Privacy Policy — pk60

This Privacy Policy (hereinafter "Policy") is issued by pk60, the operator of the online gaming platform accessible at https://pk60.cam (hereinafter the "Platform" or "Site"). pk60 is committed to protecting and respecting the privacy of everyone who uses or interacts with the Platform, and this Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This Policy should be read alongside pk60's Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. By accessing or using the Platform you confirm that you have read, understood and agree to the data-processing practices described in this Policy.

This Policy applies to all personal data collected through the Platform, its mobile-optimised interfaces, customer-support channels, promotional communications and any other interaction you have with pk60.

In this Policy, the following terms have the meanings assigned to them unless the context otherwise requires:

• "Personal Data" means any information relating to an identified or identifiable natural person ("data subject"), including but not limited to name, national identity number, email address, phone number, IP address, payment details and gameplay records.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, erasure and destruction.
• "Controller" means pk60, the entity that determines the purposes and means of Processing of your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of pk60, under a data-processing agreement and subject to pk60's instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and document-verification process required under applicable anti-money-laundering regulations.
• "Cookies" means small text files placed on your device by the Platform that enable certain functions and collect analytical information.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data or financial data beyond standard payment references, which requires enhanced protection.
• "Data Breach" means a security incident leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data.
• "Retention Period" means the defined duration for which pk60 stores specific categories of Personal Data before secure deletion or anonymisation.

pk60 collects Personal Data across several categories. We collect only what is necessary for the purposes described in this Policy, in accordance with the principle of data minimisation.

3.1 Registration & Identity Data. When you create an Account on the Platform we collect:

• Full legal name and date of birth;
• National Identity Card (CNIC) number or passport number (for KYC purposes);
• Residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Email address and mobile phone number;
• Username and encrypted password hash.

3.2 Financial & Transaction Data. To process PKR deposits and withdrawals we collect:

• Payment method references (mobile wallet account identifiers associated with services such as Easypaisa, JazzCash or Raast; bank account references for HBL, UBL, Meezan Bank or Bank Alfalah transfers; or cryptocurrency wallet addresses where applicable);
• Transaction amounts, dates, timestamps and status;
• Records of any bonus claims and associated wagering activity.

3.3 KYC & Verification Documents. To comply with anti-money-laundering and player-protection obligations, we collect:

• Copies of government-issued photo identification (CNIC front and back, or passport data page);
• Proof of address documents (utility bills, bank statements dated within three months);
• Source-of-funds documentation where required by AML thresholds or regulatory direction.

3.4 Technical & Device Data. When you access the Platform, our systems automatically collect:

• IP address and approximate geolocation (country/city level);
• Browser type, version and language settings;
• Device type, operating system and screen resolution;
• Session start/end times, pages visited, click-path and time-on-page metrics.

3.5 Communications Data. When you contact our support team or interact with our Platform communications we collect:

• Content of emails, live-chat transcripts and any attachments you send to [email protected];
• Records of promotional communications you have consented to receive and your engagement with those communications (open rates, click rates);
• Feedback and survey responses you voluntarily provide.

3.6 Responsible Gambling Data. Where you use responsible-gambling tools, we record:

• Deposit limits, loss limits and session time limits you set;
• Self-exclusion requests and the duration of any exclusion period;
• Player-protection flags raised by our risk-monitoring systems.

This category of data is treated with enhanced sensitivity and is used solely for player-protection purposes.

pk60 processes your Personal Data only where a valid legal basis exists for doing so. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing that is necessary to perform our contract with you — i.e., to provide you with a registered Account, process your PKR deposits and withdrawals, deliver game access and provide customer support. Without this processing we cannot provide the Platform services.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, AML transaction monitoring, responsible-gambling record-keeping and regulatory reporting obligations imposed by pk60's operating licence jurisdiction.
• Legitimate interests: Processing necessary for pk60's legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, security monitoring, Platform optimisation and analytics that improve the user experience.
• Consent: Where no other legal basis applies — primarily for marketing communications, non-essential cookies and optional analytics — we rely on your freely given, informed Consent. You may withdraw Consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pk60 uses the Personal Data collected as described in Section 3 for the following purposes:

• Account management: Creating, verifying, maintaining and, where necessary, closing your Player Account on the Platform;
• Identity verification (KYC): Verifying your age, identity and address in compliance with our operating licence obligations and AML regulations;
• Financial processing: Processing PKR deposits, withdrawals and account-balance adjustments, including detection and prevention of fraudulent transactions;
• Game delivery and personalisation: Enabling access to the Platform's game library and, where applicable, surfacing game recommendations based on your gameplay history;
• Responsible gambling: Monitoring gameplay patterns to identify potential problem gambling indicators, applying limits and self-exclusion periods you have requested, and fulfilling our player-protection obligations;
• Legal and regulatory compliance: Meeting all obligations imposed by our operating licence, applicable AML legislation and any competent regulatory authority;
• Security and fraud prevention: Detecting, investigating and preventing fraudulent activity, account takeover, multi-accounting, bonus abuse and other security threats;
• Customer support: Responding to your enquiries, resolving disputes and maintaining accurate records of our communications with you;
• Marketing communications (consent-based): Sending you information about pk60 promotions, game releases and platform updates where you have consented to receive such communications;
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, design and game offering.

pk60 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects on you, except where required for fraud-prevention or KYC checks, in which case you have the right to request human review of any automated determination.

pk60 does not sell, rent or trade your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors. To execute PKR deposit and withdrawal transactions we share transaction-relevant data (name, account reference, amount) with regulated payment-processing partners. These partners are bound by data-processing agreements and applicable financial regulations. Payment provider names mentioned as familiar Pakistan references (Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah) do not imply those providers endorse pk60 or gambling activity.

6.2 Identity Verification Providers. KYC verification is conducted by regulated identity-verification service providers. Your identity documents and biographic data are shared with these providers solely for the purpose of completing verification and are subject to their own data-protection obligations.

6.3 Fraud Prevention and Security. We may share technical identifiers (IP address, device fingerprint, transaction pattern data) with specialist fraud-prevention and cybersecurity service providers to detect and prevent prohibited conduct as defined in our Terms & Conditions.

6.4 Game Software Providers. Third-party game providers integrated into the Platform may receive limited technical session data (session token, bet amount, round ID) necessary to deliver the game. They do not receive your full identity or payment data.

6.5 Legal and Regulatory Authorities. We may disclose your Personal Data to competent law-enforcement, regulatory or judicial authorities where required by applicable law, a court order or our operating licence obligations, including AML suspicious activity reporting.

6.6 Corporate Transactions. In the event of a merger, acquisition, asset sale or restructuring involving pk60, your Personal Data may be transferred to the acquiring entity, subject to equivalent privacy protections and notice to you.

pk60 uses cookies and similar tracking technologies on the Platform. This section explains what we use, why we use them and how you can manage your preferences.

7.1 Strictly Necessary Cookies. These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies (keeping you logged in), security tokens (protecting against cross-site request forgery) and load-balancing cookies. No consent is required for strictly necessary cookies.

7.2 Analytics Cookies. Subject to your consent, we use analytics cookies to understand how visitors interact with the Platform — which pages are most visited, where users drop off, and how game categories perform. This data is aggregated and anonymised where possible. You may opt out of analytics cookies at any time.

7.3 Functional Cookies. These cookies remember your preferences — such as your preferred language (English), display settings and whether you have acknowledged certain Platform notices. Functional cookies improve your experience but are not strictly necessary.

7.4 Marketing Cookies. Where you have provided explicit consent, marketing cookies may be used to deliver relevant promotional information about pk60 offers. We do not use third-party advertising networks for behavioural tracking across external websites.

7.5 Managing Cookies. You can manage or withdraw consent for non-essential cookies at any time through:

• Your browser settings — most browsers allow you to block or delete cookies through their privacy or security settings;
• The Platform's cookie-preference centre, accessible from the footer of any page;
• Contacting [email protected] with a specific cookie opt-out request.

Please note that blocking strictly necessary cookies will impair the functioning of the Platform and may prevent you from accessing your Account.

pk60 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our operating licence. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. We review our retention schedules periodically and adjust them in line with regulatory guidance.

pk60 implements appropriate technical and organisational measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security practices include:

• Encryption in transit: All data transmitted between your device and the Platform is encrypted using TLS (Transport Layer Security) 1.2 or higher;
• Encryption at rest: Sensitive Personal Data stored on pk60 systems — including KYC documents and payment references — is encrypted at rest using industry-standard algorithms;
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis. Staff with access undergo background checks and mandatory data-protection training;
• Password security: User passwords are stored as salted cryptographic hashes. pk60 staff cannot view your plain-text password;
• Regular security assessments: pk60 conducts periodic vulnerability assessments and penetration tests of the Platform's infrastructure;
• Incident response: pk60 maintains a documented Data Breach response procedure. In the event of a breach likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected Users, without undue delay.

Subject to applicable law and certain conditions, you have the following rights in relation to the Personal Data pk60 holds about you:

• Right of access: You have the right to request a copy of the Personal Data we hold about you and information about how we process it. We will respond to verified access requests within 30 calendar days.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data we hold about you. You may also update certain Account details directly through your Account settings.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to our legal retention obligations — for example, AML regulations require us to retain certain records for defined periods.
• Right to restriction of processing: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request receipt of your Personal Data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including profiling, at any time. You also have an unconditional right to object to processing for direct-marketing purposes.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Where such processing occurs, you may request human review.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request" and sufficient information to verify your identity. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In complex cases we may extend this period by a further 30 days, with notice to you.

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the operator's licence jurisdiction. pk60 does not knowingly collect Personal Data from individuals under the age of 18. If we become aware that a minor has provided Personal Data or registered an Account, we will immediately suspend that Account, delete the associated Personal Data and, where required, report the matter to the relevant regulatory authority.

Parents and guardians who believe that a minor may have accessed or registered on the Platform are encouraged to contact us immediately at [email protected]. We will investigate and take all necessary remedial action without delay.

pk60 also offers and encourages the use of third-party parental-control tools and filtering software that can restrict minors' access to online gaming platforms.

12.1 Amendments. pk60 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business practices or Platform features. When material changes are made, we will notify registered Users by email and/or by displaying a prominent notice on the Platform no less than 14 days before the changes take effect. The "Effective Date" at the top of the Policy will be updated accordingly. Continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

12.2 Previous Versions. On request, pk60 will provide Users with a copy of any previous version of this Privacy Policy that was in effect during their Account registration or at any other specified time.

12.3 Contact Details. If you have any questions, concerns or complaints regarding this Privacy Policy or our data-processing practices, please contact the pk60 Privacy Team using the details below:

12.4 Complaints. If you are dissatisfied with our handling of your Personal Data or a rights request, you have the right to lodge a complaint with the competent supervisory authority in the jurisdiction applicable to your Account. pk60 would, however, appreciate the opportunity to address your concern directly before you escalate to a supervisory authority. Please contact us first at [email protected] and we will endeavour to resolve your complaint promptly.