Table of Contents

Our Privacy Commitments

Before diving into the full legal text, here are six core privacy commitments pk97 makes to every player across Karachi, Lahore, Islamabad, Faisalabad, and throughout Pakistan.

Data Minimisation

pk97 only collects personal data that is strictly necessary for account registration, KYC verification, payment processing, and responsible gaming compliance. We do not collect data for its own sake.

No Selling of Data

pk97 does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies. Your data is used solely to operate and improve the pk97 platform for you.

Encrypted at Rest & in Transit

All personal data held by pk97 is encrypted at rest using AES-256 and protected in transit via TLS 1.3. Payment data is processed through PCI-DSS compliant payment gateways — pk97 never stores raw card details.

You Control Your Data

You have the right to access, correct, and request deletion of your personal data at any time, subject to legal retention obligations. Requests are handled within 30 days via the pk97 data request process.

Marketing is Opt-In

pk97 will only send you promotional communications if you have explicitly opted in during registration or via your account preferences. You can withdraw consent and unsubscribe at any time with no effect on your account.

Regulatory Compliance

pk97's data practices are governed by the data protection requirements attached to its international gaming licence, and we cooperate fully with any lawful data request from licensing or regulatory authorities.

1. Overview & Data Controller

This Privacy Policy is published by pk97 ("pk97", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at pk97.pro. pk97 acts as the data controller in respect of all personal data collected from players who register, deposit, play, or otherwise interact with the pk97 platform.

This Privacy Policy applies to all personal data collected through the pk97 website, any mobile-optimised version of the platform, communications sent by pk97 including marketing emails and support messages, and any other interaction you have with pk97 as a registered or prospective player. It does not apply to the data practices of third-party game studios, payment processors, or external websites that may be linked to from the pk97 platform — those third parties are independent data controllers with their own privacy policies.

By registering a pk97 account, making a deposit, or placing a bet on the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. Where pk97 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

For players in Pakistan: pk97 serves players primarily located in Pakistan and processes personal data including CNIC information, Pakistani mobile numbers, and Pakistani Rupee payment records. All such data is handled with the same level of care and security as data from any other jurisdiction served by pk97.

2. Data We Collect

pk97 collects personal data from you in three ways: data you provide directly, data generated automatically through your use of the platform, and data received from third parties such as payment processors and identity verification services.

2.1 Data You Provide Directly

When you register a pk97 account, complete KYC verification, make a deposit or withdrawal, or contact pk97 support, you provide us with the following categories of personal data:

  • Full legal name as it appears on your CNIC.
  • Date of birth (used to verify the 21+ age requirement).
  • CNIC number and a copy of your CNIC document submitted during KYC verification.
  • Email address used for account registration and communications.
  • Pakistani mobile phone number associated with your account.
  • Residential address in Pakistan, including city (e.g., Karachi, Lahore, Islamabad, Faisalabad).
  • Payment method details including JazzCash account number, EasyPaisa account number, bank account details for HBL, UBL, Meezan Bank, or Raast-linked account information.
  • Username and encrypted password selected during account registration.
  • Communications you send to pk97 via live chat, email, or any support channel.
  • Responses to responsible gaming questionnaires or self-exclusion requests submitted through your account.

2.2 Data Collected Automatically

When you access the pk97 platform, certain data is collected automatically through technical means including cookies, log files, and session tracking technology:

  • IP address and approximate geographic location derived from IP data.
  • Device type, operating system, browser type and version.
  • Pages visited on the pk97 platform, time spent on each page, and navigation paths through the site.
  • Game session data including games played, bet amounts in PKR, game outcomes, and session duration.
  • Deposit and withdrawal transaction records including amounts in PKR, timestamps, and payment method identifiers.
  • Login timestamps and session identifiers used for security and fraud detection purposes.
  • Referral source data indicating how you arrived at the pk97 platform (e.g., direct navigation, search engine).

2.3 Data Received from Third Parties

pk97 may receive personal data about you from the following third-party sources in the course of providing its services:

  • Identity verification service providers who assist pk97 in verifying the authenticity of CNIC documents submitted during KYC.
  • Payment processors including JazzCash, EasyPaisa, and banking partners, who confirm the status and outcome of deposit and withdrawal transactions.
  • Fraud prevention and anti-money laundering (AML) screening services that cross-reference account data against sanctions lists and fraud databases.
  • Responsible gaming databases operated by the gaming licensing authority, where a player has registered a self-exclusion that applies across licensed operators.
Data Category Examples Source
Identity Data Full name, CNIC number, date of birth Provided by you; verified via KYC service
Contact Data Email address, mobile number, residential address Provided by you at registration
Financial Data JazzCash / EasyPaisa account, bank details, PKR transaction records Provided by you; confirmed by payment processor
Technical Data IP address, device type, browser, session ID Collected automatically
Gameplay Data Games played, bet amounts, game outcomes, session duration Collected automatically during gameplay
Communications Data Live chat transcripts, support emails Provided by you via support channels
Responsible Gaming Data Deposit limits, self-exclusion status, cooling-off periods Provided by you; received from licensing authority database

3. How We Use Your Data

3.1 Account Management & Service Delivery

The primary purpose for which pk97 processes your personal data is to provide you with a functional, secure online casino and sports betting account. This includes registering and maintaining your pk97 account, processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast, providing access to casino games, live dealer tables, PSL cricket betting markets, and jackpot games, and delivering 24/7 customer support via live chat and email.

3.2 Identity Verification & KYC

pk97 is required by its international gaming licence to verify the identity of all players before processing withdrawals. Your CNIC data, date of birth, and supporting documentation are processed for the purpose of verifying your identity, confirming that you meet the 21+ age requirement, and ensuring that your account is not being used for money laundering or fraud. This processing is a legal and regulatory obligation — it cannot be opted out of.

3.3 Fraud Prevention & Security

pk97 uses technical data, login records, and financial transaction data to detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, collusion, and other prohibited activities as defined in the pk97 Terms & Conditions. This processing protects both pk97 and legitimate players on the platform.

3.4 Responsible Gaming

pk97 is committed to responsible gaming and uses gameplay data, deposit history, and session data to monitor player behaviour for signs of problem gambling. Where pk97 identifies indicators of harmful gambling behaviour, it may contact you to offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion. This processing is carried out in the public interest and as a condition of the pk97 gaming licence.

3.5 Marketing Communications

With your explicit consent, pk97 may use your email address and mobile number to send you promotional communications including bonus offers, tournament invitations, and new game announcements. You can withdraw this consent at any time by updating your communication preferences in your pk97 account settings or by contacting support at [email protected]. Withdrawal of marketing consent does not affect the operation of your account or your ability to play on pk97.

3.6 Platform Improvement & Analytics

Aggregated and anonymised usage data is used by pk97 to analyse platform performance, understand how players navigate the site, identify popular games, and improve the overall user experience. This analytics processing does not identify individual players and cannot be used to make decisions about your account.

5. Data Sharing & Third Parties

pk97 does not sell, rent, or trade your personal data to any third party for commercial purposes. pk97 shares your personal data only in the following limited circumstances:

5.1 Payment Processors

When you make a deposit or request a withdrawal, your payment details and transaction amount in PKR are shared with the relevant payment processor (JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, or Meezan Bank) solely for the purpose of executing the transaction. These processors are contractually bound to process your data only for payment purposes and to maintain appropriate security standards.

5.2 KYC & Identity Verification Services

Your CNIC data and identity documents may be shared with a third-party identity verification service provider engaged by pk97 to assist in the KYC process. This provider processes your data solely on pk97's instructions and is contractually prohibited from using it for any other purpose.

5.3 Game Studio Providers

When you play a game provided by a third-party studio (such as Evolution Gaming, Pragmatic Play, or Habanero), limited technical data including your session identifier and bet data may be shared with that studio for the purpose of delivering the game. Game studios do not receive your full identity data or payment information.

5.4 Regulatory & Licensing Authorities

pk97 is required by the conditions of its international gaming licence to share certain player data with the licensing authority upon request. This may include identity records, transaction histories, and responsible gaming records. pk97 complies with all lawful regulatory requests and will notify you of any such disclosure to the extent permitted by law.

5.5 Law Enforcement

pk97 will disclose personal data to law enforcement agencies, courts, or other government authorities where required to do so by applicable law, court order, or where pk97 reasonably believes that disclosure is necessary to prevent or detect crime, protect the safety of individuals, or protect the legal rights of pk97.

Our promise: In every case where pk97 shares data with a third party, we require that party to maintain appropriate technical and organisational security measures and to process your data only for the specific purpose for which it was shared. We do not permit third parties to use your pk97 data for their own independent commercial purposes.

6. Data Retention

pk97 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by the conditions of the pk97 gaming licence and applicable law. The following retention periods apply:

Data Category Retention Period Reason
Account registration data 5 years after account closure Gaming licence regulatory obligation
KYC / CNIC documents 5 years after account closure AML regulatory obligation
Financial transaction records 7 years after transaction date Financial records and AML obligation
Gameplay session records 3 years after session date Dispute resolution and responsible gaming monitoring
Support communications 3 years after resolution Dispute resolution and quality assurance
Marketing consent records Until consent is withdrawn + 1 year Proof of consent
Technical / session log data 12 months Security monitoring and fraud detection

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely in aggregate form for analytics purposes as it no longer constitutes personal data.

7. Security Measures

7.1 Technical Safeguards

pk97 implements the following technical security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

  • TLS 1.3 encryption for all data transmitted between your device and the pk97 platform.
  • AES-256 encryption for personal data and financial records stored in pk97 databases.
  • Bcrypt hashing for all account passwords — pk97 never stores passwords in plaintext.
  • Two-factor authentication (2FA) available for all pk97 accounts as an additional account security layer.
  • Regular penetration testing and vulnerability assessments of the pk97 platform infrastructure.
  • Payment card data processed exclusively through PCI-DSS compliant payment gateways — pk97 does not store raw card numbers.
  • Automated anomaly detection systems that flag unusual account activity for security review.

7.2 Organisational Safeguards

Access to personal data within pk97's systems is restricted on a strict need-to-know basis. Staff who have access to personal data are subject to confidentiality obligations and receive data protection training. pk97 conducts regular internal audits of data access logs to detect any unauthorised internal access.

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk97 will notify the relevant supervisory authority within the timeframe required by the conditions of its gaming licence. Where a breach is likely to result in a high risk to you personally, pk97 will notify you directly via the contact details on your account without undue delay, and will provide guidance on steps you can take to protect yourself.

Your responsibility: While pk97 takes extensive measures to protect your data, the security of your pk97 account also depends on you maintaining the confidentiality of your login credentials. Do not share your pk97 password with anyone. If you suspect your account has been compromised, contact pk97 support immediately via live chat.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. pk97 uses cookies and similar tracking technologies including local storage and session tokens to make the pk97 platform function correctly, to remember your preferences, to keep your session secure, and to understand how players use the platform so that we can improve it.

8.2 Types of Cookies pk97 Uses

Cookie Type Purpose Can Be Disabled?
Strictly Necessary Session authentication, security tokens, load balancing No — required for the platform to function
Functional Language preferences, remembered login, game lobby settings Yes — may affect platform functionality
Analytics Aggregate usage statistics, page performance monitoring Yes — via cookie consent settings
Responsible Gaming Session duration tracking for responsible gaming tools No — required for licence compliance

8.3 Managing Cookies

You can manage your cookie preferences through the pk97 cookie consent banner displayed on your first visit to the platform. You can also control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. pk97 does not use third-party advertising or behavioural targeting cookies.

9. Your Data Rights

As a pk97 player, you have the following rights in relation to your personal data . pk97 will respond to all valid data rights requests within 30 days of receipt. To exercise any of these rights, contact pk97 at [email protected] with the subject line "Data Rights Request".

Right of Access

You have the right to request a copy of all personal data pk97 holds about you. pk97 will provide this in a commonly used electronic format within 30 days of your verified request.

Right to Rectification

If any personal data pk97 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections (e.g., name changes) may require supporting documentation.

Right to Erasure

You may request deletion of your personal data. Note that pk97 is required by its gaming licence to retain certain records (such as KYC and transaction data) for defined periods, so erasure requests may be partially fulfilled.

Right to Restrict Processing

In certain circumstances you may request that pk97 restrict the processing of your data — for example, while the accuracy of the data is being contested — without deleting the data entirely.

Right to Data Portability

Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format and to transfer it to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where pk97 relies on legitimate interests as the legal basis. You may also object to processing for direct marketing purposes at any time, with immediate effect.

10. Minors & Age Verification

pk97 is an online casino and sports betting platform strictly intended for adults aged 21 years and over. pk97 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the pk97 KYC process — all players must provide a valid CNIC confirming they are 21 or older before withdrawals are processed.

If pk97 becomes aware or has reasonable grounds to suspect that personal data has been collected from a player who is under 21 years of age, pk97 will immediately suspend the relevant account, initiate a full KYC review, and, if the player is confirmed to be underage, permanently close the account, return any deposits in accordance with the pk97 responsible gaming policy, and securely delete all personal data associated with the underage account as soon as legally permissible.

21+ Strictly Enforced: If you are a parent or guardian and believe a minor may have created a pk97 account, please contact pk97 support immediately at [email protected]. pk97 takes underage gambling extremely seriously and will act on any such report without delay.

11. International Data Transfers

pk97 operates as an internationally licensed online gaming platform. As a result, your personal data may be transferred to and processed in countries outside Pakistan, including the jurisdiction in which pk97 holds its gaming licence and the jurisdictions where pk97's technology infrastructure and third-party service providers are located.

Whenever pk97 transfers personal data internationally, it takes steps to ensure that appropriate safeguards are in place to protect your data at a standard equivalent to that described in this Privacy Policy. These safeguards include contractual protections imposed on all third-party recipients of personal data, data processing agreements that bind service providers to process your data only on pk97's documented instructions, and technical security measures that apply regardless of the jurisdiction in which data is processed.

By registering a pk97 account and accepting this Privacy Policy, you consent to the international transfer of your personal data for the purposes described herein. If you have concerns about international data transfers, please contact pk97 at [email protected].

12. Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to withdraw consent for marketing communications, or need to report a potential data protection concern, please contact pk97 using the details below.

Privacy & Data Rights Enquiries

Email: [email protected]
Subject line: "Data Rights Request" or "Privacy Policy Enquiry"
Response time: within 30 calendar days of receipt of a valid, verified request.

24/7 Live Support

For urgent account security concerns, account suspension requests, or to report suspected underage gambling, pk97's 24/7 live chat support team is available around the clock via the pk97 platform. Live chat is the fastest channel for time-sensitive matters.

pk97 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. The DPO can be contacted via the email address above with "DPO" in the subject line. All data rights requests are acknowledged within 5 business days, with full responses provided within 30 days.

13. Amendments to This Policy

pk97 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, the conditions of the pk97 gaming licence, our data processing practices, or the services offered on the pk97 platform. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Where amendments are material — meaning they significantly affect your rights or the way pk97 processes your personal data — pk97 will notify registered players via email to the address on their account and/or via a prominent notice on the pk97 platform at least 14 days before the amended policy takes effect. Continued use of the pk97 platform after the effective date of an amended Privacy Policy constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how pk97 protects your personal data. Previous versions of this Privacy Policy are available on request by contacting [email protected].

Version note: This is version 1.0 of the pk97 Privacy Policy, effective 1 January 2026. It supersedes all prior privacy notices published in connection with the pk97 platform.