pk70 Privacy Policy

This Privacy Policy ("Policy") describes how pk70 ("pk70," "we," "us," "our"), the operator of the online gaming platform accessible at pk70.asia, collects, processes, uses, stores, and discloses personal data relating to users of the platform ("Players," "you," "your").

pk70 is committed to protecting the privacy and personal information of all Players, particularly those accessing the platform from Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, and Rawalpindi. This Policy applies to all personal data processed in connection with your use of pk70's website, mobile applications, customer support channels, and any associated services.

This Policy should be read alongside pk70's Terms & Conditions, which govern your general use of the platform. By registering on or using the pk70 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

pk70 acts as the data controller in respect of personal data collected and processed through the pk70 platform. As data controller, pk70 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

Where pk70 engages third-party service providers — such as payment processors, identity verification services, or analytics providers — those providers act as data processors on pk70's behalf and are bound by data processing agreements that restrict their use of your personal data to the specific services they provide to pk70.

pk70 collects the following categories of personal data in connection with your use of the platform:

Identity & Contact Data

• Full legal name as it appears on a valid government-issued identity document.
• Date of birth (for age verification — all Players must be 21 years of age or older).
• Residential address.
• CNIC (Computerised National Identity Card) number or equivalent identity document number for KYC verification.
• Email address.
• Pakistani mobile phone number (used for account verification and transaction notifications).

Financial & Transaction Data

• Deposit and withdrawal transaction records, including transaction amounts in PKR, timestamps, and payment method references.
• JazzCash account number, EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank), card details (Visa, Mastercard), or USDT wallet address — as applicable to your chosen payment method.
• Transaction history and account balance records.

Account & Gaming Activity Data

• Account username and encrypted password hash.
• Session logs, including login timestamps, session durations, and logout records.
• Game play history, including game titles, bet amounts, wager outcomes, and bonus activity.
• Sports betting history, including cricket and PSL markets wagered on, odds accepted, and settlement records.
• Customer support interaction records, including chat transcripts and email correspondence.

Technical & Device Data

• IP address at time of registration and each subsequent login.
• Device type, operating system, and browser type and version.
• Cookies and similar tracking identifiers (detailed in Section 10).
• Geolocation data (country and city level) derived from your IP address.

pk70 collects personal data through the following channels:

• Direct submission: Data you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically through your interaction with the platform, including cookies, server logs, and device fingerprinting tools used for fraud prevention and session management.
• Third-party sources: Identity verification data obtained from KYC and AML compliance service providers when verifying your identity documents. Payment data relayed by payment processors such as JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in connection with deposit and withdrawal transactions.

pk70 uses your personal data for the following purposes:

• Account management: Creating, verifying, operating, and maintaining your pk70 player account.
• Age and identity verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity as part of KYC obligations.
• Transaction processing: Processing deposits and withdrawal requests in PKR via your chosen payment method, including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, Bank Transfer, or USDT.
• Legal compliance: Complying with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming regulatory requirements, including maintaining required records of player activity.
• Fraud prevention: Detecting, investigating, and preventing fraudulent transactions, prohibited activities, and abuse of the platform.
• Customer support: Responding to account inquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analysing aggregate, anonymised usage data to improve game offerings, platform performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and pk70 product updates to players who have opted in to receive such communications. Players may opt out at any time via account settings.
• Responsible gaming: Monitoring player behaviour for indicators of problem gambling and facilitating access to self-exclusion and responsible gaming tools where appropriate.

pk70 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil pk70's obligations to you under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, CTF, and responsible gaming obligations.
• Legitimate interests: Processing carried out in pk70's legitimate business interests, including fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, informed, and specific consent — such as the sending of optional marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pk70 does not sell, rent, or trade your personal data. Your data is shared only in the following circumstances and only to the extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT network service providers receive the minimum payment data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: KYC and AML compliance service providers receive your identity document data for the purpose of age and identity verification checks.
• Game software providers: Third-party game suppliers may receive a session token and minimal technical data necessary to initialise and run their games within the pk70 platform. These providers do not receive your full identity profile.
• Regulatory and law enforcement authorities: Where pk70 is required by law, court order, or regulatory direction to disclose your data to a competent authority, pk70 will comply with such obligations and will notify you where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pk70's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

pk70 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable law or regulatory obligations. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for three (3) years from the date consent was given or last renewed.
• Technical logs: Retained for ninety (90) days on a rolling basis, unless a specific log entry is identified as relevant to an ongoing investigation or dispute, in which case it is retained for the duration of that matter.

Upon expiry of the applicable retention period, pk70 will securely delete or irreversibly anonymise your personal data in accordance with its internal data destruction procedures.

pk70 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• AES-256 encryption of all personal data at rest.
• TLS 1.3 encryption for all data transmitted between your device and pk70 servers.
• Bcrypt hashing of all account passwords. pk70 does not store your password in plain text under any circumstances.
• Two-factor authentication (2FA) available to all Players and enforced for all pk70 staff accounts.
• Regular third-party penetration testing and security audits of the platform infrastructure.
• Strict role-based access controls limiting access to personal data to authorised pk70 personnel who require it to perform their job functions.
• Incident response procedures, including mandatory breach notification to affected Players and relevant authorities within 72 hours of a confirmed data breach.

pk70 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website server. Cookies allow the platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect aggregate analytics data.

pk70 uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the operation of the platform. They include session cookies that maintain your logged-in state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: These cookies remember your preferences such as language settings, preferred currency display (PKR), and responsible gaming settings such as session time limit reminders. Disabling these cookies may affect your personalised experience.
• Analytics cookies: These cookies collect aggregate, anonymised data about how Players interact with the platform, such as which pages are most visited and which features are most used. pk70 uses this data solely to improve platform performance. These cookies can be disabled via your cookie preference settings.
• Marketing cookies: These cookies are only set with your explicit consent and are used to deliver relevant pk70 promotional content. They are not used to share your data with third-party advertisers. You can withdraw consent and disable these cookies at any time.

You can manage your cookie preferences at any time via the Cookie Settings option in your pk70 account, or by adjusting your browser settings. Please note that disabling strictly necessary cookies will prevent you from using the platform.

As a pk70 Player, you have the following rights in respect of your personal data. All requests are processed within 30 calendar days at no charge:

If pk70 is unable to fulfil a data rights request due to a conflicting legal obligation, the basis for refusal will be communicated to you in writing within the 30-day response window, along with information on your right to escalate the matter.

The pk70 Platform is strictly intended for adults aged 21 years and over. pk70 does not knowingly collect personal data from individuals under the age of 21. If pk70 becomes aware that personal data has been collected from a minor — whether through a false declaration of age at registration or any other means — the account will be immediately closed, all associated data will be deleted in accordance with applicable law, and any balances will be forfeited.

Parents and guardians are encouraged to make use of parental control software to restrict access to online gaming platforms from devices used by minors. If you have reason to believe that a minor has registered on the pk70 Platform, please contact pk70 support immediately so that the matter can be investigated and the account closed.

pk70 operates under an international gaming license framework, and certain aspects of its infrastructure and service provider arrangements may involve the transfer of personal data to servers or processors located outside Pakistan. Where such transfers occur, pk70 ensures that adequate safeguards are in place to protect your personal data, including:

• Contractual data transfer agreements with all international processors that impose data protection obligations equivalent to those described in this Policy.
• Use of service providers located in jurisdictions that maintain adequate data protection standards as recognised under internationally applicable frameworks.
• Data minimisation practices that limit the volume and sensitivity of data transferred internationally to the minimum necessary for the relevant processing purpose.

pk70 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, changes to the categories of data collected, the purposes for which data is processed, or the rights available to Players — pk70 will notify registered Players via the email address on record at least 14 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the date on which the most recent version took effect. Your continued use of the pk70 Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or pk70's processing of your personal data, please contact the pk70 Data Support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from within your logged-in pk70 account. This is the fastest way to get a response to a data rights request.
• Email: [email protected]

pk70 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 calendar days. For complex data subject access requests that require a significant volume of data to be compiled, pk70 may extend this deadline by a further 30 days where necessary, and will inform you of the extension before the initial 30-day period expires.

If you are not satisfied with pk70's response to a privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction.