliance with applicable data protection obligations.

3. Personal Data We Collect

pk165 collects the following categories of personal data from its users:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (to verify that you are aged 21 or above)
• Gender (where provided)
• Username chosen at registration
• National identity card (CNIC) number or equivalent government-issued identification, where required for account verification or Know Your Customer (KYC) compliance
• Copies of identity documents submitted during KYC verification

3.2 Contact Data

• Email address
• Mobile phone number (including JazzCash or EasyPaisa registered mobile numbers)
• Residential address and city (Karachi, Lahore, Faisalabad, Islamabad, or other)

3.3 Financial and Payment Data

• Payment method type (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, USDT)
• Transaction amounts in PKR or other currencies
• Deposit and withdrawal history
• Tokenised payment identifiers (pk165 does not store full card numbers or complete mobile wallet credentials)

3.4 Gaming and Account Activity Data

• Game history — which games you played, stakes placed, results, and winnings
• Session duration and frequency of play
• Bonus claims, free spin usage, and wagering activity
• Responsible gaming settings you have applied (deposit limits, session limits, self-exclusion status)
• Account balance history

3.5 Technical and Device Data

• IP address at time of login and gameplay
• Device type, operating system, and browser type
• Device identifier where applicable
• Geographic location derived from IP address
• Cookie data and session tokens (see Section 10)

3.6 Communications Data

• Records of live chat conversations with pk165 support agents
• Email correspondence with pk165
• Records of any complaints or disputes lodged against pk165

4. How We Collect Your Data

pk165 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account profile on pk165.
• Automatically during use — technical data such as IP addresses, device identifiers, and session cookies are collected automatically when you visit pk165.net or use the platform.
• From third-party service providers — identity verification providers may return additional data points as part of the KYC process. Payment processors confirm transaction status and provide reference identifiers. Fraud prevention services may flag accounts based on risk scoring.
• From publicly available sources — where required for compliance purposes, pk165 may cross-reference data against publicly available sanction lists, politically exposed persons (PEP) databases, and regulatory registers.

5. Purpose of Processing

pk165 processes your personal data for the following purposes:

• Account registration and management — to create and maintain your pk165 account, verify your identity, and administer your gaming and financial activity.
• Payment processing — to process deposits and withdrawals via JazzCash, EasyPaisa, bank transfers, and other supported payment methods, and to maintain accurate financial records.
• Legal and regulatory compliance — to fulfil obligations under applicable anti-money laundering (AML) legislation, Know Your Customer (KYC) requirements, and the terms of pk165's international gaming licence.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, and other prohibited activities on the pk165 platform.
• Responsible gaming — to monitor gameplay patterns that may indicate problem gambling behaviour, to apply responsible gaming tools requested by users, and to comply with self-exclusion obligations.
• Customer support — to respond to your queries, resolve disputes, and maintain records of support interactions.
• Platform improvement — to analyse aggregated and anonymised usage data to improve the pk165 platform, game selection, and user experience.
• Marketing communications — to send you promotional offers, bonus notifications, and updates about pk165, where you have provided consent to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting support.

6. Legal Basis for Processing

pk165 processes your personal data under one or more of the following legal bases depending on the processing activity:

• Contractual necessity — processing required to fulfil the contract between pk165 and you as a registered user, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable law, including AML and KYC obligations under the licensing framework under which pk165 operates.
• Legitimate interests — processing carried out in the legitimate interests of pk165 or third parties, such as fraud detection, platform security, and responsible gaming monitoring, where those interests are not overridden by your rights and freedoms.
• Consent — processing for marketing communications and optional cookie use, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

7. Data Sharing and Disclosure

pk165 does not sell or rent your personal data. Your data may be shared with the following categories of recipients only where necessary and under appropriate safeguards:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing networks receive transaction data necessary to execute deposits and withdrawals.
• Identity verification providers — third-party KYC and document verification services receive identity document data to complete account verification processes required by pk165's licensing obligations.
• Fraud and risk management providers — fraud detection platforms may receive technical identifiers such as IP addresses and device fingerprints to assess transaction risk scores.
• Regulatory and licensing authorities — pk165's international gaming licence regulator may require access to player data as part of compliance audits or regulatory investigations. pk165 will comply with lawful regulatory requests.
• Law enforcement — pk165 will disclose personal data to law enforcement authorities where required to do so by a valid legal order, court order, or where disclosure is necessary to prevent serious criminal activity.
• Group companies — where pk165 operates as part of a group of companies, data may be shared with affiliated entities for operational, compliance, and security purposes under equivalent data protection standards.

8. Data Retention

pk165 retains personal data for as long as is necessary to fulfil the purposes described in this policy and to comply with applicable legal obligations. The following general retention periods apply:

• Active account data — retained for the duration of your account relationship with pk165 plus a minimum of five years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction records — retained for a minimum of five years from the date of each transaction, as required by applicable financial crime compliance obligations.
• KYC and identity verification data — retained for five years following the end of the business relationship or as required by the licensing regulator, whichever is longer.
• Support and communication records — retained for three years from the date of the most recent interaction.
• Technical and device data (logs) — retained for 12 months on a rolling basis unless required for longer periods in connection with a specific security investigation or legal matter.
• Marketing consent records — retained for as long as marketing communications are sent to you, plus a reasonable period to demonstrate compliance with consent requirements.

Following the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

9. Data Security

pk165 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and the pk165 platform
• Encryption of sensitive data fields at rest within pk165's database infrastructure
• Role-based access controls ensuring that pk165 staff can access personal data only to the extent required for their specific job function
• Multi-factor authentication for administrative access to systems containing personal data
• Regular penetration testing and security audits conducted by qualified independent security professionals
• Incident response procedures that include notification protocols in the event of a data breach affecting user rights
• Staff training on data protection obligations and secure data handling practices

While pk165 takes all reasonable precautions to safeguard your data, no system can guarantee absolute security. Users are encouraged to choose strong, unique passwords for their pk165 account, to enable two-factor authentication where available, and to contact pk165 support immediately if they suspect unauthorised access to their account.

10. Cookies and Tracking Technologies

pk165 uses cookies and similar technologies on pk165.net to support the operation of the platform and to improve the user experience. The categories of cookies used by pk165 are as follows:

• Strictly necessary cookies — essential for the operation of the pk165 platform. These include session authentication cookies, security tokens, and cookies that remember your login state. These cookies cannot be disabled without preventing you from using pk165.
• Functional cookies — used to remember your preferences, such as your preferred language, game lobby filters, and display settings. These improve the consistency of your experience on pk165 across sessions.
• Analytics cookies — used to collect aggregated and anonymised data about how users interact with pk165.net, including pages visited, time on site, and navigation paths. This data helps pk165 identify areas for platform improvement. Analytics data is not linked to your personally identifiable information.
• Security and fraud prevention cookies — used to identify and mitigate potentially fraudulent activity, including device fingerprinting and session integrity tokens.

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including those used commonly in Pakistan — allow you to block or delete cookies from specific sites. Note that disabling certain cookies may affect the functionality of the pk165 platform.

11. Your Data Rights

Subject to applicable law and the conditions of pk165's licensing obligations, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data pk165 holds about you at any time.
• Right to rectification — if any personal data held by pk165 is inaccurate or incomplete, you have the right to request that it be corrected. Some data corrections (such as legal name changes) may require submission of supporting documentation.
• Right to erasure — in certain circumstances you may request that pk165 delete your personal data. This right is subject to overriding legal obligations — for example, pk165 is required to retain AML and KYC records for a minimum of five years and cannot erase them earlier regardless of a deletion request.
• Right to restriction of processing — you may request that pk165 limit the processing of your data in certain circumstances, for example while a rectification request is being evaluated.
• Right to data portability — where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. pk165 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent — where processing is based on your consent (such as marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the pk165 support team using the details in Section 15. pk165 will respond to all data rights requests within 30 calendar days of receipt. Requests may require identity verification before they can be actioned.

12. Minors and Age Restrictions

pk165 is strictly an adult platform. You must be aged 21 or above to register an account and use the pk165 casino, slots, or sports betting services. This age restriction is applied consistently across all users regardless of location.

pk165 does not knowingly collect personal data from individuals under the age of 21. During the registration and KYC verification process, pk165 verifies the date of birth of all applicants. Any account found to belong to a person under 21 will be immediately suspended and any funds within that account will be returned to the payment source used for deposit, subject to identity verification of the legal guardian or parent where required.

If you are a parent or guardian and believe that a minor has created an account on pk165, please contact our support team immediately at the details provided in Section 15. pk165 takes underage gambling prevention seriously and will take prompt action on all such reports.

13. International Data Transfers

pk165 operates an internationally licensed gaming platform. Some of the data processing activities carried out on behalf of pk165 involve the transfer of personal data to service providers or systems located outside Pakistan. These include identity verification providers, payment processing infrastructure, fraud detection services, and cloud hosting providers.

Where personal data is transferred internationally, pk165 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this policy. Safeguards used by pk165 include:

• Contractual clauses binding recipient service providers to data protection standards consistent with this policy
• Use of service providers operating under internationally recognised data protection certifications
• Technical controls — including encryption in transit and at rest — that apply regardless of the jurisdiction in which data is processed

14. Changes to This Privacy Policy

pk165 reserves the right to update or modify this Privacy Policy at any time in response to changes in law, regulatory guidance, business practices, or the features and services offered on the pk165 platform. All updates will be published on this page with a revised effective date.

Where changes are material — meaning they significantly affect the way pk165 processes your personal data or your rights as a data subject — pk165 will notify registered users via email or via an in-platform notification prior to the changes taking effect. Continued use of the pk165 platform following such notification constitutes acceptance of the revised Privacy Policy.

We encourage you to review this page periodically, particularly if you are a regular pk165 player, to stay informed about how your personal data is handled.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by pk165, please contact our support team using the following details:

When contacting pk165 regarding a data rights request, please include your registered username or the email address associated with your pk165 account to allow us to locate your records promptly. Requests submitted without sufficient identifying information may be delayed pending verification.

pk165 is committed to resolving all privacy-related concerns through direct engagement with users. If you believe that pk165 has not adequately addressed a concern relating to your personal data, you may also have the right to lodge a complaint with a relevant data protection supervisory authority under applicable international standards.