Privacy Policy

This Privacy Policy ("Policy") describes how pk565 ("Platform", "we", "us", "our"), the operator of the website accessible at https://pk565.cam, collects, uses, stores, shares and protects personal data relating to users ("you", "your") of the Platform and its associated services, including sports betting, live casino, instant games and all account, payment and support features.

pk565 is an online betting and live casino information platform primarily targeting users in Pakistan. We are committed to handling your personal data responsibly and in accordance with applicable data-protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

By registering an account, making a deposit, placing a wager or otherwise using any part of the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with how we process personal data as described herein, you must not use the Platform.

Pakistan has specific legal requirements regarding data handling and online services. We do not represent that this Policy satisfies every requirement of Pakistani law in respect of your particular circumstances, and nothing in this Policy constitutes legal advice. Where you have concerns about your data rights under applicable Pakistani law, we recommend seeking independent legal guidance.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a living individual, directly or indirectly, including name, email address, IP address, device identifiers and financial account references.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, transmission, alteration, restriction or deletion.
• "Controller" — the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, pk565 acts as the Controller in respect of data collected directly through the Platform.
• "Processor" — a third party that processes Personal Data on behalf of the Controller, under contract and in accordance with the Controller's documented instructions.
• "KYC Data" — identity verification and source-of-funds documentation collected as part of Know Your Customer compliance procedures, including government-issued identification, proof of address and, where required, financial statements.
• "Cookies" — small text files placed on your device by the Platform or authorised third parties, used to store preferences, session state and analytical information.
• "User" / "you" — any individual who accesses, registers on or otherwise interacts with the pk565 Platform, whether or not a verified account holder.
• "Sensitive Data" — a subset of Personal Data that warrants heightened protection, including health information related to responsible-gambling assessments and financial data beyond standard transactional records.

We collect Personal Data from you directly (when you register, deposit, wager or contact support), automatically (through your device and browser as you use the Platform) and, where applicable, from third parties (such as KYC verification providers and fraud-detection services).

3.1 Registration & Account Data

When you create an account on pk565, we collect:

• Full legal name and date of birth
• Email address and chosen username
• Mobile phone number (where provided)
• City and country of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi)
• Account password (stored in hashed form — never in plain text)
• Preferred currency (PKR or other supported denominations)

3.2 KYC & Verification Data

To comply with our anti-money-laundering and responsible-gambling obligations, and before processing withdrawal requests, we may collect:

• Government-issued photo identification (e.g., Pakistani CNIC, passport or driver's licence)
• Proof of residential address (e.g., utility bill, bank statement)
• Source-of-funds documentation where required by the operator's compliance framework
• Selfie or liveness-check data where biometric verification is required

3.3 Transaction & Payment Data

We record all deposit and withdrawal transactions on the Platform, including amounts (in PKR or other currencies), timestamps, payment method references and transaction status. We do not store full payment card numbers or full digital-wallet credentials — such data is handled by our authorised payment processors under their own security standards.

3.4 Betting & Gaming Activity

We maintain records of all wagers placed on the Platform, including market selections, stake amounts, odds, outcomes and bonus usage. This data is used for account management, dispute resolution and responsible-gambling monitoring.

3.5 Device & Technical Data

When you access the Platform, our servers and analytics tools automatically collect:

• IP address and approximate geolocation (city-level)
• Browser type and version, operating system and device model
• Referring URL and navigation path within the Platform
• Session duration, page-view counts and feature-interaction events
• Cookie identifiers and locally stored session tokens

3.6 Communications Data

If you contact our support team via live chat or email, we retain a record of the conversation, including your query, any attachments you provide and the support agent's responses. This data is used for quality assurance, complaint resolution and training purposes.

We use Personal Data collected through the Platform for the following purposes. Each purpose is linked to a legal basis, described in detail in Section 5.

We do not use your Personal Data to make fully automated decisions that produce legal or similarly significant effects on you without human oversight. Where automated risk-scoring tools are used (for example, in fraud detection), a human review is available upon request.

We will never sell, rent or trade your Personal Data to third-party marketers or data brokers. Any sharing of data with third parties is limited to the categories and purposes described in Section 6 of this Policy.

Every processing activity described in this Policy is carried out under one or more of the following legal bases:

• Contract Performance: Processing that is necessary to perform the contract between you and pk565 — including account creation, transaction processing and customer support — requires no separate consent. Without this processing, we cannot provide the services you have requested.
• Legal Obligation: Certain processing activities are required by applicable law, including anti-money-laundering (AML) obligations, know-your-customer (KYC) checks and mandatory record-keeping. We are required to carry out this processing regardless of your preferences.
• Legitimate Interests: We process some data — including device and usage data for fraud prevention and platform analytics — based on our legitimate interest in operating a secure and functional service. We balance this interest against your privacy rights; if you believe our legitimate-interest assessment is incorrect in any specific instance, you may object as set out in Section 11.
• Consent: Where processing is not required for contract performance, legal compliance or legitimate interests — most notably for direct marketing communications and non-essential cookies — we rely on your explicit, freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not sell, rent or otherwise commercially transfer your Personal Data to third parties. We share data only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Service Providers (Processors)

We engage carefully selected third-party service providers to assist in operating the Platform, including:

• Cloud hosting and infrastructure providers
• KYC and identity-verification vendors
• Payment processing and fraud-detection services
• Customer support platform providers
• Analytics and performance-monitoring tools
• Email delivery and communication services

All service providers are bound by data-processing agreements that restrict their use of your data to the specific purpose for which it was shared and require them to implement appropriate security measures.

6.2 Game Studios & Content Providers

Where live dealer or slot games are provided by third-party studios integrated into the Platform, those studios may receive technical session data (such as a pseudonymous player token) necessary to deliver the game. They do not receive your full name, contact details or financial information.

6.3 Regulatory & Law Enforcement Authorities

We will disclose Personal Data to competent authorities where we are legally required to do so — for example, in response to a lawful court order, regulatory request or law enforcement investigation. Where permitted by law, we will notify you of such a request before complying.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or a substantial part of pk565's assets, Personal Data held by us may be transferred to the acquiring entity. We will notify registered users of any such transfer and the privacy protections applicable to their data in advance where practicable.

pk565 operates globally and some of the service providers and infrastructure partners we engage may be located outside Pakistan. As a result, your Personal Data may be transferred to and processed in countries other than the one in which you reside.

Where such transfers occur, we take steps to ensure that your data receives an adequate level of protection, including by implementing appropriate contractual safeguards with the receiving party. If you would like further information about the specific safeguards applied to a particular transfer, please contact us using the details in Section 15.

We retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy our legal, regulatory, audit and dispute-resolution obligations. The retention periods below are indicative and may be extended where required by applicable law or ongoing proceedings.

When Personal Data is no longer required and the applicable retention period has expired, we will securely delete or anonymise it so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and research purposes.

pk565 uses cookies and similar tracking technologies (including web beacons, pixel tags and local storage objects) to deliver, maintain and improve the Platform. This section explains what types of cookies we use and how you can manage them.

9.1 Cookie Categories

9.2 Managing Your Cookie Preferences

You can review and update your cookie preferences at any time via the consent manager accessible in the Platform footer. You may also configure your browser to block or delete cookies; however, disabling essential cookies will impair core Platform functionality and you may be unable to log in or place bets.

Note that opt-out preferences are stored in a cookie. If you clear your browser cookies, you will need to re-set your preferences on your next visit.

9.3 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. Because there is no universally accepted standard for responding to DNT signals, the Platform does not currently alter its data collection practices in response to such signals. Your cookie consent choices, described above, remain your primary mechanism for controlling non-essential tracking.

pk565 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, alteration, disclosure, loss or destruction. These measures include:

• Encryption in transit: All communications between your device and the Platform are encrypted using TLS (Transport Layer Security) with current cipher suites.
• Encryption at rest: Sensitive data fields — including KYC documents and financial records — are encrypted at rest using industry-standard symmetric encryption.
• Access controls: Access to Personal Data within our systems is restricted on a need-to-know basis, enforced through role-based access control and multi-factor authentication for privileged accounts.
• Password hashing: User account passwords are stored exclusively as salted cryptographic hashes. Plain-text passwords are never stored or transmitted.
• Security monitoring: We operate continuous monitoring for anomalous access patterns, intrusion attempts and data-exfiltration indicators.
• Regular audits: Our security posture is subject to periodic internal review and, where required by the operator's license jurisdiction, independent third-party audits.

In the event of a Personal Data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay using the contact information associated with your account, and will take all reasonable steps to mitigate the impact of the breach.

Depending on your jurisdiction and the specific circumstances of the processing, you may have some or all of the following rights in relation to your Personal Data held by pk565. We will respond to all verified requests within 30 calendar days, or notify you if an extension is required.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request". We may need to verify your identity before processing your request. Verification will typically involve confirming details associated with your registered account. We will not charge a fee for reasonable requests unless they are manifestly unfounded or excessive.

The pk565 Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect, process or store Personal Data relating to individuals under the applicable minimum age.

During registration and KYC verification, we take steps to confirm that users meet the minimum age requirement, including by reviewing government-issued identification documents. Where we discover or have reasonable grounds to suspect that an account has been registered by a minor, we will:

• Immediately suspend the account pending investigation;
• Reverse any outstanding balance to the payment method used for deposit where possible;
• Permanently close the account; and
• Delete any Personal Data associated with the account to the extent permitted by our legal retention obligations.

If you are a parent or guardian and believe that your child has registered on the Platform without your knowledge, please contact us immediately at [email protected]. We will prioritise such reports and act swiftly.

For further guidance on protecting minors from accessing gambling platforms, please visit our Responsible Gambling page, which contains information on parental-control tools and third-party blocking software.

The Platform may contain references or links to third-party websites, game studios or service portals. This Policy applies solely to Personal Data collected by pk565 through the Platform. We have no control over and accept no responsibility for the privacy practices, content or data-handling of any third-party site or service.

Payment method names referenced on the Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar Pakistani payment references included for contextual purposes only. pk565 does not represent that these providers endorse, support or are affiliated with the Platform or with online gambling services. If you use any of these providers to fund your account, their own privacy policies and terms will govern the processing of your data by those providers.

We encourage you to review the privacy policies of any third-party service before providing your Personal Data to them. Inclusion of a payment provider name on the Platform does not constitute a recommendation or endorsement of that provider's data practices.

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the Platform's features. When we make material changes, we will:

• Update the "Effective Date" at the top of this page;
• Post a prominent notice on the Platform for a period of at least 14 days following the update; and
• Where the changes significantly affect your rights or the way we process your data, send a direct notification to your registered email address.

Your continued use of the Platform after the effective date of a revised Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting support.

Previous versions of this Policy are archived and available upon request. If you wish to review an earlier version, please contact us with the relevant effective date.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or want to raise a concern about how your Personal Data is being handled, please get in touch using the details below.

For urgent account-security concerns — such as suspected unauthorised access to your account — please also contact support immediately at [email protected] and include "URGENT: Account Security" in your subject line so the message is escalated without delay.

pk565 is not regulated by any Pakistani governmental authority and does not claim licensing from the Government of Pakistan, the PTA, the State Bank of Pakistan or any provincial body. Nothing in this Policy constitutes legal advice and users should seek independent guidance regarding the application of local laws to their use of the Platform.