Your Privacy Matters to PK33 — Here's Exactly How We Protect It

1. Introduction

This Privacy Policy describes how PK33 ("we", "us", "the Platform") collects, processes, stores and protects the personal information of players who register and use the pk33 website and services. It applies to all personal data collected through your use of the pk33 platform, regardless of the device or method you use to access it.

PK33 is committed to handling your personal data with integrity and transparency. We operate under the applicable data protection framework and take our obligations to Pakistani players seriously — not as a legal formality but as a genuine commitment to the privacy of the community that has trusted us with over 700,000 registered accounts.

By creating a pk33 account or using any part of the platform, you acknowledge that you have read and understood this Privacy Policy. It should be read alongside our Terms and Conditions, which govern the overall relationship between you and pk33. If you have any questions about anything in this policy, our support team at support@pk33.link is available 24/7.

PK33 will update this Privacy Policy from time to time as our services evolve or as regulatory requirements change. We will notify registered players of material changes via their registered email address before the changes take effect. The current version and effective date are always displayed at the top of this page.

2. Personal Data We Collect

PK33 collects personal data in several ways: directly from you when you register and use the platform, automatically as you interact with pk33's services, and occasionally from third parties such as payment processors. We only collect what we genuinely need.

• Account registration: Full legal name, Pakistani mobile number, email address, date of birth, national identity (CNIC number for verification purposes) and account password.
• Payment information: Your mobile wallet account details (Easypaisa, JazzCash, NayaPay or SadaPay account number), bank account details for IBFT transfers or card details for Visa/Mastercard transactions. Note — pk33 does not store full card numbers; these are handled by our PCI-compliant payment processor.
• Identity verification documents: Copies of government-issued CNIC, proof of address or other identity documentation provided during KYC verification.
• Communication records: Messages and records from your interactions with pk33's customer support team, including live chat, email and any formal complaints submitted.
• Responsible gaming information: If you use pk33's responsible gaming tools — deposit limits, loss limits, self-exclusion — these choices and the dates they were applied are recorded on your account.

• Device information: Device type, operating system, browser type and version, screen resolution and device identifiers.
• Usage data: Pages visited within pk33, features used, games played, bets placed, session duration and navigation patterns.
• Connection data: IP address, approximate geographic location derived from IP, and network connection type.
• Cookies and similar technologies: As described in Section 6 of this policy.

• Payment processors may share transaction confirmation data with pk33 to verify deposits and withdrawals.
• Identity verification partners may return verification results (pass/fail) for KYC checks.
• Fraud prevention services may share risk signals where a transaction or account shows indicators of suspicious activity.

3. How We Use Your Personal Data

PK33 uses your personal data for the following specific purposes:

PK33 does not use your personal data for purposes other than those listed above without notifying you and, where required, obtaining your consent.

4. Legal Basis for Processing

PK33 processes your personal data on one or more of the following legal grounds:

• Contractual necessity: Most data processing at pk33 is necessary to deliver the services described in our Terms and Conditions — without this processing, we cannot operate your account, process PKR payments or provide gaming services.
• Legal obligation: Certain processing is required to comply with applicable law, including anti-money laundering (AML) obligations, identity verification requirements and record-keeping mandates. PK33 cannot waive these obligations at player request.
• Legitimate interests: PK33 processes certain data based on legitimate interests — principally fraud prevention, platform security, and improving our services. We ensure our legitimate interests are proportionate and do not override your privacy rights.
• Consent: Where pk33 processes data on the basis of consent — such as sending promotional marketing communications — we will obtain clear, specific consent before doing so and you can withdraw consent at any time.

5. Data Sharing and Third Parties

PK33 does not sell, rent or trade your personal data to third parties for commercial or marketing purposes. Period. We share data only in the following limited circumstances:

• Payment processors: Your payment account details and transaction data are shared with our payment processing partners (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners and card processing services) solely to process your PKR deposits and withdrawals. These partners operate under their own privacy policies and applicable data protection frameworks.
• Identity verification providers: CNIC numbers and identity documents shared during KYC checks are processed by our accredited verification partner. Results (pass/fail) are returned to pk33. Raw document data is not retained beyond the verification process by pk33.
• Fraud prevention services: Anonymised risk signals — such as device fingerprints and IP reputation data — may be shared with fraud prevention platforms to protect pk33 and its players from financial crime.
• Legal and regulatory authorities: PK33 will disclose personal data to law enforcement, regulatory bodies or courts when legally required to do so — for example, in response to a valid court order or in compliance with anti-money laundering reporting obligations. We will not disclose more than is legally required.
• Business transfers: In the event of a merger, acquisition or sale of pk33's business, player data may be transferred to the acquirer as part of the transaction. Affected players will be notified before their data is transferred and will have the opportunity to close their accounts.

6. Cookies and Tracking Technologies

PK33 uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work correctly, keep your session secure, and understand how players use the service so we can improve it.

You can manage cookie preferences for optional cookies through your browser settings or through the pk33 cookie preference centre available in your account settings. Disabling essential cookies will prevent pk33 from functioning correctly. PK33 does not use third-party advertising cookies or cross-site tracking cookies.

7. Data Retention

PK33 retains your personal data for as long as is necessary to fulfil the purposes described in this policy, comply with legal obligations and resolve any disputes. The following general retention periods apply:

When retention periods expire and there is no legal obligation requiring continued retention, pk33 securely deletes or anonymises your personal data. If you close your pk33 account, some data will be retained for the periods above even after closure — this is a legal requirement, not discretionary.

8. Data Security

PK33 takes data security seriously and has implemented technical and organisational measures appropriate to the sensitivity of the data we hold. These include:

• Encryption in transit: All communication between your device and pk33's servers uses TLS 1.2 or higher (256-bit SSL). Your payment details, login credentials and personal data are never transmitted in plain text.
• Encryption at rest: Sensitive data fields — including identity document data and payment account details — are encrypted at rest in our databases using AES-256 encryption.
• Password security: Passwords are hashed using bcrypt with a high cost factor. PK33 never stores your password in plain text and cannot retrieve it — only reset it.
• Access controls: Access to personal data within pk33 is restricted on a strict need-to-know basis. Staff access is logged and audited. No single employee has unrestricted access to the full dataset.
• Two-factor authentication: PK33 supports and recommends two-factor authentication (2FA) on your account. Enabling 2FA significantly reduces the risk of unauthorised access even if your password is compromised.
• Penetration testing: PK33 commissions independent security assessments of our platform on a regular basis. Critical vulnerabilities are addressed within defined SLAs.
• Incident response: We maintain a formal data breach response plan. In the event of a breach affecting your personal data, pk33 will notify affected players and relevant authorities within the timeframes required by law.

9. Your Privacy Rights

As a pk33 player, you have meaningful rights over your personal data. These are not theoretical — they are actionable rights you can exercise at any time by contacting pk33 support:

To exercise any of these rights, email privacy@pk33.link with the subject line "Privacy Rights Request" and include your account ID and a description of your request. PK33 will acknowledge within 48 hours and respond within 30 calendar days. Identity verification may be required before processing certain requests to ensure we are disclosing data to the correct person.

10. Children's Privacy

PK33 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the pk33 registration and KYC process, and the platform employs active measures to prevent underage access.

If pk33 discovers that personal data has been collected from a person under the age of 18, the account will be closed immediately, all associated data will be deleted in accordance with applicable law, and any balance will be handled in accordance with our Terms and Conditions and legal obligations.

If you believe a minor has created an account on pk33, please contact us immediately at support@pk33.link with the subject "Underage Account Report". We take such reports seriously and will investigate and act promptly.

11. Marketing Communications

PK33 will only send you marketing communications — promotional offers, bonus notifications, tournament announcements and platform news — if you have provided explicit consent to receive them. Consent is collected during registration and can be updated at any time through your account settings or by contacting support.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in your pk33 account settings.
• Clicking the "unsubscribe" link in any marketing email from pk33.
• Contacting support at support@pk33.link with an unsubscribe request.

Opting out of marketing communications does not affect your ability to use pk33 or receive transactional messages (account notifications, withdrawal confirmations, security alerts). These communications are service-related and are sent regardless of marketing preferences because they relate directly to your account.

12. Updates to This Policy

PK33 reviews this Privacy Policy regularly and will update it when our data practices change or when regulatory requirements evolve. The current version and effective date are displayed at the top of this page and identified by a version number.

For material changes — those that meaningfully affect how we use your data or your privacy rights — we will send a notification to your registered email address at least 7 days before the change takes effect. This gives you time to review the updated policy and, if you disagree with any change, to close your pk33 account before the new terms apply.

Non-material changes (such as clarifications, improved wording or updates to contact information) may be made without advance notice but will always be reflected here with a revised date. We recommend bookmarking this page and checking periodically if you want to stay fully informed.

13. Contact and Privacy Queries

If you have any questions, concerns or requests related to this Privacy Policy or your personal data held by pk33, here's how to reach us: