At pk147, we believe that privacy is a fundamental right, not a legal checkbox. This Privacy Policy explains in plain terms — alongside precise legal language — exactly what personal data we collect from Pakistani players, why we collect it, how it is stored and protected, who it may be shared with, and the rights you hold over your own information. Whether you're a new player in Karachi setting up your first account or a long-standing High Roller member in Lahore, this document applies equally to you.
Our Data Principles
Before reading the full legal text, here are the six core principles that guide every data-handling decision at pk147 — written plainly, without legal padding.
pk147 does not collect data for the sake of data. Every field we ask you to fill in — from your mobile number to your CNIC — has a specific, documented purpose tied directly to account operation, regulatory compliance, or security. We do not build marketing profiles from your gaming behaviour for sale to third parties.
pk147 does not sell, rent, or trade your personal information to any third party for commercial purposes. We are not an advertising business. Data shared with external parties is limited to what is necessary for payment processing, identity verification, and regulatory reporting under our gaming license obligations.
All personal data held by pk147 is encrypted at rest using AES-256 and in transit using TLS 1.3. Access to personally identifiable information is restricted to authorised personnel on a strict need-to-know basis, with access logs maintained and audited. Our security architecture meets the standards required by our international gaming license.
pk147 does not retain your personal data indefinitely. Retention periods are defined by the purpose for which data was collected and the legal obligations of our gaming license — typically 5 years for financial transaction records as required by anti-money laundering regulations. Data that is no longer required is securely deleted or anonymised.
pk147 respects your right to access, correct, export, and request deletion of your personal data, subject to the legal retention requirements of our gaming license. Data access requests are handled within 30 days. Requests can be submitted via our support team at [email protected] — plaintext email address, not a clickable link.
If pk147 makes material changes to this Privacy Policy — changes that affect how your data is used, who it is shared with, or your rights as a data subject — we will notify registered account holders via their registered mobile number or email address at least 14 days before the changes take effect.
This Privacy Policy ("Policy") describes how pk147 ("pk147", "we", "us", "our") — the operator of the online casino and sports betting platform accessible at pk147.bio — collects, uses, stores, protects, and discloses the personal data of its registered players and website visitors ("you", "your", "the Data Subject").
This Policy applies to all personal data processed in connection with your use of the pk147 platform, including but not limited to: account registration, identity verification (KYC), financial transactions, gameplay activity, customer support interactions, and any communications between you and pk147 through any channel.
pk147 is committed to handling your personal data in accordance with the data protection obligations imposed by its international gaming license, applicable data privacy standards, and the anti-money laundering (AML) regulatory framework. By registering a pk147 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
Plain Language Summary: This page explains what information pk147 holds about you, why it holds it, how it is kept secure, and what you can do if you want to access, correct, or delete your information. If anything is unclear, contact our support team — available 24/7 in English and Urdu at [email protected] (not a clickable link).
For the purposes of applicable data protection law, pk147 acts as the Data Controller in respect of the personal data it processes about you. This means that pk147 determines the purposes for which and the manner in which your personal data is processed. pk147 is accountable for the compliant processing of your personal data under the data protection obligations of its international gaming license.
Certain data processing activities — such as payment processing via JazzCash, EasyPaisa, and banking partners — involve third-party processors who act under pk147's instructions and are bound by contractual data protection obligations. These third parties act as Data Processors on behalf of pk147 for the specific, limited purposes described in Section 6 of this Policy.
pk147 collects the following categories of personal data from its players:
| Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, CNIC photograph (front & back), selfie photograph | Registration & KYC |
| Contact Data | Mobile number, email address (if provided), city/province of residence | Registration |
| Financial Data | Payment method identifiers (JazzCash number, EasyPaisa number, bank account details), transaction history, deposit/withdrawal amounts in PKR | First Transaction |
| Technical Data | IP address, device type, operating system, browser type & version, device fingerprint, login timestamps | Platform Access |
| Usage Data | Game session logs, bet history, wagering activity, session duration, bonus usage | During Gameplay |
| Communications Data | Live chat transcripts, support email correspondence, complaint records | Support Interactions |
| Responsible Gaming Data | Self-set deposit/loss limits, cooling-off periods, self-exclusion records, responsible gaming interaction logs | Account Settings |
CNIC Data: pk147 collects CNIC information solely for the purpose of age verification (21+ enforcement) and identity confirmation required under our international gaming license. CNIC images are stored in an encrypted, access-controlled environment and are not used for any purpose beyond regulatory compliance and fraud prevention.
The majority of personal data pk147 holds about you is provided by you directly — during account registration (mobile number, date of birth), during KYC verification (CNIC documents, selfie), during deposit and withdrawal transactions (payment method details), and during customer support interactions (any information you share with our agents via live chat or email).
When you access the pk147 platform — whether via desktop browser, mobile browser, or Progressive Web App installation — our systems automatically collect technical and usage data including your IP address, device identifiers, session timestamps, pages visited, games played, and bet amounts. This data is collected for security monitoring, fraud detection, responsible gaming analysis, and platform performance optimisation.
In limited circumstances, pk147 may receive personal data about you from third parties, including: payment processors (transaction confirmation and payment method verification data), identity verification services (CNIC validation results), and fraud detection databases (screening of accounts against known fraudulent actor lists). Data received from third parties is handled with the same security standards as data collected directly.
pk147 processes your personal data only where a lawful basis for processing exists. The following table sets out the primary purposes for which pk147 processes personal data and the corresponding legal basis for each:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract with the account holder |
| Identity and age verification (KYC / 21+ enforcement) | Legal obligation under gaming license |
| Processing deposits and withdrawals in PKR | Performance of contract |
| Anti-money laundering (AML) monitoring and reporting | Legal obligation under gaming license |
| Fraud detection and account security monitoring | Legitimate interests of pk147 and player protection |
| Responsible gaming monitoring and intervention | Legal obligation & legitimate interest in player welfare |
| Customer support and complaint handling | Performance of contract |
| Platform analytics and performance improvement | Legitimate interests of pk147 |
| Marketing communications (opt-in only) | Consent of the account holder |
| Legal dispute resolution and regulatory reporting | Legal obligation |
pk147 does not sell, rent, or trade your personal data to any third party for commercial purposes. Disclosure of your personal data to third parties is limited to the following categories of recipients, each operating under contractual data protection obligations or statutory disclosure requirements:
As an internationally licensed gaming platform, certain data processing activities — including cloud infrastructure, gaming server operations, and some identity verification services — may involve the transfer of personal data outside Pakistan to servers or processors located in other countries. Where such transfers occur, pk147 ensures that appropriate data protection safeguards are in place, including contractual data protection clauses that bind the recipient to data handling standards equivalent to those applied by pk147.
Player financial transaction records and CNIC data are processed and stored with particular attention to jurisdictional security — pk147 selects data processors in jurisdictions with established data protection frameworks and does not transfer CNIC documentation to countries with inadequate data protection standards without the implementation of appropriate transfer safeguards.
pk147 retains personal data only for as long as necessary for the purposes for which it was collected, subject to the following retention schedule:
Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual account holder.
pk147 implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. The primary security measures in place include:
Data Breach Notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk147 will notify affected account holders without undue delay following discovery of the breach, and will take immediate steps to contain, investigate, and remediate the breach in accordance with its legal obligations under the gaming license framework.
Cookies are small text files placed on your device by the pk147 platform when you access the site. They serve a range of functions from keeping you logged in between sessions to analysing platform performance. pk147 uses both first-party cookies (set by pk147 directly) and limited third-party cookies (set by service providers operating on pk147's behalf).
You can control cookie settings through your browser preferences. Most modern browsers allow you to view, delete, and block cookies. However, disabling strictly necessary cookies will impair or prevent your ability to use the pk147 platform. pk147 does not use tracking cookies for advertising purposes or share cookie data with advertising networks.
pk147 strictly prohibits access to its platform by persons under 21 years of age. The collection of personal data from persons under 21 is neither intended nor permitted. The mandatory CNIC-based KYC verification process is specifically designed to enforce this age restriction — no withdrawal can be processed for any account that has not completed age-verified KYC.
If pk147 discovers or has reasonable grounds to suspect that an account belongs to a person under 21 years of age, the account will be immediately suspended. Any personal data held in relation to that account will be processed solely for the purpose of investigating the age violation and returning any deposited funds to the originating payment source, after which the data will be retained only as required for legal and regulatory compliance before being securely deleted.
If you believe that a person under 21 may have registered a pk147 account using falsified documents, please report this immediately to [email protected] (plain text — not a clickable link). pk147 takes underage gambling extremely seriously and cooperates fully with any relevant authorities investigating such matters.
Subject to applicable law and the legal retention obligations of pk147's gaming license, you hold the following rights in relation to the personal data pk147 holds about you. Requests to exercise any of these rights should be submitted to [email protected] (plain text — not a clickable link), with "DATA RIGHTS REQUEST" in the subject line, along with your account username and registered mobile number for identity verification:
pk147 may send you promotional communications — including information about new games, bonuses, PSL betting promotions, and platform updates — via SMS to your registered mobile number or via email if you have provided one. Marketing communications are sent only to players who have opted in to receiving them and only through channels where consent has been obtained.
You may withdraw your consent to receive marketing communications at any time by: (a) updating your notification preferences in Account Settings; or (b) contacting pk147 support directly and requesting removal from the marketing list. Opt-out requests will be actioned within 5 business days. Note that withdrawing consent to marketing communications does not affect your receipt of transactional messages — such as deposit confirmations, withdrawal notifications, OTP codes, and security alerts — which are sent regardless of marketing preference as they are necessary for account operation.
If you believe that pk147 has processed your personal data in a manner that does not comply with this Privacy Policy or applicable data protection law, you have the right to lodge a complaint. The pk147 complaints process for privacy matters is as follows:
pk147 takes all privacy complaints seriously and is committed to resolving data protection concerns promptly and transparently. We do not penalise players for submitting good-faith privacy complaints.
pk147 reviews and updates this Privacy Policy periodically to reflect changes in how we process personal data, changes in applicable legal requirements, and improvements to our privacy practices. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Where changes are material — meaning they affect the categories of data collected, the purposes for which data is used, the third parties with whom data is shared, or your rights as a data subject — pk147 will notify registered account holders via their registered mobile number or email address at least 14 days before the updated Policy takes effect. Your continued use of the pk147 platform following that notification period constitutes acceptance of the revised Privacy Policy.
Minor changes — such as clarifications of existing provisions, typographical corrections, or updates to reflect minor operational changes — may be made without individual notification, taking effect from the date indicated in the "Last Updated" field.
For any questions, concerns, or requests relating to this Privacy Policy or the personal data pk147 holds about you, please contact us through the following channels:
Urdu Assistance: If you need help understanding any aspect of this Privacy Policy in Urdu, our live chat team includes Urdu-speaking agents available around the clock. Simply open the live chat from your pk147 account and ask to speak with an Urdu-speaking support agent — they can walk you through any part of this document in Urdu. The English version of this Policy remains the legally binding version in all cases.
Your Rights at a Glance
Your personal data rights under pk147's privacy framework — summarised plainly. Full details are in Section 12 of the policy above.
Request a full copy of the personal data pk147 holds about you. Fulfilled within 30 days. Includes your account info, transaction history, and KYC records.
Request correction of inaccurate or incomplete personal data. CNIC corrections require updated documents to be submitted for re-verification.
Request deletion of your personal data, subject to legal retention requirements. Financial and AML records must be retained for minimum statutory periods.
Request an export of your data in CSV or JSON format — covering your account details, transaction history, and gameplay records.
Object to processing based on legitimate interests, including profiling. Your objection will be assessed against pk147's legitimate operational and compliance needs.
Withdraw consent to marketing or other consent-based processing at any time — from Account Settings or by contacting support. Withdrawal does not affect prior lawful processing.
Enterprise-grade encryption, strict data minimisation, and 24/7 Urdu & English support — your privacy is protected from the moment you log in.