pkbat Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is issued by pkbat ("pkbat", "we", "us", "our") and applies to all personal data processed in connection with your registration for, and use of, the pkbat platform available at pkbat.com, including all associated betting, casino, wallet, and customer support services (collectively, the "Platform").

This Policy should be read alongside the pkbat Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the Platform. By registering a pkbat account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

pkbat is committed to handling your personal data with respect, transparency, and security. We process only the data we genuinely need, retain it only for as long as is necessary, and never use it in ways that are inconsistent with what is described in this Policy.

2 Personal Data We Collect

pkbat collects personal data across several categories depending on how you use the Platform. The table below summarises the main categories of personal data we collect and the purposes for which each category is used.

pkbat does not intentionally collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, political opinions, religious beliefs, or health information unless specifically required by applicable law or regulation.

3 How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data pkbat holds about you is data you provide directly during the account registration process, during KYC verification, when making deposits or withdrawals, or when contacting our customer support team. This includes your name, date of birth, CNIC number, contact details, and payment information.

3.2 Data Collected Automatically

When you access the pkbat Platform, we automatically collect certain technical data about your device and browsing behaviour. This includes your IP address, device type, operating system, browser version, referring URL, pages visited, and session timestamps. This data is collected via server logs, cookies, and similar tracking technologies and is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

3.3 Data from Third Parties

pkbat may receive personal data about you from third-party sources, including identity verification service providers, payment processors (such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank), and fraud detection services. Any data received from third parties is handled in accordance with this Policy and is used only for the purposes for which it was obtained.

4 How We Use Your Personal Data

pkbat uses your personal data for the following purposes:

• To create, manage, and maintain your pkbat account and verify your identity;
• To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard;
• To comply with our obligations under our international gaming licence, including KYC, AML, and responsible gaming requirements;
• To verify that you meet the minimum age requirement of 21 years before allowing access to betting and casino services;
• To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct;
• To provide customer support and respond to your queries, complaints, and dispute submissions;
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts;
• To send you promotional communications about pkbat bonuses and offers, where you have opted in to receive such communications;
• To monitor your betting and gaming patterns for responsible gaming purposes and to enforce account limits or self-exclusion where required;
• To improve, maintain, and develop the pkbat Platform based on aggregated usage data and feedback;
• To fulfil any other legal or regulatory obligation applicable to pkbat under its international gaming licence.

5 Legal Basis for Processing

pkbat processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the pkbat Terms & Conditions, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable laws and our obligations under our international gaming licence, including KYC, AML screening, age verification, and regulatory reporting;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and Platform improvement, where such interests are not overridden by your fundamental rights;
• Consent: Processing for optional marketing communications, where you have given your explicit and freely revocable consent.

Where pkbat relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

6.1 Service Providers

pkbat shares your personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include identity verification providers, payment processors, fraud detection services, cloud infrastructure providers, and customer support software vendors. All such providers are contractually bound to process your data solely for the purposes we specify and to maintain appropriate security standards.

6.2 Regulatory and Legal Disclosure

pkbat may disclose your personal data to gaming regulators, financial intelligence authorities, law enforcement agencies, or courts where we are legally required to do so under our international gaming licence or applicable law. Such disclosures are made only to the extent required and are not within pkbat's discretion to refuse.

6.3 No Sale of Personal Data

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of pkbat's business or assets, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity before the transfer takes effect.

7 International Data Transfers

pkbat operates under an international gaming licence and may store or process your personal data on servers located outside Pakistan. Where your data is transferred internationally, pkbat ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include standard contractual clauses approved by applicable data protection authorities, binding corporate rules, or reliance on adequacy decisions where the receiving jurisdiction is recognised as providing an adequate level of data protection. If you would like further information about the specific safeguards applied to your data transfers, please contact pkbat support via live chat.

8 Data Retention

pkbat retains your personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with our gaming licence AML obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable anti-money laundering regulations;
• KYC verification documents: Retained for the duration of your account and for five (5) years following account closure;
• Customer support communications: Retained for three (3) years from the date of the relevant interaction;
• Marketing consent records: Retained for the duration of your consent and for two (2) years following withdrawal of consent;
• Technical and usage logs: Retained for up to twelve (12) months, unless required longer for an ongoing security or fraud investigation.

Upon expiry of the applicable retention period, pkbat will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by the pkbat Platform when you visit. They allow the Platform to recognise your device, remember your session preferences, and collect information about how you interact with the site. pkbat uses both first-party cookies (set by pkbat directly) and third-party cookies (set by our service providers).

9.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your language preference, display settings, and login state across sessions. Disabling these may affect Platform usability.
• Analytics cookies: Collect aggregated and anonymised data about how players use the Platform, which pages are most visited, and where errors occur. Used solely to improve the Platform.
• Security cookies: Help detect and prevent fraudulent activity, bot access, and account takeover attempts.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into and using your pkbat account. Full instructions for managing cookies are available in the help documentation of your browser.

10 Security Measures

pkbat implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the pkbat Platform;
• Encryption of sensitive data fields, including financial data and identity document references, at rest;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular internal security audits and vulnerability assessments;
• Two-factor authentication (2FA) available and encouraged for all pkbat player accounts;
• Automated fraud and anomaly detection systems monitoring account activity in real time.

While pkbat takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, pkbat will notify affected players and the relevant regulatory authority in accordance with applicable legal obligations.

11 Your Privacy Rights

As a pkbat player, you have a number of rights in relation to your personal data. pkbat is committed to facilitating the exercise of these rights promptly and without undue obstacle. To submit a rights request, contact pkbat support via live chat or email at [email protected].